diff --git a/packages/cli/test/unit/utils/git/operations.test.mts b/packages/cli/test/unit/utils/git/operations.test.mts
index 6d3298123..4191bd042 100644
--- a/packages/cli/test/unit/utils/git/operations.test.mts
+++ b/packages/cli/test/unit/utils/git/operations.test.mts
@@ -123,6 +123,7 @@ describe('git utilities', () => {
     })
 
     it('returns GITHUB_REF_NAME when it is a branch', async () => {
+      setEnv('GITHUB_BASE_REF', '')
       setEnv('GITHUB_REF_TYPE', 'branch')
       setEnv('GITHUB_REF_NAME', 'feature-branch')
 
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 174075e5b..c9b7202d2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -254,7 +254,7 @@ overrides:
   '@octokit/graphql': 9.0.1
   '@octokit/request-error': 7.0.0
   '@sigstore/sign': 4.1.0
-  '@socketsecurity/lib': 5.11.2
+  '@socketsecurity/lib': 5.11.3
   aggregate-error: npm:@socketregistry/aggregate-error@^1.0.15
   ansi-regex: 6.2.2
   brace-expansion: 2.0.2
@@ -408,8 +408,8 @@ importers:
         specifier: 'catalog:'
         version: 3.0.1
       '@socketsecurity/lib':
-        specifier: 5.11.2
-        version: 5.11.2(typescript@5.9.3)
+        specifier: 5.11.3
+        version: 5.11.3(typescript@5.9.3)
       '@socketsecurity/registry':
         specifier: 'catalog:'
         version: 2.0.2(typescript@5.9.3)
@@ -588,8 +588,8 @@ importers:
         specifier: 'catalog:'
         version: 7.28.4
       '@socketsecurity/lib':
-        specifier: 5.11.2
-        version: 5.11.2(typescript@5.9.3)
+        specifier: 5.11.3
+        version: 5.11.3(typescript@5.9.3)
       magic-string:
         specifier: 'catalog:'
         version: 0.30.19
@@ -645,8 +645,8 @@ importers:
         specifier: 'catalog:'
         version: 3.0.1
       '@socketsecurity/lib':
-        specifier: 5.11.2
-        version: 5.11.2(typescript@5.9.3)
+        specifier: 5.11.3
+        version: 5.11.3(typescript@5.9.3)
       '@socketsecurity/registry':
         specifier: 'catalog:'
         version: 2.0.2(typescript@5.9.3)
@@ -765,8 +765,8 @@ importers:
   packages/package-builder:
     dependencies:
       '@socketsecurity/lib':
-        specifier: 5.11.2
-        version: 5.11.2(typescript@5.9.3)
+        specifier: 5.11.3
+        version: 5.11.3(typescript@5.9.3)
       build-infra:
         specifier: workspace:*
         version: link:../build-infra
@@ -2002,8 +2002,8 @@ packages:
     resolution: {integrity: sha512-kLKdSqi4W7SDSm5z+wYnfVRnZCVhxzbzuKcdOZSrcHoEGOT4Gl844uzoaML+f5eiQMxY+nISiETwRph/aXrIaQ==}
     engines: {node: 18.20.7 || ^20.18.3 || >=22.14.0}
 
-  '@socketsecurity/lib@5.11.2':
-    resolution: {integrity: sha512-TS6oTeakMCbOrz73mSin/0lOhAyAr6+tlvzAvaASnMhjhrcQ9tPP816be1ZgtDRYolvQHMT+WPSmajlTHTQHjw==}
+  '@socketsecurity/lib@5.11.3':
+    resolution: {integrity: sha512-Jp6TSn8ATHrTtw/kTFXmVr+cZwZVuX9wqym/FQ3n8GSAgByUPJJdzWMLzHVFK1HaQRK4kVdB5Db3IKXdFkpQ2Q==}
     engines: {node: '>=22', pnpm: '>=10.25.0'}
     peerDependencies:
       typescript: '>=5.0.0'
@@ -5525,7 +5525,7 @@ snapshots:
       pony-cause: 2.1.11
       yaml: 2.8.1
 
-  '@socketsecurity/lib@5.11.2(typescript@5.9.3)':
+  '@socketsecurity/lib@5.11.3(typescript@5.9.3)':
     optionalDependencies:
       typescript: 5.9.3
 
@@ -5536,7 +5536,7 @@ snapshots:
   '@socketsecurity/sdk@3.4.1(typescript@5.9.3)':
     dependencies:
       '@socketregistry/packageurl-js': 1.3.5
-      '@socketsecurity/lib': 5.11.2(typescript@5.9.3)
+      '@socketsecurity/lib': 5.11.3(typescript@5.9.3)
       form-data: 4.0.5
     transitivePeerDependencies:
       - typescript
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 4353ad2b2..d1bba0818 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -35,7 +35,7 @@ catalog:
   '@socketregistry/packageurl-js': 1.3.5
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
-  '@socketsecurity/lib': 5.11.2
+  '@socketsecurity/lib': 5.11.3
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/sdk': 3.4.1
   '@types/adm-zip': 0.5.7