@socketsecurity/cli-with-sentry 0.15.25 → 0.15.27

package/dist/cli.js

@@ -3684,12 +3684,14 @@ async function gitEnsureIdentity(name, email, cwd = process.cwd()) {
     cwd
   };
   const identEntries = [['user.email', name], ['user.name', email]];
+  debug.debugLog('identEntries', identEntries);
   await Promise.all(identEntries.map(async ({
     0: prop,
     1: value
   }) => {
     try {
       const output = await spawn.spawn('git', ['config', '--get', prop], stdioPipeOptions);
+      debug.debugLog(`git config --get ${prop}`, output.stdout.trim());
       if (output.stdout.trim() !== value) {
         await spawn.spawn('git', ['config', prop, value], stdioIgnoreOptions);
       }
@@ -4286,6 +4288,10 @@ async function npmFix(pkgEnvDetails, {
           firstPatchedVersionIdentifier,
           vulnerableVersionRange
         } of infos.values()) {
+          if (vendor.semverExports.gte(oldVersion, firstPatchedVersionIdentifier)) {
+            debug.debugLog(`${oldId} is >= ${firstPatchedVersionIdentifier}, skipping.`);
+            continue infosLoop;
+          }
           const newVersion = shadowInject.findBestPatchVersion(node, availableVersions, vulnerableVersionRange);
           const newVersionPackument = newVersion ? packument.versions[newVersion] : undefined;
           if (!(newVersion && newVersionPackument)) {
@@ -4688,7 +4694,7 @@ async function pnpmFix(pkgEnvDetails, {
 
       // actualTree may not be defined on the first iteration of pkgJsonPathsLoop.
       if (!actualTree) {
-        const maybeActualTree = fs$1.existsSync(path.join(rootPath, 'node_modules')) ?
+        const maybeActualTree = isCi && fs$1.existsSync(path.join(rootPath, 'node_modules')) ?
         // eslint-disable-next-line no-await-in-loop
         await getActualTree(cwd) :
         // eslint-disable-next-line no-await-in-loop
@@ -4746,6 +4752,10 @@ async function pnpmFix(pkgEnvDetails, {
           firstPatchedVersionIdentifier,
           vulnerableVersionRange
         } of infos.values()) {
+          if (vendor.semverExports.gte(oldVersion, firstPatchedVersionIdentifier)) {
+            debug.debugLog(`${oldId} is >= ${firstPatchedVersionIdentifier}, skipping.`);
+            continue infosLoop;
+          }
           const newVersion = shadowInject.findBestPatchVersion(node, availableVersions, vulnerableVersionRange);
           const newVersionPackument = newVersion ? packument.versions[newVersion] : undefined;
           if (!(newVersion && newVersionPackument)) {
@@ -12694,5 +12704,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=ce95f80f-4315-4dd0-a8c9-3097f68b9b18
+//# debugId=6146693d-aec6-4897-9f06-173f731fa9c8
 //# sourceMappingURL=cli.js.map