Errored with the message "Dependabot can't parse your pnpm-lock.yaml"

[Theo-messi]

Verify latest release

• I verified that the issue exists in the latest pnpm release

pnpm version

9.0.5

Which area(s) of pnpm are affected? (leave empty if unsure)

Lockfile

Link to the code that reproduces this issue or a replay of the bug

No response

Reproduction steps

Create "pnpm-lock.yaml" using "pnpm i" and commit it to the GitHub repository. Dependabot prompts "Error with message "Dependabot cannot parse your pnpm-lock.yaml""

Describe the Bug

1

Expected Behavior

1

Which Node.js version are you using?

v21.1.0

Which operating systems have you used?

• macOS
• Windows
• Linux

If your OS is a Linux based, which one it is? (Include the version if relevant)

No response

[bhb603]

I have same issue.

I believe Dependabot needs to be updated to support the new lockfile version: dependabot/dependabot-core#9522

This issue with pnpm@9.0.5 is that it any pnpm install seems to auto-migrate the lockfile to this new version, which is then incompatible...