chore: bump @socketsecurity/lib to 5.11.3 (#1131)

* chore: bump @socketsecurity/lib to 5.11.3

* fix(test): clear GITHUB_BASE_REF in getBaseBranch test

The test for GITHUB_REF_NAME was flaky in CI because GitHub Actions
sets GITHUB_BASE_REF in the real environment for PR workflows, causing
getBaseBranch to return the real base ref instead of the test value.

Author: jdalton

packages/cli/test/unit/utils/git/operations.test.mts

@@ -123,6 +123,7 @@ describe('git utilities', () => {
     })
 
     it('returns GITHUB_REF_NAME when it is a branch', async () => {
+      setEnv('GITHUB_BASE_REF', '')
       setEnv('GITHUB_REF_TYPE', 'branch')
       setEnv('GITHUB_REF_NAME', 'feature-branch')
 

pnpm-lock.yaml

@@ -35,7 +35,7 @@ catalog:
   '@socketregistry/packageurl-js': 1.3.5
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
-  '@socketsecurity/lib': 5.11.2
+  '@socketsecurity/lib': 5.11.3
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/sdk': 3.4.1
   '@types/adm-zip': 0.5.7