@socketsecurity/cli-with-sentry 0.15.55 → 0.15.57

package/dist/vendor.js

@@ -32895,7 +32895,7 @@ var isInteractiveExports = /*@__PURE__*/ requireIsInteractive();
 var dist$e = {};
 
 var name$2 = "@socketsecurity/sdk";
-var version$5 = "1.4.41";
+var version$5 = "1.4.42";
 var license = "MIT";
 var description = "SDK for the Socket API client";
 var author = {
@@ -32978,36 +32978,36 @@ var scripts = {
 	"update:deps": "npx --yes npm-check-updates"
 };
 var dependencies = {
-	"@socketsecurity/registry": "1.0.202"
+	"@socketsecurity/registry": "1.0.205"
 };
 var devDependencies = {
 	"@biomejs/biome": "1.9.4",
 	"@dotenvx/dotenvx": "1.44.1",
 	"@eslint/compat": "1.2.9",
 	"@eslint/js": "9.28.0",
-	"@types/node": "22.15.29",
-	"@typescript-eslint/parser": "8.33.0",
-	"@vitest/coverage-v8": "3.1.4",
+	"@types/node": "22.15.30",
+	"@typescript-eslint/parser": "8.33.1",
+	"@vitest/coverage-v8": "3.2.2",
 	"del-cli": "6.0.0",
 	eslint: "9.28.0",
-	"eslint-import-resolver-typescript": "4.4.2",
-	"eslint-plugin-import-x": "4.15.0",
-	"eslint-plugin-jsdoc": "50.6.17",
-	"eslint-plugin-n": "17.18.0",
+	"eslint-import-resolver-typescript": "4.4.3",
+	"eslint-plugin-import-x": "4.15.1",
+	"eslint-plugin-jsdoc": "50.7.1",
+	"eslint-plugin-n": "17.19.0",
 	"eslint-plugin-sort-destructure-keys": "2.0.0",
 	"eslint-plugin-unicorn": "56.0.1",
 	globals: "16.2.0",
 	husky: "9.1.7",
-	knip: "5.59.1",
+	knip: "5.60.2",
 	"lint-staged": "16.1.0",
 	nock: "14.0.5",
 	"npm-run-all2": "8.0.4",
 	"openapi-typescript": "6.7.6",
-	oxlint: "0.17.0",
+	oxlint: "0.18.0",
 	"type-coverage": "2.29.7",
 	typescript: "~5.8.3",
-	"typescript-eslint": "8.33.0",
-	vitest: "3.1.4"
+	"typescript-eslint": "8.33.1",
+	vitest: "3.2.2"
 };
 var overrides = {
 	vite: "6.3.5"
@@ -58768,7 +58768,7 @@ function requireAst() {
         return [s, (0, unescape_js_1.unescape)(this.toString()), false, false];
       }
       // XXX abstract out this map method
-      let bodyDotAllowed = !repeated || allowDot || dot || false ? '' : this.#partsToRegExp(true);
+      let bodyDotAllowed = !repeated || allowDot || dot || !startNoDot ? '' : this.#partsToRegExp(true);
       if (bodyDotAllowed === body) {
         bodyDotAllowed = '';
       }
@@ -62505,7 +62505,7 @@ function requireCommonjs$c() {
   const IFSOCK = 0b1100;
   const IFMT = 0b1111;
   // mask to unset low 4 bits
-  const IFMT_UNKNOWN = -16;
+  const IFMT_UNKNOWN = ~IFMT;
   // set after successfully calling readdir() and getting entries.
   const READDIR_CALLED = 0b0000_0001_0000;
   // set after a successful lstat()
@@ -62808,7 +62808,7 @@ function requireCommonjs$c() {
         provisional: 0
       });
       this.#children.set(this, children);
-      this.#type &= -17;
+      this.#type &= ~READDIR_CALLED;
       return children;
     }
     /**
@@ -77525,7 +77525,7 @@ function requireCommonjs$8() {
   const IFSOCK = 0b1100;
   const IFMT = 0b1111;
   // mask to unset low 4 bits
-  const IFMT_UNKNOWN = -16;
+  const IFMT_UNKNOWN = ~IFMT;
   // set after successfully calling readdir() and getting entries.
   const READDIR_CALLED = 0b0000_0001_0000;
   // set after a successful lstat()
@@ -77828,7 +77828,7 @@ function requireCommonjs$8() {
         provisional: 0
       });
       this.#children.set(this, children);
-      this.#type &= -17;
+      this.#type &= ~READDIR_CALLED;
       return children;
     }
     /**
@@ -134545,7 +134545,7 @@ function requireCommonjs$3() {
   const IFSOCK = 0b1100;
   const IFMT = 0b1111;
   // mask to unset low 4 bits
-  const IFMT_UNKNOWN = -16;
+  const IFMT_UNKNOWN = ~IFMT;
   // set after successfully calling readdir() and getting entries.
   const READDIR_CALLED = 0b0000_0001_0000;
   // set after a successful lstat()
@@ -134848,7 +134848,7 @@ function requireCommonjs$3() {
         provisional: 0
       });
       this.#children.set(this, children);
-      this.#type &= -17;
+      this.#type &= ~READDIR_CALLED;
       return children;
     }
     /**
@@ -164963,5 +164963,5 @@ exports.terminalLinkExports = terminalLinkExports;
 exports.updater = updater$1;
 exports.yargsParser = yargsParser;
 exports.yoctocolorsCjsExports = yoctocolorsCjsExports;
-//# debugId=51c49058-e5c5-4c4b-b329-31681ce29a33
+//# debugId=3979c328-ebb2-4cf5-bbd9-17c0bacec526
 //# sourceMappingURL=vendor.js.map

