main
chore(deps): merge go-dep-parser into Trivy (#6094)
fix(nodejs): use snapshot string as `Package.ID` for pnpm packages (#9330)
fix(nodejs): fix infinity loops for `pnpm` with cyclic imports (#6857)
fix(nodejs): support pnpm workspaces with overlapping packages (#10894)
fix(nodejs): parse project dependencies from multi-document pnpm-lock.yaml (#10861)