@socketsecurity/cli-with-sentry 1.1.12 → 1.1.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +36 -30
- package/dist/cli.js +27 -7
- package/dist/cli.js.map +1 -1
- package/dist/constants.js +3 -3
- package/dist/constants.js.map +1 -1
- package/dist/tsconfig.dts.tsbuildinfo +1 -1
- package/dist/types/commands/fix/cmd-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/coana-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/handle-fix.d.mts +3 -1
- package/dist/types/commands/fix/handle-fix.d.mts.map +1 -1
- package/dist/types/commands/fix/types.d.mts +2 -0
- package/dist/types/commands/fix/types.d.mts.map +1 -1
- package/dist/types/commands/scan/fetch-create-org-full-scan.d.mts +1 -1
- package/dist/types/commands/scan/fetch-create-org-full-scan.d.mts.map +1 -1
- package/dist/types/shadow/npm/install.d.mts +1 -1
- package/dist/types/shadow/npm/install.d.mts.map +1 -1
- package/dist/utils.js.map +1 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -4,15 +4,21 @@ All notable changes to this project will be documented in this file.
|
|
|
4
4
|
|
|
5
5
|
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
|
|
6
6
|
|
|
7
|
+
## [1.1.13](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.13) - 2025-09-16
|
|
8
|
+
|
|
9
|
+
### Added
|
|
10
|
+
- New `--output-file` flag for `socket fix` to save computed fixes to a JSON file
|
|
11
|
+
- New `--only-compute` flag for `socket fix` to compute fixes without applying them
|
|
12
|
+
|
|
7
13
|
## [1.1.12](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.12) - 2025-09-15
|
|
8
14
|
|
|
9
15
|
### Fixed
|
|
10
|
-
-
|
|
16
|
+
- Enhanced security alert processing for more reliable operations
|
|
11
17
|
|
|
12
18
|
## [1.1.11](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.11) - 2025-09-12
|
|
13
19
|
|
|
14
20
|
### Fixed
|
|
15
|
-
-
|
|
21
|
+
- Improved multipart upload reliability with Socket SDK update
|
|
16
22
|
|
|
17
23
|
## [1.1.10](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.10) - 2025-09-11
|
|
18
24
|
|
|
@@ -30,7 +36,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
|
|
|
30
36
|
## [1.1.8](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.8) - 2025-09-11
|
|
31
37
|
|
|
32
38
|
### Changed
|
|
33
|
-
-
|
|
39
|
+
- Clearer permission error messages to help resolve access issues
|
|
34
40
|
|
|
35
41
|
## [1.1.7](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.7) - 2025-09-11
|
|
36
42
|
|
|
@@ -38,18 +44,18 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
|
|
|
38
44
|
- Control spinner display with new `--no-spinner` flag
|
|
39
45
|
|
|
40
46
|
### Fixed
|
|
41
|
-
-
|
|
47
|
+
- Enhanced proxy support for flexible network configurations
|
|
42
48
|
|
|
43
49
|
## [1.1.6](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.6) - 2025-09-10
|
|
44
50
|
|
|
45
51
|
### Fixed
|
|
46
|
-
-
|
|
52
|
+
- Improved pull request operations with better cache management
|
|
47
53
|
|
|
48
54
|
## [1.1.5](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.5) - 2025-09-10
|
|
49
55
|
|
|
50
56
|
### Fixed
|
|
51
|
-
-
|
|
52
|
-
-
|
|
57
|
+
- Enhanced reachability analysis spinner for consistent feedback
|
|
58
|
+
- Better working directory control with `--cwd` flag improvements
|
|
53
59
|
|
|
54
60
|
## [1.1.4](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.4) - 2025-09-09
|
|
55
61
|
|
|
@@ -91,7 +97,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
|
|
|
91
97
|
- Reimplemented `--range-style` flag for `socket fix`
|
|
92
98
|
|
|
93
99
|
### Fixed
|
|
94
|
-
-
|
|
100
|
+
- Enhanced CI/CD compatibility for reachability analysis and fixes
|
|
95
101
|
|
|
96
102
|
## [1.0.110](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.110) - 2025-09-03
|
|
97
103
|
|
|
@@ -101,112 +107,112 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
|
|
|
101
