Setup changes pnpm-lock.yaml in v2.1.0

I created a test repo with the following contents: test.zip

When Actions runs, the git diff step produces the following, rather than an empty diff as expected:

2026-09-04T17:10:10.6561457Z ##[group]Run git diff
2026-09-04T17:10:10.6561783Z git diff
2026-09-04T17:10:10.6604816Z shell: /usr/bin/bash -e {0}
2026-09-04T17:10:10.6605089Z env:
2026-09-04T17:10:10.6605330Z   PNPM_HOME: /home/runner/setup-pnpm
2026-09-04T17:10:10.6605634Z   PNPM_CONFIG_GLOBAL_SHIMS: {"node":false}
2026-09-04T17:10:10.6605921Z ##[endgroup]
2026-09-04T17:10:10.6710708Z diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
2026-09-04T17:10:10.6711346Z index 5abb171..804b590 100644
2026-09-04T17:10:10.6711775Z --- a/pnpm-lock.yaml
2026-09-04T17:10:10.6712172Z +++ b/pnpm-lock.yaml
2026-09-04T17:10:10.6712562Z @@ -1,3 +1,202 @@
2026-09-04T17:10:10.6713074Z +---
2026-09-04T17:10:10.6713274Z +lockfileVersion: '9.0'
2026-09-04T17:10:10.6713497Z +
2026-09-04T17:10:10.6713682Z +importers:
2026-09-04T17:10:10.6713868Z +
2026-09-04T17:10:10.6714032Z +  .:
2026-09-04T17:10:10.6714228Z +    configDependencies: {}
2026-09-04T17:10:10.6714492Z +    packageManagerDependencies:
2026-09-04T17:10:10.6714797Z +      '@pnpm/exe':
2026-09-04T17:10:10.6715016Z +        specifier: ^11.5.0
2026-09-04T17:10:10.6715328Z +        version: 11.25.0
2026-09-04T17:10:10.6715895Z +      pnpm:
2026-09-04T17:10:10.6716236Z +        specifier: ^11.5.0
2026-09-04T17:10:10.6716631Z +        version: 11.25.0
2026-09-04T17:10:10.6717006Z +
2026-09-04T17:10:10.6717382Z +packages:
2026-09-04T17:10:10.6717720Z +
2026-09-04T17:10:10.6718013Z +  '@pnpm/exe@11.25.0':
2026-09-04T17:10:10.6718707Z +    resolution: {integrity: sha512-X19R2uC+VAJ4UJQE9c/PCdOXbDaWnZtad7WUrTHBFQuMVaK9MAHbyO/WgahQCuRtTmJkLbxcWKKCk+JeTYFm/g==}
2026-09-04T17:10:10.6719309Z +    hasBin: true
2026-09-04T17:10:10.6719505Z +
2026-09-04T17:10:10.6719694Z +  '@pnpm/linux-arm64@11.25.0':
2026-09-04T17:10:10.6720278Z +    resolution: {integrity: sha512-ra8akqhzsbcOhKSJ9fFV8H+Oc9uGQAcp/XmIBEdT+8hPPoZCit3+RNCHmg8bLoNvpSLtRvZE0WFCMj7WyzxeBA==}
2026-09-04T17:10:10.6720863Z +    cpu: [arm64]
2026-09-04T17:10:10.6721069Z +    os: [linux]
2026-09-04T17:10:10.6721258Z +
2026-09-04T17:10:10.6721456Z +  '@pnpm/linux-x64@11.25.0':
2026-09-04T17:10:10.6722059Z +    resolution: {integrity: sha512-pQl/L10diKQCbF73viRrtVU8qVWMTudUCSG1uZ+EWBNKtU9Sbxe6Q378diXDb1uTwSgUVMQoypxlC1MTzh7qvQ==}
2026-09-04T17:10:10.6722688Z +    cpu: [x64]
2026-09-04T17:10:10.6723207Z +    os: [linux]
2026-09-04T17:10:10.6723403Z +
2026-09-04T17:10:10.6723599Z +  '@pnpm/linuxstatic-arm64@11.25.0':
