@socketsecurity/cli-with-sentry 1.1.58 → 1.1.60

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.1.60](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.60) - 2026-01-28
+
+### Changed
+- Updated the Coana CLI to v `14.12.173`.
+
+## [1.1.59](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.59) - 2026-01-19
+
+### Changed
+- Updated the Coana CLI to v `14.12.162`.
+
 ## [1.1.58](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.58) - 2026-01-14
 
 ### Changed

package/dist/cli.js

@@ -3863,7 +3863,8 @@ async function coanaFix(fixConfig) {
       return {
         ok: true,
         data: {
-          fixed: false
+          fixedAll: false,
+          ghsaDetails: []
         }
       };
     }
@@ -3901,8 +3902,8 @@ async function coanaFix(fixConfig) {
       return {
         ok: true,
         data: {
-          data: fixesResultJson,
-          fixed: true
+          fixedAll: true,
+          ghsaDetails: fixesResultJson ? [fixesResultJson] : []
         }
       };
     } finally {
@@ -3957,7 +3958,8 @@ async function coanaFix(fixConfig) {
     return {
       ok: true,
       data: {
-        fixed: false
+        fixedAll: false,
+        ghsaDetails: []
       }
     };
   }
@@ -3967,6 +3969,7 @@ async function coanaFix(fixConfig) {
   require$$9.debugFn('notice', `found: ${ghsaDetails.size} GHSA details`);
   let count = 0;
   let overallFixed = false;
+  const ghsaFixResults = [];
 
   // Process each GHSA ID individually.
   ghsaLoop: for (let i = 0, {
@@ -3975,9 +3978,13 @@ async function coanaFix(fixConfig) {
     const ghsaId = ids[i];
     require$$9.debugFn('notice', `check: ${ghsaId}`);
 
+    // Create a temporary file for Coana output.
+    const tmpDir = os.tmpdir();
+    const tmpFile = path.join(tmpDir, `socket-fix-${ghsaId}-${Date.now()}.json`);
+
     // Apply fix for single GHSA ID.
     // eslint-disable-next-line no-await-in-loop
-    const fixCResult = await utils.spawnCoanaDlx(['compute-fixes-and-upgrade-purls', cwd, '--manifests-tar-hash', tarHash, '--apply-fixes-to', ghsaId, ...(fixConfig.rangeStyle ? ['--range-style', fixConfig.rangeStyle] : []), ...(minimumReleaseAge ? ['--minimum-release-age', minimumReleaseAge] : []), ...(include.length ? ['--include', ...include] : []), ...(exclude.length ? ['--exclude', ...exclude] : []), ...(ecosystems.length ? ['--purl-types', ...ecosystems] : []), ...(debug ? ['--debug'] : []), ...(disableMajorUpdates ? ['--disable-major-updates'] : []), ...(showAffectedDirectDependencies ? ['--show-affected-direct-dependencies'] : []), ...fixConfig.unknownFlags], fixConfig.orgSlug, {
+    const fixCResult = await utils.spawnCoanaDlx(['compute-fixes-and-upgrade-purls', cwd, '--manifests-tar-hash', tarHash, '--apply-fixes-to', ghsaId, ...(fixConfig.rangeStyle ? ['--range-style', fixConfig.rangeStyle] : []), ...(minimumReleaseAge ? ['--minimum-release-age', minimumReleaseAge] : []), ...(include.length ? ['--include', ...include] : []), ...(exclude.length ? ['--exclude', ...exclude] : []), ...(ecosystems.length ? ['--purl-types', ...ecosystems] : []), ...(debug ? ['--debug'] : []), ...(disableMajorUpdates ? ['--disable-major-updates'] : []), ...(showAffectedDirectDependencies ? ['--show-affected-direct-dependencies'] : []), '--output-file', tmpFile, ...fixConfig.unknownFlags], fixConfig.orgSlug, {
       coanaVersion,
       cwd,
       spinner: silence ? undefined : spinner,
@@ -3987,6 +3994,13 @@ async function coanaFix(fixConfig) {
       if (!silence) {
         logger.logger.error(`Update failed for ${ghsaId}: ${utils.getErrorCause(fixCResult)}`);
       }
+      // Clean up temp file on failure.
+      try {
+        // eslint-disable-next-line no-await-in-loop
+        await fs$1.promises.unlink(tmpFile);
+      } catch {
+        // Ignore cleanup errors.
+      }
       continue ghsaLoop;
     }
 
@@ -3996,6 +4010,13 @@ async function coanaFix(fixConfig) {
     const modifiedFiles = unstagedCResult.ok ? unstagedCResult.data.filter(relPath => scanBaseNames.has(path.basename(relPath))) : [];
     if (!modifiedFiles.length) {
       require$$9.debugFn('notice', `skip: no changes for ${ghsaId}`);
+      // Clean up temp file before continuing.
+      try {
+        // eslint-disable-next-line no-await-in-loop
+        await fs$1.promises.unlink(tmpFile);
+      } catch {
+        // Ignore cleanup errors.
+      }
       continue ghsaLoop;
     }
     overallFixed = true;
@@ -4081,6 +4102,18 @@ async function coanaFix(fixConfig) {
           data
         } = prResult.pr;
         const prRef = `PR #${data.number}`;
+
+        // Read the fix result JSON and merge with PR data.
+        const fixResultJson = fs$2.readJsonSync(tmpFile, {
+          throws: false
+        });
+        if (fixResultJson && typeof fixResultJson === 'object') {
+          ghsaFixResults.push({
+            ...fixResultJson,
+            pullRequestLink: data.html_url,
+            pullRequestNumber: data.number
+          });
+        }
         if (!silence) {
           logger.logger.success(`Opened ${prRef} for ${ghsaId}.`);
         }
@@ -4162,6 +4195,14 @@ async function coanaFix(fixConfig) {
       await utils.gitResetAndClean(fixEnv.baseBranch, cwd);
       // eslint-disable-next-line no-await-in-loop
       await utils.gitCheckoutBranch(fixEnv.baseBranch, cwd);
+    } finally {
+      // Clean up temp file.
+      try {
+        // eslint-disable-next-line no-await-in-loop
+        await fs$1.promises.unlink(tmpFile);
+      } catch {
+        // Ignore cleanup errors.
+      }
     }
     count += 1;
     require$$9.debugFn('notice', `increment: count ${count}/${Math.min(adjustedPrLimit, ids.length)}`);
@@ -4175,7 +4216,8 @@ async function coanaFix(fixConfig) {
   return {
     ok: true,
     data: {
-      fixed: overallFixed
+      fixedAll: overallFixed,
+      ghsaDetails: ghsaFixResults
     }
   };
 }
@@ -15355,5 +15397,5 @@ process.on('unhandledRejection', async (reason, promise) => {
   // eslint-disable-next-line n/no-process-exit
   process.exit(1);
 });
-//# debugId=3f1876f7-94f9-4026-a706-9269d8e0d179
+//# debugId=cd9a03d7-376e-442c-bd72-438395900ecb
 //# sourceMappingURL=cli.js.map