@socketsecurity/cli-with-sentry 1.6.0 → 1.6.1

package/CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.6.1](https://github.com/SocketDev/socket-cli/releases/tag/v1.6.1) - 2026-10-08
+
+### Changed
+- Updated the Coana CLI to v `15.12.2`.
+
 ## [1.6.0](https://github.com/SocketDev/socket-cli/releases/tag/v1.6.0) - 2026-10-07
 
 ### Added

package/README.md

@@ -1,8 +1,8 @@
 # Socket CLI
 
 [![Socket Badge](https://socket.dev/api/badge/npm/package/socket)](https://socket.dev/npm/package/socket)
-[![Follow @SocketSecurity](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.0/assets/fleet/badge-follow-x.svg)](https://twitter.com/SocketSecurity)
-[![Follow @socket.dev on Bluesky](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.0/assets/fleet/badge-follow-bluesky.svg)](https://bsky.app/profile/socket.dev)
+[![Follow @SocketSecurity](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.1/assets/fleet/badge-follow-x.svg)](https://twitter.com/SocketSecurity)
+[![Follow @socket.dev on Bluesky](https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.1/assets/fleet/badge-follow-bluesky.svg)](https://bsky.app/profile/socket.dev)
 
 CLI for [Socket.dev](https://socket.dev) — scan dependencies, audit packages, apply security patches, and gate installs from your terminal or CI. This is the 1.x line of the published `socket` package on npm.
 
@@ -171,8 +171,8 @@ MIT
 <br/>
 <div align="center">
   <picture>
-    <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.0/assets/fleet/socket-combomark-dark.svg">
-    <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.0/assets/fleet/socket-combomark-light.svg">
-    <img width="324" height="104" alt="Socket" src="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.0/assets/fleet/socket-combomark-light.svg">
+    <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.1/assets/fleet/socket-combomark-dark.svg">
+    <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.1/assets/fleet/socket-combomark-light.svg">
+    <img width="324" height="104" alt="Socket" src="https://raw.githubusercontent.com/SocketDev/socket-cli/v1.6.1/assets/fleet/socket-combomark-light.svg">
   </picture>
 </div>

package/dist/cli.js

@@ -9034,6 +9034,18 @@ function readWrittenFiles(outputFile) {
   const files = result?.modifiedFiles;
   return Array.isArray(files) && files.every(f => typeof f === 'string') ? new Set(files) : undefined;
 }
+// Coana exits with this code after writing an --output-file that lists computed fixes it left unapplied.
+const COANA_FIXES_NOT_APPLIED_EXIT_CODE = 5;
+function isFixesNotAppliedExit(result) {
+  return !result.ok && result.data?.code === COANA_FIXES_NOT_APPLIED_EXIT_CODE;
+}
+function readNotAppliedFixes(fixesResultJson) {
+  const notApplied = fixesResultJson?.notApplied;
+  return Array.isArray(notApplied) ? notApplied : [];
+}
+function formatNotAppliedFixes(notApplied) {
+  return notApplied.map(f => `  ${f.ghsa}: ${f.purl} -> ${f.fixedVersion}: ${f.reason}`).join('\n');
+}
 async function coanaFix(fixConfig) {
   if (!fixConfig.dynamicSbomInference) {
     return await coanaFixWithFacts(fixConfig, undefined);
@@ -9250,7 +9262,7 @@ async function coanaFixWithFacts(fixConfig, factsSlot) {
       if (!silence) {
         spinner?.stop();
       }
-      if (!fixCResult.ok) {
+      if (!fixCResult.ok && !isFixesNotAppliedExit(fixCResult)) {
         return fixCResult;
       }
 
@@ -9267,11 +9279,24 @@ async function coanaFixWithFacts(fixConfig, factsSlot) {
         const tmpContent = await fs$1.promises.readFile(tmpFile, 'utf8');
         await fs$1.promises.writeFile(outputFile, tmpContent, 'utf8');
       }
+      const ghsaDetails = fixesResultJson ? [fixesResultJson] : [];
+      const notApplied = readNotAppliedFixes(fixesResultJson);
+      if (!fixCResult.ok || notApplied.length) {
+        return {
+          ok: false,
+          message: fixesResultJson?.type === 'no-fixes-applied' ? 'No computed fixes were applied' : 'Some computed fixes were not applied',
+          cause: formatNotAppliedFixes(notApplied),
+          data: {
+            fixedAll: false,
+            ghsaDetails
+          }
+        };
+      }
       return {
         ok: true,
         data: {
           fixedAll: true,
-          ghsaDetails: fixesResultJson ? [fixesResultJson] : []
+          ghsaDetails
         }
       };
     } finally {
@@ -9378,7 +9403,13 @@ async function coanaFixWithFacts(fixConfig, factsSlot) {
       spinner: silence ? undefined : spinner,
       stdio: silence ? 'pipe' : 'inherit'
     });
-    if (!fixCResult.ok) {
+    if (isFixesNotAppliedExit(fixCResult)) {
+      if (!silence) {
+        logger.logger.warn(`Not every fix for ${ghsaId} was applied:\n${formatNotAppliedFixes(readNotAppliedFixes(fs$2.readJsonSync(tmpFile, {
+          throws: false
+        })))}`);
+      }
+    } else if (!fixCResult.ok) {
       if (!silence) {
         logger.logger.error(`Update failed for ${ghsaId}: ${utils.getErrorCause(fixCResult)}`);
       }
@@ -24467,5 +24498,5 @@ process.on('unhandledRejection', async (reason, promise) => {
   // eslint-disable-next-line n/no-process-exit
   process.exit(1);
 });
-//# debugId=b7761d71-38de-4772-91bc-d1db319250b4
+//# debugId=e70a53df-f766-401c-8399-eee0c4d48cc7
 //# sourceMappingURL=cli.js.map