@socketsecurity/cli-with-sentry 1.1.6 → 1.1.8

package/dist/vendor.js

@@ -27813,7 +27813,7 @@ var isInteractiveExports = /*@__PURE__*/ requireIsInteractive();
 var dist$e = {};
 
 var name$2 = "@socketsecurity/sdk";
-var version$6 = "1.4.88";
+var version$6 = "1.4.90";
 var license = "MIT";
 var description = "SDK for the Socket API client";
 var author = {
@@ -27898,7 +27898,7 @@ var scripts = {
 	"update:deps": "npx --yes npm-check-updates"
 };
 var dependencies = {
-	"@socketsecurity/registry": "1.1.5"
+	"@socketsecurity/registry": "1.1.7"
 };
 var devDependencies = {
 	"@biomejs/biome": "2.2.4",
@@ -27913,7 +27913,7 @@ var devDependencies = {
 	eslint: "9.35.0",
 	"eslint-import-resolver-typescript": "4.4.4",
 	"eslint-plugin-import-x": "4.16.1",
-	"eslint-plugin-jsdoc": "55.2.0",
+	"eslint-plugin-jsdoc": "56.1.2",
 	"eslint-plugin-n": "17.21.3",
 	"eslint-plugin-sort-destructure-keys": "2.0.0",
 	"eslint-plugin-unicorn": "56.0.1",
@@ -27925,7 +27925,7 @@ var devDependencies = {
 	nock: "14.0.10",
 	"npm-run-all2": "8.0.4",
 	"openapi-typescript": "6.7.6",
-	oxlint: "1.14.0",
+	oxlint: "1.15.0",
 	"type-coverage": "2.29.7",
 	typescript: "5.9.2",
 	"typescript-eslint": "8.43.0",
@@ -28002,6 +28002,8 @@ function requireDist$e () {
 	const objects_1 = require$$11;
 	const promises_1 = require$$12;
 	const url_1 = require$$13;
+	// Import attributes are only supported when the '--module' option is set to
+	// 'esnext', 'node18', 'node20', 'nodenext', or 'preserve'.
 	// @ts-ignore: Avoid TS import attributes error.
 	const package_json_1 = __importDefault(require$$14);
 	const DEFAULT_USER_AGENT = createUserAgentFromPkgJson(package_json_1.default);
@@ -28208,12 +28210,7 @@ function requireDist$e () {
 	        // Send headers early to prompt server validation (auth, URL, quota, etc.).
 	        req.flushHeaders();
 	        // Concurrently wait for response while we stream body.
-	        getResponse(req).then(pass, async (err) => {
-	            if (err.response && !isResponseOk(err.response)) {
-	                fail(new ResponseError(err.response, `${err.method} request failed`));
-	            }
-	            fail(err);
-	        });
+	        getResponse(req).then(pass, fail);
 	        let aborted = false;
 	        req.on('error', () => (aborted = true));
 	        req.on('close', () => (aborted = true));
@@ -28532,7 +28529,7 @@ function requireDist$e () {
 	            });
 	        }
 	        const { statusCode } = error.response;
-	        if (statusCode >= 500) {
+	        if (statusCode && statusCode >= 500) {
 	            throw new Error(`Socket API server error (${statusCode})`, {
 	                cause: error
 	            });
@@ -28554,8 +28551,8 @@ function requireDist$e () {
 	        }
 	        return {
 	            success: false,
-	            status: statusCode,
-	            error: error.message ?? '',
+	            status: statusCode ?? 0,
+	            error: error.message ?? 'Unknown error',
 	            cause: body
 	        };
 	    }
@@ -60237,6 +60234,7 @@ function shallowClone(o) {
   if (isPlainObject(o)) return {
     ...o
   };
+  if (Array.isArray(o)) return [...o];
   return o;
 }
 const propertyKeyTypes = new Set(["string", "number", "symbol"]);
@@ -60733,7 +60731,7 @@ function emoji() {
   return new RegExp(_emoji$1, "u");
 }
 const ipv4$1 = /^(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])$/;
-const ipv6$1 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})$/;
+const ipv6$1 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:))$/;
 const cidrv4 = /^((25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\.){3}(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9][0-9]|[0-9])\/([0-9]|[1-2][0-9]|3[0-2])$/;
 const cidrv6 = /^(([0-9a-fA-F]{1,4}:){7}[0-9a-fA-F]{1,4}|::|([0-9a-fA-F]{1,4})?::([0-9a-fA-F]{1,4}:?){0,6})\/(12[0-8]|1[01][0-9]|[1-9]?[0-9])$/;
 // https://stackoverflow.com/questions/7860392/determine-if-string-is-in-base64-using-javascript
@@ -61040,7 +61038,7 @@ class Doc {
 const version$5 = {
   major: 4,
   minor: 1,
-  patch: 5
+  patch: 7
 };
 
