@socketsecurity/cli 0.14.28 → 0.14.30

package/dist/{npx-cli.js → require/npx-cli.js}

@@ -2,25 +2,23 @@
 'use strict';
 
 var vendor = require('./vendor.js');
-var require$$0 = require('node:fs');
 var require$$1 = require('node:path');
 var require$$1$1 = require('@npmcli/promise-spawn');
+var constants = require('./constants.js');
 var link = require('./link.js');
 
-var npxCli$1 = {};
+var npxCli$2 = {};
 
-var npxCli = {};
+var npxCli$1 = {};
 
-var _nodeFs = require$$0;
 var _nodePath = require$$1;
 var _promiseSpawn = require$$1$1;
+var _constants = constants.constants;
 var _link = link.link;
-const realFilename = (0, _nodeFs.realpathSync)(__filename);
-const realDirname = _nodePath.dirname(realFilename);
-const npxPath = (0, _link.installLinks)(_nodePath.join(realDirname, 'bin'), 'npx');
-const injectionPath = _nodePath.join(realDirname, 'npm-injection.js');
+const npxPath = (0, _link.installLinks)(_constants.shadowBinPath, 'npx');
+const injectionPath = _nodePath.join(_constants.distPath, 'npm-injection.js');
 process.exitCode = 1;
-const spawnPromise = _promiseSpawn(process.execPath, ['--require', injectionPath, npxPath, ...process.argv.slice(2)], {
+const spawnPromise = _promiseSpawn(process.execPath, ['--disable-warning', 'ExperimentalWarning', '--require', injectionPath, npxPath, ...process.argv.slice(2)], {
   stdio: 'inherit'
 });
 spawnPromise.process.on('exit', (code, signal) => {
@@ -44,7 +42,7 @@ spawnPromise.process.on('exit', (code, signal) => {
 	    return _npxCli.default;
 	  }
 	});
-	var _npxCli = _interopRequireWildcard(npxCli, true);
+	var _npxCli = _interopRequireWildcard(npxCli$1, true);
 	Object.keys(_npxCli).forEach(function (key) {
 	  if (key === "default" || key === "__esModule") return;
 	  if (Object.prototype.hasOwnProperty.call(_exportNames, key)) return;
@@ -56,6 +54,8 @@ spawnPromise.process.on('exit', (code, signal) => {
 	    }
 	  });
 	}); 
-} (npxCli$1));
+} (npxCli$2));
+
+var npxCli = /*@__PURE__*/vendor.getDefaultExportFromCjs(npxCli$2);
 
-module.exports = npxCli$1;
+module.exports = npxCli;

package/dist/require/path-resolve.d.ts

@@ -0,0 +1,8 @@
+/// <reference types="node" />
+import { SocketYml } from '@socketsecurity/config';
+import { SocketSdkReturnType } from '@socketsecurity/sdk';
+declare function directoryPatterns(): string[];
+declare function findRoot(filepath: string): string | undefined;
+declare function getPackageFiles(cwd: string, inputPaths: string[], config: SocketYml | undefined, supportedFiles: SocketSdkReturnType<'getReportSupportedFiles'>['data'], debugLog?: typeof console.error): Promise<string[]>;
+declare function getPackageFilesFullScans(cwd: string, inputPaths: string[], supportedFiles: SocketSdkReturnType<'getReportSupportedFiles'>['data'], debugLog?: typeof console.error): Promise<string[]>;
+export { directoryPatterns, findRoot, getPackageFiles, getPackageFilesFullScans };

