Merge pull request #9668 from tusbar/support-pnpm-lockfile-9

Use pnpm@9 for lockfile >= 9.0

npm_and_yarn/lib/dependabot/npm_and_yarn/helpers.rb

@@ -38,7 +38,9 @@ def self.yarn_version_numeric(yarn_lock)
 
       sig { params(pnpm_lock: DependencyFile).returns(Integer) }
       def self.pnpm_version_numeric(pnpm_lock)
-        if pnpm_lockfile_version(pnpm_lock).to_f >= 6.0
+        if pnpm_lockfile_version(pnpm_lock).to_f >= 9.0
+          9
+        elsif pnpm_lockfile_version(pnpm_lock).to_f >= 6.0
           8
         elsif pnpm_lockfile_version(pnpm_lock).to_f >= 5.4
           7

npm_and_yarn/spec/dependabot/npm_and_yarn/file_parser/lockfile_parser_spec.rb

@@ -178,6 +178,14 @@
           expect(dependencies.map(&:name)).to include("@sentry/react")
         end
       end
+
+      context "in v9.0 format" do
+        let(:dependency_files) { project_dependency_files("pnpm/9_0_format") }
+
+        it "parses dependencies properly" do
+          expect(dependencies.map(&:name)).to include("@sentry/node")
+        end
+      end
     end
 
     context "for npm lockfiles" do