 const $ZodType = /*@__PURE__*/$constructor("$ZodType", (inst, def) => {
@@ -61364,8 +61362,10 @@ const $ZodCIDRv6 = /*@__PURE__*/$constructor("$ZodCIDRv6", (inst, def) => {
   def.pattern ?? (def.pattern = cidrv6); // not used for validation
   $ZodStringFormat.init(inst, def);
   inst._zod.check = payload => {
-    const [address, prefix] = payload.value.split("/");
+    const parts = payload.value.split("/");
     try {
+      if (parts.length !== 2) throw new Error();
+      const [address, prefix] = parts;
       if (!prefix) throw new Error();
       const prefixNum = Number(prefix);
       if (`${prefixNum}` !== prefix) throw new Error();
@@ -61540,7 +61540,7 @@ function handlePropertyResult(result, final, key, input) {
 function normalizeDef(def) {
   const keys = Object.keys(def.shape);
   for (const k of keys) {
-    if (!def.shape[k]._zod.traits.has("$ZodType")) {
+    if (!def.shape?.[k]?._zod?.traits?.has("$ZodType")) {
       throw new Error(`Invalid element at key "${k}": expected a Zod schema`);
     }
   }
@@ -61659,7 +61659,7 @@ const $ZodObjectJIT = /*@__PURE__*/$constructor("$ZodObjectJIT", (inst, def) =>
       ids[key] = `key_${counter++}`;
     }
     // A: preserve key order {
-    doc.write(`const newResult = {}`);
+    doc.write(`const newResult = {};`);
     for (const key of normalized.keys) {
       const id = ids[key];
       const k = esc(key);
@@ -61672,6 +61672,7 @@ const $ZodObjectJIT = /*@__PURE__*/$constructor("$ZodObjectJIT", (inst, def) =>
           })));
         }
         
+        
         if (${id}.value === undefined) {
           if (${k} in input) {
             newResult[${k}] = undefined;
@@ -61679,6 +61680,7 @@ const $ZodObjectJIT = /*@__PURE__*/$constructor("$ZodObjectJIT", (inst, def) =>
         } else {
           newResult[${k}] = ${id}.value;
         }
+        
       `);
     }
     doc.write(`payload.value = newResult;`);
@@ -167035,5 +167037,5 @@ exports.terminalLinkExports = terminalLinkExports;
 exports.updater = updater$1;
 exports.yargsParser = yargsParser;
 exports.yoctocolorsCjsExports = yoctocolorsCjsExports;
-//# debugId=44384fe3-ae9c-4b91-bed5-98dbcfe0322e
+//# debugId=b77c5e00-6e06-4097-b979-9cef8e2fde15
 //# sourceMappingURL=vendor.js.map

package/external/@socketsecurity/registry/external/@socketregistry/yocto-spinner.js

