@socketsecurity/cli-with-sentry 1.10.1 → 1.11.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/CHANGELOG.md +24 -0
  2. package/README.md +5 -5
  3. package/dist/cli.js +983 -447
  4. package/dist/cli.js.map +1 -1
  5. package/dist/constants.js +4 -4
  6. package/dist/constants.js.map +1 -1
  7. package/dist/manifest-scripts/maven-extension/coana-maven-extension.jar +0 -0
  8. package/dist/tsconfig.dts.tsbuildinfo +1 -1
  9. package/dist/types/commands/ci/handle-ci.d.mts.map +1 -1
  10. package/dist/types/commands/fix/handle-fix.d.mts.map +1 -1
  11. package/dist/types/commands/manifest/bazel/bazel-bin-detect.d.mts +1 -1
  12. package/dist/types/commands/manifest/bazel/bazel-bin-detect.d.mts.map +1 -1
  13. package/dist/types/commands/manifest/bazel/bazel-cleanup.d.mts +8 -0
  14. package/dist/types/commands/manifest/bazel/bazel-cleanup.d.mts.map +1 -0
  15. package/dist/types/commands/manifest/bazel/bazel-cquery.d.mts.map +1 -1
  16. package/dist/types/commands/manifest/bazel/bazel-java-shim.d.mts +1 -9
  17. package/dist/types/commands/manifest/bazel/bazel-java-shim.d.mts.map +1 -1
  18. package/dist/types/commands/manifest/bazel/bazel-process.d.mts +25 -0
  19. package/dist/types/commands/manifest/bazel/bazel-process.d.mts.map +1 -0
  20. package/dist/types/commands/manifest/bazel/bazel-python-shim.d.mts +2 -5
  21. package/dist/types/commands/manifest/bazel/bazel-python-shim.d.mts.map +1 -1
  22. package/dist/types/commands/manifest/bazel/bazel-query-runner.d.mts +1 -9
  23. package/dist/types/commands/manifest/bazel/bazel-query-runner.d.mts.map +1 -1
  24. package/dist/types/commands/manifest/bazel/cmd-manifest-bazel.d.mts.map +1 -1
  25. package/dist/types/commands/manifest/bazel/extract_bazel_to_maven.d.mts.map +1 -1
  26. package/dist/types/commands/manifest/bazel/extract_bazel_to_pypi.d.mts.map +1 -1
  27. package/dist/types/commands/manifest/discover-manifest-roots.d.mts +16 -4
  28. package/dist/types/commands/manifest/discover-manifest-roots.d.mts.map +1 -1
  29. package/dist/types/commands/manifest/enumerate-workspaces.d.mts +3 -1
  30. package/dist/types/commands/manifest/enumerate-workspaces.d.mts.map +1 -1
  31. package/dist/types/commands/manifest/generate-recursive-manifests.d.mts +2 -2
  32. package/dist/types/commands/manifest/generate-recursive-manifests.d.mts.map +1 -1
  33. package/dist/types/commands/manifest/output-manifest-dynamic-sbom-inference.d.mts.map +1 -1
  34. package/dist/types/commands/manifest/run-manifest-facts.d.mts +3 -1
  35. package/dist/types/commands/manifest/run-manifest-facts.d.mts.map +1 -1
  36. package/dist/types/commands/manifest/scripts/build-tool.d.mts +14 -0
  37. package/dist/types/commands/manifest/scripts/build-tool.d.mts.map +1 -1
  38. package/dist/types/commands/manifest/scripts/run.d.mts +2 -0
  39. package/dist/types/commands/manifest/scripts/run.d.mts.map +1 -1
  40. package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts +14 -16
  41. package/dist/types/commands/manifest/setup-recursive-manifest-config.d.mts.map +1 -1
  42. package/dist/types/commands/scan/cmd-scan-create.d.mts.map +1 -1
  43. package/dist/types/commands/scan/cmd-scan-reach.d.mts.map +1 -1
  44. package/dist/types/commands/scan/perform-reachability-analysis.d.mts +2 -0
  45. package/dist/types/commands/scan/perform-reachability-analysis.d.mts.map +1 -1
  46. package/dist/types/commands/scan/reach-advisories.d.mts +7 -0
  47. package/dist/types/commands/scan/reach-advisories.d.mts.map +1 -0
  48. package/dist/types/commands/scan/reachability-flags.d.mts.map +1 -1
  49. package/dist/types/constants.d.mts +1 -1
  50. package/dist/types/constants.d.mts.map +1 -1
  51. package/dist/types/utils/advisory-ids.d.mts +14 -0
  52. package/dist/types/utils/advisory-ids.d.mts.map +1 -0
  53. package/dist/types/utils/config.d.mts +1 -0
  54. package/dist/types/utils/config.d.mts.map +1 -1
  55. package/dist/types/utils/cve-to-ghsa.d.mts +2 -0
  56. package/dist/types/utils/cve-to-ghsa.d.mts.map +1 -1
  57. package/dist/utils.js +82 -3
  58. package/dist/utils.js.map +1 -1
  59. package/dist/vendor.js +553 -550
  60. package/package.json +2 -1
package/CHANGELOG.md CHANGED
@@ -4,6 +4,30 @@ All notable changes to this project will be documented in this file.
4
4
 