package/external/@coana-tech/cli/cli.mjs

@@ -212320,7 +212320,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version2 = "14.9.20";
+var version2 = "14.9.22";
 
 // ../../node_modules/.pnpm/axios@1.9.0/node_modules/axios/lib/helpers/bind.js
 function bind2(fn2, thisArg) {
@@ -215683,7 +215683,17 @@ async function scanForVulnerabilitiesSocketMode(dependencyTree) {
       const dependencyTreeNode = dependencyTree.transitiveDependencies[dependencyIdentifier];
       if (!dependencyTreeNode)
         throw new Error(`Dependency tree does not contain dependency ${simplePurlForComponent}`);
-      dependencyTreeNode.purl = c3.purl;
+      dependencyTreeNode.purlObj = {
+        type: c3.purl_type,
+        namespace: c3.namespace ?? void 0,
+        name: c3.name,
+        version: c3.version ?? void 0,
+        subpath: c3.subpath ?? void 0,
+        artifactId: c3.artifactId ?? void 0,
+        artifact_id: c3.artifact_id ?? void 0,
+        qualifiers: c3.qualifiers ?? void 0,
+        purlString: c3.purl
+      };
       for (const vulnerability of c3.vulnerabilities) {
         vulnerabilities.push({
           url: vulnerability.ghsaId,
@@ -215801,6 +215811,112 @@ function getNamespaceAndName(ecosystem, packageName) {
   return { namespace: namespace2, name };
 }
 
