@coana-tech/cli 14.12.131 → 14.12.133

package/cli.mjs

@@ -14560,8 +14560,8 @@ var require_follow_redirects = __commonJS({
       }
       return parsed;
     }
-    function resolveUrl(relative23, base) {
-      return useNativeURL ? new URL3(relative23, base) : parseUrl(url2.resolve(base, relative23));
+    function resolveUrl(relative22, base) {
+      return useNativeURL ? new URL3(relative22, base) : parseUrl(url2.resolve(base, relative22));
     }
     function validateUrl(input) {
       if (/^\[/.test(input.hostname) && !/^\[[:0-9a-f]+\]$/i.test(input.hostname)) {
@@ -17749,7 +17749,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join32 = ",";
+            let join33 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value2)) {
               if (value2.length === 0) {
@@ -17763,7 +17763,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join32 = `,
+                join33 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value2.length, maximumBreadth);
@@ -17771,13 +17771,13 @@ ${indentation}`;
               for (; i7 < maximumValuesToStringify - 1; i7++) {
                 const tmp2 = stringifyFnReplacer(String(i7), value2, stack2, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join32;
+                res += join33;
               }
               const tmp = stringifyFnReplacer(String(i7), value2, stack2, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value2.length - 1 > maximumBreadth) {
                 const removedKeys = value2.length - maximumBreadth - 1;
-                res += `${join32}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join33}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -17798,7 +17798,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join32 = `,
+              join33 = `,
 ${indentation}`;
               whitespace2 = " ";
             }
@@ -17812,13 +17812,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value2, stack2, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace2}${tmp}`;
-                separator = join32;
+                separator = join33;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace2}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join32;
+              separator = join33;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -17859,7 +17859,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join32 = ",";
+            let join33 = ",";
             if (Array.isArray(value2)) {
               if (value2.length === 0) {
                 return "[]";
@@ -17872,7 +17872,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join32 = `,
+                join33 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value2.length, maximumBreadth);
@@ -17880,13 +17880,13 @@ ${indentation}`;
               for (; i7 < maximumValuesToStringify - 1; i7++) {
                 const tmp2 = stringifyArrayReplacer(String(i7), value2[i7], stack2, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join32;
+                res += join33;
               }
               const tmp = stringifyArrayReplacer(String(i7), value2[i7], stack2, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value2.length - 1 > maximumBreadth) {
                 const removedKeys = value2.length - maximumBreadth - 1;
-                res += `${join32}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join33}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -17899,7 +17899,7 @@ ${originalIndentation}`;
             let whitespace2 = "";
             if (spacer !== "") {
               indentation += spacer;
-              join32 = `,
+              join33 = `,
 ${indentation}`;
               whitespace2 = " ";
             }
@@ -17908,7 +17908,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value2[key2], stack2, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace2}${tmp}`;
-                separator = join32;
+                separator = join33;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -17966,20 +17966,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join33 = `,
+              const join34 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value2.length, maximumBreadth);
               let i7 = 0;
               for (; i7 < maximumValuesToStringify - 1; i7++) {
                 const tmp2 = stringifyIndent(String(i7), value2[i7], stack2, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join33;
+                res2 += join34;
               }
               const tmp = stringifyIndent(String(i7), value2[i7], stack2, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value2.length - 1 > maximumBreadth) {
                 const removedKeys = value2.length - maximumBreadth - 1;
-                res2 += `${join33}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join34}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -17995,16 +17995,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join32 = `,
+            const join33 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value2)) {
-              res += stringifyTypedArray(value2, join32, maximumBreadth);
+              res += stringifyTypedArray(value2, join33, maximumBreadth);
               keys = keys.slice(value2.length);
               maximumPropertiesToStringify -= value2.length;
-              separator = join32;
+              separator = join33;
             }
             if (deterministic) {
               keys = insertSort(keys);
@@ -18015,13 +18015,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value2[key2], stack2, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join32;
+                separator = join33;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join32;
+              separator = join33;
             }
             if (separator !== "") {
               res = `
@@ -19588,7 +19588,7 @@ var require_buffer_list = __commonJS({
         }
       }, {
         key: "join",
-        value: function join32(s6) {
+        value: function join33(s6) {
           if (this.length === 0) return "";
           var p3 = this.head;
           var ret = "" + p3.data;
@@ -30822,7 +30822,7 @@ var require_lodash = __commonJS({
           }
           return mapped.length && mapped[0] === arrays[0] ? baseIntersection(mapped, undefined2, comparator) : [];
         });
-        function join32(array, separator) {
+        function join33(array, separator) {
           return array == null ? "" : nativeJoin.call(array, separator);
         }
         function last2(array) {
@@ -32741,7 +32741,7 @@ var require_lodash = __commonJS({
         lodash16.isUndefined = isUndefined2;
         lodash16.isWeakMap = isWeakMap;
         lodash16.isWeakSet = isWeakSet;
-        lodash16.join = join32;
+        lodash16.join = join33;
         lodash16.kebabCase = kebabCase;
         lodash16.last = last2;
         lodash16.lastIndexOf = lastIndexOf;
@@ -46375,7 +46375,7 @@ var require_builder = __commonJS({
       }
     };
     exports2.SeqBuilder = SeqBuilder;
-    function join32(first2, second, ...others) {
+    function join33(first2, second, ...others) {
       const seq = new SeqBuilder(first2, second);
       if (!others.length) {
         return seq;
@@ -46384,7 +46384,7 @@ var require_builder = __commonJS({
         return res.join(query);
       }, seq);
     }
-    exports2.join = join32;
+    exports2.join = join33;
     var SymBuilder = class extends AbstractBuilder {
       constructor(opts) {
         super();
@@ -55218,7 +55218,7 @@ var require_cjs2 = __commonJS({
 var require_lib12 = __commonJS({
   "../../node_modules/.pnpm/write-file-atomic@5.0.1/node_modules/write-file-atomic/lib/index.js"(exports2, module2) {
     "use strict";
-    module2.exports = writeFile16;
+    module2.exports = writeFile15;
     module2.exports.sync = writeFileSync4;
     module2.exports._getTmpname = getTmpname;
     module2.exports._cleanupOnExit = cleanupOnExit;
@@ -55343,7 +55343,7 @@ var require_lib12 = __commonJS({
         }
       }
     }
-    async function writeFile16(filename, data2, options, callback) {
+    async function writeFile15(filename, data2, options, callback) {
       if (options instanceof Function) {
         callback = options;
         options = {};
@@ -70309,16 +70309,16 @@ var require_lockfile = __commonJS({
             if (process.platform === "win32") {
               yield fsSymlink(src, dest, "junction");
             } else {
-              let relative23;
+              let relative22;
               try {
-                relative23 = (_path2 || _load_path()).default.relative((_fs || _load_fs()).default.realpathSync((_path2 || _load_path()).default.dirname(dest)), (_fs || _load_fs()).default.realpathSync(src));
+                relative22 = (_path2 || _load_path()).default.relative((_fs || _load_fs()).default.realpathSync((_path2 || _load_path()).default.dirname(dest)), (_fs || _load_fs()).default.realpathSync(src));
               } catch (err) {
                 if (err.code !== "ENOENT") {
                   throw err;
                 }
-                relative23 = (_path2 || _load_path()).default.relative((_path2 || _load_path()).default.dirname(dest), src);
+                relative22 = (_path2 || _load_path()).default.relative((_path2 || _load_path()).default.dirname(dest), src);
               }
-              yield fsSymlink(relative23 || ".", dest);
+              yield fsSymlink(relative22 || ".", dest);
             }
           });
           return function symlink2(_x24, _x25) {
@@ -70345,17 +70345,17 @@ var require_lockfile = __commonJS({
                 _ref28 = _i14.value;
               }
               const name2 = _ref28;
-              const relative23 = relativeDir ? (_path2 || _load_path()).default.join(relativeDir, name2) : name2;
+              const relative22 = relativeDir ? (_path2 || _load_path()).default.join(relativeDir, name2) : name2;
               const loc = (_path2 || _load_path()).default.join(dir, name2);
               const stat6 = yield lstat3(loc);
               files.push({
-                relative: relative23,
+                relative: relative22,
                 basename: name2,
                 absolute: loc,
                 mtime: +stat6.mtime
               });
               if (stat6.isDirectory()) {
-                files = files.concat(yield walk(loc, relative23, ignoreBasenames));
+                files = files.concat(yield walk(loc, relative22, ignoreBasenames));
               }
             }
             return files;
@@ -70400,7 +70400,7 @@ var require_lockfile = __commonJS({
             if (eol !== "\n") {
               data2 = data2.replace(/\n/g, eol);
             }
-            yield writeFile16(path9, data2);
+            yield writeFile15(path9, data2);
           });
           return function writeFilePreservingEol2(_x30, _x31) {
             return _ref31.apply(this, arguments);
@@ -70412,7 +70412,7 @@ var require_lockfile = __commonJS({
             const file = (_path2 || _load_path()).default.join(dir, filename);
             const fileLink = (_path2 || _load_path()).default.join(dir, filename + "-link");
             try {
-              yield writeFile16(file, "test");
+              yield writeFile15(file, "test");
               yield link(file, fileLink);
             } catch (err) {
               return false;
@@ -70562,7 +70562,7 @@ var require_lockfile = __commonJS({
         const lockQueue = exports3.lockQueue = new (_blockingQueue || _load_blockingQueue()).default("fs lock");
         const readFileBuffer = exports3.readFileBuffer = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.readFile);
         const open = exports3.open = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.open);
-        const writeFile16 = exports3.writeFile = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.writeFile);
+        const writeFile15 = exports3.writeFile = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.writeFile);
         const readlink2 = exports3.readlink = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.readlink);
         const realpath2 = exports3.realpath = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.realpath);
         const readdir7 = exports3.readdir = (0, (_promise2 || _load_promise2()).promisify)((_fs || _load_fs()).default.readdir);
@@ -123168,7 +123168,7 @@ var require_summary = __commonJS({
     exports2.summary = exports2.markdownSummary = exports2.SUMMARY_DOCS_URL = exports2.SUMMARY_ENV_VAR = void 0;
     var os_1 = __require("os");
     var fs_1 = __require("fs");
-    var { access: access5, appendFile, writeFile: writeFile16 } = fs_1.promises;
+    var { access: access5, appendFile, writeFile: writeFile15 } = fs_1.promises;
     exports2.SUMMARY_ENV_VAR = "GITHUB_STEP_SUMMARY";
     exports2.SUMMARY_DOCS_URL = "https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-job-summary";
     var Summary = class {
@@ -123226,7 +123226,7 @@ var require_summary = __commonJS({
         return __awaiter(this, void 0, void 0, function* () {
           const overwrite = !!(options === null || options === void 0 ? void 0 : options.overwrite);
           const filePath = yield this.filePath();
-          const writeFunc = overwrite ? writeFile16 : appendFile;
+          const writeFunc = overwrite ? writeFile15 : appendFile;
           yield writeFunc(filePath, this._buffer, { encoding: "utf8" });
           return this.emptyBuffer();
         });
@@ -201554,9 +201554,9 @@ var {
 } = import_index.default;
 
 // dist/index.js
-import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile34, rm as rm3, writeFile as writeFile15 } from "fs/promises";
+import { mkdir as mkdir7, mkdtemp as mkdtemp2, readFile as readFile34, rm as rm3, writeFile as writeFile14 } from "fs/promises";
 import { tmpdir as tmpdir3 } from "os";
-import { dirname as dirname26, join as join31, resolve as resolve44 } from "path";
+import { dirname as dirname26, join as join32, resolve as resolve44 } from "path";
 
 // ../../node_modules/.pnpm/remeda@2.14.0/node_modules/remeda/dist/chunk-ANXBDSUI.js
 var s = { done: false, hasNext: false };
@@ -205600,10 +205600,10 @@ function purlNPMToString(purl) {
   return `pkg:npm/${purl.namespace ? encodeURIComponent(purl.namespace) + "/" : ""}${purl.name ? encodeURIComponent(purl.name) : ""}${purl.version ? "@" + encodeURI(purl.version) : ""}`;
 }
 function purlPYPIToString(purl) {
-  function canonicalizePyPIName2(name2) {
+  function canonicalizePyPIName(name2) {
     return (name2 ?? "").trim().toLowerCase().replaceAll(/[-_.]+/gi, "-");
   }
-  return `pkg:pypi/${purl.name ? encodeURIComponent(canonicalizePyPIName2(purl.name)) : ""}${purl.version ? "@" + encodeURI(purl.version) : ""}${purl.artifactId ? "?artifact_id=" + encodeURIComponent(purl.artifactId) : purl.artifact_id ? "?artifact_id=" + encodeURIComponent(purl.artifact_id) : ""}`;
+  return `pkg:pypi/${purl.name ? encodeURIComponent(canonicalizePyPIName(purl.name)) : ""}${purl.version ? "@" + encodeURI(purl.version) : ""}${purl.artifactId ? "?artifact_id=" + encodeURIComponent(purl.artifactId) : purl.artifact_id ? "?artifact_id=" + encodeURIComponent(purl.artifact_id) : ""}`;
 }
 function serializePURLQualifiers(qualifiers) {
   return Object.entries(qualifiers).map(
@@ -224579,10 +224579,10 @@ var Ignore = class {
   ignored(p3) {
     const fullpath = p3.fullpath();
     const fullpaths = `${fullpath}/`;
-    const relative23 = p3.relative() || ".";
-    const relatives = `${relative23}/`;
+    const relative22 = p3.relative() || ".";
+    const relatives = `${relative22}/`;
     for (const m4 of this.relative) {
-      if (m4.match(relative23) || m4.match(relatives))
+      if (m4.match(relative22) || m4.match(relatives))
         return true;
     }
     for (const m4 of this.absolute) {
@@ -224593,9 +224593,9 @@ var Ignore = class {
   }
   childrenIgnored(p3) {
     const fullpath = p3.fullpath() + "/";
-    const relative23 = (p3.relative() || ".") + "/";
+    const relative22 = (p3.relative() || ".") + "/";
     for (const m4 of this.relativeChildren) {
-      if (m4.match(relative23))
+      if (m4.match(relative22))
         return true;
     }
     for (const m4 of this.absoluteChildren) {
@@ -229678,77 +229678,12 @@ ${newDependencyLine}`
 };
 