@@ -105,6 +105,7 @@ function requireYoctoSpinner() {
     return yoctoSpinner
   }
   hasRequiredYoctoSpinner = 1
+  const { defineProperty: ObjectDefineProperty } = Object
   const defaultTtyColumns = 80
   let _defaultSpinner
   function getDefaultSpinner() {
@@ -201,6 +202,16 @@ function requireYoctoSpinner() {
     }
     return _stripVTControlCharacters(string)
   }
+  function getFrame(spinner, index) {
+    const { frames } = spinner
+    const length = frames?.length ?? 0
+    return index > -1 && index < length ? frames[index].trim() : ''
+  }
+  function getFrameCount(spinner) {
+    const { frames } = spinner
+    const length = frames?.length ?? 0
+    return length < 1 ? 1 : length
+  }
   function normalizeText(value) {
     return typeof value === 'string' ? value.trimStart() : ''
   }
@@ -208,27 +219,45 @@ function requireYoctoSpinner() {
     #color
     #currentFrame = -1
     #exitHandlerBound
-    #frames
     #indention = ''
-    #interval
     #isInteractive
     #isSpinning = false
     #lastSpinnerFrameTime = 0
     #lines = 0
+    #spinner
     #stream
     #text
     #timer
+    static spinners = {
+      get default() {
+        return getDefaultSpinner()
+      },
+      set default(spinner) {
+        ObjectDefineProperty(this, 'default', {
+          __proto__: null,
+          configurable: true,
+          enumerable: true,
+          value: spinner,
+          writable: true
+        })
+      },
+      ci: {
+        frames: [''],
+        // The delay argument is converted to a signed 32-bit integer. This effectively
+        // limits delay to 2147483647 ms, roughly 24.8 days, since it's specified as a
+        // signed integer in the IDL.
+        // https://developer.mozilla.org/en-US/docs/Web/API/Window/setInterval?utm_source=chatgpt.com#return_value
+        interval: 2147483647
+      }
+    }
     constructor(options = {}) {
       const opts = {
         __proto__: null,
         ...options
       }
-      const spinner = opts.spinner ?? getDefaultSpinner()
       const stream = opts.stream ?? getProcess().stderr
-      const { frames } = spinner
-      this.#frames =
-        (frames?.length ?? 0) < 1 ? [''] : frames.map(f => f.trim())
-      this.#interval = spinner.interval
+      this.#spinner =
+        opts.spinner ?? YoctoSpinner.spinners.default ?? getDefaultSpinner()
       this.#text = normalizeText(options.text)
       this.#stream = stream ?? process.stderr
       this.#color = options.color ?? 'cyan'
@@ -266,14 +295,14 @@ function requireYoctoSpinner() {
       const now = Date.now()
       if (
         this.#currentFrame === -1 ||
-        now - this.#lastSpinnerFrameTime >= this.#interval
+        now - this.#lastSpinnerFrameTime >= this.#spinner.interval
       ) {
-        this.#currentFrame = ++this.#currentFrame % this.#frames.length
+        this.#currentFrame = ++this.#currentFrame % getFrameCount(this.#spinner)
         this.#lastSpinnerFrameTime = now
       }
       const colors = getYoctocolors()
       const applyColor = colors[this.#color] ?? colors.cyan
-      const frame = this.#frames[this.#currentFrame]
+      const frame = getFrame(this.#spinner, this.#currentFrame)
       let string = `${frame ? `${applyColor(frame)} ` : ''}${this.#text}`
       if (string) {
         if (this.#indention.length) {
@@ -323,6 +352,12 @@ function requireYoctoSpinner() {
     get isSpinning() {
       return this.#isSpinning
     }
+    get spinner() {
+      return this.#spinner
+    }
+    set spinner(spinner) {
+      this.#spinner = spinner
+    }
     get text() {
       return this.#text
     }
@@ -379,7 +414,7 @@ function requireYoctoSpinner() {
       if (this.#isInteractive) {
         this.#timer = setInterval(() => {
           this.#render()
-        }, this.#interval)
+        }, this.#spinner.interval)
       }
       return this
     }

package/external/@socketsecurity/registry/external/cacache.js

@@ -6443,7 +6443,7 @@ function requireEntryIndex() {
     // the true passed to formatEntry tells it to keep null
     // integrity values, if they made it this far it's because
     // validateEntry returned true, and as such we should return it
-    return newEntries.reverse().map(entry => formatEntry(cache, entry, true))
+    return newEntries.toReversed().map(entry => formatEntry(cache, entry, true))
   }
   entryIndex.insert = insert
   async function insert(cache, key, integrity, opts = {}) {