package/dist/require/path-resolve.js

@@ -0,0 +1,183 @@
+'use strict';
+
+var require$$1$1 = require('node:fs/promises');
+var require$$1 = require('node:path');
+var require$$2 = require('ignore');
+var require$$3 = require('micromatch');
+var require$$8 = require('tinyglobby');
+
+var pathResolve = {};
+
+var ignoreByDefault = {};
+
+Object.defineProperty(ignoreByDefault, "__esModule", {
+  value: true
+});
+ignoreByDefault.directoryPatterns = directoryPatterns;
+const ignoredDirs = [
+// Taken from ignore-by-default:
+// https://github.com/novemberborn/ignore-by-default/blob/v2.1.0/index.js
+'.git',
+// Git repository files, see <https://git-scm.com/>
+'.log',
+// Log files emitted by tools such as `tsserver`, see <https://github.com/Microsoft/TypeScript/wiki/Standalone-Server-%28tsserver%29>
+'.nyc_output',
+// Temporary directory where nyc stores coverage data, see <https://github.com/bcoe/nyc>
+'.sass-cache',
+// Cache folder for node-sass, see <https://github.com/sass/node-sass>
+'.yarn',
+// Where node modules are installed when using Yarn, see <https://yarnpkg.com/>
+'bower_components',
+// Where Bower packages are installed, see <http://bower.io/>
+'coverage',
+// Standard output directory for code coverage reports, see <https://github.com/gotwarlost/istanbul>
+'node_modules',
+// Where Node modules are installed, see <https://nodejs.org/>
+// Taken from globby:
+// https://github.com/sindresorhus/globby/blob/v14.0.2/ignore.js#L11-L16
+'flow-typed'];
+const ignoredDirPatterns = ignoredDirs.map(i => `**/${i}`);
+function directoryPatterns() {
+  return [...ignoredDirPatterns];
+}
+
+Object.defineProperty(pathResolve, "__esModule", {
+  value: true
+});
+pathResolve.findRoot = findRoot;
+pathResolve.getPackageFiles = getPackageFiles;
+pathResolve.getPackageFilesFullScans = getPackageFilesFullScans;
+var _promises = require$$1$1;
+var _nodePath = require$$1;
+var _ignore = require$$2;
+var _micromatch = require$$3;
+var _tinyglobby = require$$8;
+var _ignoreByDefault = ignoreByDefault;
+async function filterGlobResultToSupportedFiles(entries, supportedFiles) {
+  const patterns = ['golang', 'npm', 'pypi'].reduce((r, n) => {
+    const supported = supportedFiles[n];
+    r.push(...(supported ? Object.values(supported).map(p => `**/${p.pattern}`) : []));
+    return r;
+  }, []);
+  return entries.filter(p => _micromatch.some(p, patterns));
+}
+async function globWithGitIgnore(patterns, options) {
+  const {
+    cwd = process.cwd(),
+    socketConfig,
+    ...additionalOptions
+  } = {
+    __proto__: null,
+    ...options
+  };
+  const projectIgnorePaths = socketConfig?.projectIgnorePaths;
+  const ignoreFiles = await (0, _tinyglobby.glob)(['**/.gitignore'], {
+    absolute: true,
+    cwd,
+    expandDirectories: true
+  });
+  const ignores = [...(0, _ignoreByDefault.directoryPatterns)(), ...(Array.isArray(projectIgnorePaths) ? ignoreFileLinesToGlobPatterns(projectIgnorePaths, _nodePath.join(cwd, '.gitignore'), cwd) : []), ...(await Promise.all(ignoreFiles.map(async filepath => ignoreFileToGlobPatterns(await _promises.readFile(filepath, 'utf8'), filepath, cwd)))).flat()];
+  const hasNegatedPattern = ignores.some(p => p.charCodeAt(0) === 33 /*'!'*/);
+  const globOptions = {
+    absolute: true,
+    cwd,
+    expandDirectories: false,
+    ignore: hasNegatedPattern ? [] : ignores,
+    ...additionalOptions
+  };
+  const result = await (0, _tinyglobby.glob)(patterns, globOptions);
+  if (!hasNegatedPattern) {
+    return result;
+  }
+  const {
+    absolute
+  } = globOptions;
+  const filtered = _ignore().add(ignores).filter(absolute ? result.map(p => _nodePath.relative(cwd, p)) : result);
+  return absolute ? filtered.map(p => _nodePath.resolve(cwd, p)) : filtered;
+}
+function ignoreFileLinesToGlobPatterns(lines, filepath, cwd) {
+  const base = _nodePath.relative(cwd, _nodePath.dirname(filepath)).replace(/\\/g, '/');
+  const patterns = [];