107
|
## [1.0.109](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.109) - 2025-09-03
|
|
102
108
|
|
|
103
109
|
### Changed
|
|
104
|
-
-
|
|
110
|
+
- Improved build environment handling for better compatibility
|
|
105
111
|
|
|
106
112
|
## [1.0.108](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.108) - 2025-09-03
|
|
107
113
|
|
|
108
114
|
### Changed
|
|
109
|
-
-
|
|
115
|
+
- Cleaner output from wrapped commands for focused results
|
|
110
116
|
|
|
111
117
|
## [1.0.107](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.107) - 2025-09-02
|
|
112
118
|
|
|
113
119
|
### Fixed
|
|
114
|
-
-
|
|
120
|
+
- Restored build stability for reliable deployments
|
|
115
121
|
|
|
116
122
|
## [1.0.106](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.106) - 2025-09-02
|
|
117
123
|
|
|
118
124
|
### Added
|
|
119
|
-
-
|
|
125
|
+
- Control reachability analysis caching with new `--reach-skip-cache` flag
|
|
120
126
|
|
|
121
127
|
## [1.0.104](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.104) - 2025-08-29
|
|
122
128
|
|
|
123
129
|
### Fixed
|
|
124
|
-
-
|
|
130
|
+
- Enhanced security advisory resolution for accurate vulnerability tracking
|
|
125
131
|
|
|
126
132
|
## [1.0.103](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.103) - 2025-08-29
|
|
127
133
|
|
|
128
134
|
### Fixed
|
|
129
|
-
-
|
|
135
|
+
- Improved GitHub Security Advisory processing
|
|
130
136
|
|
|
131
137
|
## [1.0.102](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.102) - 2025-08-29
|
|
132
138
|
|
|
133
139
|
### Fixed
|
|
134
|
-
-
|
|
140
|
+
- Enhanced command flag processing for better reliability
|
|
135
141
|
|
|
136
142
|
## [1.0.100](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.100) - 2025-08-29
|
|
137
143
|
|
|
138
144
|
### Added
|
|
139
|
-
-
|
|
145
|
+
- Richer debugging output for security advisory analysis
|
|
140
146
|
|
|
141
147
|
## [1.0.96](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.96) - 2025-08-27
|
|
142
148
|
|
|
143
149
|
### Changed
|
|
144
|
-
-
|
|
150
|
+
- Streamlined organization selection for reachability analysis
|
|
145
151
|
|
|
146
152
|
## [1.0.89](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.89) - 2025-08-15
|
|
147
153
|
|
|
148
154
|
### Added
|
|
149
|
-
-
|
|
155
|
+
- Comprehensive manifest scanning with `socket scan create --reach`
|
|
150
156
|
|
|
151
157
|
## [1.0.85](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.85) - 2025-08-01
|
|
152
158
|
|
|
153
159
|
### Added
|
|
154
|
-
-
|
|
160
|
+
- Flexible npm path configuration via `SOCKET_CLI_NPM_PATH` environment variable
|
|
155
161
|
|
|
156
162
|
## [1.0.82](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.82) - 2025-07-30
|
|
157
163
|
|
|
158
164
|
### Added
|
|
159
|
-
-
|
|
165
|
+
- Memory optimization controls with `--max-old-space-size` and `--max-semi-space-size` flags
|
|
160
166
|
|
|
161
167
|
## [1.0.80](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.80) - 2025-07-29
|
|
162
168
|
|
|
163
169
|
### Changed
|
|
164
|
-
-
|
|
170
|
+
- Enhanced file discovery feedback in `socket scan create`
|
|
165
171
|
|
|
166
172
|
## [1.0.73](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.73) - 2025-07-14
|
|
167
173
|
|
|
168
174
|
### Added
|
|
169
|
-
-
|
|
175
|
+
- Automatic detection of `.socket.facts.json` configuration files
|
|
170
176
|
|
|
171
177
|
## [1.0.69](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.69) - 2025-07-10
|
|
172
178
|
|
|
173
179
|
### Added
|
|
174
|
-
-
|
|
180
|
+
- Skip pull request checks with new `--no-pr-check` flag for `socket fix`
|
|
175
181
|
|
|
176
182
|
## [1.0.10](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.10) - 2025-06-28
|
|
177
183
|
|
|
178
184
|
### Changed
|
|
179
|
-
-
|
|
185
|
+
- Enhanced performance and reliability across all commands