package/external/@socketsecurity/registry/external/libnpmpack.js

@@ -21909,7 +21909,7 @@ function requireEntryIndex$7() {
     // the true passed to formatEntry tells it to keep null
     // integrity values, if they made it this far it's because
     // validateEntry returned true, and as such we should return it
-    return newEntries.reverse().map(entry => formatEntry(cache, entry, true))
+    return newEntries.toReversed().map(entry => formatEntry(cache, entry, true))
   }
   entryIndex$7.insert = insert
   async function insert(cache, key, integrity, opts = {}) {
@@ -54899,7 +54899,7 @@ function requireEntryIndex$6() {
     // the true passed to formatEntry tells it to keep null
     // integrity values, if they made it this far it's because
     // validateEntry returned true, and as such we should return it
-    return newEntries.reverse().map(entry => formatEntry(cache, entry, true))
+    return newEntries.toReversed().map(entry => formatEntry(cache, entry, true))
   }
   entryIndex$6.insert = insert
   async function insert(cache, key, integrity, opts = {}) {
@@ -62836,7 +62836,7 @@ function requireIpv4() {
     static fromArpa(arpaFormAddress) {
       // remove ending ".in-addr.arpa." or just "."
       const leader = arpaFormAddress.replace(/(\.in-addr\.arpa)?\.$/, '')
-      const address = leader.split('.').reverse().join('.')
+      const address = leader.split('.').toReversed().join('.')
       return new Address4(address)
     }
     /**
@@ -63002,7 +63002,7 @@ function requireIpv4() {
       if (!options) {
         options = {}
       }
-      const reversed = this.correctForm().split('.').reverse().join('.')
+      const reversed = this.correctForm().split('.').toReversed().join('.')
       if (options.omitSuffix) {
         return reversed
       }
@@ -63677,7 +63677,7 @@ function requireIpv6() {
       if (address.length !== 63) {
         throw new address_error_1.AddressError("Invalid 'ip6.arpa' form.")
       }
-      const parts = address.split('.').reverse()
+      const parts = address.split('.').toReversed()
       for (let i = semicolonAmount; i > 0; i--) {
         const insertIndex = i * 4
         parts.splice(insertIndex, 0, ':')
@@ -63878,7 +63878,7 @@ function requireIpv6() {
         .replace(/:/g, '')
         .split('')
         .slice(0, characters)
-        .reverse()
+        .toReversed()
         .join('.')
       if (characters > 0) {
         if (options.omitSuffix) {
@@ -66268,9 +66268,9 @@ function requireProxy() {
     if (!noProxy || !noProxy.length) {
       return false
     }
-    const hostSegments = url.hostname.split('.').reverse()
+    const hostSegments = url.hostname.split('.').toReversed()
     return noProxy.some(no => {
-      const noSegments = no.split('.').filter(Boolean).reverse()
+      const noSegments = no.split('.').filter(Boolean).toReversed()
       if (!noSegments.length) {
         return false
       }

package/external/@socketsecurity/registry/external/make-fetch-happen.js

@@ -21291,7 +21291,7 @@ function requireEntryIndex() {
     // the true passed to formatEntry tells it to keep null
     // integrity values, if they made it this far it's because
     // validateEntry returned true, and as such we should return it
-    return newEntries.reverse().map(entry => formatEntry(cache, entry, true))
+    return newEntries.toReversed().map(entry => formatEntry(cache, entry, true))
   }
   entryIndex.insert = insert
   async function insert(cache, key, integrity, opts = {}) {
@@ -37820,7 +37820,7 @@ function requireIpv4() {
     static fromArpa(arpaFormAddress) {
       // remove ending ".in-addr.arpa." or just "."
       const leader = arpaFormAddress.replace(/(\.in-addr\.arpa)?\.$/, '')
-      const address = leader.split('.').reverse().join('.')
+      const address = leader.split('.').toReversed().join('.')
       return new Address4(address)
     }
     /**
@@ -37986,7 +37986,7 @@ function requireIpv4() {
       if (!options) {
         options = {}
       }
-      const reversed = this.correctForm().split('.').reverse().join('.')
+      const reversed = this.correctForm().split('.').toReversed().join('.')
       if (options.omitSuffix) {
         return reversed
       }
@@ -38661,7 +38661,7 @@ function requireIpv6() {
       if (address.length !== 63) {
         throw new address_error_1.AddressError("Invalid 'ip6.arpa' form.")
       }
-      const parts = address.split('.').reverse()
+      const parts = address.split('.').toReversed()
       for (let i = semicolonAmount; i > 0; i--) {
         const insertIndex = i * 4
         parts.splice(insertIndex, 0, ':')
@@ -38862,7 +38862,7 @@ function requireIpv6() {
         .replace(/:/g, '')
         .split('')
         .slice(0, characters)
-        .reverse()
+        .toReversed()
         .join('.')
       if (characters > 0) {
         if (options.omitSuffix) {
@@ -41252,9 +41252,9 @@ function requireProxy() {
     if (!noProxy || !noProxy.length) {
       return false
     }
-    const hostSegments = url.hostname.split('.').reverse()
+    const hostSegments = url.hostname.split('.').toReversed()
     return noProxy.some(no => {
-      const noSegments = no.split('.').filter(Boolean).reverse()
+      const noSegments = no.split('.').filter(Boolean).toReversed()
       if (!noSegments.length) {
         return false
       }