 // ../fixing-management/src/fixing-management/pip/pip-socket-upgrade-manager.ts
-import { dirname as dirname20, relative as relative13, resolve as resolve32 } from "node:path";
 var import_picomatch8 = __toESM(require_picomatch2(), 1);
+import { dirname as dirname20, join as join17, resolve as resolve32 } from "node:path";
 import assert13 from "node:assert";
-import { readFile as readFile25, writeFile as writeFile9 } from "node:fs/promises";
+import { readFile as readFile25 } from "node:fs/promises";
 var import_pip_requirements_js = __toESM(require_dist11(), 1);
 
-// ../utils/src/pip-utils.ts
-import { existsSync as existsSync15 } from "node:fs";
-import { readFile as readFile24 } from "node:fs/promises";
-import { dirname as dirname19, resolve as resolve31 } from "node:path";
-import util4 from "node:util";
-
-// ../utils/src/python-versions-manager.ts
-var import_lodash6 = __toESM(require_lodash(), 1);
-var import_semver5 = __toESM(require_semver2(), 1);
-import { execFileSync } from "child_process";
-import { constants as constants3 } from "fs";
-import { access as access3, readFile as readFile23 } from "fs/promises";
-import { join as join16, resolve as resolve30 } from "path";
-import util3 from "util";
-var { once: once2 } = import_lodash6.default;
-var systemPython = once2(() => {
-  try {
-    return execFileSync("which", ["python3"], { encoding: "utf8" }).trim();
-  } catch {
-    try {
-      return execFileSync("which", ["python"], { encoding: "utf8" }).trim();
-    } catch {
-      throw new Error("Couldn't find python3 or python. Please install Python 3.11 or higher.");
-    }
-  }
-});
-var hasPyenv = once2(async () => !(await execNeverFail2("which pyenv")).error);
-
-// ../utils/src/pip-utils.ts
-var import_picomatch7 = __toESM(require_picomatch2(), 1);
-async function isSetupPySetuptools(file) {
-  const content = await readFile24(file, "utf-8");
-  return content.includes("setup(") && (/^\s*from\s+(?:setuptools|distutils\.core)\s+import\s+.*setup/m.test(content) || /^\s*import\s+(?:setuptools|distutils\.core)/m.test(content));
-}
-async function getPyprojectTomlFilesForLockFile(rootDir, uvLockfile, pyprojectFiles) {
-  const lockDir = dirname19(uvLockfile);
-  const rootTomlFile = pyprojectFiles.find((file) => dirname19(file) === lockDir);
-  if (!rootTomlFile) return void 0;
-  const rootTomlContent = await readFile24(resolve31(rootDir, rootTomlFile), "utf-8");
-  const toml = parseTOML2(rootTomlContent);
-  if (!toml) return void 0;
-  const memberPatterns = [];
-  const excludePatterns = [];
-  const members = getNestedValue(toml, "tool.uv.workspace.members");
-  for (const member of members instanceof TOMLArray ? members : []) {
-    if (member instanceof TOMLScalar && typeof member[value] === "string") {
-      memberPatterns.push(member[value]);
-    }
-  }
-  const excludes = getNestedValue(toml, "tool.uv.workspace.exclude");
-  for (const exclude of excludes instanceof TOMLArray ? excludes : []) {
-    if (exclude instanceof TOMLScalar && typeof exclude[value] === "string") {
-      excludePatterns.push(exclude[value]);
-    }
-  }
-  if (memberPatterns.length === 0) {
-    return { rootTomlFile };
-  }
-  const matcher = (0, import_picomatch7.default)(memberPatterns, {
-    ignore: excludePatterns
-  });
-  const memberTomlFiles = pyprojectFiles.filter((file) => matcher(dirname19(file) || "."));
-  return { rootTomlFile, memberTomlFiles };
-}
-
 // ../utils/src/version-comparison/pip/pip-version-constraint.ts
 var OPERATORS_IN_ORDER3 = ["===", "~=", "!=", "==", "<=", ">=", "<", ">"];
 function parseOperatorAndVersion(comparison) {
@@ -229898,7 +229833,7 @@ function pipVersionSatisfiesConstraints(version4, constraints) {
 }
 
 // ../fixing-management/src/fixing-management/pip/pip-patch-utils.ts
-function createPep508VersionPatches(file, idx, requirement, upgradeVersion, rangeStyle, baseOffset = 0) {
+function createPep508VersionPatches(file, idx, requirement, oldVersion, upgradeVersion, rangeStyle, baseOffset = 0) {
   const patches = [];
   if (rangeStyle === "pin") {
     if (requirement.data.versionSpec?.length) {
@@ -229938,29 +229873,16 @@ function createPep508VersionPatches(file, idx, requirement, upgradeVersion, rang
         text: `==${upgradeVersion}`
       });
     }
-  } else if (requirement.data.versionSpec?.length) {
-    let isLowerBounded = false;
-    for (let i7 = 0; i7 < requirement.data.versionSpec.length; i7++) {
-      const spec = requirement.data.versionSpec[i7];
+  } else {
+    for (const spec of requirement.data.versionSpec ?? []) {
       const operator = spec.data.operator.data;
       if (!spec.data.version) continue;
-      if (operator === ">") {
-        patches.push({
-          file,
-          offset: baseOffset + spec.data.operator.location.startIdx,
-          length: spec.data.operator.location.endIdx - spec.data.operator.location.startIdx,
-          artifacts: [idx],
-          text: ">="
-        });
-        patches.push({
-          file,
-          offset: baseOffset + spec.data.version.location.startIdx,
-          length: spec.data.version.location.endIdx - spec.data.version.location.startIdx,
-          artifacts: [idx],
-          text: upgradeVersion
-        });
-        isLowerBounded = true;
-      } else if (operator === "<" && pipCompareVersions(spec.data.version.data, upgradeVersion) <= 0) {
+      const specVersion = spec.data.version.data;
+      const constraint = `${operator}${specVersion}`;
+      const matcher = parsePEP440Comparison(constraint);
+      if (!matcher) return void 0;
+      if (matcher(upgradeVersion)) continue;
+      if (operator === "<") {
         patches.push({
           file,
           offset: baseOffset + spec.data.operator.location.startIdx,
@@ -229975,21 +229897,21 @@ function createPep508VersionPatches(file, idx, requirement, upgradeVersion, rang
           artifacts: [idx],
           text: upgradeVersion
         });
-      } else if (operator === "<=" && pipCompareVersions(spec.data.version.data, upgradeVersion) < 0) {
+      } else if (operator === "!=") {
         patches.push({
           file,
           offset: baseOffset + spec.data.version.location.startIdx,
           length: spec.data.version.location.endIdx - spec.data.version.location.startIdx,
           artifacts: [idx],
-          text: upgradeVersion
+          text: oldVersion
         });
-      } else if (operator === "!=" && pipCompareVersions(spec.data.version.data, upgradeVersion) === 0) {
+      } else if (operator === ">") {
         patches.push({
           file,
           offset: baseOffset + spec.data.operator.location.startIdx,
           length: spec.data.operator.location.endIdx - spec.data.operator.location.startIdx,
           artifacts: [idx],
-          text: "=="
+          text: ">="
         });
         patches.push({
           file,
@@ -229998,8 +229920,7 @@ function createPep508VersionPatches(file, idx, requirement, upgradeVersion, rang
           artifacts: [idx],
           text: upgradeVersion
         });
-        isLowerBounded = true;
-      } else if (["==", "===", "~=", ">="].includes(operator)) {
+      } else {
         patches.push({
           file,
           offset: baseOffset + spec.data.version.location.startIdx,
@@ -230007,28 +229928,80 @@ function createPep508VersionPatches(file, idx, requirement, upgradeVersion, rang
           artifacts: [idx],
           text: upgradeVersion
         });
-        isLowerBounded = true;
       }
     }
-    if (!isLowerBounded) {
-      patches.push({
-        file,
-        offset: baseOffset + requirement.data.name.location.endIdx,
-        artifacts: [idx],
-        text: `>=${upgradeVersion},`
-      });
-    }
-  } else {
-    patches.push({
-      file,
-      offset: baseOffset + requirement.data.name.location.endIdx,
-      artifacts: [idx],
-      text: `==${upgradeVersion}`
-    });
   }
   return patches;
 }
 
