@socketsecurity/cli-with-sentry 1.0.71 → 1.0.72

package/bin/npm-cli.js

@@ -6,5 +6,5 @@ const path = require('node:path')
 const rootPath = path.join(__dirname, '..')
 Module.enableCompileCache?.(path.join(rootPath, '.cache'))
 
-const shadowBin = require(path.join(rootPath, 'dist/shadow-bin.js'))
+const shadowBin = require(path.join(rootPath, 'dist/shadow-npm-bin.js'))
 shadowBin('npm')

package/bin/npx-cli.js

@@ -6,5 +6,5 @@ const path = require('node:path')
 const rootPath = path.join(__dirname, '..')
 Module.enableCompileCache?.(path.join(rootPath, '.cache'))
 
-const shadowBin = require(path.join(rootPath, 'dist/shadow-bin.js'))
+const shadowBin = require(path.join(rootPath, 'dist/shadow-npm-bin.js'))
 shadowBin('npx')

package/dist/cli.js

@@ -4327,6 +4327,7 @@ async function npmFix(pkgEnvDetails, fixConfig) {
   return await agentFix(pkgEnvDetails, actualTree, alertsMap, install$1, {
     async beforeInstall(editablePkgJson) {
       revertData = {
+        // Track existing dependencies in the root package.json to revert to later.
         ...(editablePkgJson.content.dependencies && {
           dependencies: {
             ...editablePkgJson.content.dependencies
@@ -4345,24 +4346,34 @@ async function npmFix(pkgEnvDetails, fixConfig) {
       };
     },
     async afterUpdate(editablePkgJson, packument, oldVersion, newVersion) {
-      const isWorkspaceRoot = editablePkgJson.filename === pkgEnvDetails.editablePkgJson.filename;
-      if (isWorkspaceRoot) {
-        const arb = new shadowNpmInject.Arborist({
-          path: pkgEnvDetails.pkgPath,
-          ...flatConfig,
-          ...shadowNpmInject.SAFE_WITH_SAVE_ARBORIST_REIFY_OPTIONS_OVERRIDES
-        });
-        const idealTree = await arb.buildIdealTree();
-        const node = shadowNpmInject.findPackageNode(idealTree, packument.name, oldVersion);
-        if (node) {
-          shadowNpmInject.updateNode(node, newVersion, packument.versions[newVersion]);
-          await arb.reify();
-        }
+      // Exit early if not the root workspace.
+      if (editablePkgJson.filename !== pkgEnvDetails.editablePkgJson.filename) {
+        return;
+      }
+      // Update package-lock.json using @npmcli/arborist.
+      const arb = new shadowNpmInject.Arborist({
+        path: pkgEnvDetails.pkgPath,
+        ...flatConfig,
+        ...shadowNpmInject.SAFE_WITH_SAVE_ARBORIST_REIFY_OPTIONS_OVERRIDES
+      });
+      // Build the ideal tree of nodes that are used to generated the saved
+      // package-lock.json
+      const idealTree = await arb.buildIdealTree();
+      const node = shadowNpmInject.findPackageNode(idealTree, packument.name, oldVersion);
+      if (node) {
+        // Update the ideal tree node.
+        shadowNpmInject.updateNode(node, newVersion, packument.versions[newVersion]);
+        // Save package-lock.json lockfile.
+        await arb.reify();
       }
     },
     async revertInstall(editablePkgJson) {
       if (revertData) {
+        // Revert package.json.
         editablePkgJson.update(revertData);
+        await editablePkgJson.save({
+          ignoreWhitespace: true
+        });
       }
     }
   }, fixConfig);
@@ -4459,8 +4470,12 @@ async function pnpmFix(pkgEnvDetails, fixConfig) {
       cwd,
       spinner
     });
-    lockSrc = maybeActualTree ? await utils.readLockfile(pkgEnvDetails.lockPath) : null;
-    if (lockSrc && maybeActualTree) {
+    if (maybeActualTree) {
+      lockSrc = (await utils.readLockfile(pkgEnvDetails.lockPath)) ?? '';
+    } else {
+      lockSrc = '';
+    }
+    if (lockSrc) {
       actualTree = maybeActualTree;
       lockfile = utils.parsePnpmLockfile(lockSrc);
     } else {
@@ -4498,25 +4513,29 @@ async function pnpmFix(pkgEnvDetails, fixConfig) {
   let revertOverridesSrc = '';
   return await agentFix(pkgEnvDetails, actualTree, alertsMap, install, {
     async beforeInstall(editablePkgJson, packument, oldVersion, newVersion, vulnerableVersionRange, options) {
-      const isWorkspaceRoot = editablePkgJson.filename === pkgEnvDetails.editablePkgJson.filename;
-      // Get current overrides for revert logic.
-      const {
-        overrides: oldOverrides
-      } = getOverridesDataPnpm(pkgEnvDetails, editablePkgJson.content);
-      const oldPnpmSection = editablePkgJson.content[PNPM$6];
-      const overrideKey = `${packument.name}@${vulnerableVersionRange}`;
-      lockSrc = await utils.readLockfile(pkgEnvDetails.lockPath);
-      revertOverrides = undefined;
-      revertOverridesSrc = utils.extractOverridesFromPnpmLockSrc(lockSrc);
-      if (isWorkspaceRoot) {
+      lockSrc = (await utils.readLockfile(pkgEnvDetails.lockPath)) ?? '';
+
+      // Update overrides for the root workspace.
