@coana-tech/cli 14.12.21 → 14.12.23

package/cli.mjs

@@ -198475,13 +198475,14 @@ async function getLatestBucketsSocket(subprojectPath, workspacePath) {
     return void 0;
   }
 }
-async function useSocketComputeFixEndpoint(autofixRunId, artifacts, vulnerableArtifactIdsForGhsas) {
+async function useSocketComputeFixEndpoint(autofixRunId, artifacts, vulnerableArtifactIdsForGhsas, config3) {
   try {
     const url2 = getSocketApiUrl("fixes/compute-fixes");
     const data2 = {
       autofixRunId,
       artifacts,
-      vulnerableArtifactIndexes: vulnerableArtifactIdsForGhsas
+      vulnerableArtifactIndexes: vulnerableArtifactIdsForGhsas,
+      config: config3
     };
     return (await axios2.post(url2, data2, { headers: getAuthHeaders() })).data;
   } catch (error) {
@@ -227213,7 +227214,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.12.21";
+var version2 = "14.12.23";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pick } = import_lodash15.default;
@@ -228057,7 +228058,9 @@ async function computeFixesAndUpgradePurls(path2, options, logFile) {
     return;
   }
   const ghsaToVulnerableArtifactIdsToApply = options.applyFixesTo.includes("all") ? ghsaToVulnerableArtifactIds : Object.fromEntries(Object.entries(ghsaToVulnerableArtifactIds).filter(([ghsa]) => options.applyFixesTo.includes(ghsa)));
-  const computedFix = await useSocketComputeFixEndpoint(autofixRunId, artifacts, ghsaToVulnerableArtifactIdsToApply);
+  const computedFix = await useSocketComputeFixEndpoint(autofixRunId, artifacts, ghsaToVulnerableArtifactIdsToApply, {
+    noMajorUpdates: options.disableMajorUpdates
+  });
   if (computedFix.type !== "success") {
     throw new Error(`No fix found for the given vulnerabilities`);
   }
@@ -228231,7 +228234,7 @@ upgradePurls.name("upgrade-purls").argument("<path>", "File system path to the f
   });
 }).configureHelp({ sortOptions: true });
 var computeFixesAndUpgradePurlsCmd = new Command();
-computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument("<path>", "File system path to the folder containing the project").option("-a, --apply-fixes-to <ghsas...>", 'GHSA IDs to compute fixes for. Use "all" to compute fixes for all vulnerabilities.', []).option("--dry-run", "Show what changes would be made without actually making them", false).option("-g, --glob <pattern>", "Glob pattern to filter workspaces by absolute file path").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("--range-style <style>", 'Range style to use for the output. Currently only "pin" is supported and it only works for npm.').addOption(new Option("--run-without-docker", "Run package managers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new Option("--manifests-tar-hash <hash>", "Hash of the tarball containing all manifest files already uploaded to Socket. If provided, Socket will be used for computing dependency trees.").hideHelp()).version(version2).action(async (path2, options) => {
+computeFixesAndUpgradePurlsCmd.name("compute-fixes-and-upgrade-purls").argument("<path>", "File system path to the folder containing the project").option("-a, --apply-fixes-to <ghsas...>", 'GHSA IDs to compute fixes for. Use "all" to compute fixes for all vulnerabilities.', []).option("--dry-run", "Show what changes would be made without actually making them", false).option("-g, --glob <pattern>", "Glob pattern to filter workspaces by absolute file path").option("-d, --debug", "Enable debug logging", false).option("-s, --silent", "Silence all debug/warning output", false).option("--range-style <style>", 'Range style to use for the output. Currently only "pin" is supported and it only works for npm.').option("--disable-major-updates", "Do not suggest major updates. If only major update are available, the fix will not be applied.", false).addOption(new Option("--run-without-docker", "Run package managers without using docker").default(process.env.RUN_WITHOUT_DOCKER === "true").hideHelp()).addOption(new Option("--manifests-tar-hash <hash>", "Hash of the tarball containing all manifest files already uploaded to Socket. If provided, Socket will be used for computing dependency trees.").hideHelp()).version(version2).action(async (path2, options) => {
   process.env.DOCKER_IMAGE_TAG ??= version2;
   if (options.rangeStyle && options.rangeStyle === "preserve") {
     options.rangeStyle = void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.21",
+  "version": "14.12.23",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/repos/coana-tech/class-graph-analysis/dist/bundle/class-graph-analysis-cli.mjs