+// ../utils/src/pip-utils.ts
+import { existsSync as existsSync15 } from "node:fs";
+import { readFile as readFile24 } from "node:fs/promises";
+import { dirname as dirname19, resolve as resolve31 } from "node:path";
+import util4 from "node:util";
+
+// ../utils/src/python-versions-manager.ts
+var import_lodash6 = __toESM(require_lodash(), 1);
+var import_semver5 = __toESM(require_semver2(), 1);
+import { execFileSync } from "child_process";
+import { constants as constants3 } from "fs";
+import { access as access3, readFile as readFile23 } from "fs/promises";
+import { join as join16, resolve as resolve30 } from "path";
+import util3 from "util";
+var { once: once2 } = import_lodash6.default;
+var systemPython = once2(() => {
+  try {
+    return execFileSync("which", ["python3"], { encoding: "utf8" }).trim();
+  } catch {
+    try {
+      return execFileSync("which", ["python"], { encoding: "utf8" }).trim();
+    } catch {
+      throw new Error("Couldn't find python3 or python. Please install Python 3.11 or higher.");
+    }
+  }
+});
+var hasPyenv = once2(async () => !(await execNeverFail2("which pyenv")).error);
+
+// ../utils/src/pip-utils.ts
+var import_picomatch7 = __toESM(require_picomatch2(), 1);
+function normalizePackageName(packageName) {
+  return packageName.replace(/[-_.]+/g, "-").toLowerCase();
+}
+async function isSetupPySetuptools(file) {
+  const content = await readFile24(file, "utf-8");
+  return content.includes("setup(") && (/^\s*from\s+(?:setuptools|distutils\.core)\s+import\s+.*setup/m.test(content) || /^\s*import\s+(?:setuptools|distutils\.core)/m.test(content));
+}
+async function getPyprojectTomlFilesForLockFile(rootDir, uvLockfile, pyprojectFiles) {
+  const lockDir = dirname19(uvLockfile);
+  const rootTomlFile = pyprojectFiles.find((file) => dirname19(file) === lockDir);
+  if (!rootTomlFile) return void 0;
+  const rootTomlContent = await readFile24(resolve31(rootDir, rootTomlFile), "utf-8");
+  const toml = parseTOML2(rootTomlContent);
+  if (!toml) return void 0;
+  const memberPatterns = [];
+  const excludePatterns = [];
+  const members = getNestedValue(toml, "tool.uv.workspace.members");
+  for (const member of members instanceof TOMLArray ? members : []) {
+    if (member instanceof TOMLScalar && typeof member[value] === "string") {
+      memberPatterns.push(member[value]);
+    }
+  }
+  const excludes = getNestedValue(toml, "tool.uv.workspace.exclude");
+  for (const exclude of excludes instanceof TOMLArray ? excludes : []) {
+    if (exclude instanceof TOMLScalar && typeof exclude[value] === "string") {
+      excludePatterns.push(exclude[value]);
+    }
+  }
+  if (memberPatterns.length === 0) {
+    return { rootTomlFile };
+  }
+  const matcher = (0, import_picomatch7.default)(memberPatterns, {
+    ignore: excludePatterns
+  });
+  const memberTomlFiles = pyprojectFiles.filter((file) => matcher(dirname19(file) || "."));
+  return { rootTomlFile, memberTomlFiles };
+}
+
 // ../fixing-management/src/fixing-management/pip/pip-socket-upgrade-manager.ts
 var PipSocketUpgradeManager = class {
   constructor(rootDir) {
@@ -230043,87 +230016,81 @@ var PipSocketUpgradeManager = class {
   pyprojectTomlMatcher = (0, import_picomatch8.default)("pyproject.toml", { basename: true });
   uvLockMatcher = (0, import_picomatch8.default)("uv.lock", { basename: true });
   async applySocketArtifactUpgrades(ctxt) {
-    const pyprojectTomlfiles = ctxt.manifestFiles.filter((f6) => this.pyprojectTomlMatcher(f6));
-    const tomlToLock = /* @__PURE__ */ new Map();
-    await asyncForEach(
-      ctxt.manifestFiles.filter((mf) => this.uvLockMatcher(mf)),
-      async (lockFile) => {
-        const rootAndMemberTomlFiles = await getPyprojectTomlFilesForLockFile(
-          this.rootDir,
-          lockFile,
-          pyprojectTomlfiles
-        );
-        if (!rootAndMemberTomlFiles) return;
-        const { rootTomlFile, memberTomlFiles } = rootAndMemberTomlFiles;
-        tomlToLock.set(rootTomlFile, lockFile);
-        for (const tomlFile of memberTomlFiles ?? []) {
-          tomlToLock.set(tomlFile, lockFile);
-        }
-      }
-    );
-    const requirementsTxtPatches = [];
-    const directUvTomlPatches = [];
-    const transitiveUvTomlPatches = [];
+    const pyprojectTomlFiles = ctxt.manifestFiles.filter((f6) => this.pyprojectTomlMatcher(f6));
+    const patches = [];
+    const uvLockFilesToValidate = /* @__PURE__ */ new Set();
+    const lockFileToDepTree = /* @__PURE__ */ new Map();
     for (const [idx, upgradeVersion] of ctxt.upgrades) {
       const artifact = ctxt.artifacts[idx];
       assert13(artifact.name);
       assert13(artifact.version);
-      const directRequirementsTxts = new Set(
-        artifact.manifestFiles?.filter((mf) => this.requirementsTxtMatcher(mf.file)).map((mf) => mf.file) ?? []
-      );
-      const canonicalPackageName = canonicalizePyPIName(artifact.name);
+      const packageName = normalizePackageName(artifact.name);
+      const directRequirementsTxts = /* @__PURE__ */ new Set();
       for (const mf of artifact.manifestFiles ?? []) {
         if (this.requirementsTxtMatcher(mf.file)) {
           if (ctxt.wsFilter && !ctxt.wsFilter(dirname20(mf.file) || ".")) continue;
-          const patches = await this.createRequirementsTxtDirectDependencyPatches(mf, idx, upgradeVersion, ctxt);
-          requirementsTxtPatches.push(...patches);
+          directRequirementsTxts.add(mf.file);
+          patches.push(...await this.createRequirementsTxtDirectDependencyPatches(mf, idx, upgradeVersion, ctxt));
         } else if (this.uvLockMatcher(mf.file)) {
-          const rootAndMemberTomlFiles = await getPyprojectTomlFilesForLockFile(
-            this.rootDir,
-            mf.file,
-            pyprojectTomlfiles
-          );
-          if (!rootAndMemberTomlFiles) {
+          const tomlFiles = await getPyprojectTomlFilesForLockFile(this.rootDir, mf.file, pyprojectTomlFiles);
+          if (!tomlFiles) {
             ctxt.statusUpdater?.({
               status: "error",
               file: mf.file,
               artifacts: [idx],
-              message: "Could not find pyproject.toml files for lock file"
+              message: "No pyproject.toml found for uv.lock"
             });
             continue;
           }
-          const { rootTomlFile, memberTomlFiles } = rootAndMemberTomlFiles;
-          const tomlToDeps = await getDependenciesMapFromUvLock(
-            this.rootDir,
-            mf.file,
-            [rootTomlFile].concat(memberTomlFiles ?? [])
-          );
-          if (!tomlToDeps) {
-            ctxt.statusUpdater?.({
-              status: "error",
-              file: mf.file,
-              artifacts: [idx],
-              message: "Could not compute pyproject.toml files for dependency"
-            });
-            continue;
-          }
-          for (const [tomlFile, { direct, transitive }] of tomlToDeps) {
-            if (ctxt.wsFilter && !ctxt.wsFilter(dirname20(tomlFile) || ".")) continue;
-            if (direct.has(canonicalPackageName)) {
-              directUvTomlPatches.push(
-                ...await this.createPyprojectTomlDirectDependencyPatches(tomlFile, idx, upgradeVersion, ctxt)
-              );
+          const { rootTomlFile, memberTomlFiles } = tomlFiles;
+          let depTree = lockFileToDepTree.get(mf.file);
+          if (!depTree) {
+            depTree = await buildDependencyTreesFromUvLock(this.rootDir, mf.file);
+            if (depTree) {
+              lockFileToDepTree.set(mf.file, depTree);
+            } else {
+              ctxt.statusUpdater?.({
+                status: "error",
+                file: mf.file,
+                artifacts: [idx],
+                message: "Failed to parse uv.lock"
+              });
+              continue;
             }
-            if (transitive.has(canonicalPackageName)) {
-              transitiveUvTomlPatches.push(
-                ...await this.createOverrideDependencyAddPatches(rootTomlFile, idx, upgradeVersion, ctxt)
+          }
+          const lookupKey = getPackageKey(packageName, artifact.version);
+          for (const [projectDir, projectInfo] of depTree) {
+            if (ctxt.wsFilter && !ctxt.wsFilter(projectDir)) continue;
+            const nodesByNameVersion = /* @__PURE__ */ new Map();
+            for (const [, node] of projectInfo.nodes) {
+              const key = getPackageKey(node.packageName, node.version);
+              const existing = nodesByNameVersion.get(key) ?? [];
+              existing.push(node);
+              nodesByNameVersion.set(key, existing);
+            }
+            const matchingNodes = nodesByNameVersion.get(lookupKey) ?? [];
+            const isDirectDep = matchingNodes.some((node) => projectInfo.direct.has(node.nodeKey));
+            if (isDirectDep) {
+              const tomlFile = [rootTomlFile, ...memberTomlFiles ?? []].find(
+                (f6) => (dirname20(f6) || ".") === projectDir
               );
+              if (tomlFile) {
+                patches.push(
+                  ...await this.createPyprojectTomlDirectDependencyPatches(tomlFile, idx, upgradeVersion, ctxt)
+                );
+              } else {
+                ctxt.statusUpdater?.({
+                  status: "error",
+                  file: mf.file,
+                  artifacts: [idx],
+                  message: `No pyproject.toml found for project at ${projectDir}`
+                });
+              }
             }
-            directUvTomlPatches.push(
-              ...await this.createOverrideDependencyUpdatePatches(rootTomlFile, idx, upgradeVersion, ctxt)
-            );
           }
-          continue;
+          patches.push(...await this.createUvLockPatches(mf.file, idx, upgradeVersion, ctxt));
+          uvLockFilesToValidate.add(mf.file);
+          patches.push(...await this.createOverrideDependencyUpdatePatches(rootTomlFile, idx, upgradeVersion, ctxt));
         } else {
           ctxt.statusUpdater?.({
             status: "error",
@@ -230133,83 +230100,257 @@ var PipSocketUpgradeManager = class {
           });
         }
       }
-      const transitiveRequirementsTxts = /* @__PURE__ */ new Set();
       for (const ancestorId of artifact.toplevelAncestors ?? []) {
         const ancestor = ctxt.artifacts.find((a4) => a4.id === ancestorId);
-        if (ancestor) {
-          for (const mf of ancestor.manifestFiles ?? []) {
-            if (this.requirementsTxtMatcher(mf.file) && !directRequirementsTxts.has(mf.file)) {
-              transitiveRequirementsTxts.add(mf.file);
-            }
+        for (const mf of ancestor?.manifestFiles ?? []) {
+          if (ctxt.wsFilter && !ctxt.wsFilter(dirname20(mf.file) || ".")) continue;
+          if (this.requirementsTxtMatcher(mf.file) && !directRequirementsTxts.has(mf.file)) {
+            patches.push(...await this.createRequirementsTxtTransitivePatches(mf.file, idx, upgradeVersion, ctxt));
           }
         }
       }
-      for (const requirementsTxt of transitiveRequirementsTxts) {
-        if (ctxt.wsFilter && !ctxt.wsFilter(dirname20(requirementsTxt) || ".")) continue;
-        const patches = await this.createRequirementsTxtTransitivePatches(requirementsTxt, idx, upgradeVersion, ctxt);
-        requirementsTxtPatches.push(...patches);
-      }
     }
-    const restoreMap = /* @__PURE__ */ new Map();
-    for (const { file, artifacts } of directUvTomlPatches.concat(transitiveUvTomlPatches)) {
-      const path9 = resolve32(this.rootDir, file);
-      if (!restoreMap.has(path9)) {
-        restoreMap.set(path9, {
-          content: await readFile25(path9, "utf-8"),
-          artifacts: []
-        });
-      }
-      const existing = restoreMap.get(path9);
-      for (const idx of artifacts) {
-        if (!existing.artifacts.includes(idx)) {
-          existing.artifacts.push(idx);
+    await applyPatches("PIP", this.rootDir, patches, ctxt);
+    for (const lockFile of uvLockFilesToValidate) {
+      const upgradesForLockFile = [];
+      for (const [idx, upgradeVersion] of ctxt.upgrades) {
+        const artifact = ctxt.artifacts[idx];
+        if (artifact.name && artifact.version) {
+          upgradesForLockFile.push({
+            idx,
+            packageName: normalizePackageName(artifact.name),
+            oldVersion: artifact.version,
+            newVersion: upgradeVersion
+          });
         }
       }
-    }
-    const appliedTemporaryPatches = await applyPatches(
-      "PIP",
-      this.rootDir,
-      directUvTomlPatches.concat(transitiveUvTomlPatches),
-      ctxt
-    );
-    const lockfileToArtifacts = {};
-    for (const { file, artifacts } of appliedTemporaryPatches) {
-      const lockfile2 = tomlToLock.get(file);
-      if (!lockfile2) {
+      await this.removeDuplicateUvLockEntries(lockFile, ctxt);
+      const result = await execNeverFail2(["uv", "lock"], dirname20(resolve32(this.rootDir, lockFile)));
+      if (result.error) {
         ctxt.statusUpdater?.({
           status: "error",
-          file,
-          message: "No lockfile found for pyproject.toml",
-          artifacts: i3(artifacts)
+          file: lockFile,
+          artifacts: [],
+          message: `Failed to finalize lockfile: ${result.error.message ?? "Unknown error"}`
         });
         continue;
       }
-      if (!lockfileToArtifacts[lockfile2]) {
-        lockfileToArtifacts[lockfile2] = [];
-      }
-      lockfileToArtifacts[lockfile2].push(...artifacts);
+      await this.validateUvLockUpgrades(lockFile, upgradesForLockFile, ctxt);
     }
-    await this.refreshLockfiles(lockfileToArtifacts, ctxt, "LOCKFILE_ONLY");
-    await asyncForEach(Array.from(restoreMap), async ([path9, { content, artifacts }]) => {
-      try {
-        await writeFile9(path9, content);
-        ctxt.statusUpdater?.({
-          status: "success",
-          file: relative13(this.rootDir, path9),
-          message: "File restored",
-          artifacts: i3(artifacts)
+  }
+  /**
+   * Remove duplicate [[package]] entries from uv.lock.
+   * Duplicates are identified by name==version @ source.
+   */
+  async removeDuplicateUvLockEntries(lockFile, ctxt) {
+    const fullPath = resolve32(this.rootDir, lockFile);
+    let content;
+    try {
+      content = await readFile25(fullPath, "utf-8");
+    } catch {
+      return;
+    }
+    const toml = parseTOML2(content);
+    if (!toml) return;
+    const packages = toml.package;
+    if (!(packages instanceof TOMLArray)) return;
+    const keyToEntries = /* @__PURE__ */ new Map();
+    for (const pkg of packages) {
+      if (!(pkg instanceof TOMLTable)) continue;
+      const nameScalar = pkg.name;
+      const versionScalar = pkg.version;
+      const source = pkg.source;
+      if (!(nameScalar instanceof TOMLScalar) || !(versionScalar instanceof TOMLScalar)) continue;
+      if (typeof nameScalar[value] !== "string" || typeof versionScalar[value] !== "string") continue;
+      const sourceStr = source instanceof TOMLTable ? parseSourceString(source) : void 0;
+      const key = getPackageKey(nameScalar[value], versionScalar[value], sourceStr);
+      const entries = keyToEntries.get(key) ?? [];
+      entries.push(pkg);
+      keyToEntries.set(key, entries);
+    }
+    const patches = [];
+    for (const [key, entries] of keyToEntries) {
+      if (entries.length <= 1) continue;
+      for (let i7 = 1; i7 < entries.length; i7++) {
+        const entry = entries[i7];
+        const entryRange = entry[range];
+        if (!entryRange) continue;
+        const [start, end2] = entryRange;
+        const contentAfter = content.slice(end2);
+        const lineEnd = end2 + (contentAfter.startsWith("\n") ? 1 : 0);
+        patches.push({
+          file: lockFile,
+          offset: start,
+          length: lineEnd - start,
+          text: "",
+          artifacts: []
         });
-      } catch (e) {
         ctxt.statusUpdater?.({
-          status: "error",
-          file: relative13(this.rootDir, path9),
-          message: "Could not restore file",
-          artifacts: i3(artifacts)
+          status: "warn",
+          file: lockFile,
+          artifacts: [],
+          message: `Removing duplicate entry: ${key}`
         });
       }
-    });
-    await applyPatches("RUST", this.rootDir, requirementsTxtPatches.concat(directUvTomlPatches), ctxt);
-    await this.refreshLockfiles(lockfileToArtifacts, ctxt, "FULL_INSTALL");
+    }
+    if (patches.length > 0) {
+      await applyPatches("PIP", this.rootDir, patches, ctxt);
+    }
+  }
+  /**
+   * Validate that upgrades were successful by checking the lockfile for old versions.
+   */
+  async validateUvLockUpgrades(lockFile, upgrades, ctxt) {
+    const fullPath = resolve32(this.rootDir, lockFile);
+    let content;
+    try {
+      content = await readFile25(fullPath, "utf-8");
+    } catch {
+      return;
+    }
+    const toml = parseTOML2(content);
+    if (!toml) return;
+    const packages = toml.package;
+    if (!(packages instanceof TOMLArray)) return;
+    for (const upgrade of upgrades) {
+      for (const pkg of packages) {
+        if (!(pkg instanceof TOMLTable)) continue;
+        const nameScalar = pkg.name;
+        const versionScalar = pkg.version;
+        if (!(nameScalar instanceof TOMLScalar) || !(versionScalar instanceof TOMLScalar)) continue;
+        if (typeof nameScalar[value] !== "string" || typeof versionScalar[value] !== "string") continue;
+        const name2 = normalizePackageName(nameScalar[value]);
+        const version4 = versionScalar[value];
+        if (name2 === upgrade.packageName && version4 === upgrade.oldVersion) {
+          const source = pkg.source;
+          const sourceStr = source instanceof TOMLTable ? parseSourceString(source) : void 0;
+          const key = getPackageKey(name2, version4, sourceStr);
+          ctxt.statusUpdater?.({
+            status: "error",
+            file: lockFile,
+            artifacts: [upgrade.idx],
+            message: `Upgrade failed: ${key} still present in lockfile`
+          });
+        }
+      }
+    }
+  }
+  /**
+   * Create patches for uv.lock file.
+   * Updates [[package]] entries and inline dependency references.
+   */
+  async createUvLockPatches(lockFile, idx, upgradeVersion, ctxt) {
+    const artifact = ctxt.artifacts[idx];
+    assert13(artifact.name);
+    assert13(artifact.version);
+    const fullPath = resolve32(this.rootDir, lockFile);
+    const content = await readFile25(fullPath, "utf-8");
+    const packageName = normalizePackageName(artifact.name);
+    const patches = [];
+    const toml = parseTOML2(content);
+    if (!toml) {
+      ctxt.statusUpdater?.({ status: "error", file: lockFile, artifacts: [idx], message: "Failed to parse uv.lock" });
+      return patches;
+    }
+    const packages = toml.package;
+    if (!(packages instanceof TOMLArray)) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file: lockFile,
+        artifacts: [idx],
+        message: "No packages found in uv.lock"
+      });
+      return patches;
+    }
+    const pkgEntry = packages.find(
+      (pkg) => pkg instanceof TOMLTable && pkg.name instanceof TOMLScalar && pkg.version instanceof TOMLScalar && typeof pkg.name[value] === "string" && typeof pkg.version[value] === "string" && normalizePackageName(pkg.name[value]) === packageName && pkg.version[value] === artifact.version
+    );
+    if (!(pkgEntry instanceof TOMLTable)) {
+      ctxt.statusUpdater?.({
+        status: "error",
+        file: lockFile,
+        artifacts: [idx],
+        message: `Package ${artifact.name}@${artifact.version} not found in lockfile`
+      });
+      return patches;
+    }
+    const versionScalar = pkgEntry.version;
+    if (versionScalar instanceof TOMLScalar) {
+      const [start, end2] = versionScalar[range];
+      patches.push({
+        file: lockFile,
+        offset: start,
+        length: end2 - start,
+        text: `"${upgradeVersion}"`,
+        artifacts: [idx]
+      });
+    }
+    const sdist = pkgEntry.sdist;
+    if (sdist instanceof TOMLTable) {
+      const [start, end2] = sdist[range];
+      const contentBefore = content.slice(0, start);
+      const lineStart = contentBefore.lastIndexOf("\n") + 1;
+      const contentAfter = content.slice(end2);
+      const lineEnd = end2 + (contentAfter.startsWith("\n") ? 1 : 0);
+      patches.push({
+        file: lockFile,
+        offset: lineStart,
+        length: lineEnd - lineStart,
+        text: "",
+        artifacts: [idx]
+      });
+    }
+    const wheels = pkgEntry.wheels;
+    if (wheels instanceof TOMLArray) {
+      const [start, end2] = wheels[range];
+      const contentBefore = content.slice(0, start);
+      const lineStart = contentBefore.lastIndexOf("\n") + 1;
+      const contentAfter = content.slice(end2);
+      const lineEnd = end2 + (contentAfter.startsWith("\n") ? 1 : 0);
+      patches.push({
+        file: lockFile,
+        offset: lineStart,
+        length: lineEnd - lineStart,
+        text: "",
+        artifacts: [idx]
+      });
+    }
+    const dependencies = pkgEntry.dependencies;
+    if (dependencies instanceof TOMLArray) {
+      const [start, end2] = dependencies[range];
+      const contentBefore = content.slice(0, start);
+      const lineStart = contentBefore.lastIndexOf("\n") + 1;
+      const contentAfter = content.slice(end2);
+      const lineEnd = end2 + (contentAfter.startsWith("\n") ? 1 : 0);
+      patches.push({
+        file: lockFile,
+        offset: lineStart,
+        length: lineEnd - lineStart,
+        text: "",
+        artifacts: [idx]
+      });
+    }
+    for (const pkg of packages) {
+      if (!(pkg instanceof TOMLTable)) continue;
+      const deps = pkg.dependencies;
+      if (!(deps instanceof TOMLArray)) continue;
+      for (const dep of deps) {
+        if (!(dep instanceof TOMLTable)) continue;
+        const depName = dep.name;
+        const depVersion = dep.version;
+        if (depName instanceof TOMLScalar && depVersion instanceof TOMLScalar && typeof depName[value] === "string" && typeof depVersion[value] === "string" && normalizePackageName(depName[value]) === packageName && depVersion[value] === artifact.version) {