|
|
180
186
|
|
|
181
187
|
## [1.0.9](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.9) - 2025-06-28
|
|
182
188
|
|
|
183
189
|
### Changed
|
|
184
|
-
-
|
|
190
|
+
- Improved stability and command execution speed
|
|
185
191
|
|
|
186
192
|
## [1.0.8](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.8) - 2025-06-27
|
|
187
193
|
|
|
188
194
|
### Changed
|
|
189
|
-
-
|
|
195
|
+
- Faster command processing with optimized internals
|
|
190
196
|
|
|
191
197
|
## [1.0.7](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.7) - 2025-06-25
|
|
192
198
|
|
|
193
199
|
### Changed
|
|
194
|
-
-
|
|
200
|
+
- Enhanced reliability through improved code quality
|
|
195
201
|
|
|
196
202
|
## [1.0.6](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.6) - 2025-06-25
|
|
197
203
|
|
|
198
204
|
### Changed
|
|
199
|
-
-
|
|
205
|
+
- Smoother user experience with targeted improvements
|
|
200
206
|
|
|
201
207
|
## [1.0.5](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.5) - 2025-06-25
|
|
202
208
|
|
|
203
209
|
### Changed
|
|
204
|
-
-
|
|
210
|
+
- Faster command execution with performance enhancements
|
|
205
211
|
|
|
206
212
|
## [1.0.4](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.4) - 2025-06-25
|
|
207
213
|
|
|
208
214
|
### Changed
|
|
209
|
-
-
|
|
215
|
+
- More stable operations with targeted fixes
|
|
210
216
|
|
|
211
217
|
## [1.0.3](https://github.com/SocketDev/socket-cli/releases/tag/v1.0.3) - 2025-06-25
|
|
212
218
|
|
package/dist/cli.js
CHANGED
|
@@ -3442,7 +3442,9 @@ async function coanaFix(fixConfig) {
|
|
|
3442
3442
|
cwd,
|
|
3443
3443
|
ghsas,
|
|
3444
3444
|
limit,
|
|
3445
|
+
onlyCompute,
|
|
3445
3446
|
orgSlug,
|
|
3447
|
+
outputFile,
|
|
3446
3448
|
spinner
|
|
3447
3449
|
} = fixConfig;
|
|
3448
3450
|
const fixEnv = await getFixEnv();
|
|
@@ -3494,7 +3496,7 @@ async function coanaFix(fixConfig) {
|
|
|
3494
3496
|
}
|
|
3495
3497
|
};
|
|
3496
3498
|
}
|
|
3497
|
-
const fixCResult = await utils.spawnCoana(['compute-fixes-and-upgrade-purls', cwd, '--manifests-tar-hash', tarHash, '--apply-fixes-to', ...(isAll ? ['all'] : ghsas), ...(fixConfig.rangeStyle ? ['--range-style', fixConfig.rangeStyle] : []), ...fixConfig.unknownFlags], fixConfig.orgSlug, {
|
|
3499
|
+
const fixCResult = await utils.spawnCoana(['compute-fixes-and-upgrade-purls', cwd, '--manifests-tar-hash', tarHash, '--apply-fixes-to', ...(isAll ? ['all'] : ghsas), ...(fixConfig.rangeStyle ? ['--range-style', fixConfig.rangeStyle] : []), ...fixConfig.unknownFlags, ...(onlyCompute ? ['--dry-run'] : []), ...(outputFile ? ['--output-file', outputFile] : [])], fixConfig.orgSlug, {
|
|
3498
3500
|
cwd,
|
|
3499
3501
|
spinner,
|
|
3500
3502
|
stdio: 'inherit'
|
|
@@ -3769,7 +3771,9 @@ async function handleFix({
|
|
|
3769
3771
|
ghsas,
|
|
3770
3772
|
limit,
|
|
3771
3773
|
minSatisfying,
|
|
3774
|
+
onlyCompute,
|
|
3772
3775
|
orgSlug,
|
|
3776
|
+
outputFile,
|
|
3773
3777
|
outputKind,
|
|
3774
3778
|
prCheck,
|
|
3775
3779
|
rangeStyle,
|
|
@@ -3785,7 +3789,9 @@ async function handleFix({
|
|
|
3785
3789
|
orgSlug,
|
|
3786
3790
|
rangeStyle,
|
|
3787
3791
|
spinner,
|
|
3788
|
-
unknownFlags
|
|
3792
|
+
unknownFlags,
|
|
3793
|
+
onlyCompute,
|
|
3794
|
+
outputFile
|
|
3789
3795
|
}), outputKind);
|
|
3790
3796
|
}
|
|
3791
3797
|
|
|
@@ -3828,6 +3834,16 @@ Available styles:
|
|
|
3828
3834
|
* pin - Use the exact version (e.g. 1.2.3)
|
|
3829
3835
|
* preserve - Retain the existing version range style as-is
|
|
3830
3836
|
`.trim()
|
|
3837
|
+
},
|
|
3838
|
+
onlyCompute: {
|
|
3839
|
+
type: 'boolean',
|
|
3840
|
+
default: false,
|
|
3841
|
+
description: 'Compute fixes only, do not apply them. Logs what upgrades would be applied. If combined with --output-file, the output file will contain the upgrades that would be applied.'