package/external/@socketsecurity/registry/external/pacote.js

@@ -25984,7 +25984,7 @@ function requireEntryIndex() {
     // the true passed to formatEntry tells it to keep null
     // integrity values, if they made it this far it's because
     // validateEntry returned true, and as such we should return it
-    return newEntries.reverse().map(entry => formatEntry(cache, entry, true))
+    return newEntries.toReversed().map(entry => formatEntry(cache, entry, true))
   }
   entryIndex.insert = insert
   async function insert(cache, key, integrity, opts = {}) {
@@ -69208,7 +69208,7 @@ function requireIpv4() {
     static fromArpa(arpaFormAddress) {
       // remove ending ".in-addr.arpa." or just "."
       const leader = arpaFormAddress.replace(/(\.in-addr\.arpa)?\.$/, '')
-      const address = leader.split('.').reverse().join('.')
+      const address = leader.split('.').toReversed().join('.')
       return new Address4(address)
     }
     /**
@@ -69374,7 +69374,7 @@ function requireIpv4() {
       if (!options) {
         options = {}
       }
-      const reversed = this.correctForm().split('.').reverse().join('.')
+      const reversed = this.correctForm().split('.').toReversed().join('.')
       if (options.omitSuffix) {
         return reversed
       }
@@ -70049,7 +70049,7 @@ function requireIpv6() {
       if (address.length !== 63) {
         throw new address_error_1.AddressError("Invalid 'ip6.arpa' form.")
       }
-      const parts = address.split('.').reverse()
+      const parts = address.split('.').toReversed()
       for (let i = semicolonAmount; i > 0; i--) {
         const insertIndex = i * 4
         parts.splice(insertIndex, 0, ':')
@@ -70250,7 +70250,7 @@ function requireIpv6() {
         .replace(/:/g, '')
         .split('')
         .slice(0, characters)
-        .reverse()
+        .toReversed()
         .join('.')
       if (characters > 0) {
         if (options.omitSuffix) {
@@ -72640,9 +72640,9 @@ function requireProxy() {
     if (!noProxy || !noProxy.length) {
       return false
     }
-    const hostSegments = url.hostname.split('.').reverse()
+    const hostSegments = url.hostname.split('.').toReversed()
     return noProxy.some(no => {
-      const noSegments = no.split('.').filter(Boolean).reverse()
+      const noSegments = no.split('.').filter(Boolean).toReversed()
       if (!noSegments.length) {
         return false
       }

package/external/@socketsecurity/registry/lib/spinner.js

@@ -1,5 +1,7 @@
 'use strict'
 
+const { hasOwn } = /*@__PURE__*/ require('./objects')
+
 const ciSpinner = {
   frames: [''],
   // The delay argument is converted to a signed 32-bit integer. This effectively
@@ -22,6 +24,20 @@ function normalizeText(value) {
   return typeof value === 'string' ? value.trimStart() : ''
 }
 
