fix: use pnpm dlx instead of deprecated pnpx

mikolalysenko · claude · mikolalysenko · commit 8c5b2cae86ce · 2026-04-08T17:45:49.000-04:00
Replace pnpx with pnpm dlx for better compatibility. pnpx has been
deprecated since pnpm v7 in favor of pnpm dlx.

Co-Authored-By: Claude Opus 4.6 (1M context) &lt;noreply@anthropic.com&gt;
diff --git a/crates/socket-patch-cli/src/commands/setup.rs b/crates/socket-patch-cli/src/commands/setup.rs
@@ -54,7 +54,7 @@ pub async fn run(args: SetupArgs) -> i32 {
     if !args.json {
         println!("Found {} package.json file(s)", package_json_files.len());
         if pm == PackageManager::Pnpm {
-            println!("Detected pnpm project (using pnpx)");
+            println!("Detected pnpm project (using pnpm dlx)");
         }
     }
 
diff --git a/crates/socket-patch-core/src/package_json/detect.rs b/crates/socket-patch-core/src/package_json/detect.rs
@@ -10,7 +10,7 @@ fn socket_patch_command(pm: PackageManager) -> &'static str {
     match pm {
         PackageManager::Npm => "npx @socketsecurity/socket-patch apply --silent --ecosystems npm",
         PackageManager::Pnpm => {
-            "pnpx @socketsecurity/socket-patch apply --silent --ecosystems npm"
+            "pnpm dlx @socketsecurity/socket-patch apply --silent --ecosystems npm"
         }
     }
 }
@@ -294,10 +294,10 @@ mod tests {
     }
 
     #[test]
-    fn test_configured_str_pnpx_pattern() {
-        let content = r#"{"scripts":{"postinstall":"pnpx @socketsecurity/socket-patch apply --silent --ecosystems npm"}}"#;
+    fn test_configured_str_pnpm_dlx_pattern() {
+        let content = r#"{"scripts":{"postinstall":"pnpm dlx @socketsecurity/socket-patch apply --silent --ecosystems npm"}}"#;
         let status = is_setup_configured_str(content);
-        // "pnpx @socketsecurity/socket-patch apply" contains "socket-patch apply"
+        // "pnpm dlx @socketsecurity/socket-patch apply" contains "socket-patch apply"
         assert!(status.postinstall_configured);
     }
 
@@ -315,7 +315,7 @@ mod tests {
     fn test_generate_empty_pnpm() {
         assert_eq!(
             generate_updated_script("", PackageManager::Pnpm),
-            "pnpx @socketsecurity/socket-patch apply --silent --ecosystems npm"
+            "pnpm dlx @socketsecurity/socket-patch apply --silent --ecosystems npm"
         );
     }
 
@@ -331,7 +331,7 @@ mod tests {
     fn test_generate_prepend_pnpm() {
         assert_eq!(
             generate_updated_script("echo done", PackageManager::Pnpm),
-            "pnpx @socketsecurity/socket-patch apply --silent --ecosystems npm && echo done"
+            "pnpm dlx @socketsecurity/socket-patch apply --silent --ecosystems npm && echo done"
         );
     }
 
@@ -374,8 +374,8 @@ mod tests {
         let (modified, new_postinstall, new_dependencies) =
             update_package_json_object(&mut pkg, PackageManager::Pnpm);
         assert!(modified);
-        assert!(new_postinstall.contains("pnpx @socketsecurity/socket-patch apply"));
-        assert!(new_dependencies.contains("pnpx @socketsecurity/socket-patch apply"));
+        assert!(new_postinstall.contains("pnpm dlx @socketsecurity/socket-patch apply"));
+        assert!(new_dependencies.contains("pnpm dlx @socketsecurity/socket-patch apply"));
     }
 
     #[test]
@@ -446,16 +446,16 @@ mod tests {
         let (modified, new_content, _, new_pi, _, new_dep) =
             update_package_json_content(content, PackageManager::Pnpm).unwrap();
         assert!(modified);
-        assert!(new_pi.contains("pnpx @socketsecurity/socket-patch apply"));
-        assert!(new_dep.contains("pnpx @socketsecurity/socket-patch apply"));
+        assert!(new_pi.contains("pnpm dlx @socketsecurity/socket-patch apply"));
+        assert!(new_dep.contains("pnpm dlx @socketsecurity/socket-patch apply"));
         let parsed: serde_json::Value = serde_json::from_str(&new_content).unwrap();
         assert!(parsed["scripts"]["postinstall"]
             .as_str()
             .unwrap()
-            .contains("pnpx"));
+            .contains("pnpm dlx"));
         assert!(parsed["scripts"]["dependencies"]
             .as_str()
             .unwrap()
-            .contains("pnpx"));
+            .contains("pnpm dlx"));
     }
 }
diff --git a/crates/socket-patch-core/src/package_json/update.rs b/crates/socket-patch-core/src/package_json/update.rs
@@ -208,7 +208,7 @@ mod tests {
         let result = update_package_json(&pkg, false, PackageManager::Pnpm).await;
         assert_eq!(result.status, UpdateStatus::Updated);
         let content = fs::read_to_string(&pkg).await.unwrap();
-        assert!(content.contains("pnpx @socketsecurity/socket-patch apply"));
+        assert!(content.contains("pnpm dlx @socketsecurity/socket-patch apply"));
     }
 
     #[tokio::test]

Original file line number	Diff line number	Diff line change
`@@ -54,7 +54,7 @@ pub async fn run(args: SetupArgs) -> i32 {`
`54`	`54`	`if !args.json {`
`55`	`55`	`println!("Found {} package.json file(s)", package_json_files.len());`
`56`	`56`	`if pm == PackageManager::Pnpm {`
`57`		`- println!("Detected pnpm project (using pnpx)");`
	`57`	`+ println!("Detected pnpm project (using pnpm dlx)");`
`58`	`58`	`}`
`59`	`59`	`}`
`60`	`60`
Original file line number	Diff line number	Diff line change
`@@ -208,7 +208,7 @@ mod tests {`
`208`	`208`	`let result = update_package_json(&pkg, false, PackageManager::Pnpm).await;`
`209`	`209`	`assert_eq!(result.status, UpdateStatus::Updated);`
`210`	`210`	`let content = fs::read_to_string(&pkg).await.unwrap();`
`211`		`- assert!(content.contains("pnpx @socketsecurity/socket-patch apply"));`
	`211`	`+ assert!(content.contains("pnpm dlx @socketsecurity/socket-patch apply"));`
`212`	`212`	`}`
`213`	`213`
`214`	`214`	`#[tokio::test]`