+          const [start, end2] = depVersion[range];
+          patches.push({
+            file: lockFile,
+            offset: start,
+            length: end2 - start,
+            text: `"${upgradeVersion}"`,
+            artifacts: [idx]
+          });
+        }
+      }
+    }
+    return patches;
   }
   /**
    * Handle requirements.txt file updates
@@ -230236,7 +230377,24 @@ var PipSocketUpgradeManager = class {
       const requirements = (0, import_pip_requirements_js.parsePipRequirementsFileLoosely)(content, { includeLocations: true });
       const foundRequirement = requirements.filter((req) => req.data.type === "ProjectName").find((req) => refStart <= req.location.startIdx && req.location.endIdx <= refEnd);
       if (foundRequirement) {
-        patches.push(...createPep508VersionPatches(ref.file, idx, foundRequirement, upgradeVersion, ctxt.rangeStyle));
+        const reqPatches = createPep508VersionPatches(
+          ref.file,
+          idx,
+          foundRequirement,
+          artifact.version,
+          upgradeVersion,
+          ctxt.rangeStyle
+        );
+        if (reqPatches === void 0) {
+          ctxt.statusUpdater?.({
+            status: "error",
+            file: ref.file,
+            artifacts: [idx],
+            message: `Failed to parse version constraint for ${artifact.name}`
+          });
+        } else {
+          patches.push(...reqPatches);
+        }
       } else {
         ctxt.statusUpdater?.({
           status: "error",
@@ -230325,18 +230483,27 @@ ${newText}
           const depSpec = element[value];
           const parsed = (0, import_pip_requirements_js.parsePipRequirementsLineLoosely)(depSpec, { includeLocations: true });
           if (parsed && parsed.data.type === "ProjectName") {
-            if (canonicalizePyPIName(parsed.data.name.data) === canonicalizePyPIName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
-              patches.push(
-                ...createPep508VersionPatches(
-                  tomlFile,
-                  idx,
-                  parsed,
-                  upgradeVersion,
-                  ctxt.rangeStyle,
-                  element[range][0] + 1
-                  // Skip opening quote
-                )
+            if (normalizePackageName(parsed.data.name.data) === normalizePackageName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
+              const depPatches = createPep508VersionPatches(
+                tomlFile,
+                idx,
+                parsed,
+                artifact.version,
+                upgradeVersion,
+                ctxt.rangeStyle,
+                element[range][0] + 1
+                // Skip opening quote
               );
+              if (depPatches === void 0) {
+                ctxt.statusUpdater?.({
+                  status: "error",
+                  file: tomlFile,
+                  artifacts: [idx],
+                  message: `Failed to parse version constraint for ${artifact.name}`
+                });
+              } else {
+                patches.push(...depPatches);
+              }
             }
           }
         }
@@ -230352,18 +230519,27 @@ ${newText}
               const depSpec = element[value];
               const parsed = (0, import_pip_requirements_js.parsePipRequirementsLineLoosely)(depSpec, { includeLocations: true });
               if (parsed && parsed.data.type === "ProjectName") {
-                if (canonicalizePyPIName(parsed.data.name.data) === canonicalizePyPIName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
-                  patches.push(
-                    ...createPep508VersionPatches(
-                      tomlFile,
-                      idx,
-                      parsed,
-                      upgradeVersion,
-                      ctxt.rangeStyle,
-                      element[range][0] + 1
-                      // Skip opening quote
-                    )
+                if (normalizePackageName(parsed.data.name.data) === normalizePackageName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
+                  const depPatches = createPep508VersionPatches(
+                    tomlFile,
+                    idx,
+                    parsed,
+                    artifact.version,
+                    upgradeVersion,
+                    ctxt.rangeStyle,
+                    element[range][0] + 1
+                    // Skip opening quote
                   );
+                  if (depPatches === void 0) {
+                    ctxt.statusUpdater?.({
+                      status: "error",
+                      file: tomlFile,
+                      artifacts: [idx],
+                      message: `Failed to parse version constraint for ${artifact.name}`
+                    });
+                  } else {
+                    patches.push(...depPatches);
+                  }
                 }
               }
             }
@@ -230381,97 +230557,41 @@ ${newText}
               const depSpec = element[value];
               const parsed = (0, import_pip_requirements_js.parsePipRequirementsLineLoosely)(depSpec, { includeLocations: true });
               if (parsed && parsed.data.type === "ProjectName") {
-                if (canonicalizePyPIName(parsed.data.name.data) === canonicalizePyPIName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
-                  patches.push(
-                    ...createPep508VersionPatches(
-                      tomlFile,
-                      idx,
-                      parsed,
-                      upgradeVersion,
-                      ctxt.rangeStyle,
-                      element[range][0] + 1
-                      // Skip opening quote
-                    )
-                  );
-                }
-              }
-            }
-          }
-        }
-      }
-    }
-    if (patches.length === 0) {
-      ctxt.statusUpdater?.({
-        status: "error",
-        file: tomlFile,
-        artifacts: [idx],
-        message: `Could not find ${artifact.name} version ${artifact.version}`
-      });
-    }
-    return patches;
-  }
-  /**
-   * Update existing tool.uv.override-dependencies entries in pyproject.toml
-   * Only returns patches for existing entries - does not create new ones
-   * These patches should be kept (re-applied after restoration)
-   */
-  async createOverrideDependencyUpdatePatches(pyprojectToml, idx, upgradeVersion, ctxt) {
-    const artifact = ctxt.artifacts[idx];
-    assert13(artifact.name);
-    assert13(artifact.version);
-    const patches = [];
-    try {
-      const content = await readFile25(resolve32(this.rootDir, pyprojectToml), "utf-8");
-      const toml = parseTOML2(content);
-      if (!toml) {
-        ctxt.statusUpdater?.({
-          status: "error",
-          file: pyprojectToml,
-          artifacts: [idx],
-          message: "Failed to parse TOML file"
-        });
-        return patches;
-      }
-      const overrideDeps = getNestedValue(toml, "tool.uv.override-dependencies");
-      if (overrideDeps instanceof TOMLArray) {
-        for (const overrideDep of overrideDeps) {
-          if (overrideDep instanceof TOMLScalar && typeof overrideDep[value] === "string") {
-            const overrideSpec = overrideDep[value];
-            const parsed = (0, import_pip_requirements_js.parsePipRequirementsLineLoosely)(overrideSpec, { includeLocations: true });
-            if (parsed && parsed.data.type === "ProjectName") {
-              if (canonicalizePyPIName(parsed.data.name.data) === canonicalizePyPIName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
-                patches.push(
-                  ...createPep508VersionPatches(
-                    pyprojectToml,
+                if (normalizePackageName(parsed.data.name.data) === normalizePackageName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
+                  const depPatches = createPep508VersionPatches(
+                    tomlFile,
                     idx,
                     parsed,
+                    artifact.version,
                     upgradeVersion,
                     ctxt.rangeStyle,
-                    overrideDep[range][0] + 1
+                    element[range][0] + 1
                     // Skip opening quote
-                  )
-                );
+                  );
+                  if (depPatches === void 0) {
+                    ctxt.statusUpdater?.({
+                      status: "error",
+                      file: tomlFile,
+                      artifacts: [idx],
+                      message: `Failed to parse version constraint for ${artifact.name}`
+                    });
+                  } else {
+                    patches.push(...depPatches);
+                  }
+                }
               }
             }
           }
         }
       }
-    } catch (e) {
-      ctxt.statusUpdater?.({
-        status: "error",
-        file: pyprojectToml,
-        artifacts: [idx],
-        message: `Error updating uv override-dependency: ${e.message ?? "Unknown error"}`
-      });
     }
     return patches;
   }
   /**
-   * Add new tool.uv.override-dependencies entries in pyproject.toml
-   * Only creates new entries - does not update existing ones
-   * These patches are temporary and should be rolled back after lockfile update
+   * Update existing tool.uv.override-dependencies entries in pyproject.toml.
+   * Only patches existing entries - does not create new ones.
    */
-  async createOverrideDependencyAddPatches(pyprojectToml, idx, upgradeVersion, ctxt) {
+  async createOverrideDependencyUpdatePatches(pyprojectToml, idx, upgradeVersion, ctxt) {
     const artifact = ctxt.artifacts[idx];
     assert13(artifact.name);
     assert13(artifact.version);
@@ -230480,15 +230600,8 @@ ${newText}
       const content = await readFile25(resolve32(this.rootDir, pyprojectToml), "utf-8");
       const toml = parseTOML2(content);
       if (!toml) {
-        ctxt.statusUpdater?.({
-          status: "error",
-          file: pyprojectToml,
-          artifacts: [idx],
-          message: "Failed to parse TOML file"
-        });
         return patches;
       }
-      const toolUv = getNestedValue(toml, "tool.uv");
       const overrideDeps = getNestedValue(toml, "tool.uv.override-dependencies");
       if (overrideDeps instanceof TOMLArray) {
         for (const overrideDep of overrideDeps) {
@@ -230496,139 +230609,162 @@ ${newText}
             const overrideSpec = overrideDep[value];
             const parsed = (0, import_pip_requirements_js.parsePipRequirementsLineLoosely)(overrideSpec, { includeLocations: true });
             if (parsed && parsed.data.type === "ProjectName") {
-              if (canonicalizePyPIName(parsed.data.name.data) === canonicalizePyPIName(artifact.name)) {
-                return patches;
+              if (normalizePackageName(parsed.data.name.data) === normalizePackageName(artifact.name) && satisfiestVersionSpecs(artifact.version, parsed.data.versionSpec)) {
+                const overridePatches = createPep508VersionPatches(
+                  pyprojectToml,
+                  idx,
+                  parsed,
+                  artifact.version,
+                  upgradeVersion,
+                  ctxt.rangeStyle,
+                  overrideDep[range][0] + 1
+                  // Skip opening quote
+                );
+                if (overridePatches === void 0) {
+                  ctxt.statusUpdater?.({
+                    status: "error",
+                    file: pyprojectToml,
+                    artifacts: [idx],
+                    message: `Failed to parse version constraint for ${artifact.name}`
+                  });
+                } else {
+                  patches.push(...overridePatches);
+                }
               }
             }
           }
         }
-        const lastElement = overrideDeps[overrideDeps.length - 1];
-        const insertPosition = lastElement ? lastElement[range][1] : overrideDeps[range][0] + 1;
-        patches.push({
-          file: pyprojectToml,
-          offset: insertPosition,
-          artifacts: [idx],
-          text: overrideDeps.length > 0 ? `,
-${" ".repeat(4)}"${artifact.name}==${upgradeVersion}"` : `
-${" ".repeat(4)}"${artifact.name}==${upgradeVersion}"`
-        });
-      } else if (toolUv instanceof TOMLTable) {
-        patches.push({
-          file: pyprojectToml,
-          offset: toolUv[range][1],
-          artifacts: [idx],
-          text: `
-override-dependencies = [
-${" ".repeat(4)}"${artifact.name}==${upgradeVersion}",
-]`
-        });
-      } else {
-        patches.push({
-          file: pyprojectToml,
-          offset: toml[range][1],
-          artifacts: [idx],
-          text: `
-
-[tool.uv]
-override-dependencies = [
-${" ".repeat(4)}"${artifact.name}==${upgradeVersion}",
-]`
-        });
       }
     } catch (e) {
       ctxt.statusUpdater?.({
         status: "error",
         file: pyprojectToml,
         artifacts: [idx],
-        message: `Error adding uv override-dependency: ${e.message ?? "Unknown error"}`
+        message: `Error updating override-dependencies: ${e.message ?? "Unknown error"}`
       });
     }
     return patches;
   }
-  async refreshLockfiles(lockfileToArtifacts, ctxt, _mode2) {
-    await asyncForEach(Object.entries(lockfileToArtifacts), async ([lockfile2, artifacts]) => {
-      const lockfileDir = dirname20(resolve32(this.rootDir, lockfile2));
-      let result;
-      if (this.uvLockMatcher(lockfile2)) {
-        result = await execNeverFail2(["uv", "lock"], lockfileDir);
-      } else {
-        ctxt.statusUpdater?.({
-          status: "error",
-          file: lockfile2,
-          artifacts: i3(artifacts),
-          message: "Unknown lockfile type"
-        });
-        return;
-      }
-      if (!result.error) {
-        ctxt.statusUpdater?.({
-          status: "success",
-          file: lockfile2,
-          message: "Lockfile updated",
-          artifacts: i3(artifacts)
-        });
-      } else {
-        logger.debug("update lockfile stdout", result.stdout);
-        logger.debug("update lockfile stderr", result.stderr);
-        ctxt.statusUpdater?.({
-          status: "error",
-          file: lockfile2,
-          artifacts: i3(artifacts),
-          message: `Failed to update lockfile: ${result.error?.message ?? "Unknown error"}`
-        });
-      }
-    });
-  }
 };
-function canonicalizePyPIName(name2) {
-  return (name2 ?? "").trim().toLowerCase().replaceAll(/[-_.]+/gi, "-");
+function getPackageKey(name2, version4, source) {
+  const normalizedName = normalizePackageName(name2.trim());
+  if (!version4) return normalizedName;
+  const trimmedVersion = version4.trim();
+  if (!source) return `${normalizedName}==${trimmedVersion}`;
+  return `${normalizedName}==${trimmedVersion} @ ${source.trim()}`;
 }
-async function getDependenciesMapFromUvLock(rootDir, lockFile, pyprojectTomlFilesForLockFile) {
-  const result = /* @__PURE__ */ new Map();
-  const lockToml = parseTOML2(await readFile25(resolve32(rootDir, lockFile), "utf-8"));
-  if (!lockToml) return result;
-  const children2 = /* @__PURE__ */ new Map();
+function parseSourceString(source) {
+  for (const [key, val2] of Object.entries(source)) {
+    if (val2 instanceof TOMLScalar && typeof val2[value] === "string") {
+      return `${key.trim()}+${val2[value].trim()}`;
+    }
+  }
+  return void 0;
+}
+async function buildDependencyTreesFromUvLock(rootDir, uvLockFile) {
+  let lockToml;
+  try {
+    const lockContent = await readFile25(resolve32(rootDir, uvLockFile), "utf-8");
+    lockToml = parseTOML2(lockContent);
+  } catch {
+    return void 0;
+  }
+  if (!lockToml) return void 0;
   const packages = lockToml.package;
-  if (!(packages instanceof TOMLArray)) return result;
+  if (!(packages instanceof TOMLArray)) return void 0;
+  const nodes = /* @__PURE__ */ new Map();
+  const nameToFullKeys = /* @__PURE__ */ new Map();
+  const nameVersionToFullKeys = /* @__PURE__ */ new Map();
+  const localProjectNodeKeys = /* @__PURE__ */ new Map();
   for (const pkg of packages) {
     if (!(pkg instanceof TOMLTable)) continue;
-    if (pkg.name instanceof TOMLScalar && typeof pkg.name[value] === "string") {
-      const packageName = canonicalizePyPIName(pkg.name[value]);
-      if (!children2.has(packageName)) {
-        children2.set(packageName, /* @__PURE__ */ new Set());
+    const nameScalar = pkg.name;
+    const versionScalar = pkg.version;
+    const source = pkg.source;
+    if (!(nameScalar instanceof TOMLScalar) || !(versionScalar instanceof TOMLScalar)) continue;
+    if (typeof nameScalar[value] !== "string" || typeof versionScalar[value] !== "string") continue;
+    const pkgName = nameScalar[value];
+    const pkgVersion = versionScalar[value];
+    const pkgSource = source instanceof TOMLTable ? parseSourceString(source) : void 0;
+    const nodeKey = getPackageKey(pkgName, pkgVersion, pkgSource);
+    const normalizedName = normalizePackageName(pkgName);
+    const node = {
+      packageName: normalizedName,
+      version: pkgVersion,
+      nodeKey,
+      deps: /* @__PURE__ */ new Set()
+      // Populated in pass 2
+    };
+    if (!nodes.has(nodeKey)) {
+      nodes.set(nodeKey, node);
+    }
+    const fullKeys = nameToFullKeys.get(normalizedName) ?? [];
+    fullKeys.push(nodeKey);
+    nameToFullKeys.set(normalizedName, fullKeys);
+    const nameVersionKey = `${normalizedName}==${pkgVersion}`;
+    const nameVersionFullKeys = nameVersionToFullKeys.get(nameVersionKey) ?? [];
+    nameVersionFullKeys.push(nodeKey);
+    nameVersionToFullKeys.set(nameVersionKey, nameVersionFullKeys);
+    if (source instanceof TOMLTable) {
+      const virtualPath = source.virtual;
+      const editablePath = source.editable;
+      if (virtualPath instanceof TOMLScalar && typeof virtualPath[value] === "string") {
+        localProjectNodeKeys.set(join17(dirname20(uvLockFile), virtualPath[value]), nodeKey);
+      } else if (editablePath instanceof TOMLScalar && typeof editablePath[value] === "string") {
+        localProjectNodeKeys.set(join17(dirname20(uvLockFile), editablePath[value]), nodeKey);
       }
-      const dependencies = children2.get(packageName);
-      if (pkg.dependencies instanceof TOMLArray) {
-        for (const dep of pkg.dependencies) {
-          if (dep instanceof TOMLTable && dep.name instanceof TOMLScalar && typeof dep.name[value] === "string") {
-            dependencies.add(canonicalizePyPIName(dep.name[value]));
-          }
-        }
+    }
+  }
+  for (const pkg of packages) {
+    if (!(pkg instanceof TOMLTable)) continue;
+    const nameScalar = pkg.name;
+    const versionScalar = pkg.version;
+    const source = pkg.source;
+    if (!(nameScalar instanceof TOMLScalar) || !(versionScalar instanceof TOMLScalar)) continue;
+    if (typeof nameScalar[value] !== "string" || typeof versionScalar[value] !== "string") continue;
+    const pkgSource = source instanceof TOMLTable ? parseSourceString(source) : void 0;
+    const nodeKey = getPackageKey(nameScalar[value], versionScalar[value], pkgSource);
+    const node = nodes.get(nodeKey);
+    if (!node) continue;
+    const depsArray = pkg.dependencies;
+    if (!(depsArray instanceof TOMLArray)) continue;
+    for (const dep of depsArray) {
+      if (!(dep instanceof TOMLTable)) continue;
+      const depNameScalar = dep.name;
+      if (!(depNameScalar instanceof TOMLScalar) || typeof depNameScalar[value] !== "string") continue;
+      const depName = depNameScalar[value];
+      const depVersionScalar = dep.version;
+      const depSource = dep.source;
+      let resolvedKeys;
+      if (depVersionScalar instanceof TOMLScalar && typeof depVersionScalar[value] === "string" && depSource instanceof TOMLTable) {
+        const depSourceStr = parseSourceString(depSource);
+        resolvedKeys = [getPackageKey(depName, depVersionScalar[value], depSourceStr)];
+      } else if (depVersionScalar instanceof TOMLScalar && typeof depVersionScalar[value] === "string") {
+        const nameVersionKey = `${normalizePackageName(depName)}==${depVersionScalar[value]}`;
+        resolvedKeys = nameVersionToFullKeys.get(nameVersionKey) ?? [];
+      } else {
+        resolvedKeys = nameToFullKeys.get(normalizePackageName(depName)) ?? [];
+      }
+      for (const key of resolvedKeys) {
+        node.deps.add(key);
       }
     }
   }
-  const tomlFileToName = new Map(
-    await asyncFilterMap(pyprojectTomlFilesForLockFile, async (tomlFile) => {
-      const toml = parseTOML2(await readFile25(resolve32(rootDir, tomlFile), "utf-8"));
-      return toml && toml.project instanceof TOMLTable && toml.project.name instanceof TOMLScalar && typeof toml.project.name[value] === "string" ? [tomlFile, toml.project.name[value]] : void 0;
-    })
-  );
-  for (const [tomlFile, projectPackageName] of tomlFileToName) {
-    const direct = children2.get(projectPackageName);
-    if (!direct) continue;
-    const transitive = /* @__PURE__ */ new Set();
-    const visited = new Set(tomlFileToName.values());
-    const worklist = Array.from(direct);
-    while (worklist.length) {
-      const item = worklist.pop();
-      if (visited.has(item)) continue;
-      visited.add(item);
-      for (const dep of children2.get(item) ?? []) {
-        worklist.push(dep);
-        transitive.add(dep);
-      }
-    }
-    result.set(tomlFile, { direct, transitive });
+  const localProjectNodeKeySet = new Set(localProjectNodeKeys.values());
+  const result = /* @__PURE__ */ new Map();
+  for (const [projectDir, projectNodeKey] of localProjectNodeKeys.entries()) {
+    const projectNode = nodes.get(projectNodeKey);
+    if (!projectNode) {
+      result.set(projectDir, { direct: /* @__PURE__ */ new Set(), nodes });
+      continue;
+    }
+    const resolvedDirect = /* @__PURE__ */ new Set();
+    for (const depKey of projectNode.deps) {
+      if (!localProjectNodeKeySet.has(depKey)) {
+        resolvedDirect.add(depKey);
+      }
+    }
+    result.set(projectDir, { direct: resolvedDirect, nodes });
   }
   return result;
 }
@@ -230640,14 +230776,14 @@ function satisfiestVersionSpecs(version4, versionSpec) {
 }
 