+// dist/internal/socket-report.js
+function toSocketFacts(report, dependencyTrees) {
+  const components = [];
+  const purlToIndex = /* @__PURE__ */ new Map();
+  for (const dependencyTree of dependencyTrees) {
+    const depIdentifierToPurl = Object.fromEntries(Object.entries(dependencyTree.dependencyTree.transitiveDependencies).map(([depIdentifier, dep]) => {
+      const purl = dep.purlObj.purlString;
+      if (purl && !purlToIndex.has(purl)) {
+        purlToIndex.set(purl, components.length);
+        const depTreeNode = dependencyTree.dependencyTree.transitiveDependencies[depIdentifier];
+        components[purlToIndex.get(purl)] = {
+          id: purlToIndex.get(purl).toString(),
+          type: depTreeNode.purlObj.type,
+          name: depTreeNode.purlObj.name,
+          version: depTreeNode.purlObj.version,
+          namespace: depTreeNode.purlObj.namespace,
+          subpath: depTreeNode.purlObj.subpath,
+          artifact_id: depTreeNode.purlObj.artifact_id,
+          artifactId: depTreeNode.purlObj.artifactId,
+          qualifiers: depTreeNode.purlObj.qualifiers,
+          // direct: false, // TODO: add direct flag
+          // dev: false, // TODO: add dev flag
+          dependencies: []
+        };
+      }
+      return [depIdentifier, purl];
+    }));
+    for (const [depIdentifier, purl] of Object.entries(depIdentifierToPurl)) {
+      const depTreeNode = dependencyTree.dependencyTree.transitiveDependencies[depIdentifier];
+      const component = components[purlToIndex.get(purl)];
+      depTreeNode.dependencies?.forEach((dep) => {
+        const depPurl = depIdentifierToPurl[dep];
+        const depIndex = purlToIndex.get(depPurl);
+        if (!component.dependencies?.includes(depIndex.toString())) {
+          component.dependencies.push(depIndex.toString());
+        }
+      });
+    }
+  }
+  for (const vulnerability of report.vulnerabilities) {
+    const component = components[purlToIndex.get(vulnerability.purl)];
+    if (!component) {
+      throw new Error(`Component not found for vulnerability ${vulnerability.purl}`);
+    }
+    if (!component.reachability) {
+      component.reachability = [];
+    }
+    let reachabilityForGHSA = component.reachability?.find((r2) => r2.ghsa_id === vulnerability.vulnerabilityUrl.replace("https://github.com/advisories/", ""));
+    if (!reachabilityForGHSA) {
+      reachabilityForGHSA = {
+        ghsa_id: vulnerability.vulnerabilityUrl.replace("https://github.com/advisories/", ""),
+        reachability: []
+      };
+      component.reachability.push(reachabilityForGHSA);
+    }
+    reachabilityForGHSA.reachability.push({
+      ...toSocketReachabilitySchema(vulnerability),
+      workspacePath: vulnerability.workspacePath,
+      subprojectPath: vulnerability.subprojectPath
+    });
+  }
+  return {
+    components
+  };
+}
+function toSocketReachabilitySchema(vulnerability) {
+  if (vulnerability.codeAwareScanResult.type === "missingVulnerabilityPattern") {
+    return { type: "missing_support" };
+  }
+  if (vulnerability.codeAwareScanResult.type === "noAnalysisCheck") {
+    return { type: "undeterminable_reachability" };
+  }
+  if (vulnerability.codeAwareScanResult.type === "analysisError") {
+    return { type: "error", error: vulnerability.codeAwareScanResult.message };
+  }
+  if (vulnerability.codeAwareScanResult.type === "otherError") {
+    return { type: "error", error: vulnerability.codeAwareScanResult.message };
+  }
+  if (vulnerability.codeAwareScanResult.type === "success") {
+    if (Array.isArray(vulnerability.codeAwareScanResult.detectedOccurrences)) {
+      if (vulnerability.codeAwareScanResult.detectedOccurrences.length === 0) {
+        return { type: "unreachable" };
+      }
+      throw new Error("Detected occurrences is an array with elements. This is a bug.");
+    }
+    const detOccWithStacks = vulnerability.codeAwareScanResult.detectedOccurrences;
+    if (detOccWithStacks.stacks.length === 0) {
+      return { type: "unreachable" };
+    }
+    if (detOccWithStacks.analysisLevel === "function-level") {
+      return {
+        type: "reachable",
+        analysisLevel: detOccWithStacks.analysisLevel,
+        matches: detOccWithStacks.stacks
+      };
+    } else if (detOccWithStacks.analysisLevel === "class-level") {
+      return {
+        type: "reachable",
+        analysisLevel: detOccWithStacks.analysisLevel,
+        matches: detOccWithStacks.stacks
+      };
+    }
+  }
+  throw new Error("Unknown codeAwareScanResult type");
+}
+
 // dist/cli-core.js
 var { omit, partition, pick } = import_lodash15.default;
 var CliCore = class {
@@ -215870,7 +215986,7 @@ var CliCore = class {
         }
       }
     }
-    if (!this.options.repoUrl && !this.options.projectName && !this.options.disableReportSubmission && !this.options.offlineDatabase) {
+    if (!this.options.repoUrl && !this.options.projectName && !this.options.disableReportSubmission && !this.options.offlineDatabase && !this.options.socketMode) {
       throw new Error("Either --repo-url or --project-name is required for dashboard integration. Use --disable-report-submission to skip report submission.");
     }
     if ((this.options.disableReportSubmission || this.options.offlineDatabase) && !this.options.outputDir && !this.options.printReport) {
@@ -215936,10 +216052,7 @@ var CliCore = class {
       if (!this.reportDependencyTrees) {
         throw new Error("Dependency trees should be available when using --socket-mode");
       }
-      const socketReport = {
-        ...report,
-        dependencyTrees: this.reportDependencyTrees
-      };
+      const socketReport = toSocketFacts(report, this.reportDependencyTrees);
       const outputFile = resolve24(this.options.socketMode);
       await writeFile10(outputFile, JSON.stringify(socketReport, null, 2));
       logger.info(kleur_default.green(`Socket report written to: ${outputFile}`));
@@ -216278,7 +216391,9 @@ var CliCore = class {
         packageVersion: vulnerableNode.version ?? "",
         ecosystem: v.ecosystem ?? "NPM",
         dependencyType,
-        reachability
+        reachability,
+        purl: v.purl,
+        purlType: v.purlType
       };
     });
   }

