@socketsecurity/cli-with-sentry 0.14.101 → 0.14.103

package/dist/instrument-with-sentry.js

@@ -41,7 +41,7 @@ const relConstantsPath = './constants'
   Sentry.setTag(
     'version',
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
-    '0.14.101:26533ef:6809fc78:pub'
+    '0.14.103:d303e97:055c3aba:pub'
   )
   const constants = require(relConstantsPath)
   if (constants.ENV.SOCKET_CLI_DEBUG) {
@@ -56,5 +56,5 @@ const relConstantsPath = './constants'
   } = constants
   setSentry(Sentry)
 }
-//# debugId=578e3a6a-a686-4c39-98eb-2a1a2c2085ec
+//# debugId=1792fa0d-ceff-4792-b3c3-8926ecb7baa5
 //# sourceMappingURL=instrument-with-sentry.js.map

package/dist/instrument-with-sentry.js.map

@@ -1 +1 @@
-{"version":3,"file":"instrument-with-sentry.js","sources":["../../src/instrument-with-sentry.ts"],"sourcesContent":["// This should ONLY be included in the special Sentry build!\n// Otherwise the Sentry dependency won't even be present in the manifest.\n\nimport { logger } from '@socketsecurity/registry/lib/logger'\n\n// Require constants with require(relConstantsPath) instead of require('./constants')\n// so Rollup doesn't generate a constants2.js chunk.\nconst relConstantsPath = './constants'\n// The '@rollup/plugin-replace' will replace \"process.env['INLINED_SOCKET_CLI_SENTRY_BUILD']\".\nif (process.env['INLINED_SOCKET_CLI_SENTRY_BUILD']) {\n  const Sentry = require('@sentry/node')\n  Sentry.init({\n    onFatalError(error: Error) {\n      // Defer module loads until after Sentry.init is called.\n      if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n        logger.fail('[DEBUG] [Sentry onFatalError]:', error)\n      }\n    },\n    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',\n    enabled: true,\n    integrations: []\n  })\n  Sentry.setTag(\n    'environment',\n    // The '@rollup/plugin-replace' will replace \"process.env['INLINED_SOCKET_CLI_PUBLISHED_BUILD']\".\n    process.env['INLINED_SOCKET_CLI_PUBLISHED_BUILD']\n      ? 'pub'\n      : // The NODE_ENV convention is used by apps to define the runtime environment.\n        // https://nodejs.org/en/learn/getting-started/nodejs-the-difference-between-development-and-production\n        process.env['NODE_ENV']\n  )\n  Sentry.setTag(\n    'version',\n    // The '@rollup/plugin-replace' will replace \"process.env['INLINED_SOCKET_CLI_VERSION_HASH']\".\n    process.env['INLINED_SOCKET_CLI_VERSION_HASH']\n  )\n  const constants = require(relConstantsPath)\n  if (constants.ENV.SOCKET_CLI_DEBUG) {\n    Sentry.setTag('debugging', true)\n    logger.log('[DEBUG] Set up Sentry.')\n  } else {\n    Sentry.setTag('debugging', false)\n  }\n  const {\n    kInternalsSymbol,\n    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry }\n  } = constants\n  setSentry(Sentry)\n} else if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n  logger.log('[DEBUG] Sentry disabled explicitly.')\n}\n"],"names":["logger","dsn","enabled","integrations","process","Sentry","setSentry"],"mappings":";;;;;;;;;;;;;;;AAAA;AACA;;;AAIA;AACA;AACA;AACA;AACoD;AAClD;;;AAGI;;AAEEA;AACF;;AAEFC;AACAC;AACAC;AACF;;AAGE;AACAC;;AAQA;AACAA;AAEF;AACA;AACEC;AACAL;AACF;AACEK;AACF;;;AAGE;AAA+DC;AAAU;AAC3E;;AAEF","debugId":"578e3a6a-a686-4c39-98eb-2a1a2c2085ec"}