 // ../fixing-management/src/fixing-management/rubygems/rubygems-socket-upgrade-manager.ts
-import { dirname as dirname22, relative as relative15, resolve as resolve34 } from "node:path";
+import { dirname as dirname22, relative as relative14, resolve as resolve34 } from "node:path";
 var import_picomatch9 = __toESM(require_picomatch2(), 1);
 import assert14 from "node:assert";
 
 // ../fixing-management/src/fixing-management/rubygems/gemfile-utils.ts
 var import_good_enough_parser4 = __toESM(require_cjs(), 1);
 init_ruby_lang();
-import { resolve as resolve33, dirname as dirname21, relative as relative14 } from "node:path";
+import { resolve as resolve33, dirname as dirname21, relative as relative13 } from "node:path";
 import { existsSync as existsSync16, readFileSync as readFileSync4, readdirSync as readdirSync4 } from "node:fs";
 init_gemspec_utils();
 var booleanQuery2 = import_good_enough_parser4.query.alt(
@@ -230756,13 +230892,13 @@ var evalGemfileQuery = import_good_enough_parser4.query.sym("eval_gemfile").join
   ctx.exprEndOffset = void 0;
   if (ctx.depth > 50) {
     logger.warn(
-      `Recursion limit hit while evaluating gemfile: ${relative14(ctx.gemfile.rootDir, resolve33(ctx.gemfile.rootDir, ctx.gemfile.file))}`
+      `Recursion limit hit while evaluating gemfile: ${relative13(ctx.gemfile.rootDir, resolve33(ctx.gemfile.rootDir, ctx.gemfile.file))}`
     );
     return ctx;
   }
   if (pathEvaluated === void 0) return ctx;
   const rootDir = ctx.gemfile.rootDir;
-  const file = relative14(rootDir, resolve33(rootDir, dirname21(ctx.gemfile.file), pathEvaluated));
+  const file = relative13(rootDir, resolve33(rootDir, dirname21(ctx.gemfile.file), pathEvaluated));
   if (!existsSync16(resolve33(rootDir, file))) return ctx;
   const sourceText = readFileSync4(resolve33(rootDir, file), "utf-8");
   const parser2 = import_good_enough_parser4.lang.createLang(lang3);
@@ -230815,7 +230951,7 @@ var gemspecQuery = import_good_enough_parser4.query.sym("gemspec").opt(
 ).handler((ctx) => {
   if (ctx.depth > 50) {
     logger.warn(
-      `Recursion limit hit while evaluating gemspec: ${relative14(ctx.gemfile.rootDir, resolve33(ctx.gemfile.rootDir, ctx.gemfile.file))}`
+      `Recursion limit hit while evaluating gemspec: ${relative13(ctx.gemfile.rootDir, resolve33(ctx.gemfile.rootDir, ctx.gemfile.file))}`
     );
     ctx.currentGem = void 0;
     return ctx;
@@ -230854,7 +230990,7 @@ var gemspecQuery = import_good_enough_parser4.query.sym("gemspec").opt(
   if (gemspecFiles.length === 0) return ctx;
   const gemspecFile = gemspecFiles[0];
   const gemspecFullPath = resolve33(searchDir, gemspecFile);
-  const gemspecRelativePath = relative14(rootDir, gemspecFullPath);
+  const gemspecRelativePath = relative13(rootDir, gemspecFullPath);
   try {
     const sourceText = readFileSync4(gemspecFullPath, "utf-8");
     const gemspec = parseGemspec(rootDir, gemspecRelativePath, sourceText);
@@ -230999,7 +231135,7 @@ function parseGemfileLock(content) {
 }
 
 // ../fixing-management/src/fixing-management/rubygems/rubygems-socket-upgrade-manager.ts
-import { readFile as readFile26, writeFile as writeFile10 } from "node:fs/promises";
+import { readFile as readFile26, writeFile as writeFile9 } from "node:fs/promises";
 
 // ../fixing-management/src/fixing-management/rubygems/rubygems-patch-utils.ts
 function createRubygemVersionPatches(gem, idx, upgradeVersion, rangeStyle, statusUpdater) {
@@ -231230,7 +231366,7 @@ var RubygemsSocketUpgradeManager = class {
             });
             continue;
           }
-          const gemfileName = relative15(this.rootDir, resolve34(this.rootDir, dirname22(mf.file), "Gemfile"));
+          const gemfileName = relative14(this.rootDir, resolve34(this.rootDir, dirname22(mf.file), "Gemfile"));
           gemfileToLockfile.set(gemfileName, mf.file);
           if (pathGems.length > 0) {
             const { gemspecPatches, gemfilePatches } = await this.handleGemspecDependency(
@@ -231306,17 +231442,17 @@ var RubygemsSocketUpgradeManager = class {
     });
     await asyncForEach(Array.from(restoreMap), async ([path9, { content, artifacts }]) => {
       try {
-        await writeFile10(path9, content);
+        await writeFile9(path9, content);
         ctxt.statusUpdater?.({
           status: "success",
-          file: relative15(this.rootDir, path9),
+          file: relative14(this.rootDir, path9),
           message: "File restored",
           artifacts: i3(artifacts)
         });
       } catch (e) {
         ctxt.statusUpdater?.({
           status: "error",
-          file: relative15(this.rootDir, path9),
+          file: relative14(this.rootDir, path9),
           message: "Could not restore file",
           artifacts: i3(artifacts)
         });
@@ -231573,7 +231709,7 @@ import { resolve as resolve36 } from "path";
 
