@socketsecurity/cli-with-sentry 1.1.130 → 1.1.132

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli-with-sentry",
-  "version": "1.1.130",
+  "version": "1.1.132",
   "description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -37,6 +37,7 @@
     "build:dist": "pnpm build:dist:src && pnpm build:dist:types",
     "build:dist:src": "run-p -c clean:dist clean:external && dotenvx -q run -f .env.local -- rollup -c .config/rollup.dist.config.mjs",
     "build:dist:types": "pnpm clean:dist:types && tsgo --project tsconfig.dts.json",
+    "build:maven-extension": "bash src/commands/manifest/scripts/maven-extension/build-jar.sh",
     "build:sea": "node src/sea/build-sea.mts",
     "build:sea:internal:bootstrap": "rollup -c .config/rollup.sea.config.mjs",
     "check": "pnpm check:lint && pnpm check:tsc",
@@ -98,7 +99,7 @@
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.28.4",
     "@biomejs/biome": "2.2.4",
-    "@coana-tech/cli": "15.6.1",
+    "@coana-tech/cli": "15.6.6",
     "@cyclonedx/cdxgen": "12.1.2",
     "@dotenvx/dotenvx": "1.49.0",
     "@eslint/compat": "1.3.2",

package/dist/types/commands/manifest/coana-manifest-facts.d.mts

@@ -1,27 +0,0 @@
-// Delegates Socket facts generation for a JVM build tool to the Coana CLI's
-// `manifest <ecosystem>` command. The build-tool resolution scripts (the Gradle
-// init script and the sbt plugin) live in Coana now, so socket-cli no longer
-// runs them itself; it only asks Coana for the uploadable `.socket.facts.json`.
-//
-// The resolved artifact-paths sidecar is intentionally NOT requested here: it
-// only matters for reachability analysis, which is internal to Coana, so Coana
-// emits it itself when it runs reachability. `socket manifest` only needs the
-// facts file.
-//
-// `spawnCoanaDlx` resolves the Coana CLI via dlx (or a local build when
-// `SOCKET_CLI_COANA_LOCAL_PATH` is set). `bin` (the gradle/maven/sbt executable)
-// is always resolved by the caller to a concrete default (`<cwd>/gradlew`, or
-// `mvn`/`sbt` on PATH) before we get here, so it is forwarded verbatim; the
-// empty guard below is just a cheap safeguard against passing `--bin ''`.
-export declare function runCoanaManifestFacts({ bin, buildOpts, buildOptsFlag, cwd, ecosystem, excludeConfigs, ignoreUnresolved, includeConfigs, verbose }: {
-    bin: string;
-    buildOpts: string[];
-    buildOptsFlag: '--gradle-opts' | '--maven-opts' | '--sbt-opts';
-    cwd: string;
-    ecosystem: 'gradle' | 'maven' | 'sbt';
-    excludeConfigs: string;
-    ignoreUnresolved: boolean;
-    includeConfigs: string;
-    verbose: boolean;
-}): Promise<void>;
-//# sourceMappingURL=coana-manifest-facts.d.mts.map

package/dist/types/commands/manifest/coana-manifest-facts.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"coana-manifest-facts.d.mts","sourceRoot":"","sources":["../../../../src/commands/manifest/coana-manifest-facts.mts"],"names":[],"mappings":"AAQA,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,cAAc;AACd,EAAE;AACF,wEAAwE;AACxE,iFAAiF;AACjF,8EAA8E;AAC9E,4EAA4E;AAC5E,0EAA0E;AAC1E,wBAAsB,qBAAqB,CAAC,EAC1C,GAAG,EACH,SAAS,EACT,aAAa,EACb,GAAG,EACH,SAAS,EACT,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,OAAO,EACR,EAAE;IACD,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,aAAa,EAAE,eAAe,GAAG,cAAc,GAAG,YAAY,CAAA;IAC9D,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,QAAQ,GAAG,OAAO,GAAG,KAAK,CAAA;IACrC,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,OAAO,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgFhB"}

