@coana-tech/cli 14.12.114 → 14.12.115

package/cli.mjs

@@ -219005,7 +219005,18 @@ var GradleLockfileUpgradeHandler = class {
       (artifact.manifestFiles?.map((ref) => ref.file) ?? []).concat(toplevelAncestors?.flatMap(({ manifestFiles }) => manifestFiles?.map((m4) => m4.file) ?? []) ?? []).filter((f6) => !ctxt.wsFilter || ctxt.wsFilter(dirname10(f6) || ".")).map((f6) => resolve15(this.rootDir, f6)).filter(this.validateFile)
     );
     await asyncForEach(validatedManifestFiles, async (validatedManifestFile) => {
-      const lockFile = await loadLockFile(this.rootDir, validatedManifestFile);
+      let lockFile;
+      try {
+        lockFile = await loadLockFile(this.rootDir, validatedManifestFile);
+      } catch (error) {
+        ctxt.statusUpdater?.({
+          status: "error",
+          file: validatedManifestFile,
+          artifacts: [idx],
+          message: `Failed to read gradle.lockfile: ${error.message ?? "Unknown error"}`
+        });
+        return;
+      }
       assert7(artifact.namespace);
       assert7(artifact.name);
       assert7(artifact.version);
@@ -219362,7 +219373,18 @@ ${indent(1, indentationSize)}`)}
 `
       };
     } else {
-      const fileContent = await readFile12(dependencyOverridesFile, "utf-8");
+      let fileContent;
+      try {
+        fileContent = await readFile12(dependencyOverridesFile, "utf-8");
+      } catch (error) {
+        ctxt.statusUpdater?.({
+          status: "error",
+          file: dependencyOverridesFile,
+          artifacts: upgrades.map(({ idx }) => idx),
+          message: `Failed to read dependency-overrides.sbt: ${error.message ?? "Unknown error"}`
+        });
+        return void 0;
+      }
       const indentationSize = getIndentationSize(fileContent);
       const prependNewline = fileContent.length > 0 && !fileContent.endsWith("\n\n");
       return {
@@ -226211,12 +226233,31 @@ var NpmSocketUpgradeManager = class {
     return subprojectToUpgrade;
   }
   async applySecurityFixesForSocketArtifacts(subprojectDir, fixingManager, artifacts, workspaceToFixes, ctxt) {
-    const allUpgrades = [];
     for (const [workspacePath, upgrades] of workspaceToFixes.entries()) {
-      for (const upgrade of upgrades) {
-        allUpgrades.push({ ...upgrade, workspacePath });
+      const upgradesToDirectDependencies = upgrades.filter((upgrade) => artifacts[upgrade.idx].direct);
+      if (upgradesToDirectDependencies.length === 0) continue;
+      const packageJsonPath = join11(subprojectDir, workspacePath, "package.json");
+      const directPatches = [];
+      for (const upgrade of upgradesToDirectDependencies) {
+        const artifact = artifacts[upgrade.idx];
+        const manifestRef = artifact.manifestFiles?.find((mf) => mf.file === packageJsonPath);
+        if (manifestRef) {
+          const patches = await this.createDirectDependencyPatches(
+            manifestRef,
+            upgrade.idx,
+            upgrade.upgradeVersion,
+            ctxt
+          );
+          directPatches.push(...patches);
+        }
+      }
+      if (directPatches.length > 0) {
+        await applyPatches("NPM", this.rootDir, directPatches, ctxt);
       }
     }
+    const lockfileName = this.getLockfileName(subprojectDir);
+    const lockfilePath = join11(subprojectDir, lockfileName);
+    const allUpgrades = Array.from(workspaceToFixes.values()).flat();
     const upgradesTransformed = allUpgrades.map((upgrade) => ({
       dependencyName: getNameFromNamespaceAndName(
         "npm" /* NPM */,
@@ -226227,8 +226268,6 @@ var NpmSocketUpgradeManager = class {
       dependencyIdentifier: "" + upgrade.idx,
       fixedVersion: upgrade.upgradeVersion
     }));
-    const lockfileName = this.getLockfileName(subprojectDir);
-    const lockfilePath = join11(subprojectDir, lockfileName);
     try {
       await fixingManager.applySecurityFixesSpecificPackageManager(upgradesTransformed);
       ctxt.statusUpdater?.({
@@ -226246,28 +226285,6 @@ var NpmSocketUpgradeManager = class {
       });
       throw e;
     }
-    for (const [workspacePath, upgrades] of workspaceToFixes.entries()) {
-      const upgradesToDirectDependencies = upgrades.filter((upgrade) => artifacts[upgrade.idx].direct);
-      if (upgradesToDirectDependencies.length === 0) continue;
-      const packageJsonPath = join11(subprojectDir, workspacePath, "package.json");
-      const directPatches = [];
-      for (const upgrade of upgradesToDirectDependencies) {
-        const artifact = artifacts[upgrade.idx];
-        const manifestRef = artifact.manifestFiles?.find((mf) => mf.file === packageJsonPath);
-        if (manifestRef) {
-          const patches = await this.createDirectDependencyPatches(
-            manifestRef,
-            upgrade.idx,
-            upgrade.upgradeVersion,
-            ctxt
-          );
-          directPatches.push(...patches);
-        }
-      }
-      if (directPatches.length > 0) {
-        await applyPatches("NPM", this.rootDir, directPatches, ctxt);
-      }
-    }
     try {
       await fixingManager.finalizeFixes();
       ctxt.statusUpdater?.({
@@ -226321,7 +226338,18 @@ var NpmSocketUpgradeManager = class {
     assert10(artifact.name);
     assert10(artifact.version);
     const patches = [];
-    const packageJsonContent = await readFile18(resolve25(this.rootDir, mf.file), "utf-8");
+    let packageJsonContent;
+    try {