@@ -7749,8 +7749,10 @@ var AlucardResolutionManager = class {
       const inputFile = resolve(tmpDir, "input.json");
       await writeFile(inputFile, JSON.stringify(inputFileData));
       const execResult = await execNeverFail(cmdt`java -jar ${this.alucardPath} resolveNodes --batch-mode --input-file=${inputFile} --output-dir=${tmpDir} --timeout=${this.timeoutInSeconds}`);
-      if (execResult.error)
-        throw Error("alucard could not resolve nodes");
+      if (execResult.error) {
+        throw Error(`alucard could not resolve nodes: ${execResult.error.message}${execResult.stderr ? `
+stderr: ${execResult.stderr}` : ""}`);
+      }
       const nodes = JSON.parse(await readFile5(resolve(tmpDir, "nodes.json"), "utf-8"));
       const fatJarExcludes = new Set(nodes.filter((node) => deps[node.packageId] && node.nodeType === "type").map((node) => node.fullyQualifiedName));
       graph.addNodes(nodes.filter((node) => !apps[node.nodeId] && node.nodeType === "type" && fatJarExcludes.has(node.fullyQualifiedName)));
@@ -7768,8 +7770,10 @@ var AlucardResolutionManager = class {
       const inputFile = resolve(tmpDir, "input.json");
       await writeFile(inputFile, JSON.stringify(inputFileData));
       const execResult = await execNeverFail(cmdt`java -jar ${this.alucardPath} resolveEdges --batch-mode ${mode === "DIRECT_DEPENDENCIES" && "--entry-edges-only"} --input-file=${inputFile} --output-dir=${tmpDir} --timeout=${this.timeoutInSeconds}`);
-      if (execResult.error)
-        throw new Error("alucard could not resolve edges");
+      if (execResult.error) {
+        throw Error(`alucard could not resolve edges: ${execResult.error.message}${execResult.stderr ? `
+stderr: ${execResult.stderr}` : ""}`);
+      }
       for (const idx of JSON.parse(await readFile5(resolve(tmpDir, "visited.json"), "utf-8"))) {
         visited.add(idx);
       }
@@ -17518,8 +17522,10 @@ var CocoaResolutionManager = class {
       await writeFile4(inputFile, JSON.stringify(inputFileData));
       const cmd = cmdt`dotnet ${this.cocoaPath} resolveNodes --batch-mode --input-file=${inputFile} --output-dir=${tmpDir} --timeout=${this.timeoutInSeconds}`;
       const execResult = await execNeverFail(cmd, ".");
-      if (execResult.error)
-        throw new Error("cocoa could not resolve class graph nodes");
+      if (execResult.error) {
+        throw Error(`cocoa could not resolve nodes: ${execResult.error.message}${execResult.stderr ? `
+stderr: ${execResult.stderr}` : ""}`);
+      }
       const nodes = JSON.parse(await readFile9(resolve3(tmpDir, "nodes.json"), "utf-8"));
       graph.addNodes(nodes);
     });
@@ -17537,8 +17543,10 @@ var CocoaResolutionManager = class {
       await writeFile4(inputFile, JSON.stringify(inputFileData));
       const cmd = cmdt`dotnet ${this.cocoaPath} resolveEdges --batch-mode ${mode === "DIRECT_DEPENDENCIES" && "--entry-edges-only"} --input-file=${inputFile} --output-dir=${tmpDir} --timeout=${this.timeoutInSeconds}`;
       const execResult = await execNeverFail(cmd, ".");
-      if (execResult.error)
-        throw new Error("cocoa could not resolve class graph edges");
+      if (execResult.error) {
+        throw Error(`cocoa could not resolve edges: ${execResult.error.message}${execResult.stderr ? `
+stderr: ${execResult.stderr}` : ""}`);
+      }
       for (const idx of JSON.parse(await readFile9(resolve3(tmpDir, "visited.json"), "utf-8"))) {
         visited.add(idx);
       }