+let _cliSpinners
+/*@__NO_SIDE_EFFECTS__*/
+function getCliSpinners(styleName) {
+  if (_cliSpinners === undefined) {
+    const yoctoFactory = /*@__PURE__*/ require('../external/@socketregistry/yocto-spinner')
+    const { constructor: YoctoCtor } = yoctoFactory()
+    _cliSpinners = YoctoCtor.spinners
+  }
+  if (typeof styleName === 'string') {
+    return hasOwn(_cliSpinners, styleName) ? _cliSpinners[styleName] : undefined
+  }
+  return _cliSpinners
+}
+
 let _Spinner
 let _defaultSpinner
 /*@__NO_SIDE_EFFECTS__*/
@@ -184,5 +200,6 @@ function Spinner(options) {
 }
 
 module.exports = {
+  getCliSpinners,
   Spinner
 }

package/external/@socketsecurity/registry/lib/url.js

@@ -2,6 +2,24 @@
 
 const BooleanCtor = Boolean
 
+/*@__NO_SIDE_EFFECTS__*/
+function isUrl(value) {
+  const isStr = typeof value === 'string'
+  if (isStr && value === '') {
+    return false
+  }
+  const isObj = !isStr && value !== null && typeof value === 'object'
+  if (!isStr && !isObj) {
+    return false
+  }
+  try {
+    // eslint-disable-next-line no-new
+    new URL(value)
+    return true
+  } catch {}
+  return false
+}
+
 /*@__NO_SIDE_EFFECTS__*/
 function urlSearchParamAsArray(value) {
   return typeof value === 'string'
@@ -22,6 +40,7 @@ function urlSearchParamAsBoolean(value, defaultValue = false) {
 }
 
 module.exports = {
+  isUrl,
   urlSearchParamAsArray,
   urlSearchParamAsBoolean
 }

package/external/@socketsecurity/registry/manifest.json

@@ -1843,7 +1843,7 @@
       }
     ],
     [
-      "pkg:npm/%40socketregistry/yocto-spinner@1.0.22",
+      "pkg:npm/%40socketregistry/yocto-spinner@1.0.23",
       {
         "categories": ["cleanup"],
         "engines": {
@@ -1853,7 +1853,7 @@
         "license": "MIT",
         "name": "@socketregistry/yocto-spinner",
         "package": "yocto-spinner",
-        "version": "1.0.22"
+        "version": "1.0.23"
       }
     ],
     [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli-with-sentry",
-  "version": "1.1.6",
+  "version": "1.1.8",
   "description": "CLI for Socket.dev, includes Sentry error handling, otherwise identical to the regular `socket` package",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -86,7 +86,7 @@
     "@babel/preset-typescript": "7.27.1",
     "@babel/runtime": "7.28.4",
     "@biomejs/biome": "2.2.4",
-    "@coana-tech/cli": "14.12.22",
+    "@coana-tech/cli": "14.12.26",
     "@cyclonedx/cdxgen": "11.7.0",
     "@dotenvx/dotenvx": "1.49.0",
     "@eslint/compat": "1.3.2",
@@ -113,8 +113,8 @@
     "@socketregistry/is-interactive": "1.0.6",
     "@socketregistry/packageurl-js": "1.0.9",
     "@socketsecurity/config": "3.0.1",
-    "@socketsecurity/registry": "1.1.5",
-    "@socketsecurity/sdk": "1.4.88",
+    "@socketsecurity/registry": "1.1.7",
+    "@socketsecurity/sdk": "1.4.90",
     "@types/blessed": "0.1.25",
     "@types/cmd-shim": "5.0.2",
     "@types/js-yaml": "4.0.9",
@@ -128,7 +128,7 @@
     "@types/which": "3.0.4",
     "@types/yargs-parser": "21.0.3",
     "@typescript-eslint/parser": "8.43.0",
-    "@typescript/native-preview": "7.0.0-dev.20250910.1",
+    "@typescript/native-preview": "7.0.0-dev.20250911.1",
     "@vitest/coverage-v8": "3.2.4",
     "blessed": "0.1.81",
     "blessed-contrib": "4.11.0",
@@ -160,7 +160,7 @@
     "npm-package-arg": "13.0.0",
     "npm-run-all2": "8.0.4",
     "open": "10.2.0",
-    "oxlint": "1.14.0",
+    "oxlint": "1.15.0",
     "pony-cause": "2.1.11",
     "registry-auth-token": "5.1.0",
     "registry-url": "7.2.0",
@@ -178,7 +178,7 @@
     "yaml": "2.8.1",
     "yargs-parser": "22.0.0",
     "yoctocolors-cjs": "2.1.3",
-    "zod": "4.1.5"
+    "zod": "4.1.7"
   },
   "overrides": {
     "@octokit/graphql": "$@octokit/graphql",