+{"version":3,"file":"instrument-with-sentry.js","sources":["../../src/instrument-with-sentry.ts"],"sourcesContent":["// This should ONLY be included in the special Sentry build!\n// Otherwise the Sentry dependency won't even be present in the manifest.\n\nimport { logger } from '@socketsecurity/registry/lib/logger'\n\n// Require constants with require(relConstantsPath) instead of require('./constants')\n// so Rollup doesn't generate a constants2.js chunk.\nconst relConstantsPath = './constants'\n// The '@rollup/plugin-replace' will replace \"process.env['INLINED_SOCKET_CLI_SENTRY_BUILD']\".\nif (process.env['INLINED_SOCKET_CLI_SENTRY_BUILD']) {\n  const Sentry = require('@sentry/node')\n  Sentry.init({\n    onFatalError(error: Error) {\n      // Defer module loads until after Sentry.init is called.\n      if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n        logger.fail('[DEBUG] [Sentry onFatalError]:', error)\n      }\n    },\n    dsn: 'https://66736701db8e4ffac046bd09fa6aaced@o555220.ingest.us.sentry.io/4508846967619585',\n    enabled: true,\n    integrations: []\n  })\n  Sentry.setTag(\n    'environment',\n    // The '@rollup/plugin-replace' will replace \"process.env['INLINED_SOCKET_CLI_PUBLISHED_BUILD']\".\n    process.env['INLINED_SOCKET_CLI_PUBLISHED_BUILD']\n      ? 'pub'\n      : // The NODE_ENV convention is used by apps to define the runtime environment.\n        // https://nodejs.org/en/learn/getting-started/nodejs-the-difference-between-development-and-production\n        process.env['NODE_ENV']\n  )\n  Sentry.setTag(\n    'version',\n    // The '@rollup/plugin-replace' will replace \"process.env['INLINED_SOCKET_CLI_VERSION_HASH']\".\n    process.env['INLINED_SOCKET_CLI_VERSION_HASH']\n  )\n  const constants = require(relConstantsPath)\n  if (constants.ENV.SOCKET_CLI_DEBUG) {\n    Sentry.setTag('debugging', true)\n    logger.log('[DEBUG] Set up Sentry.')\n  } else {\n    Sentry.setTag('debugging', false)\n  }\n  const {\n    kInternalsSymbol,\n    [kInternalsSymbol as unknown as 'Symbol(kInternalsSymbol)']: { setSentry }\n  } = constants\n  setSentry(Sentry)\n} else if (require(relConstantsPath).ENV.SOCKET_CLI_DEBUG) {\n  logger.log('[DEBUG] Sentry disabled explicitly.')\n}\n"],"names":["logger","dsn","enabled","integrations","process","Sentry","setSentry"],"mappings":";;;;;;;;;;;;;;;AAAA;AACA;;;AAIA;AACA;AACA;AACA;AACoD;AAClD;;;AAGI;;AAEEA;AACF;;AAEFC;AACAC;AACAC;AACF;;AAGE;AACAC;;AAQA;AACAA;AAEF;AACA;AACEC;AACAL;AACF;AACEK;AACF;;;AAGE;AAA+DC;AAAU;AAC3E;;AAEF","debugId":"1792fa0d-ceff-4792-b3c3-8926ecb7baa5"}

