@socketsecurity/cli-with-sentry 0.14.129 → 0.14.130

package/dist/require/shadow-npm-inject.js

@@ -627,7 +627,7 @@ async function setupSdk(
       // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_NAME']".
       name: '@socketsecurity/cli',
       // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
-      version: '0.14.129',
+      version: '0.14.130',
       // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_HOMEPAGE']".
       homepage: 'https://github.com/SocketDev/socket-cli'
     })
@@ -1583,56 +1583,36 @@ function getDetailsFromDiff(diff_, options) {
 function isTopLevel(tree, node) {
   return tree.children.get(node.name) === node
 }
-function updateNode(
-  node,
-  packument,
-  vulnerableVersionRange,
-  firstPatchedVersionIdentifier
-) {
-  const availableVersions = Object.keys(packument.versions)
-  // Find the highest non-vulnerable version within the same major range
-  const targetVersion = findBestPatchVersion(
-    node,
-    availableVersions,
-    vulnerableVersionRange
-  )
-  const targetPackument = targetVersion
-    ? packument.versions[targetVersion]
-    : undefined
-  // Check !targetVersion to make TypeScript happy.
-  if (!targetVersion || !targetPackument) {
-    // No suitable patch version found.
-    return false
-  }
+function updateNode(node, newVersion, newVersionPackument) {
   // Object.defineProperty is needed to set the version property and replace
-  // the old value with targetVersion.
+  // the old value with newVersion.
   Object.defineProperty(node, 'version', {
     configurable: true,
     enumerable: true,
-    get: () => targetVersion
+    get: () => newVersion
   })
   // Update package.version associated with the node.
-  node.package.version = targetVersion
+  node.package.version = newVersion
   // Update node.resolved.
   const purlObj = packageurlJs.PackageURL.fromString(`pkg:npm/${node.name}`)
-  node.resolved = `${NPM_REGISTRY_URL}/${node.name}/-/${purlObj.name}-${targetVersion}.tgz`
+  node.resolved = `${NPM_REGISTRY_URL}/${node.name}/-/${purlObj.name}-${newVersion}.tgz`
   // Update node.integrity with the targetPackument.dist.integrity value if available
   // else delete node.integrity so a new value is resolved for the target version.
-  const { integrity } = targetPackument.dist
+  const { integrity } = newVersionPackument.dist
   if (integrity) {
     node.integrity = integrity
   } else {
     delete node.integrity
   }
   // Update node.package.deprecated based on targetPackument.deprecated.
-  if (objects.hasOwn(targetPackument, 'deprecated')) {
-    node.package['deprecated'] = targetPackument.deprecated
+  if (objects.hasOwn(newVersionPackument, 'deprecated')) {
+    node.package['deprecated'] = newVersionPackument.deprecated
   } else {
     delete node.package['deprecated']
   }
   // Update node.package.dependencies.
   const newDeps = {
-    ...targetPackument.dependencies
+    ...newVersionPackument.dependencies
   }
   const { dependencies: oldDeps } = node.package
   node.package.dependencies = newDeps
@@ -1659,13 +1639,12 @@ function updateNode(
       )
     }
   }
-  return true
 }
 function updatePackageJsonFromNode(
   editablePkgJson,
   tree,
   node,
-  targetVersion,
+  newVersion,
   rangeStyle
 ) {
   let result = false
@@ -1682,7 +1661,7 @@ function updatePackageJsonFromNode(
     if (depObject) {
       const oldRange = depObject[name]
       if (oldRange) {
-        const newRange = applyRange(oldRange, targetVersion, rangeStyle)
+        const newRange = applyRange(oldRange, newVersion, rangeStyle)
         if (oldRange !== newRange) {
           result = true
           editablePkgJson.update({
@@ -1716,6 +1695,7 @@ function isArtifactAlertCve(alert) {
 
 const ALERT_FIX_TYPE = /*#__PURE__*/ (function (ALERT_FIX_TYPE) {
   ALERT_FIX_TYPE['cve'] = 'cve'
+  ALERT_FIX_TYPE['remove'] = 'remove'
   ALERT_FIX_TYPE['upgrade'] = 'upgrade'
   return ALERT_FIX_TYPE
 })({})
@@ -2612,5 +2592,5 @@ exports.supportedConfigKeys = supportedConfigKeys
 exports.updateConfigValue = updateConfigValue
 exports.updateNode = updateNode
 exports.updatePackageJsonFromNode = updatePackageJsonFromNode
-//# debugId=8912efe8-10b0-4b17-afba-c7a406c69a66
+//# debugId=958a7911-f71e-4666-9f2e-6ffcd2e9511c
 //# sourceMappingURL=shadow-npm-inject.js.map