|
|
3842
|
+
},
|
|
3843
|
+
outputFile: {
|
|
3844
|
+
type: 'string',
|
|
3845
|
+
default: '',
|
|
3846
|
+
description: 'Path to store upgrades as a JSON file at this path.'
|
|
3831
3847
|
}
|
|
3832
3848
|
};
|
|
3833
3849
|
const hiddenFlags = {
|
|
@@ -3903,7 +3919,7 @@ async function run$K(argv, importMeta, {
|
|
|
3903
3919
|
|
|
3904
3920
|
Examples
|
|
3905
3921
|
$ ${command}
|
|
3906
|
-
$ ${command} ./
|
|
3922
|
+
$ ${command} ./path/to/project --range-style pin
|
|
3907
3923
|
`
|
|
3908
3924
|
};
|
|
3909
3925
|
const cli = utils.meowOrExit({
|
|
@@ -3919,6 +3935,8 @@ async function run$K(argv, importMeta, {
|
|
|
3919
3935
|
limit,
|
|
3920
3936
|
markdown,
|
|
3921
3937
|
maxSatisfying,
|
|
3938
|
+
onlyCompute,
|
|
3939
|
+
outputFile,
|
|
3922
3940
|
prCheck,
|
|
3923
3941
|
rangeStyle,
|
|
3924
3942
|
// We patched in this feature with `npx custompatch meow` at
|
|
@@ -3971,7 +3989,9 @@ async function run$K(argv, importMeta, {
|
|
|
3971
3989
|
outputKind,
|
|
3972
3990
|
rangeStyle,
|
|
3973
3991
|
spinner,
|
|
3974
|
-
unknownFlags
|
|
3992
|
+
unknownFlags,
|
|
3993
|
+
onlyCompute,
|
|
3994
|
+
outputFile
|
|
3975
3995
|
});
|
|
3976
3996
|
}
|
|
3977
3997
|
|
|
@@ -7282,7 +7302,7 @@ async function run$u(argv, importMeta, {
|
|
|
7282
7302
|
|
|
7283
7303
|
Examples
|
|
7284
7304
|
$ ${command}
|
|
7285
|
-
$ ${command} ./
|
|
7305
|
+
$ ${command} ./path/to/project --pin
|
|
7286
7306
|
`
|
|
7287
7307
|
};
|
|
7288
7308
|
const cli = utils.meowOrExit({
|
|
@@ -9194,7 +9214,7 @@ async function run$m(argv, importMeta, {
|
|
|
9194
9214
|
Examples
|
|
9195
9215
|
$ ${command}
|
|
9196
9216
|
$ ${command} --package lodash
|
|
9197
|
-
$ ${command} ./
|
|
9217
|
+
$ ${command} ./path/to/project --package lodash,react
|
|
9198
9218
|
`
|
|
9199
9219
|
};
|
|
9200
9220
|
const cli = utils.meowOrExit({
|
|
@@ -14640,5 +14660,5 @@ void (async () => {
|
|
|
14640
14660
|
await utils.captureException(e);
|
|
14641
14661
|
}
|
|
14642
14662
|
})();
|
|
14643
|
-
//# debugId=
|
|
14663
|
+
//# debugId=5d651596-3967-43af-9860-99f4bc7ab867
|
|
14644
14664
|
//# sourceMappingURL=cli.js.map
|