+  for (let i = 0, {
+      length
+    } = lines; i < length; i += 1) {
+    const pattern = lines[i].trim();
+    if (pattern.length > 0 && pattern.charCodeAt(0) !== 35 /*'#'*/) {
+      patterns.push(ignorePatternToMinimatch(pattern.length && pattern.charCodeAt(0) === 33 /*'!'*/ ? `!${_nodePath.posix.join(base, pattern.slice(1))}` : _nodePath.posix.join(base, pattern)));
+    }
+  }
+  return patterns;
+}
+function ignoreFileToGlobPatterns(content, filepath, cwd) {
+  return ignoreFileLinesToGlobPatterns(content.split(/\r?\n/), filepath, cwd);
+}
+
+// Based on `@eslint/compat` convertIgnorePatternToMinimatch.
+// Apache v2.0 licensed
+// Copyright Nicholas C. Zakas
+// https://github.com/eslint/rewrite/blob/compat-v1.2.1/packages/compat/src/ignore-file.js#L28
+function ignorePatternToMinimatch(pattern) {
+  const isNegated = pattern.startsWith('!');
+  const negatedPrefix = isNegated ? '!' : '';
+  const patternToTest = (isNegated ? pattern.slice(1) : pattern).trimEnd();
+  // Special cases.
+  if (patternToTest === '' || patternToTest === '**' || patternToTest === '/**' || patternToTest === '**') {
+    return `${negatedPrefix}${patternToTest}`;
+  }
+  const firstIndexOfSlash = patternToTest.indexOf('/');
+  const matchEverywherePrefix = firstIndexOfSlash === -1 || firstIndexOfSlash === patternToTest.length - 1 ? '**/' : '';
+  const patternWithoutLeadingSlash = firstIndexOfSlash === 0 ? patternToTest.slice(1) : patternToTest;
+  // Escape `{` and `(` because in gitignore patterns they are just
+  // literal characters without any specific syntactic meaning,
+  // while in minimatch patterns they can form brace expansion or extglob syntax.
+  //
+  // For example, gitignore pattern `src/{a,b}.js` ignores file `src/{a,b}.js`.
+  // But, the same minimatch pattern `src/{a,b}.js` ignores files `src/a.js` and `src/b.js`.
+  // Minimatch pattern `src/\{a,b}.js` is equivalent to gitignore pattern `src/{a,b}.js`.
+  const escapedPatternWithoutLeadingSlash = patternWithoutLeadingSlash.replaceAll(/(?=((?:\\.|[^{(])*))\1([{(])/guy, '$1\\$2');
+  const matchInsideSuffix = patternToTest.endsWith('/**') ? '/*' : '';
+  return `${negatedPrefix}${matchEverywherePrefix}${escapedPatternWithoutLeadingSlash}${matchInsideSuffix}`;
+}
+function pathsToPatterns(paths) {
+  return paths.map(p => p === '.' ? '**/*' : p);
+}
+function findRoot(filepath) {
+  let curPath = filepath;
+  while (true) {
+    if (_nodePath.basename(curPath) === 'npm') {
+      return curPath;
+    }
+    const parent = _nodePath.dirname(curPath);
+    if (parent === curPath) {
+      return undefined;
+    }
+    curPath = parent;
+  }
+}
+async function getPackageFiles(cwd, inputPaths, config, supportedFiles, debugLog = () => {}) {
+  debugLog(`Globbed resolving ${inputPaths.length} paths:`, inputPaths);
+
+  // TODO: Does not support `~/` paths
+  const entries = await globWithGitIgnore(pathsToPatterns(inputPaths), {
+    cwd,
+    socketConfig: config
+  });
+  debugLog(`Globbed resolved ${inputPaths.length} paths to ${entries.length} paths:`, entries);
+  const packageFiles = await filterGlobResultToSupportedFiles(entries, supportedFiles);
+  debugLog(`Mapped ${entries.length} entries to ${packageFiles.length} files:`, packageFiles);
+  return packageFiles;
+}
+async function getPackageFilesFullScans(cwd, inputPaths, supportedFiles, debugLog = () => {}) {
+  debugLog(`Globbed resolving ${inputPaths.length} paths:`, inputPaths);
+
+  // TODO: Does not support `~/` paths
+  const entries = await globWithGitIgnore(pathsToPatterns(inputPaths), {
+    cwd
+  });
+  debugLog(`Globbed resolved ${inputPaths.length} paths to ${entries.length} paths:`, entries);
+  const packageFiles = await filterGlobResultToSupportedFiles(entries, supportedFiles);
+  debugLog(`Mapped ${entries.length} entries to ${packageFiles.length} files:`, packageFiles);
+  return packageFiles;
+}
+
+exports.pathResolve = pathResolve;