package/dist/module-sync/cli.js

@@ -900,7 +900,7 @@ function emitBanner(name) {
   logger.logger.error(getAsciiHeader(name))
 }
 function getAsciiHeader(command) {
-  const cliVersion = '0.14.101:26533ef:6809fc78:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
+  const cliVersion = '0.14.103:d303e97:055c3aba:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
   const nodeVersion = process$1.version
   const apiToken = shadowNpmInject.getDefaultToken()
   const shownToken = apiToken ? getLastFiveOfApiToken(apiToken) : 'no'
@@ -3708,7 +3708,39 @@ function formatBranchName(str) {
 function getPkgNameFromPurlObj(purlObj) {
   return `${purlObj.namespace ? `${purlObj.namespace}/` : ''}${purlObj.name}`
 }
-async function branchExists(branch, cwd = process.cwd()) {
+function getBaseGitBranch() {
+  // Lazily access constants.ENV[GITHUB_REF_NAME].
+  return (
+    constants.ENV[GITHUB_REF_NAME] ??
+    // GitHub defaults to branch name "main"
+    // https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/about-branches#about-the-default-branch
+    'main'
+  )
+}
+function getSocketBranchName(purl, toVersion) {
+  const purlObj = packageurlJs.PackageURL.fromString(purl)
+  const namespace = formatBranchName(purlObj.namespace ?? '')
+  const name = formatBranchName(purlObj.name)
+  const version = formatBranchName(toVersion)
+  const fullName = `${namespace ? `${namespace}-` : ''}${name}`
+  return `socket-fix-${fullName}-${version}`
+}
+function getSocketPullRequestTitle(purl, toVersion) {
+  const purlObj = packageurlJs.PackageURL.fromString(purl)
+  const pkgName = getPkgNameFromPurlObj(purlObj)
+  return `Bump ${pkgName} from ${purlObj.version} to ${toVersion}`
+}
+function getSocketPullRequestBody(purl, toVersion) {
+  const purlObj = packageurlJs.PackageURL.fromString(purl)
+  const pkgName = getPkgNameFromPurlObj(purlObj)
+  return `Bumps [${pkgName}](https://socket.dev/${purlObj.type}/package/${pkgName}) from ${purlObj.version} to ${toVersion}.`
+}
+function getSocketCommitMessage(purl, toVersion) {
+  const purlObj = packageurlJs.PackageURL.fromString(purl)
+  const pkgName = getPkgNameFromPurlObj(purlObj)
+  return `socket: Bump ${pkgName} from ${purlObj.version} to ${toVersion}`
+}
+async function gitBranchExists(branch, cwd = process.cwd()) {
   try {
     await spawn.spawn(
       'git',
@@ -3722,8 +3754,15 @@ async function branchExists(branch, cwd = process.cwd()) {
   } catch {}
   return false
 }
-async function checkoutBaseBranchIfAvailable(baseBranch, cwd = process.cwd()) {
+async function gitCheckoutBaseBranchIfAvailable(
+  baseBranch,
+  cwd = process.cwd()
+) {
   try {
+    await gitHardReset()
+    await spawn.spawn('git', ['fetch', '--depth=1', 'origin', baseBranch], {
+      cwd
+    })
     await spawn.spawn('git', ['checkout', baseBranch], {
       cwd
     })
@@ -3731,18 +3770,19 @@ async function checkoutBaseBranchIfAvailable(baseBranch, cwd = process.cwd()) {
       cwd
     })
     logger.logger.info(`Checked out and reset to ${baseBranch}`)
-  } catch {
+  } catch (e) {
     logger.logger.warn(
       `Could not switch to ${baseBranch}. Proceeding with HEAD.`
     )
+    debug.debugLog(e)
   }
 }
-async function createAndPushBranchIfNeeded(
+async function gitCreateAndPushBranchIfNeeded(
   branch,
   commitMsg,
   cwd = process.cwd()
 ) {
-  if (await branchExists(branch, cwd)) {
+  if (await gitBranchExists(branch, cwd)) {
     logger.logger.warn(`Branch "${branch}" already exists. Skipping creation.`)
     return false
   }
@@ -3760,37 +3800,20 @@ async function createAndPushBranchIfNeeded(
   })
   return true
 }
-function getBaseBranch() {
-  // Lazily access constants.ENV[GITHUB_REF_NAME].
-  return (
-    constants.ENV[GITHUB_REF_NAME] ??
-    // GitHub defaults to branch name "main"
-    // https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/about-branches#about-the-default-branch
-    'main'
-  )
-}
-function getSocketBranchName(purl, toVersion) {
-  const purlObj = packageurlJs.PackageURL.fromString(purl)
-  const namespace = formatBranchName(purlObj.namespace ?? '')
-  const name = formatBranchName(purlObj.name)
-  const version = formatBranchName(toVersion)
-  const fullName = `${namespace ? `${namespace}-` : ''}${name}`
-  return `socket-fix-${fullName}-${version}`
-}
-function getSocketPullRequestTitle(purl, toVersion) {
-  const purlObj = packageurlJs.PackageURL.fromString(purl)
-  const pkgName = getPkgNameFromPurlObj(purlObj)
-  return `Bump ${pkgName} from ${purlObj.version} to ${toVersion}`
-}
-function getSocketPullRequestBody(purl, toVersion) {
-  const purlObj = packageurlJs.PackageURL.fromString(purl)
-  const pkgName = getPkgNameFromPurlObj(purlObj)
-  return `Bumps [${pkgName}](https://socket.dev/${purlObj.type}/package/${pkgName}) from ${purlObj.version} to ${toVersion}.`
+async function gitHardReset(cwd = process.cwd()) {
+  await spawn.spawn('git', ['reset', '--hard'], {
+    cwd
+  })
 }
-function getSocketCommitMessage(purl, toVersion) {
-  const purlObj = packageurlJs.PackageURL.fromString(purl)
-  const pkgName = getPkgNameFromPurlObj(purlObj)
-  return `socket: Bump ${pkgName} from ${purlObj.version} to ${toVersion}`
+async function isInGitRepo(cwd = process.cwd()) {
+  try {
+    await spawn.spawn('git', ['rev-parse', '--is-inside-work-tree'], {
+      cwd,
+      stdio: 'ignore'
+    })
+    return true
+  } catch {}
+  return false
 }
 
 const { GITHUB_ACTIONS, GITHUB_REPOSITORY, SOCKET_SECURITY_GITHUB_PAT } =
@@ -3967,6 +3990,7 @@ async function npmFix(
   })
   // Lazily access constants.ENV[CI].
   const isCi = constants.ENV[CI$1]
+  const isRepo = await isInGitRepo(cwd)
   await arb.buildIdealTree()
   for (const { 0: name, 1: infos } of infoByPkg) {
     const hasUpgrade = !!registry.getManifestData(NPM$f, name)
@@ -4052,10 +4076,10 @@ async function npmFix(
             : undefined)
         }
         spinner?.info(`Installing ${toSpec}`)
-        const baseBranch = getBaseBranch()
+        const baseBranch = getBaseGitBranch()
 