package/external/@socketsecurity/registry/external/@npmcli/package-json/index.js

@@ -4561,7 +4561,9 @@ function requireAst() {
       }
       // XXX abstract out this map method
       let bodyDotAllowed =
-        !repeated || allowDot || dot || false ? '' : this.#partsToRegExp(true)
+        !repeated || allowDot || dot || !startNoDot
+          ? ''
+          : this.#partsToRegExp(true)
       if (bodyDotAllowed === body) {
         bodyDotAllowed = ''
       }
@@ -7078,7 +7080,7 @@ function requireCommonjs$1() {
   const IFSOCK = 0b1100
   const IFMT = 0b1111
   // mask to unset low 4 bits
-  const IFMT_UNKNOWN = -16
+  const IFMT_UNKNOWN = ~IFMT
   // set after successfully calling readdir() and getting entries.
   const READDIR_CALLED = 0b0000_0001_0000
   // set after a successful lstat()
@@ -7406,7 +7408,7 @@ function requireCommonjs$1() {
         provisional: 0
       })
       this.#children.set(this, children)
-      this.#type &= -17
+      this.#type &= ~READDIR_CALLED
       return children
     }
     /**
@@ -14379,7 +14381,7 @@ function requireLib$5() {
     if (!name.length) {
       errors.push('name length must be greater than zero')
     }
-    if (name.match(/^\./)) {
+    if (name.startsWith('.')) {
       errors.push('name cannot start with a period')
     }
     if (name.match(/^_/)) {
@@ -14419,6 +14421,9 @@ function requireLib$5() {
       if (nameMatch) {
         const user = nameMatch[1]
         const pkg = nameMatch[2]
+        if (pkg.startsWith('.')) {
+          errors.push('name cannot start with a period')
+        }
         if (
           encodeURIComponent(user) === user &&
           encodeURIComponent(pkg) === pkg

package/external/@socketsecurity/registry/external/@socketregistry/yocto-spinner.js