2026-09-04T17:10:10.6724423Z +    resolution: {integrity: sha512-cYcrbB/xN1N6/5VUlFuHblb1gNyJgZv1CF5Pk1T0sHJxQMY4DFJV3OqHVAgahxyUfSTaQcVLvH1H2JFvd/+sgw==}
2026-09-04T17:10:10.6725019Z +    cpu: [arm64]
2026-09-04T17:10:10.6725221Z +    os: [linux]
2026-09-04T17:10:10.6725411Z +    libc: [musl]
2026-09-04T17:10:10.6725593Z +
2026-09-04T17:10:10.6725782Z +  '@pnpm/linuxstatic-x64@11.25.0':
2026-09-04T17:10:10.6726366Z +    resolution: {integrity: sha512-HXDtaeQod16DDMUUcVLIMxvEc1jKn7IYsNPwbwAPs/Je/d3umRPJi3Ejjdn6e9qpXN6Oon+yvSsJr7B9oDt6KA==}
2026-09-04T17:10:10.6726951Z +    cpu: [x64]
2026-09-04T17:10:10.6727146Z +    os: [linux]
2026-09-04T17:10:10.6727338Z +    libc: [musl]
2026-09-04T17:10:10.6727524Z +
2026-09-04T17:10:10.6727715Z +  '@pnpm/macos-arm64@11.25.0':
2026-09-04T17:10:10.6728313Z +    resolution: {integrity: sha512-m/eAgEqKhiSexGxWPHNXNnSRI0hudymg6K7LbrU2EoDs9IgJ28OKEz9mGxMzhkYBweEquR4k5teMNes/aToy9w==}
2026-09-04T17:10:10.6728912Z +    cpu: [arm64]
2026-09-04T17:10:10.6729110Z +    os: [darwin]
2026-09-04T17:10:10.6729306Z +
2026-09-04T17:10:10.6729487Z +  '@pnpm/win-arm64@11.25.0':
2026-09-04T17:10:10.6730068Z +    resolution: {integrity: sha512-oAeECbtZ+eJziaBmPUkwJM8Dx7KVQ5FO367AXTjD2HGfB5ob1Bcu5hoUF5RBTgDBiP9fRQ1u13uAEpqar/6NLA==}
2026-09-04T17:10:10.6730674Z +    cpu: [arm64]
2026-09-04T17:10:10.6730866Z +    os: [win32]
2026-09-04T17:10:10.6731050Z +
2026-09-04T17:10:10.6731245Z +  '@pnpm/win-x64@11.25.0':
2026-09-04T17:10:10.6731839Z +    resolution: {integrity: sha512-8/n+wCc0a8TRYTMFqti93Vh0cscdJ25xfMyYSDdXrLUh2ccxSFuS+SE7cNPjd/nOXoFAJvdW0kwfbyRPLa16/w==}
2026-09-04T17:10:10.6732414Z +    cpu: [x64]
2026-09-04T17:10:10.6733014Z +    os: [win32]
2026-09-04T17:10:10.6733250Z +
2026-09-04T17:10:10.6733466Z +  '@reflink/reflink-darwin-arm64@0.1.19':
2026-09-04T17:10:10.6734091Z +    resolution: {integrity: sha512-ruy44Lpepdk1FqDz38vExBY/PVUsjxZA+chd9wozjUH9JjuDT/HEaQYA6wYN9mf041l0yLVar6BCZuWABJvHSA==}
2026-09-04T17:10:10.6734690Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6734933Z +    cpu: [arm64]
2026-09-04T17:10:10.6735130Z +    os: [darwin]
2026-09-04T17:10:10.6735332Z +
2026-09-04T17:10:10.6735530Z +  '@reflink/reflink-darwin-x64@0.1.19':
2026-09-04T17:10:10.6736180Z +    resolution: {integrity: sha512-By85MSWrMZa+c26TcnAy8SDk0sTUkYlNnwknSchkhHpGXOtjNDUOxJE9oByBnGbeuIE1PiQsxDG3Ud+IVV9yuA==}
2026-09-04T17:10:10.6736820Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6737060Z +    cpu: [x64]
2026-09-04T17:10:10.6737268Z +    os: [darwin]
2026-09-04T17:10:10.6737490Z +
2026-09-04T17:10:10.6737700Z +  '@reflink/reflink-linux-arm64-gnu@0.1.19':
