fix(ci): use package version for WASM workflow cache keys

Both ONNX Runtime and Yoga Layout build caches were not invalidating when
their versions changed. Now both use package.json version field (which
matches upstream release versions) for proper cache busting.

Changes:
- ONNX Runtime: Update package version 1.0.0 → 1.21.1 (matches v1.21.1)
- Yoga Layout: Update package version 1.0.0 → 3.1.0 (matches v3.1.0)
- Both build scripts read version from package.json and prepend 'v' for git tags
- Workflows extract versions from package.json (standard semver, no custom fields)
- Cache keys include both file hash and version for proper invalidation

Author: jdalton

.github/workflows/build-wasm.yml

@@ -51,8 +51,13 @@ jobs:
       - name: Generate yoga build cache key
         id: yoga-cache-key
         run: |
-          HASH=$(find packages/yoga-layout -type f \( -name "*.cpp" -o -name "*.h" -o -name "*.mjs" -o -name "CMakeLists.txt" \) | sort | xargs sha256sum | sha256sum | cut -d' ' -f1)
-          echo "hash=$HASH" >> $GITHUB_OUTPUT
+          # Extract Yoga version from package.json (package version matches Yoga Layout release).
+          YOGA_VERSION=$(node -p "require('./packages/yoga-layout/package.json').version")
+          # Hash includes source files and package.json.
+          HASH=$(find packages/yoga-layout -type f \( -name "*.cpp" -o -name "*.h" -o -name "*.mjs" -o -name "CMakeLists.txt" -o -name "package.json" \) | sort | xargs sha256sum | sha256sum | cut -d' ' -f1)
+          FULL_HASH="${HASH}-${YOGA_VERSION}"
+          echo "hash=$FULL_HASH" >> $GITHUB_OUTPUT
+          echo "Yoga Layout version: v$YOGA_VERSION"
 
       - name: Restore yoga output cache
         id: yoga-cache

packages/yoga-layout/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/yoga-layout",
-  "version": "1.0.0",
+  "version": "3.1.0",
   "description": "Custom Yoga Layout WASM build optimized for Socket CLI",
   "type": "module",
   "private": true,

packages/yoga-layout/scripts/build.mjs

@@ -54,7 +54,9 @@ const CLEAN_BUILD = args.includes('--clean')
 const ROOT_DIR = path.join(__dirname, '..')
 const BUILD_DIR = path.join(ROOT_DIR, 'build')
 const OUTPUT_DIR = path.join(BUILD_DIR, 'wasm')
-const YOGA_VERSION = 'v3.1.0'
+// Read Yoga version from package.json (matches Yoga Layout release version).
+const packageJson = JSON.parse(await fs.readFile(path.join(ROOT_DIR, 'package.json'), 'utf-8'))
+const YOGA_VERSION = `v${packageJson.version}`
 const YOGA_REPO = 'https://github.com/facebook/yoga.git'
 const YOGA_SOURCE_DIR = path.join(BUILD_DIR, 'yoga-source')