 // ../utils/dist/constants.js
 var import_lodash8 = __toESM(require_lodash(), 1);
-import { dirname as dirname23, join as join18 } from "node:path";
+import { dirname as dirname23, join as join19 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // ../utils/dist/file-utils.js
@@ -231581,7 +231717,7 @@ var import_lodash7 = __toESM(require_lodash(), 1);
 var import_micromatch2 = __toESM(require_micromatch(), 1);
 import { existsSync as existsSync17 } from "fs";
 import { access as access4, cp as cp3, readdir as readdir4, stat as stat4 } from "fs/promises";
-import { basename as basename9, join as join17, relative as relative16, resolve as resolve35 } from "path";
+import { basename as basename9, join as join18, relative as relative15, resolve as resolve35 } from "path";
 var { uniq: uniq2 } = import_lodash7.default;
 var { isMatch: isMatch2 } = import_micromatch2.default;
 function* parents2(dir) {
@@ -231610,10 +231746,10 @@ var COANA_ROOT = once3(() => {
   return coanaRoot;
 });
 var REPOS_PATH = once3(() => {
-  return process.env.REPOS_PATH ?? join18(COANA_ROOT(), "repos");
+  return process.env.REPOS_PATH ?? join19(COANA_ROOT(), "repos");
 });
 var COANA_REPOS_PATH = once3(() => {
-  return process.env.COANA_REPOS_PATH ?? join18(REPOS_PATH(), "coana-tech");
+  return process.env.COANA_REPOS_PATH ?? join19(REPOS_PATH(), "coana-tech");
 });
 
 // ../docker-management/src/constants.ts
@@ -231627,32 +231763,32 @@ var getImageTag = () => {
 };
 
 // ../docker-management/src/docker-spec.ts
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 var builderSpecs = [
   {
     name: "maven-builder",
-    file: join19("builders", "maven", "Dockerfile"),
+    file: join20("builders", "maven", "Dockerfile"),
     isBuilder: true
   },
   {
     name: "python-builder",
-    file: join19("builders", "python", "Dockerfile"),
+    file: join20("builders", "python", "Dockerfile"),
     isBuilder: true
   },
   {
     name: "go-builder",
-    file: join19("builders", "go", "Dockerfile"),
+    file: join20("builders", "go", "Dockerfile"),
     isBuilder: true
   }
 ];
 var packageManagerDockerSpecs = [
   {
     name: "npm-package-managers",
-    file: join19("package-management", "npm", "Dockerfile")
+    file: join20("package-management", "npm", "Dockerfile")
   },
   {
     name: "maven-package-managers",
-    file: join19("package-management", "maven", "Dockerfile"),
+    file: join20("package-management", "maven", "Dockerfile"),
     variants: {
       jdk8: {
         JDK_URL_AMD64: "https://github.com/adoptium/temurin8-binaries/releases/download/jdk8u442-b06/OpenJDK8U-jdk_x64_linux_hotspot_8u442b06.tar.gz",
@@ -231677,57 +231813,57 @@ var packageManagerDockerSpecs = [
   },
   {
     name: "pip-package-managers",
-    file: join19("package-management", "pip", "Dockerfile"),
+    file: join20("package-management", "pip", "Dockerfile"),
     from: {
       name: "python-builder"
     }
   },
   {
     name: "go-package-manager",
-    file: join19("package-management", "go", "Dockerfile"),
+    file: join20("package-management", "go", "Dockerfile"),
     from: {
       name: "go-builder"
     }
   },
   {
     name: "nuget-package-manager",
-    file: join19("package-management", "nuget", "Dockerfile")
+    file: join20("package-management", "nuget", "Dockerfile")
   },
   {
     name: "cargo-package-manager",
-    file: join19("package-management", "cargo", "Dockerfile")
+    file: join20("package-management", "cargo", "Dockerfile")
   }
 ];
 var reachabilityAnalyzerDockerSpecs = [
   {
     name: "jelly-analyzer",
-    file: join19("reachability-analyzers", "jelly", "Dockerfile")
+    file: join20("reachability-analyzers", "jelly", "Dockerfile")
   },
   {
     name: "alucard-analyzer",
-    file: join19("reachability-analyzers", "alucard", "Dockerfile")
+    file: join20("reachability-analyzers", "alucard", "Dockerfile")
   },
   {
     name: "mambalade-analyzer",
-    file: join19("reachability-analyzers", "mambalade", "Dockerfile"),
+    file: join20("reachability-analyzers", "mambalade", "Dockerfile"),
     from: {
       name: "python-builder"
     }
   },
   {
     name: "goana-analyzer",
-    file: join19("reachability-analyzers", "goana", "Dockerfile"),
+    file: join20("reachability-analyzers", "goana", "Dockerfile"),
     from: {
       name: "go-builder"
     }
   },
   {
     name: "cocoa-analyzer",
-    file: join19("reachability-analyzers", "cocoa", "Dockerfile")
+    file: join20("reachability-analyzers", "cocoa", "Dockerfile")
   },
   {
     name: "rustica-analyzer",
-    file: join19("reachability-analyzers", "rustica", "Dockerfile")
+    file: join20("reachability-analyzers", "rustica", "Dockerfile")
   }
 ];
 function getAllPackageManagerSpecs() {
@@ -232008,13 +232144,13 @@ async function detectVariantMaven(projectDir) {
 
 // ../docker-management/src/maven/gradle-version-detector.ts
 import { existsSync as existsSync18 } from "fs";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 import { readFile as readFile28 } from "fs/promises";
 async function detectVariantGradle(projectDir) {
   return sanitizeJvmVariant("GRADLE", projectDir, await detect(projectDir));
 }
 async function detect(projectDir) {
-  const gradleWrapperPropertiesPath = join20(projectDir, "gradle", "wrapper", "gradle-wrapper.properties");
+  const gradleWrapperPropertiesPath = join21(projectDir, "gradle", "wrapper", "gradle-wrapper.properties");
   const gradleWrapperProperties = existsSync18(gradleWrapperPropertiesPath) ? (await readFile28(gradleWrapperPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
   if (!gradleWrapperProperties) return void 0;
   const distributionUrlRegex = /.*gradle-(\d+(\.\d+(\.\d+)?)?)/;
@@ -232030,13 +232166,13 @@ async function detect(projectDir) {
 
 // ../docker-management/src/maven/sbt-version-detector.ts
 import { existsSync as existsSync19 } from "fs";
-import { join as join21 } from "path";
+import { join as join22 } from "path";
 import { readFile as readFile29 } from "fs/promises";
 async function detectVariantSbt(projectDir) {
   return sanitizeJvmVariant("SBT", projectDir, await detect2(projectDir));
 }
 async function detect2(projectDir) {
-  const sbtBuildPropertiesPath = join21(projectDir, "project", "build.properties");
+  const sbtBuildPropertiesPath = join22(projectDir, "project", "build.properties");
   const sbtBuildProperties = existsSync19(sbtBuildPropertiesPath) ? (await readFile29(sbtBuildPropertiesPath, "utf-8")).split("\n").map((line) => line.trim()).filter((line) => !line.startsWith("#")).filter((line) => line) : void 0;
   if (!sbtBuildProperties) return void 0;
   for (const prop2 of sbtBuildProperties) {
@@ -232151,18 +232287,18 @@ async function findReachabilityAnalyzersDockerImage(ecosystem) {
 // ../other-modules-communicator/src/other-modules-communicator.ts
 var import_lodash12 = __toESM(require_lodash(), 1);
 import { rmSync } from "fs";
-import { mkdir as mkdir5, readFile as readFile30, writeFile as writeFile11 } from "fs/promises";
+import { mkdir as mkdir5, readFile as readFile30, writeFile as writeFile10 } from "fs/promises";
 import assert15 from "node:assert";
 import { platform as platform6 } from "os";
-import { join as join24, posix as posix2, relative as relative18, sep as sep3 } from "path";
+import { join as join25, posix as posix2, relative as relative17, sep as sep3 } from "path";
 
 // ../utils/src/tmp-file.ts
 import { rm, mkdtemp, cp as cp4, lstat as lstat2 } from "fs/promises";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join22, relative as relative17, sep as sep2, extname as extname2 } from "path";
+import { join as join23, relative as relative16, sep as sep2, extname as extname2 } from "path";
 async function createTmpDirectory(prefix) {
   try {
-    const tmpDir = await mkdtemp(join22(tmpdir2(), prefix));
+    const tmpDir = await mkdtemp(join23(tmpdir2(), prefix));
     return tmpDir;
   } catch (err) {
     console.log("Error creating tmp directory", err);
@@ -232196,7 +232332,7 @@ async function copyForNpmAnalysis(srcDir, prefix) {
       verbatimSymlinks: true,
       // Preserve symlinks as symlinks instead of dereferencing them
       filter: async (src) => {
-        const relativePath = relative17(srcDir, src);
+        const relativePath = relative16(srcDir, src);
         if (relativePath === "") return true;
         const pathSegments = relativePath.split(sep2);
         if (pathSegments.some((segment) => EXCLUDED_DIRECTORIES.has(segment))) {
@@ -232437,7 +232573,7 @@ import { resolve as resolve37 } from "path";
 
 // ../utils/src/constants.ts
 var import_lodash10 = __toESM(require_lodash(), 1);
-import { dirname as dirname24, join as join23 } from "node:path";
+import { dirname as dirname24, join as join24 } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 var { once: once5 } = import_lodash10.default;
 var fileName2 = fileURLToPath4(import.meta.url);
@@ -232450,10 +232586,10 @@ var COANA_ROOT2 = once5(() => {
   return coanaRoot;
 });
 var REPOS_PATH2 = once5(() => {
-  return process.env.REPOS_PATH ?? join23(COANA_ROOT2(), "repos");
+  return process.env.REPOS_PATH ?? join24(COANA_ROOT2(), "repos");
 });
 var COANA_REPOS_PATH2 = once5(() => {
-  return process.env.COANA_REPOS_PATH ?? join23(REPOS_PATH2(), "coana-tech");
+  return process.env.COANA_REPOS_PATH ?? join24(REPOS_PATH2(), "coana-tech");
 });
 var REQUIREMENTS_FILES_SEARCH_DEPTH = 2;
 