2026-09-04T17:10:10.6738357Z +    resolution: {integrity: sha512-7P+er8+rP9iNeN+bfmccM4hTAaLP6PQJPKWSA4iSk2bNvo6KU6RyPgYeHxXmzNKzPVRcypZQTpFgstHam6maVg==}
2026-09-04T17:10:10.6738979Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6739205Z +    cpu: [arm64]
2026-09-04T17:10:10.6739397Z +    os: [linux]
2026-09-04T17:10:10.6739592Z +    libc: [glibc]
2026-09-04T17:10:10.6739789Z +
2026-09-04T17:10:10.6739995Z +  '@reflink/reflink-linux-arm64-musl@0.1.19':
2026-09-04T17:10:10.6740589Z +    resolution: {integrity: sha512-37iO/Dp6m5DDaC2sf3zPtx/hl9FV3Xze4xoYidrxxS9bgP3S8ALroxRK6xBG/1TtfXKTvolvp+IjrUU6ujIGmA==}
2026-09-04T17:10:10.6741158Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6741393Z +    cpu: [arm64]
2026-09-04T17:10:10.6741582Z +    os: [linux]
2026-09-04T17:10:10.6741774Z +    libc: [musl]
2026-09-04T17:10:10.6741963Z +
2026-09-04T17:10:10.6742174Z +  '@reflink/reflink-linux-x64-gnu@0.1.19':
2026-09-04T17:10:10.6743076Z +    resolution: {integrity: sha512-jbI8jvuYCaA3MVUdu8vLoLAFqC+iNMpiSuLbxlAgg7x3K5bsS8nOpTRnkLF7vISJ+rVR8W+7ThXlXlUQ93ulkw==}
2026-09-04T17:10:10.6743726Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6743958Z +    cpu: [x64]
2026-09-04T17:10:10.6744155Z +    os: [linux]
2026-09-04T17:10:10.6744349Z +    libc: [glibc]
2026-09-04T17:10:10.6744536Z +
2026-09-04T17:10:10.6744737Z +  '@reflink/reflink-linux-x64-musl@0.1.19':
2026-09-04T17:10:10.6745328Z +    resolution: {integrity: sha512-e9FBWDe+lv7QKAwtKOt6A2W/fyy/aEEfr0g6j/hWzvQcrzHCsz07BNQYlNOjTfeytrtLU7k449H1PI95jA4OjQ==}
2026-09-04T17:10:10.6746075Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6746298Z +    cpu: [x64]
2026-09-04T17:10:10.6746484Z +    os: [linux]
2026-09-04T17:10:10.6746672Z +    libc: [musl]
2026-09-04T17:10:10.6746861Z +
2026-09-04T17:10:10.6747059Z +  '@reflink/reflink-win32-arm64-msvc@0.1.19':
2026-09-04T17:10:10.6747683Z +    resolution: {integrity: sha512-09PxnVIQcd+UOn4WAW73WU6PXL7DwGS6wPlkMhMg2zlHHG65F3vHepOw06HFCq+N42qkaNAc8AKIabWvtk6cIQ==}
2026-09-04T17:10:10.6748292Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6748523Z +    cpu: [arm64]
2026-09-04T17:10:10.6748717Z +    os: [win32]
2026-09-04T17:10:10.6748900Z +
2026-09-04T17:10:10.6749096Z +  '@reflink/reflink-win32-x64-msvc@0.1.19':
2026-09-04T17:10:10.6749680Z +    resolution: {integrity: sha512-E//yT4ni2SyhwP8JRjVGWr3cbnhWDiPLgnQ66qqaanjjnMiu3O/2tjCPQXlcGc/DEYofpDc9fvhv6tALQsMV9w==}
2026-09-04T17:10:10.6750261Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6750490Z +    cpu: [x64]
2026-09-04T17:10:10.6750674Z +    os: [win32]
2026-09-04T17:10:10.6750860Z +
