fix(nodejs): fix infinity loops for pnpm with cyclic imports

[DmitriyLewen]

Description

pnpm allows cyclic imports with peer dependencies.
e.g.:

snapshots:

  [email protected]:
    dependencies:
      caniuse-lite: 1.0.30001627
      electron-to-chromium: 1.4.789
      node-releases: 2.0.14
      update-browserslist-db: 1.0.16([email protected])

  [email protected]([email protected]):
    dependencies:
      browserslist: 4.23.0
      escalade: 3.1.2
      picocolors: 1.0.1

See more in #6848

In these cases you should not end up with an infinite loop.

Related issues

• Close bug(pnpm): infinity loop for markRootPkgs function #6848

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[knqyf263]

@aqua-bot backport release/v0.52

[knqyf263]

It works in my fork, but it is skipped in Trivy 🤔 I suspect that the merge queue may cause merged_at to be null, but in a personal repository, the merge queue does not seem to be available.
https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-a-merge-queue

[knqyf263]

@aqua-bot backport release/v0.52

[aqua-bot]

Backport PR created: #6875