@@ -196,19 +196,18 @@ function requireYoctoSpinner() {
     return _stripVTControlCharacters(string)
   }
   class YoctoSpinner {
-    #color
-    #currentFrame = -1
-    #exitHandlerBound
     #frames
-    #indention = ''
     #interval
+    #currentFrame = -1
+    #timer
+    #text
+    #stream
+    #color
+    #lines = 0
+    #exitHandlerBound
     #isInteractive
     #lastSpinnerFrameTime = 0
-    #lines = 0
-    #signal
-    #stream
-    #text
-    #timer
+    #isSpinning = false
     constructor(options = {}) {
       const opts = {
         __proto__: null,
@@ -216,114 +215,82 @@ function requireYoctoSpinner() {
       }
       const spinner = opts.spinner ?? getDefaultSpinner()
       const stream = opts.stream ?? getProcess().stderr
-      this.#color = opts.color ?? 'cyan'
-      this.#exitHandlerBound = this.#exitHandler.bind(this)
       this.#frames = spinner.frames
-      this.#interval = spinner.interval ?? getDefaultSpinner().interval
+      this.#interval = spinner.interval
+      this.#text = options.text ?? ''
+      this.#stream = stream ?? process.stderr
+      this.#color = options.color ?? 'cyan'
       this.#isInteractive = !!stream.isTTY && isProcessInteractive()
-      this.#signal = opts.signal
-      this.#stream = stream
-      this.#text = opts.text ?? ''
-    }
-    #clearTimer() {
-      clearInterval(this.#timer)
-      this.#timer = undefined
+      this.#exitHandlerBound = this.#exitHandler.bind(this)
     }
-    #exitHandler() {
+    start(text) {
+      if (text) {
+        this.#text = text
+      }
       if (this.isSpinning) {
-        this.stop()
+        return this
       }
-    }
-    #hideCursor() {
+      this.#isSpinning = true
+      this.#hideCursor()
+      this.#render()
+      this.#subscribeToProcessEvents()
+
+      // Only start the timer in interactive mode
       if (this.#isInteractive) {
-        this.#write('\u001B[?25l')
+        this.#timer = setInterval(() => {
+          this.#render()
+        }, this.#interval)
       }
+      return this
     }
-    #lineCount(text) {
-      const width = this.#stream.columns ?? defaultTtyColumns
-      const lines = stripVTControlCharacters(text).split('\n')
-      let lineCount = 0
-      for (const line of lines) {
-        lineCount += Math.max(1, Math.ceil(line.length / width))
-      }
-      return lineCount
-    }
-    #render() {
-      // Ensure we only update the spinner frame at the wanted interval,
-      // even if the frame method is called more often.
-      const now = Date.now()
-      if (
-        this.#currentFrame === -1 ||
-        now - this.#lastSpinnerFrameTime >= this.#interval
-      ) {
-        this.#currentFrame = (this.#currentFrame + 1) % this.#frames.length
-        this.#lastSpinnerFrameTime = now
+    stop(finalText) {
+      if (!this.isSpinning) {
+        return this
       }
-      const colors = getYoctocolors()
-      const applyColor = colors[this.#color] ?? colors.cyan
-      const frame = this.#frames[this.#currentFrame]
-      let string = `${frame ? applyColor(frame) : ''}${this.#text ? ` ${this.#text}` : ''}`
-      if (string) {
-        if (this.#indention.length) {
-          string = `${this.#indention}${string}`
-        }
-        if (!this.#isInteractive) {
-          string += '\n'
-        }
+      this.#isSpinning = false
+      if (this.#timer) {
+        clearInterval(this.#timer)
+        this.#timer = undefined
       }
+      this.#showCursor()
       this.clear()
-      this.#write(string)
-      if (this.#isInteractive) {
-        this.#lines = this.#lineCount(string)
-      }
-    }
-    #setTimer() {
-      const timeout = setInterval(() => {
-        this.#render()
-      }, this.#interval)
-      // Guard unref usage in case yocto-spinner is somehow built to run in a browser.
-      // https://nodejs.org/api/timers.html#timeoutunref
-      timeout?.unref?.()
-      this.#timer = timeout
-    }
-    #showCursor() {
-      if (this.#isInteractive) {
-        this.#write('\u001B[?25h')
+      this.#unsubscribeFromProcessEvents()
+      if (finalText) {
+        this.#stream.write(`${finalText}\n`)
       }
-    }
-    #subscribeToExitEvents() {
-      this.#signal?.addEventListener('abort', this.#exitHandlerBound)
-      process.once('SIGINT', this.#exitHandlerBound)
-      process.once('SIGTERM', this.#exitHandlerBound)
+      return this
     }
     #symbolStop(symbolType, text) {
       const symbols = getLogSymbols()
       return this.stop(`${symbols[symbolType]} ${text ?? this.#text}`)
     }
-    #unsubscribeFromExitEvents() {
-      this.#signal?.removeEventListener('abort', this.#exitHandlerBound)
-      process.off('SIGINT', this.#exitHandlerBound)
-      process.off('SIGTERM', this.#exitHandlerBound)
+    success(text) {
+      return this.#symbolStop('success', text)
     }
-    #write(text) {
-      this.#stream.write(text)
+    error(text) {
+      return this.#symbolStop('error', text)
     }
-    get color() {