2026-09-04T17:10:10.6751035Z +  '@reflink/reflink@0.1.19':
2026-09-04T17:10:10.6751596Z +    resolution: {integrity: sha512-DmCG8GzysnCZ15bres3N5AHCmwBwYgp0As6xjhQ47rAUTUXxJiK+lLUxaGsX3hd/30qUpVElh05PbGuxRPgJwA==}
2026-09-04T17:10:10.6752188Z +    engines: {node: '>= 10'}
2026-09-04T17:10:10.6752401Z +
2026-09-04T17:10:10.6752582Z +  detect-libc@2.1.2:
2026-09-04T17:10:10.6753409Z +    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
2026-09-04T17:10:10.6754201Z +    engines: {node: '>=8'}
2026-09-04T17:10:10.6754436Z +
2026-09-04T17:10:10.6754614Z +  pnpm@11.25.0:
2026-09-04T17:10:10.6755143Z +    resolution: {integrity: sha512-XN6SW08HX3Jetx+64YpC/+eEUkeJ8ZthxzHLhyHsKKruFg4BqNWvT+2ypCzb8wDv4j2zVrDUoXtNY+EfirfJVg==}
2026-09-04T17:10:10.6755742Z +    engines: {node: '>=22.13'}
2026-09-04T17:10:10.6755974Z +    hasBin: true
2026-09-04T17:10:10.6756173Z +
2026-09-04T17:10:10.6756346Z +snapshots:
2026-09-04T17:10:10.6756528Z +
2026-09-04T17:10:10.6756706Z +  '@pnpm/exe@11.25.0':
2026-09-04T17:10:10.6756933Z +    dependencies:
2026-09-04T17:10:10.6757144Z +      '@reflink/reflink': 0.1.19
2026-09-04T17:10:10.6757399Z +      detect-libc: 2.1.2
2026-09-04T17:10:10.6757639Z +    optionalDependencies:
2026-09-04T17:10:10.6757895Z +      '@pnpm/linux-arm64': 11.25.0
2026-09-04T17:10:10.6758153Z +      '@pnpm/linux-x64': 11.25.0
2026-09-04T17:10:10.6758412Z +      '@pnpm/linuxstatic-arm64': 11.25.0
2026-09-04T17:10:10.6758689Z +      '@pnpm/linuxstatic-x64': 11.25.0
2026-09-04T17:10:10.6758962Z +      '@pnpm/macos-arm64': 11.25.0
2026-09-04T17:10:10.6759223Z +      '@pnpm/win-arm64': 11.25.0
2026-09-04T17:10:10.6759464Z +      '@pnpm/win-x64': 11.25.0
2026-09-04T17:10:10.6759689Z +
2026-09-04T17:10:10.6759868Z +  '@pnpm/linux-arm64@11.25.0':
2026-09-04T17:10:10.6760106Z +    optional: true
2026-09-04T17:10:10.6760300Z +
2026-09-04T17:10:10.6760485Z +  '@pnpm/linux-x64@11.25.0':
2026-09-04T17:10:10.6760715Z +    optional: true
2026-09-04T17:10:10.6760905Z +
2026-09-04T17:10:10.6761099Z +  '@pnpm/linuxstatic-arm64@11.25.0':
2026-09-04T17:10:10.6761355Z +    optional: true
2026-09-04T17:10:10.6761543Z +
2026-09-04T17:10:10.6761727Z +  '@pnpm/linuxstatic-x64@11.25.0':
2026-09-04T17:10:10.6761975Z +    optional: true
2026-09-04T17:10:10.6762161Z +
2026-09-04T17:10:10.6762340Z +  '@pnpm/macos-arm64@11.25.0':
2026-09-04T17:10:10.6762570Z +    optional: true
2026-09-04T17:10:10.6763046Z +
2026-09-04T17:10:10.6763313Z +  '@pnpm/win-arm64@11.25.0':
2026-09-04T17:10:10.6763551Z +    optional: true
2026-09-04T17:10:10.6763741Z +
2026-09-04T17:10:10.6763916Z +  '@pnpm/win-x64@11.25.0':
