fix(nodejs): update logic for parsing pnpm lock files

[DmitriyLewen]

Description

Fixed problem with deps parsing from registry.
Add support of lock file v6.

Related issues

• Close PNPM scanning is broken, does not find any vulnerabilities #3793

Related PRs

• #fix(pnpm): change logic to parse package name and version go-dep-parser#220

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[knqyf263]

@DmitriyLewen Conflicting now

[DmitriyLewen]

@knqyf263 fixed in c050728

[kikar]

When can we expect a new version with this fix?

[knqyf263]

https://github.com/aquasecurity/trivy/milestone/18

[danielchabr]

Hi @knqyf263, any chance the trivy-action will be updated to 0.42 any time soon too so that we can start using PNPM?
https://github.com/aquasecurity/trivy-action/tags

[knqyf263]

You can open PR in trivy-action.

[danielchabr]

ok, I've created aquasecurity/trivy-action#237