patched dependency hashing algorithm used in lock file

[felabr]

Hello,
I've recently added a patched dependency, and basically everything about that works, which is great.
But some developers and Dependabot use a different algorithm to create the hash for the patched dependency in the lock file than the one used in our GitHub pipelines.
One looks like a basic SHA256 (64 hex chars), the other one looks like whatever with base32 encoding. It's probably due to the different systems pnpm is running on. I doubt it would be possible to force everyone involved (GitHub, Dependabot, all developers) to use the same system settings here.

Is there a config option to set which hashing algorithm ppm should use?
Or some other way to ensure everybody is creating the same hash for the same patched dependency?

[zkochan]

Yes, we had to change the hashing algorithm in pnpm v10. So you are probably running different versions of pnpm. You should update to v10 in all places.

[felabr]

Hey @zkochan,
knowing that it changed between v9 and v10 helped tremendously. Found some pipelines that used pnpm/action-setup with v9 while the engines setting was set to 10.
Thank you!