         // eslint-disable-next-line no-await-in-loop
-        await checkoutBaseBranchIfAvailable(baseBranch, cwd)
+        await gitCheckoutBaseBranchIfAvailable(baseBranch, cwd)
         let error
         let errored = false
         let installed = false
@@ -4093,7 +4117,7 @@ async function npmFix(
         }
         if (!errored && shouldOpenPr) {
           // eslint-disable-next-line no-await-in-loop
-          await createAndPushBranchIfNeeded(
+          await gitCreateAndPushBranchIfNeeded(
             branch,
             getSocketCommitMessage(fromPurl, toVersion),
             cwd
@@ -4117,12 +4141,18 @@ async function npmFix(
           if (errored) {
             spinner?.error(`Reverting ${toSpec}`, error)
           }
+          if (isRepo) {
+            // eslint-disable-next-line no-await-in-loop
+            await gitHardReset(cwd)
+          }
           if (saved) {
             editablePkgJson.update(revertData)
-            // eslint-disable-next-line no-await-in-loop
-            await editablePkgJson.save()
+            if (!isRepo) {
+              // eslint-disable-next-line no-await-in-loop
+              await editablePkgJson.save()
+            }
           }
-          if (installed) {
+          if (!isRepo && installed) {
             // eslint-disable-next-line no-await-in-loop
             await install$1(revertTree, {
               cwd
@@ -4388,6 +4418,7 @@ async function pnpmFix(
   })
   // Lazily access constants.ENV[CI].
   const isCi = constants.ENV[CI]
+  const isRepo = await isInGitRepo(cwd)
   let actualTree = await getActualTree(cwd)
   for (const { 0: name, 1: infos } of infoByPkg) {
     if (registry.getManifestData(NPM$c, name)) {
@@ -4452,6 +4483,7 @@ async function pnpmFix(
         )
         const toSpec = `${name}@${toVersionRange}`
         const branch = isCi ? getSocketBranchName(fromPurl, toVersion) : ''
+        const baseBranch = isCi ? getBaseGitBranch() : ''
         const { owner, repo } = isCi
           ? getGitHubEnvRepoInfo()
           : {
@@ -4502,10 +4534,10 @@ async function pnpmFix(
             : undefined)
         }
         spinner?.info(`Installing ${toSpec}`)
-        const baseBranch = getBaseBranch()
-
-        // eslint-disable-next-line no-await-in-loop
-        await checkoutBaseBranchIfAvailable(baseBranch, cwd)
+        if (isCi) {
+          // eslint-disable-next-line no-await-in-loop
+          await gitCheckoutBaseBranchIfAvailable(baseBranch, cwd)
+        }
         let error
         let errored = false
         let installed = false
@@ -4544,7 +4576,7 @@ async function pnpmFix(
         }
         if (!errored && shouldOpenPr) {
           // eslint-disable-next-line no-await-in-loop
-          await createAndPushBranchIfNeeded(
+          await gitCreateAndPushBranchIfNeeded(
             branch,
             getSocketCommitMessage(fromPurl, toVersion),
             cwd
@@ -4568,12 +4600,21 @@ async function pnpmFix(
           if (errored) {
             spinner?.error(`Reverting ${toSpec}`, error)
           }
+          if (isRepo) {
+            // eslint-disable-next-line no-await-in-loop
+            await gitHardReset(cwd)
+          }
           if (saved) {
             editablePkgJson.update(revertData)
-            // eslint-disable-next-line no-await-in-loop
-            await editablePkgJson.save()
+            if (!isRepo) {
+              // eslint-disable-next-line no-await-in-loop
+              await editablePkgJson.save()
+            }
           }
-          if (installed) {
+          if (isRepo) {
+            // eslint-disable-next-line no-await-in-loop
+            actualTree = await getActualTree(cwd)
+          } else if (installed) {
             // eslint-disable-next-line no-await-in-loop
             actualTree = await install(pkgEnvDetails, {
               spinner
@@ -11502,7 +11543,7 @@ void (async () => {
   await vendor.updater({
     name: SOCKET_CLI_BIN_NAME,
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
-    version: '0.14.101',
+    version: '0.14.103',
     ttl: 86_400_000 /* 24 hours in milliseconds */
   })
   try {
@@ -11570,5 +11611,5 @@ void (async () => {
     await shadowNpmInject.captureException(e)
   }
 })()
-//# debugId=44651632-7756-496b-8acd-9d65810541dd
+//# debugId=e925b9d1-907d-4e63-b176-1eb32d8e7284
 //# sourceMappingURL=cli.js.map