@coana-tech/cli 14.12.75 → 14.12.77

package/cli.mjs

@@ -201941,7 +201941,7 @@ function getAdvisoryEcosystemFromPurlType(purlType) {
     case "gem" /* GEM */:
       return "RUBYGEMS";
     default:
-      throw Error(`Unsupported purl type: ${purlType}`);
+      return void 0;
   }
 }
 function getPurlStrings(dependencyTree) {
@@ -229135,6 +229135,7 @@ var import_packageurl_js = __toESM(require_packageurl_js(), 1);
 
 // dist/cli-upgrade-purl.js
 import { join as join23, relative as relative18, resolve as resolve40 } from "node:path";
+var import_picomatch10 = __toESM(require_picomatch2(), 1);
 
 // ../project-management/src/project-management/project-manager.ts
 import { relative as relative17, resolve as resolve39 } from "path";
@@ -229564,7 +229565,6 @@ function assertDefined(value2) {
 }
 
 // dist/cli-upgrade-purl.js
-var import_picomatch10 = __toESM(require_picomatch2(), 1);
 var ECOSYSTEMS_WITH_SOCKET_UPGRADES = ["NPM", "MAVEN", "NUGET", "GO", "RUST", "PIP", "RUBYGEMS"];
 async function upgradePurl(rootDir, upgrades, artifacts, options, logFile, cliFixRunId) {
   if (options.rangeStyle && options.rangeStyle !== "pin") {
@@ -229587,7 +229587,7 @@ ${Array.from(upgrades).map(([idx, upgradeVersion]) => `	${prettyPrintPurlUpgrade
     if (options.manifestsTarHash) {
       const { supportedUpgrades, unsupportedUpgrades } = Array.from(upgrades).reduce((acc, [idx, upgradeVersion]) => {
         const ecosystem = getAdvisoryEcosystemFromPurlType(artifacts[idx].type);
-        const target = ECOSYSTEMS_WITH_SOCKET_UPGRADES.includes(ecosystem) ? "supportedUpgrades" : "unsupportedUpgrades";
+        const target = ecosystem && ECOSYSTEMS_WITH_SOCKET_UPGRADES.includes(ecosystem) ? "supportedUpgrades" : "unsupportedUpgrades";
         acc[target].set(idx, upgradeVersion);
         return acc;
       }, { supportedUpgrades: /* @__PURE__ */ new Map(), unsupportedUpgrades: /* @__PURE__ */ new Map() });
@@ -229600,13 +229600,16 @@ ${Array.from(upgrades).map(([idx, upgradeVersion]) => `	${prettyPrintPurlUpgrade
       try {
         const manifestFiles = await fetchManifestFilesFromManifestsTarHash(options.manifestsTarHash);
         const ecosystemToSocketArtifactUpgrades = /* @__PURE__ */ new Map();
-        for (const [idx, upgradeVersion] of upgrades) {
+        for (const [idx, upgradeVersion] of supportedUpgrades) {
           const artifact = artifacts[idx];
           if (!artifact.name)
-            return;
+            continue;
           if (!artifact.version)
-            return;
+            continue;
           const ecosystem = getAdvisoryEcosystemFromPurlType(artifact.type);
+          if (!ecosystem) {
+            throw new Error(`CLI Assertion error: Attempting to upgrade a purl from an unsupported ecosystem: ${purlToString(artifact)}.`);
+          }
           if (!ecosystemToSocketArtifactUpgrades.has(ecosystem)) {
             ecosystemToSocketArtifactUpgrades.set(ecosystem, /* @__PURE__ */ new Map());
           }
@@ -229671,7 +229674,10 @@ ${Array.from(upgrades).map(([idx, upgradeVersion]) => `	${prettyPrintPurlUpgrade
     const otherModulesCommunicator = new OtherModulesCommunicator(rootDir, options, {
       type: "missing"
     });
-    const ecosystems = Array.from(upgrades).map(([idx]) => getAdvisoryEcosystemFromPurlType(artifacts[idx].type));
+    const ecosystems = Array.from(upgrades).map(([idx]) => getAdvisoryEcosystemFromPurlType(artifacts[idx].type)).filter((ecosystem) => ecosystem !== void 0);
+    if (ecosystems.length === 0) {
+      throw new Error(`No supported ecosystems found in the upgrades. This should not happen.`);
+    }
     const manager = await ProjectManager.create(rootDir, otherModulesCommunicator, ecosystems);
     const { reachabilitySupport, traditionalScaSupport } = manager.getSubprojectsWithWorkspacePaths();
     const supportedSubprojects = reachabilitySupport.concat(traditionalScaSupport).filter((p3) => getPackageManagerSupport(p3.packageManagerName).supportsApplyingFixes);
@@ -230100,8 +230106,12 @@ async function computeFixesAndUpgradePurls(path2, options, logFile) {
       if (!indices)
         throw Error("Could not find artifacts for purl");
       for (const idx of indices) {
-        const ecosystem = getAdvisoryEcosystemFromPurlType(artifacts[idx].type);
         const existingFixedVersion = upgrades.get(idx);
+        const ecosystem = getAdvisoryEcosystemFromPurlType(artifacts[idx].type);
+        if (!ecosystem) {
+          logger.warn(`Skipping upgrade for unsupported ecosystem: ${artifacts[idx].type}`);
+          continue;
+        }
         if (!existingFixedVersion || versionSatisfiesRelation(ecosystem, existingFixedVersion, "<", fix.fixedVersion)) {
           upgrades.set(idx, fix.fixedVersion);
         }
@@ -245884,7 +245894,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.12.75";
+var version2 = "14.12.77";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pick } = import_lodash15.default;
@@ -245987,10 +245997,9 @@ var CliCore = class {
       });
     if (this.options.purlTypes) {
       this.options.purlTypes.forEach((purlType) => {
-        try {
-          getAdvisoryEcosystemFromPurlType(purlType);
-        } catch (e) {
-          throw new Error(`Invalid purl type: ${purlType}. Supported purl types are: ${ECOSYSTEMS_WITH_TRADITIONAL_SCA_SUPPORT.map((ecosystem) => getPurlType(ecosystem)).join(", ")}`);
+        const ecosystem = getAdvisoryEcosystemFromPurlType(purlType);
+        if (!ecosystem) {
+          throw new Error(`Invalid purl type: ${purlType}. Supported purl types are: ${ECOSYSTEMS_WITH_TRADITIONAL_SCA_SUPPORT.map((ecosystem2) => getPurlType(ecosystem2)).join(", ")}`);
         }
       });
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coana-tech/cli",
-  "version": "14.12.75",
+  "version": "14.12.77",
   "description": "Coana CLI",
   "type": "module",
   "bin": {

package/reachability-analyzers-cli.mjs

@@ -115552,7 +115552,7 @@ var RubyCodeAwareVulnerabilityScanner = class {
     return await withTmpDirectory("ruby-analyzer-output", async (tmpDir) => {
       if (!this.vendorDir)
         throw new Error("Assertion error: The vendor directory is not correctly initialized");
-      const analyzerPath = join20(COANA_REPOS_PATH(), "callgraph-reachability-analyzers", "packages", "cli", "dist", "index.js");
+      const analyzerPath = join20(COANA_REPOS_PATH(), "callgraph-reachability-analyzers", "packages", "cli", "dist", "bundle", "cli.mjs");
       if (!existsSync14(analyzerPath))
         throw new Error(`callgraph-reachability-analyzers is not cloned`);
       const vulnAccPaths = sortedUniq2(vulns.flatMap((v) => v.vulnerabilityAccessPaths).sort());