+      if (editablePkgJson.filename === pkgEnvDetails.editablePkgJson.filename) {
+        const {
+          overrides: oldOverrides
+        } = getOverridesDataPnpm(pkgEnvDetails, editablePkgJson.content);
+        const oldPnpmSection = editablePkgJson.content[PNPM$6];
+        const overrideKey = `${packument.name}@${vulnerableVersionRange}`;
+        revertOverridesSrc = utils.extractOverridesFromPnpmLockSrc(lockSrc);
+        // Track existing overrides in the root package.json to revert to later.
         revertOverrides = {
           [PNPM$6]: oldPnpmSection ? {
             ...oldPnpmSection,
             [OVERRIDES$1]: require$$7.hasKeys(oldOverrides) ? {
               ...oldOverrides,
               [overrideKey]: undefined
-            } : undefined
-          } : undefined
+            } :
+            // Properties with undefined values are deleted when saved as JSON.
+            undefined
+          } :
+          // Properties with undefined values are deleted when saved as JSON.
+          undefined
         };
         // Update overrides in the root package.json so that when `pnpm install`
         // generates pnpm-lock.yaml it updates transitive dependencies too.
@@ -4529,9 +4548,15 @@ async function pnpmFix(pkgEnvDetails, fixConfig) {
             }
           }
         });
+      } else {
+        revertOverrides = undefined;
+        revertOverridesSrc = '';
       }
       revertData = {
+        // If "pnpm" or "pnpm.overrides" fields are undefined they will be
+        // deleted when saved.
         ...revertOverrides,
+        // Track existing dependencies in the root package.json to revert to later.
         ...(editablePkgJson.content.dependencies && {
           dependencies: {
             ...editablePkgJson.content.dependencies
@@ -4554,20 +4579,32 @@ async function pnpmFix(pkgEnvDetails, fixConfig) {
         // Revert overrides metadata in package.json now that pnpm-lock.yaml
         // has been updated.
         editablePkgJson.update(revertOverrides);
+        await editablePkgJson.save({
+          ignoreWhitespace: true
+        });
       }
-      await editablePkgJson.save({
-        ignoreWhitespace: true
-      });
-      lockSrc = await utils.readLockfile(pkgEnvDetails.lockPath);
-      const updatedOverridesContent = utils.extractOverridesFromPnpmLockSrc(lockSrc);
-      if (updatedOverridesContent) {
-        lockSrc = lockSrc.replace(updatedOverridesContent, revertOverridesSrc);
-        await fs$1.promises.writeFile(pkgEnvDetails.lockPath, lockSrc, 'utf8');
+      lockSrc = (await utils.readLockfile(pkgEnvDetails.lockPath)) ?? '';
+      // Remove "overrides" block from pnpm-lock.yaml lockfile when processing
+      // the root workspace.
+      if (editablePkgJson.filename === pkgEnvDetails.editablePkgJson.filename) {
+        const updatedOverridesContent = utils.extractOverridesFromPnpmLockSrc(lockSrc);
+        if (updatedOverridesContent) {
+          // Remove "overrides" block from pnpm-lock.yaml lockfile.
+          lockSrc = lockSrc.replace(updatedOverridesContent, revertOverridesSrc);
+          // Save pnpm-lock.yaml lockfile.
+          await fs$1.promises.writeFile(pkgEnvDetails.lockPath, lockSrc, 'utf8');
+        }
       }
     },
     async revertInstall(editablePkgJson) {
       if (revertData) {
+        // Revert package.json.
         editablePkgJson.update(revertData);
+        await editablePkgJson.save({
+          ignoreWhitespace: true
+        });
+        // Revert pnpm-lock.yaml lockfile to be on the safe side.
+        await fs$1.promises.writeFile(pkgEnvDetails.lockPath, lockSrc, 'utf8');
       }
     }
   }, fixConfig);
@@ -7479,7 +7516,7 @@ function updatePkgJsonField(editablePkgJson, field, value) {
           }
         });
       } else {
-        // Properties with undefined values are omitted when saved as JSON.
+        // Properties with undefined values are deleted when saved as JSON.
         editablePkgJson.update(require$$7.hasKeys(oldValue) ? {
           [field]: {
             ...(isPnpmObj ? oldValue : {}),
@@ -7490,7 +7527,7 @@ function updatePkgJsonField(editablePkgJson, field, value) {
         });
       }
     } else if (field === OVERRIDES || field === RESOLUTIONS) {
-      // Properties with undefined values are omitted when saved as JSON.
+      // Properties with undefined values are deleted when saved as JSON.
       editablePkgJson.update({
         [field]: require$$7.hasKeys(value) ? value : undefined
       });
@@ -14594,5 +14631,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=6e0fd7c6-a2c8-49d0-90ec-61ff85e89df9
+//# debugId=e65f1be3-82a5-4c66-a17f-0c3cdbe8bf46
 //# sourceMappingURL=cli.js.map