+      packageJsonContent = await readFile18(resolve25(this.rootDir, mf.file), "utf-8");
+    } catch (error) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file: mf.file,
+        artifacts: [idx],
+        message: `Failed to read package.json: ${error.message ?? "Unknown error"}`
+      });
+      return [];
+    }
     if (mf?.start !== void 0 && mf?.end !== void 0) {
       const originalVersionString = packageJsonContent.substring(mf.start, mf.end);
       let newVersionString;
@@ -229306,7 +229334,18 @@ var CargoSocketUpgradeManager = class {
    */
   async createDirectDependencyPatches(mf, idx, upgradeVersion, ctxt) {
     const fullPath = resolve29(this.rootDir, mf.file);
-    const content = await readFile22(fullPath, "utf-8");
+    let content;
+    try {
+      content = await readFile22(fullPath, "utf-8");
+    } catch (error) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file: mf.file,
+        artifacts: [idx],
+        message: `Failed to read Cargo.toml: ${error.message ?? "Unknown error"}`
+      });
+      return [];
+    }
     const toml = parseTOML2(content);
     if (!toml) {
       ctxt.statusUpdater?.({
@@ -229395,7 +229434,18 @@ var CargoSocketUpgradeManager = class {
    */
   async createTransitiveDependencyPatches(tomlFile, idx, upgradeVersion, ctxt) {
     const fullPath = resolve29(this.rootDir, tomlFile);
-    const content = await readFile22(fullPath, "utf-8");
+    let content;
+    try {
+      content = await readFile22(fullPath, "utf-8");
+    } catch (error) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file: tomlFile,
+        artifacts: [idx],
+        message: `Failed to read Cargo.toml: ${error.message ?? "Unknown error"}`
+      });
+      return [];
+    }
     const toml = parseTOML2(content);
     if (!toml) {
       ctxt.statusUpdater?.({
@@ -230082,7 +230132,18 @@ ${newText}
    */
   async createPyprojectTomlDirectDependencyPatches(tomlFile, idx, upgradeVersion, ctxt) {
     const fullPath = resolve32(this.rootDir, tomlFile);
-    const content = await readFile25(fullPath, "utf-8");
+    let content;
+    try {
+      content = await readFile25(fullPath, "utf-8");
+    } catch (error) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file: tomlFile,
+        artifacts: [idx],
+        message: `Failed to read pyproject.toml: ${error.message ?? "Unknown error"}`
+      });
+      return [];
+    }
     const toml = parseTOML2(content);
     if (!toml) {
       ctxt.statusUpdater?.({
@@ -231026,7 +231087,7 @@ var RubygemsSocketUpgradeManager = class {
           } else if (gemfileLock.directDependencies.has(artifact.name) && isInGemSection) {
             directPatches.push(...await this.handleGemfile(gemfileName, idx, upgradeVersion, ctxt));
           } else if (!gemfileLock.directDependencies.has(artifact.name)) {
-            transitivePatches.push(await this.createAddGemPatch(gemfileName, idx, upgradeVersion, ctxt));
+            transitivePatches.push(...await this.createAddGemPatch(gemfileName, idx, upgradeVersion, ctxt));
           }
         } else {
           ctxt.statusUpdater?.({
@@ -231150,7 +231211,7 @@ var RubygemsSocketUpgradeManager = class {
           artifacts: [idx],
           message: `Could not find gemspec file for PATH gem(s): ${pathGemNames.join(", ")}. Make sure the Gemfile has a 'gemspec' directive.`
         });
-        gemfilePatches.push(await this.createAddGemPatch(gemfilePath, idx, upgradeVersion, ctxt));
+        gemfilePatches.push(...await this.createAddGemPatch(gemfilePath, idx, upgradeVersion, ctxt));
         return { gemspecPatches, gemfilePatches };
       }
       let foundInGemspec = false;
@@ -231199,7 +231260,7 @@ var RubygemsSocketUpgradeManager = class {
           message: `Could not find ${dependencyName} in any gemspec file`
         });
       }
-      gemfilePatches.push(await this.createAddGemPatch(gemfilePath, idx, upgradeVersion, ctxt));
+      gemfilePatches.push(...await this.createAddGemPatch(gemfilePath, idx, upgradeVersion, ctxt));
     } catch (error) {
       ctxt.statusUpdater?.({
         status: "error",
@@ -231264,16 +231325,29 @@ var RubygemsSocketUpgradeManager = class {
    */
   async createAddGemPatch(file, idx, updateVersion, ctxt) {
     const artifact = ctxt.artifacts[idx];
-    const content = await readFile26(resolve34(this.rootDir, file), "utf-8");
+    const patches = [];
+    let content;
+    try {
+      content = await readFile26(resolve34(this.rootDir, file), "utf-8");
+    } catch (error) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file,
+        artifacts: [idx],
+        message: `Failed to read Gemfile: ${error instanceof Error ? error.message : String(error)}`
+      });
+      return [];
+    }
     const trimmedLength = content.trimEnd().length;
     const needsNewline = trimmedLength > 0 && !content[trimmedLength - 1].match(/\n/);
-    return {
+    patches.push({
       file,
       offset: trimmedLength,
       artifacts: [idx],
       text: `${needsNewline ? "\n" : ""}gem "${artifact.name}", "${updateVersion}"
 `
-    };
+    });
+    return patches;
   }
 };
 
@@ -250834,7 +250908,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.114";
+var version3 = "14.12.115";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pick } = import_lodash15.default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.114",
+  "version": "14.12.115",
   "description": "Coana CLI",
   "type": "module",
   "bin": {