@@ -232492,7 +232628,7 @@ var { memoize, once: once7, take } = import_lodash12.default;
 async function getReachabilityAnalyzersScriptPath() {
   if (isNexeMode()) {
     const extractedPath = await extractTool("reachability-analyzers", "reachability-analyzers-cli.mjs");
-    return join24(extractedPath, "reachability-analyzers-cli.mjs");
+    return join25(extractedPath, "reachability-analyzers-cli.mjs");
   }
   return REACHABILITY_ANALYZERS_SCRIPT_PATH();
 }
@@ -232577,7 +232713,7 @@ var OtherModulesCommunicator = class {
     }
     if (cmd === "getWorkspacePathsMultipleSubprojects")
       return `${_cmdStr()}: (${packageManagerName}) ${abbreviateList(subprojects, 10)}`;
-    return `${_cmdStr()}: (${packageManagerName}) ${relative18(this.rootWorkingDir, subprojectPath) || "."}`;
+    return `${_cmdStr()}: (${packageManagerName}) ${relative17(this.rootWorkingDir, subprojectPath) || "."}`;
   }
   getSpinnerTextForReachabilityAnalyzerCommand(cmd, ecosystem, subprojectPath, workspacePath) {
     function _cmdStr() {
@@ -232590,10 +232726,10 @@ var OtherModulesCommunicator = class {
           return "Running reachability analysis on package registry package";
       }
     }
-    return `${_cmdStr()}: (${ecosystem}) ${relative18(this.rootWorkingDir, join24(subprojectPath, workspacePath)) || "."}`;
+    return `${_cmdStr()}: (${ecosystem}) ${relative17(this.rootWorkingDir, join25(subprojectPath, workspacePath)) || "."}`;
   }
   getProjectPath(subprojectPath) {
-    return this.options.runWithoutDocker ? subprojectPath : posix2.resolve("/project", relative18(this.rootWorkingDir, subprojectPath).replaceAll(sep3, posix2.sep));
+    return this.options.runWithoutDocker ? subprojectPath : posix2.resolve("/project", relative17(this.rootWorkingDir, subprojectPath).replaceAll(sep3, posix2.sep));
   }
   // options shared between package-management and reachability-analyzers
   commonOptions = once7(
@@ -232639,7 +232775,7 @@ var OtherModulesCommunicator = class {
   async runPackageManagerCommandWithOutput(commandName, packageManagerName, subprojectPath, args2 = [], extraDockerArgs, env) {
     const tmpDir = await this.getTmpDirForSubproject(subprojectPath);
     const outputFileName = `${v4_default()}-${commandName}-output.json`;
-    const outputFilePathThisProcess = join24(tmpDir, outputFileName);
+    const outputFilePathThisProcess = join25(tmpDir, outputFileName);
     const outputFilePathOtherProcess = this.options.runWithoutDocker ? outputFilePathThisProcess : posix2.join(TMP_DIR_IN_DOCKER, outputFileName);
     await this.runPackageManagerCommand(
       commandName,
@@ -232677,8 +232813,8 @@ var OtherModulesCommunicator = class {
     if (isNexeMode()) {
       const baseDir = getExtractionBaseDir();
       env.COANA_ROOT = baseDir;
-      env.REPOS_PATH = join24(baseDir, "repos");
-      env.COANA_REPOS_PATH = join24(baseDir, "repos", "coana-tech");
+      env.REPOS_PATH = join25(baseDir, "repos");
+      env.COANA_REPOS_PATH = join25(baseDir, "repos", "coana-tech");
       env.REACHABILITY_ANALYZERS_SCRIPT_PATH = scriptPath;
     }
     return Spinner.instance().wrap(
@@ -232715,7 +232851,7 @@ var OtherModulesCommunicator = class {
   async runReachabilityAnalyzerCommandWithOutput(commandName, ecosystem, subprojectPath, workspacePath, args2, env, rootWorkingDirOverride, displaySubprojectPath) {
     const tmpDir = await this.getTmpDirForSubproject(displaySubprojectPath ?? subprojectPath);
     const outputFileName = `${v4_default()}-${commandName}-output.json`;
-    const outputFilePathThisProcess = join24(tmpDir, outputFileName);
+    const outputFilePathThisProcess = join25(tmpDir, outputFileName);
     const outputFilePathOtherProcess = this.options.runWithoutDocker ? outputFilePathThisProcess : posix2.join(TMP_DIR_IN_DOCKER, outputFileName);
     await this.runReachabilityAnalyzerCommand(
       commandName,
@@ -232746,7 +232882,7 @@ var OtherModulesCommunicator = class {
       "getWorkspacePathsMultipleSubprojects",
       packageManagerName,
       this.rootWorkingDir,
-      subprojectPaths.map((subprojectPath) => relative18(this.rootWorkingDir, subprojectPath) || ".")
+      subprojectPaths.map((subprojectPath) => relative17(this.rootWorkingDir, subprojectPath) || ".")
     );
   }
   async getProvidedArgsForSubproject(subprojectPath, providedOptions) {
@@ -232754,9 +232890,9 @@ var OtherModulesCommunicator = class {
       if (providedOptions.type === "providee") {
         const tmpDir = await this.getTmpDirForSubproject(subprojectPath);
         const providerFileName = "provider.json";
-        const providerFileThisProcess = join24(tmpDir, providerFileName);
+        const providerFileThisProcess = join25(tmpDir, providerFileName);
         const providerFileOtherProcess = this.options.runWithoutDocker ? providerFileThisProcess : posix2.join(TMP_DIR_IN_DOCKER, providerFileName);
-        await writeFile11(providerFileThisProcess, JSON.stringify(providedOptions.provider));
+        await writeFile10(providerFileThisProcess, JSON.stringify(providedOptions.provider));
         return ["--provider", providerFileOtherProcess];
       } else {
         return ["--as-provider"];
@@ -232801,9 +232937,9 @@ var OtherModulesCommunicator = class {
       await extractAllToolsForNexeMode();
     }
     const inputFileName = `${v4_default()}-runReachabilityAnalysis-input.json`;
-    const inputFileThisProcess = join24(tmpDir, inputFileName);
+    const inputFileThisProcess = join25(tmpDir, inputFileName);
     const inputFileOtherProcess = this.options.runWithoutDocker ? inputFileThisProcess : posix2.join(TMP_DIR_IN_DOCKER, inputFileName);
-    await writeFile11(
+    await writeFile10(
       inputFileThisProcess,
       JSON.stringify({
         workspaceData,
@@ -232845,7 +232981,7 @@ var setUpGoModuleCache = once7(async () => {
     execFileSync2("chmod", ["--recursive", "+rw", tmpDir]);
     rmSync(tmpDir, { recursive: true, force: true });
   });
-  const [upper, work] = [join24(tmpDir, "upper"), join24(tmpDir, "work")];
+  const [upper, work] = [join25(tmpDir, "upper"), join25(tmpDir, "work")];
   for (const dir of [upper, work]) await mkdir5(dir);
   const o7 = await execNeverFail2(
     cmdt`docker volume create --driver local --opt type=overlay
@@ -232881,7 +233017,7 @@ function abbreviateList(items, maxItems) {
 import { resolve as resolve38 } from "path";
 
 // ../utils/src/dashboard-api/coana-api.ts
-import { writeFile as writeFile12 } from "fs/promises";
+import { writeFile as writeFile11 } from "fs/promises";
 var import_artifact = __toESM(require_artifact_client2(), 1);
 var coanaAPI = process.env.PUBLIC_API_URL ?? "https://app.coana.tech/api/v1";
 var axiosClient2 = getAxiosClient();
@@ -233011,7 +233147,7 @@ async function sendToDashboard(report, writeReportToFile, reportId, apiKey) {
   try {
     if (writeReportToFile) {
       logger.info("Writing report to dashboard-report.json");
-      await writeFile12("dashboard-report.json", JSON.stringify(report, null, 2));
+      await writeFile11("dashboard-report.json", JSON.stringify(report, null, 2));
       if (process.env.GITHUB_ACTIONS === "true") {
         logger.info("uploading dashboard-report.json as an artifact");
         (0, import_artifact.create)().uploadArtifact("dashboard-report", ["dashboard-report.json"], process.cwd());
@@ -234087,21 +234223,21 @@ function getVulnerabilitiesFromReport(report) {
 var import_packageurl_js = __toESM(require_packageurl_js(), 1);
 
 // dist/cli-upgrade-purl.js
-import { join as join27, relative as relative21, resolve as resolve41 } from "node:path";
+import { join as join28, relative as relative20, resolve as resolve41 } from "node:path";
 var import_picomatch10 = __toESM(require_picomatch2(), 1);
 
 // ../project-management/src/project-management/project-manager.ts
-import { relative as relative20, resolve as resolve40 } from "path";
+import { relative as relative19, resolve as resolve40 } from "path";
 
 // ../project-management/src/project-management/ecosystem-management/ecosystem-manager.ts
 var import_micromatch3 = __toESM(require_micromatch2(), 1);
 import { readdir as readdir6 } from "fs/promises";
-import { join as join26, relative as relative19, resolve as resolve39 } from "path";
+import { join as join27, relative as relative18, resolve as resolve39 } from "path";
 
 // ../project-management/src/project-management/ecosystem-management/ecosystem-specs.ts
 import { existsSync as existsSync21 } from "fs";
 import { readdir as readdir5, readFile as readFile31 } from "fs/promises";
-import { join as join25, sep as sep4 } from "path";
+import { join as join26, sep as sep4 } from "path";
 var specs = {
   NPM: [
     /* @__PURE__ */ new Map([["package.json", packageManagerIfPackageJSONExistsAndValid("NPM")]]),
@@ -234132,7 +234268,7 @@ var specs = {
         [
           /^(pyproject.toml|setup.py|requirements.*\.txt)/,
           async (projectDir) => {
-            const isPythonProject = await exists(join25(projectDir, "pyproject.toml")) || await exists(join25(projectDir, "setup.py")) && await isSetupPySetuptools(join25(projectDir, "setup.py"));
+            const isPythonProject = await exists(join26(projectDir, "pyproject.toml")) || await exists(join26(projectDir, "setup.py")) && await isSetupPySetuptools(join26(projectDir, "setup.py"));
             if (isPythonProject) {
               properPythonProjects.push(projectDir + sep4);
               return "PIP_REQUIREMENTS";
@@ -234155,7 +234291,7 @@ var specs = {
         [
           "uv.lock",
           async (projectDir) => {
-            if (await exists(join25(projectDir, "pyproject.toml"))) {
+            if (await exists(join26(projectDir, "pyproject.toml"))) {
               logger.warn("uv is not supported yet, using plain pyproject.toml as a fallback");
               return "PIP_REQUIREMENTS";
             } else logger.error("uv.lock found without pyproject.toml");
@@ -234176,8 +234312,8 @@ function getEcosystemSpecs(ecosystems) {
 }
 function packageManagerIfPackageJSONExistsAndValid(packageManager) {
   return async (projectDir) => {
-    if (!existsSync21(join25(projectDir, "package.json"))) return void 0;
-    const packageJSONPath = join25(projectDir, "package.json");
+    if (!existsSync21(join26(projectDir, "package.json"))) return void 0;
+    const packageJSONPath = join26(projectDir, "package.json");
     try {
       JSON.parse(await readFile31(packageJSONPath, "utf-8"));
       return packageManager;
@@ -234234,7 +234370,7 @@ var EcosystemManager = class _EcosystemManager {
           const resolvedProjectDir = resolve39(mainProjectDir, relativeProjectDir);
           if (config3.includeDirs.length > 0)
             workspacePaths = workspacePaths.filter(
-              (workspacePath) => isMatch3(relative19(mainProjectDir, join26(resolvedProjectDir, workspacePath)), config3.includeDirs)
+              (workspacePath) => isMatch3(relative18(mainProjectDir, join27(resolvedProjectDir, workspacePath)), config3.includeDirs)
             );
           workspacePaths.filter((workspacePath) => workspacePath !== ".").forEach((workspacePath) => projectDirsAlreadyCovered.push(resolve39(resolvedProjectDir, workspacePath)));
           if (workspacePaths.length > 0)
@@ -234262,7 +234398,7 @@ var EcosystemManager = class _EcosystemManager {
         }
       }
       for (const dir of directoriesToTraverse) {
-        await recHelper(join26(projectDir, dir), true);
+        await recHelper(join27(projectDir, dir), true);
       }
     }
     async function getPackageManagerName(projectDir, foundProjectFiles, foundLockFiles) {
@@ -234275,7 +234411,7 @@ var EcosystemManager = class _EcosystemManager {
         return typeof packageManagerNameProvider === "function" ? await packageManagerNameProvider(projectDir) : packageManagerNameProvider;
       } catch (e) {
         if (e instanceof InvalidProjectFileError) {
-          const projectDirRelative = relative19(mainProjectDir, projectDir) || ".";
+          const projectDirRelative = relative18(mainProjectDir, projectDir) || ".";
           logger.error(
             `Invalid ${e.fileName} file in ${projectDirRelative}. If the project is intentionally invalid, and you want Coana to skip it in the scan, then add "--exclude-dirs ${projectDirRelative}" to the Coana command.`
           );
@@ -234291,7 +234427,7 @@ var EcosystemManager = class _EcosystemManager {
       const filesAndDirectories = await readdir6(projectDir, { withFileTypes: true });
       for (const dirent of filesAndDirectories) {
         const fileOrDirectory = dirent.name;
-        const fullPath = join26(projectDir, fileOrDirectory);
+        const fullPath = join27(projectDir, fileOrDirectory);
         if (dirent.isDirectory()) {
           if (shouldIgnoreDir(fileOrDirectory) || shouldIgnoreDueToExcludeDirsOrChangedFiles(config3, fullPath))
             continue;
@@ -234318,7 +234454,7 @@ var EcosystemManager = class _EcosystemManager {
       packageManagerName,
       subprojectPath,
       workspacePaths: workspacePaths.filter(
-        (workspacePath) => !shouldIgnoreDueToExcludeDirsOrChangedFiles(this.config, join26(subprojectPath, workspacePath))
+        (workspacePath) => !shouldIgnoreDueToExcludeDirsOrChangedFiles(this.config, join27(subprojectPath, workspacePath))
       )
     }));
   }
@@ -234367,7 +234503,7 @@ function shouldIgnoreDir(dir) {
   return dirsToIgnore.includes(dir);
 }
 function shouldIgnoreDueToExcludeDirsOrChangedFiles({ mainProjectDir, excludeDirs, changedFiles }, fullPath) {
-  const relativeToProjectDir = relative19(mainProjectDir, fullPath) || ".";
+  const relativeToProjectDir = relative18(mainProjectDir, fullPath) || ".";
   return !!(isMatch3(relativeToProjectDir, excludeDirs) || changedFiles && !changedFiles.some((changedFile) => changedFile.startsWith(relativeToProjectDir)));
 }
 