package/dist/types/utils/auto-manifest-config.d.mts

@@ -1,55 +0,0 @@
-import type { SocketJson } from './socket-json.mts';
-// Per-ecosystem build-tool options handed off to the Coana CLI — used both when
-// generating manifests (`coana manifest <ecosystem>`) and, in socket mode, for
-// reach-time dependency resolution (`coana run`). This mirrors the Coana-side
-// `--auto-manifest-config` shape: socket-cli owns mapping `socket.json` onto it,
-// so Coana stays uncoupled from `socket.json`'s schema. Keeping the
-// per-ecosystem options namespaced (rather than as flat CLI flags) avoids the
-// ambiguity of a bare `--bin`/`--include-configs` when a repo has more than one
-// build tool.
-export type BuildToolOptions = {
-    // Build-tool executable override (e.g. `./gradlew`, `atlas-mvn`).
-    bin?: string | undefined;
-    // Comma-separated config-name globs to skip.
-    excludeConfigs?: string | undefined;
-    // `socket.json`'s per-ecosystem `ignoreUnresolved` (warn vs fail on unresolved
-    // dependencies), forwarded verbatim. NOTE: this is NOT the reach-time
-    // fail-closed switch — that's the run-wide `failOnBuildToolError` below.
-    ignoreUnresolved?: boolean | undefined;
-    // Comma-separated config-name globs to resolve.
-    includeConfigs?: string | undefined;
-    // Extra build-tool options, pre-split into argv. Coana maps these straight to
-    // the tool's opts (no splitting on its side). Mapped from `socket.json`'s
-    // `gradleOpts`/`sbtOpts` string.
-    opts?: string[] | undefined;
-};
-// The Coana hand-off config. `failOnBuildToolError` is run-wide (top level)
-// because `--auto-manifest` is a single CLI mode, not a per-package-manager
-// setting. The per-ecosystem entries are present only for ecosystems configured
-// (and not disabled) in `socket.json`; absent ecosystems fall to Coana's own
-// defaults.
-export type AutoManifestConfig = {
-    // Run-wide fail-closed switch. When true, Coana treats a build-tool step
-    // failure as fatal rather than tolerating it. socket-cli sets it true under
-    // `--auto-manifest`; left unset on plain `--reach` (permissive — Coana's
-    // default best-effort behaviour).
-    failOnBuildToolError?: boolean | undefined;
-    gradle?: BuildToolOptions | undefined;
-    sbt?: BuildToolOptions | undefined;
-};
-// Maps `socket.json`'s `defaults.manifest.<ecosystem>` build-tool options onto
-// the Coana hand-off config.
-//
-// `autoManifest` reflects whether the run is `--auto-manifest` (fail-closed:
-// `failOnBuildToolError=true`) vs plain `--reach` (permissive:
-// `failOnBuildToolError` left unset so Coana's default applies). Per-ecosystem
-// options are forwarded verbatim from `socket.json`; disabled ecosystems are
-// omitted so they fall back to Coana's defaults.
-export declare function buildAutoManifestConfig(sockJson: SocketJson, { autoManifest }: {
-    autoManifest: boolean;
-}): AutoManifestConfig;
-// True when there's nothing to hand to Coana: no per-ecosystem options and the
-// run mode is left at Coana's permissive default. When true, the
-// `--auto-manifest-config` option should be omitted entirely.
-export declare function isAutoManifestConfigEmpty(config: AutoManifestConfig): boolean;
-//# sourceMappingURL=auto-manifest-config.d.mts.map

package/dist/types/utils/auto-manifest-config.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auto-manifest-config.d.mts","sourceRoot":"","sources":["../../../src/utils/auto-manifest-config.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnD,kFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,iFAAiF;AACjF,oEAAoE;AACpE,8EAA8E;AAC9E,gFAAgF;AAChF,cAAc;AACd,MAAM,MAAM,gBAAgB,GAAG;IAC7B,kEAAkE;IAClE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,6CAA6C;IAC7C,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,+EAA+E;IAC/E,sEAAsE;IACtE,2EAAyE;IACzE,gBAAgB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IACtC,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,8EAA8E;IAC9E,0EAA0E;IAC1E,iCAAiC;IACjC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAC5B,CAAA;AAED,4EAA4E;AAC5E,4EAA4E;AAC5E,gFAAgF;AAChF,6EAA6E;AAC7E,YAAY;AACZ,MAAM,MAAM,kBAAkB,GAAG;IAC/B,yEAAyE;IACzE,4EAA4E;IAC5E,2EAAyE;IACzE,kCAAkC;IAClC,oBAAoB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;IAC1C,MAAM,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;IACrC,GAAG,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAA;CACnC,CAAA;AAgBD,+EAA+E;AAC/E,6BAA6B;AAC7B,EAAE;AACF,6EAA6E;AAC7E,+DAA+D;AAC/D,+EAA+E;AAC/E,6EAA6E;AAC7E,iDAAiD;AACjD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,UAAU,EACpB,EAAE,YAAY,EAAE,EAAE;IAAE,YAAY,EAAE,OAAO,CAAA;CAAE,GAC1C,kBAAkB,CAiCpB;AAED,+EAA+E;AAC/E,iEAAiE;AACjE,8DAA8D;AAC9D,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAI7E"}