pnpm saves ephemeral tarball urls to lockfile when installing from github releases #9531
Description
Last pnpm version that worked
10.0.0-beta.2
pnpm version
10.0.0-beta.3 to latest
Code to reproduce the issue
pnpm i https://github.com/stainless-api/tsc-multi/releases/download/v1.1.4/tsc-multi-1.1.4.tgz
grep X-Amz-Expires pnpm-lock.yaml | head -n1
Expected behavior
The lockfile should not save ephemeral URLs, and it should be possible to successfully run pnpm i in the future.
Actual behavior
After a while the signed url expires, and further installs will break.
Additional information
Caused by #8842
Node.js version
10.0.0-beta.3
Operating System
macOS