-      return this.#color
+    warning(text) {
+      return this.#symbolStop('warning', text)
     }
-    set color(value) {
-      this.#color = value
-      this.#render()
+    info(text) {
+      return this.#symbolStop('info', text)
     }
     get isSpinning() {
-      return this.#timer !== undefined
+      return this.#isSpinning
     }
     get text() {
       return this.#text
     }
     set text(value) {
-      const text = value ?? ''
-      this.#text = typeof text === 'string' ? text : String(text)
+      this.#text = value ?? ''
+      this.#render()
+    }
+    get color() {
+      return this.#color
+    }
+    set color(value) {
+      this.#color = value
       this.#render()
     }
     clear() {
@@ -331,7 +298,7 @@ function requireYoctoSpinner() {
         return this
       }
       this.#stream.cursorTo(0)
-      for (let index = 0; index < this.#lines; index += 1) {
+      for (let index = 0; index < this.#lines; index++) {
         if (index > 0) {
           this.#stream.moveCursor(0, -1)
         }
@@ -340,55 +307,71 @@ function requireYoctoSpinner() {
       this.#lines = 0
       return this
     }
-    dedent(spaces = 2) {
-      this.#indention = this.#indention.slice(0, -spaces)
-      return this
-    }
-    error(text) {
-      return this.#symbolStop('error', text)
-    }
-    indent(spaces = 2) {
-      this.#indention += ' '.repeat(spaces)
-      return this
-    }
-    info(text) {
-      return this.#symbolStop('info', text)
+    #render() {
+      // Ensure we only update the spinner frame at the wanted interval,
+      // even if the frame method is called more often.
+      const now = Date.now()
+      if (
+        this.#currentFrame === -1 ||
+        now - this.#lastSpinnerFrameTime >= this.#interval
+      ) {
+        this.#currentFrame = ++this.#currentFrame % this.#frames.length
+        this.#lastSpinnerFrameTime = now
+      }
+      const colors = getYoctocolors()
+      const applyColor = colors[this.#color] ?? colors.cyan
+      const frame = this.#frames[this.#currentFrame]
+      let string = `${applyColor(frame)} ${this.#text}`
+      if (!this.#isInteractive) {
+        string += '\n'
+      }
+      this.clear()
+      this.#write(string)
+      if (this.#isInteractive) {
+        this.#lines = this.#lineCount(string)
+      }
     }
-    resetIndent() {
-      this.#indention = ''
-      return this
+    #write(text) {
+      this.#stream.write(text)
     }
-    start(text) {
-      if (text) {
-        this.#text = text
-      }
-      if (this.isSpinning) {
-        return this
+    #lineCount(text) {
+      const width = this.#stream.columns ?? defaultTtyColumns
+      const lines = stripVTControlCharacters(text).split('\n')
+      let lineCount = 0
+      for (const line of lines) {
+        lineCount += Math.max(1, Math.ceil(line.length / width))
       }
-      this.#hideCursor()
-      this.#render()
-      this.#setTimer()
-      this.#subscribeToExitEvents()
-      return this
+      return lineCount
     }
-    stop(finalText) {
-      if (!this.isSpinning) {
-        return this
+    #hideCursor() {
+      if (this.#isInteractive) {
+        this.#write('\u001B[?25l')
       }
-      this.#showCursor()
-      this.clear()
-      this.#clearTimer()
-      this.#unsubscribeFromExitEvents()
-      if (finalText) {
-        this.#write(`${this.#indention}${finalText}\n`)
+    }
+    #showCursor() {
+      if (this.#isInteractive) {
+        this.#write('\u001B[?25h')
       }
-      return this
     }
-    success(text) {
-      return this.#symbolStop('success', text)
+    #subscribeToProcessEvents() {
+      process.once('SIGINT', this.#exitHandlerBound)
+      process.once('SIGTERM', this.#exitHandlerBound)
     }
-    warning(text) {
-      return this.#symbolStop('warning', text)
+    #unsubscribeFromProcessEvents() {
+      process.off('SIGINT', this.#exitHandlerBound)
+      process.off('SIGTERM', this.#exitHandlerBound)
+    }
+    #exitHandler(signal) {
+      if (this.isSpinning) {
+        this.stop()
+      }
+
+      // SIGINT: 128 + 2
+      // SIGTERM: 128 + 15
+      const exitCode =
+        signal === 'SIGINT' ? 130 : signal === 'SIGTERM' ? 143 : 1
+      // eslint-disable-next-line n/no-process-exit
+      process.exit(exitCode)
     }
   }
   yoctoSpinner = function yoctoSpinner(options) {

package/external/@socketsecurity/registry/external/@yarnpkg/extensions.js

@@ -1378,6 +1378,24 @@ function requireLib() {
           csstype: `^3.0.10`
         }
       }
+    ],
+    // https://github.com/fastify/fastify-type-provider-typebox/issues/114
+    // https://github.com/fastify/fastify-type-provider-typebox/pull/165
+    [
+      `@fastify/type-provider-typebox@^5.0.0`,
+      {
+        peerDependencies: {
+          fastify: `^5.0.0`
+        }
+      }
+    ],
+    [
+      `@fastify/type-provider-typebox@^4.0.0`,
+      {
+        peerDependencies: {
+          fastify: `^4.0.0`
+        }
+      }
     ]
   ]
   return lib