2026-09-04T17:10:10.6764148Z +    optional: true
2026-09-04T17:10:10.6764336Z +
2026-09-04T17:10:10.6764534Z +  '@reflink/reflink-darwin-arm64@0.1.19':
2026-09-04T17:10:10.6764806Z +    optional: true
2026-09-04T17:10:10.6764993Z +
2026-09-04T17:10:10.6765192Z +  '@reflink/reflink-darwin-x64@0.1.19':
2026-09-04T17:10:10.6765599Z +    optional: true
2026-09-04T17:10:10.6765788Z +
2026-09-04T17:10:10.6765994Z +  '@reflink/reflink-linux-arm64-gnu@0.1.19':
2026-09-04T17:10:10.6766281Z +    optional: true
2026-09-04T17:10:10.6766470Z +
2026-09-04T17:10:10.6766678Z +  '@reflink/reflink-linux-arm64-musl@0.1.19':
2026-09-04T17:10:10.6766958Z +    optional: true
2026-09-04T17:10:10.6767151Z +
2026-09-04T17:10:10.6767350Z +  '@reflink/reflink-linux-x64-gnu@0.1.19':
2026-09-04T17:10:10.6767620Z +    optional: true
2026-09-04T17:10:10.6767806Z +
2026-09-04T17:10:10.6767999Z +  '@reflink/reflink-linux-x64-musl@0.1.19':
2026-09-04T17:10:10.6768281Z +    optional: true
2026-09-04T17:10:10.6768468Z +
2026-09-04T17:10:10.6768670Z +  '@reflink/reflink-win32-arm64-msvc@0.1.19':
2026-09-04T17:10:10.6768942Z +    optional: true
2026-09-04T17:10:10.6769133Z +
2026-09-04T17:10:10.6769325Z +  '@reflink/reflink-win32-x64-msvc@0.1.19':
2026-09-04T17:10:10.6769609Z +    optional: true
2026-09-04T17:10:10.6769804Z +
2026-09-04T17:10:10.6769985Z +  '@reflink/reflink@0.1.19':
2026-09-04T17:10:10.6770227Z +    optionalDependencies:
2026-09-04T17:10:10.6770481Z +      '@reflink/reflink-darwin-arm64': 0.1.19
2026-09-04T17:10:10.6770782Z +      '@reflink/reflink-darwin-x64': 0.1.19
2026-09-04T17:10:10.6771077Z +      '@reflink/reflink-linux-arm64-gnu': 0.1.19
2026-09-04T17:10:10.6771394Z +      '@reflink/reflink-linux-arm64-musl': 0.1.19
2026-09-04T17:10:10.6771708Z +      '@reflink/reflink-linux-x64-gnu': 0.1.19
2026-09-04T17:10:10.6772021Z +      '@reflink/reflink-linux-x64-musl': 0.1.19
2026-09-04T17:10:10.6772472Z +      '@reflink/reflink-win32-arm64-msvc': 0.1.19
2026-09-04T17:10:10.6773090Z +      '@reflink/reflink-win32-x64-msvc': 0.1.19
2026-09-04T17:10:10.6773370Z +
2026-09-04T17:10:10.6773556Z +  detect-libc@2.1.2: {}
2026-09-04T17:10:10.6773769Z +
2026-09-04T17:10:10.6773939Z +  pnpm@11.25.0: {}
2026-09-04T17:10:10.6774129Z +
2026-09-04T17:10:10.6774290Z +---
2026-09-04T17:10:10.6774481Z  lockfileVersion: '9.0'
2026-09-04T17:10:10.6774695Z  
2026-09-04T17:10:10.6774860Z  settings:

Reproduce the report using the linked test.zip and inspect the GitHub Actions setup step that precedes git diff. Compare pnpm-lock.yaml before and after the run; done means the setup step leaves the lockfile unchanged and git diff is empty.