@@ -234415,7 +234551,7 @@ var ProjectManager = class _ProjectManager {
       if (subprojects.length === 0) return void 0;
       return `  ${ecosystem}:
 ${subprojects.map(
-        ({ subprojectPath, workspacePaths }) => `    ${relative20(this.projectDir, subprojectPath) || ". (Root)"}${workspacePaths.length > 1 || workspacePaths[0] !== "." ? ` (${workspacePaths.length} ${ecosystem === "MAVEN" ? "modules" : "workspaces"})` : ""}`
+        ({ subprojectPath, workspacePaths }) => `    ${relative19(this.projectDir, subprojectPath) || ". (Root)"}${workspacePaths.length > 1 || workspacePaths[0] !== "." ? ` (${workspacePaths.length} ${ecosystem === "MAVEN" ? "modules" : "workspaces"})` : ""}`
       ).join("\n")}`;
     }).filter((line) => line).join("\n");
     const detailsString = Object.entries(this.ecosystemToEcosystemManager).map(([ecosystem, manager]) => {
@@ -234423,7 +234559,7 @@ ${subprojects.map(
       if (subprojects.length === 0) return void 0;
       const subprojectsString = subprojects.map(({ subprojectPath, workspacePaths, packageManagerName }) => {
         if (workspacePaths.length === 1 && workspacePaths[0] === ".") return void 0;
-        return `    ${relative20(this.projectDir, subprojectPath) || ". (Root)"}
+        return `    ${relative19(this.projectDir, subprojectPath) || ". (Root)"}
 ${workspacePaths.map((ws) => `      ${ws === "." ? ". (Root)" : ws} - ${packageManagerName}`).join("\n")}`;
       }).filter((line) => line).join("\n");
       if (!subprojectsString) return void 0;
@@ -234579,7 +234715,7 @@ ${Array.from(upgrades).map(([idx, upgradeVersion]) => `	${prettyPrintPurlUpgrade
             warn: "\u26A0\uFE0F",
             error: "\u274C"
           };
-          logger.info(`${statusIcons[update3.status]} ${update3.message} \u2500 ${relative21(rootDir, resolve41(rootDir, update3.file))}`);
+          logger.info(`${statusIcons[update3.status]} ${update3.message} \u2500 ${relative20(rootDir, resolve41(rootDir, update3.file))}`);
           update3.artifacts.forEach((idx, i7) => {
             logger.info(`${" ".repeat(3)}${i7 === update3.artifacts.length - 1 ? "\u2514\u2500" : "\u251C\u2500"} ${prettyPrintSocketFactArtifactUpgrade(artifacts[idx], upgrades2.get(idx))}`);
           });
@@ -234633,7 +234769,7 @@ ${Array.from(upgrades).map(([idx, upgradeVersion]) => `	${prettyPrintPurlUpgrade
     const subprojectPromiseQueue = new PromiseQueue(Number(options.concurrency));
     supportedSubprojects.forEach((subproject) => {
       subprojectPromiseQueue.enqueueTask(async () => {
-        const workspacePathsMatchingGlob = subproject.workspacePaths.filter((wsPath) => wsFilter(relative21(rootDir, resolve41(rootDir, subproject.subprojectPath, wsPath)) || "."));
+        const workspacePathsMatchingGlob = subproject.workspacePaths.filter((wsPath) => wsFilter(relative20(rootDir, resolve41(rootDir, subproject.subprojectPath, wsPath)) || "."));
         if (workspacePathsMatchingGlob.length === 0)
           return;
         const filterDescription = options.include !== void 0 || options.exclude !== void 0 ? `matching filters ${options.include ? `include: [${options.include.join(", ")}]` : ""}${options.include && options.exclude ? " " : ""}${options.exclude ? `exclude: [${options.exclude.join(", ")}]` : ""}` : "";
@@ -234663,7 +234799,7 @@ ${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
           });
           if (vulnerabilityFixes.length === 0)
             return;
-          logger.info(`Found ${vulnerabilityFixes.length} ${vulnerabilityFixes.length === 1 ? "dependency" : "dependencies"} matching upgrade specs for ${join27(subproject.subprojectPath, wsPath)}`);
+          logger.info(`Found ${vulnerabilityFixes.length} ${vulnerabilityFixes.length === 1 ? "dependency" : "dependencies"} matching upgrade specs for ${join28(subproject.subprojectPath, wsPath)}`);
           workspaceToFixes[wsPath] = [
             {
               fixId: "dummy",
@@ -234675,7 +234811,7 @@ ${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
           logger.info(`No dependencies matching upgrade specs found for subproject ${subproject.subprojectPath}`);
           return;
         }
-        await applySecurityFixes(subproject.packageManagerName, rootDir, relative21(rootDir, subproject.subprojectPath) || ".", otherModulesCommunicator, workspaceToFixes, fixingData, signalFixApplied);
+        await applySecurityFixes(subproject.packageManagerName, rootDir, relative20(rootDir, subproject.subprojectPath) || ".", otherModulesCommunicator, workspaceToFixes, fixingData, signalFixApplied);
       });
     });
     await subprojectPromiseQueue.onIdle();
@@ -234684,7 +234820,7 @@ ${workspacePathsMatchingGlob.map((wsPath) => `	${wsPath}`).join("\n")}`);
   }
 }
 var signalFixApplied = (_fixId, subprojectPath, workspacePath, vulnerabilityFixes) => {
-  logger.info(`Successfully upgraded purls for: ${join27(subprojectPath, workspacePath)}`);
+  logger.info(`Successfully upgraded purls for: ${join28(subprojectPath, workspacePath)}`);
   logger.info(`Upgraded: 
 ${vulnerabilityFixes.map((fix) => `	${fix.dependencyName} from ${fix.currentVersion} to ${fix.fixedVersion}`).join("\n")}`);
 };
@@ -234890,7 +235026,7 @@ function prettyApplyFixesTo(applyFixesToOption) {
 // dist/cli-core.js
 import assert16 from "node:assert";
 import { existsSync as existsSync26, writeFileSync as writeFileSync3 } from "fs";
-import { mkdir as mkdir6, writeFile as writeFile14 } from "fs/promises";
+import { mkdir as mkdir6, writeFile as writeFile13 } from "fs/promises";
 
 // ../../node_modules/.pnpm/kleur@4.1.5/node_modules/kleur/index.mjs
 var FORCE_COLOR;
@@ -234995,7 +235131,7 @@ var kleur_default = $;
 // dist/cli-core.js
 var import_lodash15 = __toESM(require_lodash(), 1);
 import os from "os";
-import { join as join30, relative as relative22, resolve as resolve43 } from "path";
+import { join as join31, relative as relative21, resolve as resolve43 } from "path";
 
 // ../utils/src/dashboard-api/shared-api.ts
 var DashboardAPI = class {
@@ -235787,7 +235923,7 @@ function transformToVulnChainNode(dependencyTree) {
 }
 
 // dist/internal/socket-mode-helpers-socket-dependency-trees.js
-import { basename as basename11, dirname as dirname25, join as join28, sep as sep5 } from "path";
+import { basename as basename11, dirname as dirname25, join as join29, sep as sep5 } from "path";
 var REQUIREMENTS_FILES_SEARCH_DEPTH2 = 3;
 var venvExcludes = [
   "venv",
@@ -235912,7 +236048,7 @@ async function fetchArtifactsFromSocket(rootWorkingDirectory, manifestsTarHash,
     for (const file of allFiles) {
       const base = basename11(file);
       const workspaceDir = dirname25(file) || ".";
-      if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join28(rootWorkingDirectory, file))) {
+      if (base === "pyproject.toml" || base === "setup.py" && await isSetupPySetuptools(join29(rootWorkingDirectory, file))) {
         if (!properPythonProjects.includes(workspaceDir)) {
           properPythonProjects.push(workspaceDir);
         }
@@ -237917,10 +238053,10 @@ function compareDocumentPosition(nodeA, nodeB) {
 function uniqueSort(nodes) {
   nodes = nodes.filter((node, i7, arr) => !arr.includes(node, i7 + 1));
   nodes.sort((a4, b) => {
-    const relative23 = compareDocumentPosition(a4, b);
-    if (relative23 & DocumentPosition.PRECEDING) {
+    const relative22 = compareDocumentPosition(a4, b);
+    if (relative22 & DocumentPosition.PRECEDING) {
       return -1;
-    } else if (relative23 & DocumentPosition.FOLLOWING) {
+    } else if (relative22 & DocumentPosition.FOLLOWING) {
       return 1;
     }
     return 0;
@@ -249779,11 +249915,11 @@ var { root: root2 } = static_exports;
 // ../utils/src/maven-utils.ts
 var import_lodash14 = __toESM(require_lodash(), 1);
 import { existsSync as existsSync25, readdirSync as readdirSync5, statSync as statSync5 } from "fs";
-import { join as join29 } from "path";
+import { join as join30 } from "path";
 
 // ../utils/src/download-utils.ts
 import { existsSync as existsSync24 } from "fs";
-import { writeFile as writeFile13 } from "fs/promises";
+import { writeFile as writeFile12 } from "fs/promises";
 
 // ../utils/src/maven-utils.ts
 var { memoize: memoize3 } = import_lodash14.default;
@@ -251150,7 +251286,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.131";
+var version3 = "14.12.133";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;
@@ -251271,8 +251407,8 @@ var CliCore = class {
   }
   async main() {
     const tmpDir = await createTmpDirectory("coana-cli-");
-    this.coanaLogPath = join30(tmpDir, "coana-log.txt");
-    this.coanaSocketPath = join30(tmpDir, "coana.sock");
+    this.coanaLogPath = join31(tmpDir, "coana-log.txt");
+    this.coanaSocketPath = join31(tmpDir, "coana.sock");
     if (this.options.socketMode) {
       logger.enableStreamBuffering();
     }
@@ -251419,7 +251555,7 @@ var CliCore = class {
     await this.shareLogIfAnalysisError(vulnsWithResults);
     const socketReport = toSocketFactsSocketDependencyTree(artifacts, vulnsWithResults, this.reportId, allWorkspaceDiagnostics);
     const outputFile = resolve43(this.options.socketMode);
-    await writeFile14(outputFile, JSON.stringify(socketReport, null, 2));
+    await writeFile13(outputFile, JSON.stringify(socketReport, null, 2));
     logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
   }
   displayWorkspaceDiagnosticsSummary(diagnosticsEntries) {
@@ -251504,7 +251640,7 @@ var CliCore = class {
       }
       const socketReport = toSocketFacts(report, this.reportDependencyTrees, subPjToWsPathToDirectDependencies);
       const outputFile = resolve43(this.options.socketMode);
-      await writeFile14(outputFile, JSON.stringify(socketReport, null, 2));
+      await writeFile13(outputFile, JSON.stringify(socketReport, null, 2));
       logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
       return;
     }
@@ -251543,7 +251679,7 @@ var CliCore = class {
     const { reachabilitySupport, traditionalScaSupport, noSupport } = manager.getSubprojectsWithWorkspacePaths();
     await this.dashboardAPI.registerSubprojects([...reachabilitySupport, ...traditionalScaSupport, ...noSupport].map((sp) => ({
       ...sp,
-      subprojectPath: relative22(this.rootWorkingDirectory, sp.subprojectPath) || "."
+      subprojectPath: relative21(this.rootWorkingDirectory, sp.subprojectPath) || "."
     })), this.reportId, this.apiKey);
     for (const unsupported of noSupport)
       logger.warn(unsupported.unsupportedMsg);
@@ -251572,7 +251708,7 @@ var CliCore = class {
           await this.spinner.succeed();
         } catch (error) {
           if (this.options.ignoreFailingWorkspaces) {
-            const relativeSubprojectPath = relative22(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
+            const relativeSubprojectPath = relative21(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
             this.failedSubprojects.push({
               subproject: relativeSubprojectPath,
               error: error.message || "Unknown error"
@@ -251631,7 +251767,7 @@ Subproject: ${subproject}`);
   }
   async updateSpinnerTextOnNewSubproject(subprojectAndWsPath, numberSubprojects, index2) {
     this.spinner.start();
-    const relativeSubprojectPath = relative22(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
+    const relativeSubprojectPath = relative21(this.rootWorkingDirectory, subprojectAndWsPath.subprojectPath) || ".";
     await this.spinner.setText(numberSubprojects > 1 ? `Processing subproject ${relativeSubprojectPath} (${index2 + 1}/${numberSubprojects})${+this.options.concurrency > 1 ? `. May process up to ${+this.options.concurrency - 1} other workspaces in parallel` : ""}` : `Processing ${relativeSubprojectPath}`);
   }
   async initialize() {
@@ -251713,7 +251849,7 @@ Subproject: ${subproject}`);
         return workspaceToAugmentedVulnerabilities[workspacePath] !== void 0;
       }).map((workspacePath) => {
         return {
-          subprojectPath: relative22(this.rootWorkingDirectory, subprojectPath) || ".",
+          subprojectPath: relative21(this.rootWorkingDirectory, subprojectPath) || ".",
           workspacePath,
           directDependencies: projectInfo[workspacePath].dataForAnalysis.directDependenciesMap ?? {},
           vulnerabilities: workspaceToAugmentedVulnerabilities[workspacePath],
@@ -251942,7 +252078,7 @@ Subproject: ${subproject}`);
   async sendProgress(type, isStartEvent, subprojectPath, workspacePath) {
     await this.dashboardAPI.registerCLIProgress({
       type,
-      ...subprojectPath ? { subprojectPath: relative22(this.rootWorkingDirectory, subprojectPath) || "." } : {},
+      ...subprojectPath ? { subprojectPath: relative21(this.rootWorkingDirectory, subprojectPath) || "." } : {},
       ...workspacePath ? { workspacePath } : {}
     }, isStartEvent, this.reportId, this.apiKey);
   }
@@ -251998,7 +252134,7 @@ Subproject: ${subproject}`);
       dependencyTree: workspaceToPlainDependencyTree[workspacePath],
       ecosystem: workspaceToPlainDependencyTree[workspacePath].ecosystem ?? "NPM",
       workspacePath,
-      subprojectPath: relative22(rootWorkingDirectory, subprojectPath) || "."
+      subprojectPath: relative21(rootWorkingDirectory, subprojectPath) || "."
     }));
     if (this.options.socketMode) {
       this.reportDependencyTrees = workspacePaths.map((workspacePath) => ({
@@ -252006,7 +252142,7 @@ Subproject: ${subproject}`);
         dependencyTree: projectInfo[workspacePath].dataForAnalysis.data.dependencyTree,
         ecosystem: projectInfo[workspacePath].dataForAnalysis.data.dependencyTree.ecosystem ?? "NPM",
         workspacePath,
-        subprojectPath: relative22(rootWorkingDirectory, subprojectPath) || "."
+        subprojectPath: relative21(rootWorkingDirectory, subprojectPath) || "."
       }));
     }
     if (this.shareWithDashboard)
@@ -252022,7 +252158,7 @@ Subproject: ${subproject}`);
       } catch (e) {
         logger.error(`Scanning for vulnerabilities failed for subproject ${subprojectPath} in workspace ${workspacePath}`);
         if (this.options.ignoreFailingWorkspaces) {
-          const relativeSubprojectPath = relative22(this.rootWorkingDirectory, subprojectPath) || ".";
+          const relativeSubprojectPath = relative21(this.rootWorkingDirectory, subprojectPath) || ".";
           this.failedWorkspaces.push({
             subproject: relativeSubprojectPath,
             workspace: workspacePath,
@@ -252041,7 +252177,7 @@ Subproject: ${subproject}`);
   }
 };
 function getRelativeSubprojectPath(subprojectPath, projectDir) {
-  return relative22(projectDir, subprojectPath) || ".";
+  return relative21(projectDir, subprojectPath) || ".";
 }
 function getDependencyType(vulnChainDetails, codeAwareScanResults, directDependencies, reachability) {
   if (reachability === "UNREACHABLE" || reachability === "UNKNOWN") {
@@ -252102,8 +252238,8 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
     throw new Error('Range style must be "pin"');
   }
   options.purlTypes = options.purlTypes?.map((t4) => t4.toLowerCase());
-  const tmpDir = await mkdtemp2(join31(tmpdir3(), "compute-fixes-and-upgrade-purls-"));
-  const logFile = join31(tmpDir, "compute-fixes-and-upgrade-purls.log");
+  const tmpDir = await mkdtemp2(join32(tmpdir3(), "compute-fixes-and-upgrade-purls-"));
+  const logFile = join32(tmpDir, "compute-fixes-and-upgrade-purls.log");
   logger.initWinstonLogger(options.debug, logFile);
   try {
     await initializeComputeFixesAndUpgradePurls(path9, options);
@@ -252115,7 +252251,7 @@ computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument(
     if (options.outputFile) {
       const outputFile = resolve44(options.outputFile);
       await mkdir7(dirname26(outputFile), { recursive: true });
-      await writeFile15(outputFile, JSON.stringify(output, null, 2));
+      await writeFile14(outputFile, JSON.stringify(output, null, 2));
       logger.info(`Result written to: ${outputFile}`);
     }
     await rm3(tmpDir, { recursive: true, force: true });