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
6
6
 
7
+ ## [1.11.1](https://github.com/SocketDev/socket-cli/releases/tag/v1.11.1) - 2026-10-27
8
+
9
+ ### Added
10
+ - Set `SOCKET_BAZEL_OUTPUT_ROOT` to choose a short parent directory for temporary Bazel output, including on Windows.
11
+
12
+ ### Changed
13
+ - `--dynamic-sbom-inference` now builds every Maven POM a scan uploads, not only `pom.xml`: `<artifactId>-<version>.pom` and `.pom.xml` files, a bare `pom`, and names in any case, each as a build of its own. Like the upload, it skips POMs matched by `.gitignore` or by `projectIgnorePaths` in `socket.yml`.
14
+
15
+ ### Fixed
16
+ - Bazel Maven extraction handles native Windows executables, batch launchers, and JavaScript entry points while preserving arguments and the selected executable path.
17
+ - Bazel prerequisite checks use the extraction environment and verify Python 3. Windows requires a working `python.exe` without creating a Python symlink.
18
+ - Quoted Bazel flags preserve spaces and Windows backslashes. Quotes open at the start of a value or after `=`, so apostrophes inside a value stay literal. Unclosed quotes produce an error.
19
+ - Bazel cleanup uses the extraction workspace, environment, and startup options, retries temporary file locks, and only stops Bazel servers the scan started.
20
+ - Bazel timeouts and cancellation stop every process a Bazel launcher started. Cleanup still runs after Ctrl-C and keeps temporary output until the scan's own Bazel server has exited.
21
+ - A relative `--bazel` path resolves against the current directory. A relative `bazel` path in `socket.json` resolves against the scanned directory.
22
+
23
+ ## [1.11.0](https://github.com/SocketDev/socket-cli/releases/tag/v1.11.0) - 2026-10-26
24
+
25
+ ### Added
26
+ - `socket scan create --reach` and `socket scan reach` take `--reach-advisories` to focus reachability analysis on the GHSA or CVE advisories you care about. Every other advisory is left with unknown reachability.
27
+
28
+ ### Changed
29
+ - Updated the Coana CLI to v `15.13.0`.
30
+
7
31
  ## [1.10.1](https://github.com/SocketDev/socket-cli/releases/tag/v1.10.1) - 2026-10-23
8
32
 
9
33
  ### Changed
package/README.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Socket CLI
2
2
 
3
3
  [![Socket Badge](https://socket.dev/api/badge/npm/package/socket)](https://socket.dev/npm/package/socket)
4
- [![Follow @SocketSecurity](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.10.1/assets/fleet/badge-follow-x.svg)](https://twitter.com/SocketSecurity)
5
- [![Follow @socket.dev on Bluesky](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.10.1/assets/fleet/badge-follow-bluesky.svg)](https://bsky.app/profile/socket.dev)
4
+ [![Follow @SocketSecurity](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.11.1/assets/fleet/badge-follow-x.svg)](https://twitter.com/SocketSecurity)
5
+ [![Follow @socket.dev on Bluesky](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.11.1/assets/fleet/badge-follow-bluesky.svg)](https://bsky.app/profile/socket.dev)
6
6
 
7
7
  CLI for [Socket.dev](https://socket.dev) — scan dependencies, audit packages, apply security patches, and gate installs from your terminal or CI. This is the 1.x line of the published `socket` package on npm.
8
8
 
@@ -170,8 +170,8 @@ MIT
170
170
  <br/>
171
171
  <div align="center">
172
172
  <picture>
173
- <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.10.1/assets/fleet/socket-combomark-dark.svg">
174
- <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.10.1/assets/fleet/socket-combomark-light.svg">
175
- <img width="324" height="104" alt="Socket" src="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.10.1/assets/fleet/socket-combomark-light.svg">
173
+ <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.11.1/assets/fleet/socket-combomark-dark.svg">
174
+ <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.11.1/assets/fleet/socket-combomark-light.svg">
175
+ <img width="324" height="104" alt="Socket" src="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.11.1/assets/fleet/socket-combomark-light.svg">
176
176
  </picture>
177
177
  </div>