package/dist/require/sdk.d.ts

@@ -0,0 +1,9 @@
+/// <reference types="node" />
+import { SocketSdk } from '@socketsecurity/sdk';
+declare function createDebugLogger(printDebugLogs?: boolean): typeof console.error;
+declare function isErrnoException(value: unknown): value is NodeJS.ErrnoException;
+declare function stringJoinWithSeparateFinalSeparator(list: (string | undefined)[], separator?: string): string;
+declare const FREE_API_KEY = "sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api";
+declare function getDefaultKey(): string | undefined;
+declare function setupSdk(apiKey?: string | undefined, apiBaseUrl?: string | undefined, proxy?: string | undefined): Promise<SocketSdk>;
+export { createDebugLogger, isErrnoException, stringJoinWithSeparateFinalSeparator, FREE_API_KEY, getDefaultKey, setupSdk };

package/dist/{sdk.js → require/sdk.js}

@@ -1,15 +1,14 @@
 'use strict';
 
-var require$$0 = require('@socketsecurity/registry/lib/env');
 var vendor = require('./vendor.js');
 var require$$1 = require('yoctocolors-cjs');
-var require$$1$3 = require('node:fs/promises');
-var require$$1$2 = require('node:path');
-var require$$1$4 = require('@inquirer/prompts');
-var require$$4 = require('hpagent');
-var require$$6 = require('@socketsecurity/sdk');
-var require$$0$1 = require('node:fs');
+var require$$1$3 = require('@inquirer/prompts');
+var require$$2 = require('hpagent');
+var require$$4 = require('@socketsecurity/sdk');
+var constants = require('./constants.js');
+var require$$0 = require('node:fs');
 var require$$1$1 = require('node:os');
+var require$$1$2 = require('node:path');
 var require$$3 = require('@socketregistry/yocto-spinner');
 
 var errors = {};
@@ -28,19 +27,6 @@ class InputError extends Error {
 }
 errors.InputError = InputError;
 
-var constants = {};
-
-Object.defineProperty(constants, "__esModule", {
-  value: true
-});
-constants.ENV = constants.API_V0_URL = void 0;
-var _env = require$$0;
-constants.API_V0_URL = 'https://api.socket.dev/v0';
-constants.ENV = Object.freeze({
-  // Flag set by the optimize command to bypass the packagesHaveRiskyIssues check.
-  UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE: (0, _env.envAsBoolean)(process.env['UPDATE_SOCKET_OVERRIDES_IN_PACKAGE_LOCK_FILE'])
-});
-
 var colorOrMarkdown = {};
 
 var _interopRequireDefault$1 = vendor.interopRequireDefault.default;
@@ -153,17 +139,17 @@ Object.defineProperty(settings$1, "__esModule", {
 });
 settings$1.getSetting = getSetting;
 settings$1.updateSetting = updateSetting;
-var _nodeFs = require$$0$1;
+var _nodeFs = require$$0;
 var _nodeOs = require$$1$1;
-var _nodePath$1 = require$$1$2;
+var _nodePath = require$$1$2;
 var _yoctoSpinner = require$$3;
 let dataHome = process.platform === 'win32' ? process.env['LOCALAPPDATA'] : process.env['XDG_DATA_HOME'];
 if (!dataHome) {
   if (process.platform === 'win32') throw new Error('missing %LOCALAPPDATA%');
   const home = _nodeOs.homedir();
-  dataHome = _nodePath$1.join(home, ...(process.platform === 'darwin' ? ['Library', 'Application Support'] : ['.local', 'share']));
+  dataHome = _nodePath.join(home, ...(process.platform === 'darwin' ? ['Library', 'Application Support'] : ['.local', 'share']));
 }
-const settingsPath = _nodePath$1.join(dataHome, 'socket', 'settings');
+const settingsPath = _nodePath.join(dataHome, 'socket', 'settings');
 let settings = {};
 if ((0, _nodeFs.existsSync)(settingsPath)) {
   const raw = (0, _nodeFs.readFileSync)(settingsPath, 'utf-8');
@@ -173,7 +159,7 @@ if ((0, _nodeFs.existsSync)(settingsPath)) {
     _yoctoSpinner().warning(`Failed to parse settings at ${settingsPath}`);
   }
 } else {
-  (0, _nodeFs.mkdirSync)(_nodePath$1.dirname(settingsPath), {
+  (0, _nodeFs.mkdirSync)(_nodePath.dirname(settingsPath), {
     recursive: true
   });
 }
@@ -199,16 +185,13 @@ Object.defineProperty(sdk, "__esModule", {
 sdk.FREE_API_KEY = void 0;
 sdk.getDefaultKey = getDefaultKey;
 sdk.setupSdk = setupSdk;
-var _promises = require$$1$3;
-var _nodePath = require$$1$2;
-var _prompts = require$$1$4;
-var _hpagent = require$$4;
+var _prompts = require$$1$3;
+var _hpagent = require$$2;
 var _isInteractive = _interopRequireDefault(vendor.isInteractive);
-var _sdk = require$$6;
+var _sdk = require$$4;
+var _constants = constants.constants;
 var _errors = errors;
 var _settings = settings$1;
-const distPath = __dirname;
-const rootPath = _nodePath.resolve(distPath, '..');
 sdk.FREE_API_KEY = 'sktsec_t_--RAN5U4ivauy4w37-6aoKyYPDt5ZbaT5JBVMqiwKo_api';
 
 // This API key should be stored globally for the duration of the CLI execution
@@ -252,18 +235,15 @@ async function setupSdk(apiKey = getDefaultKey(), apiBaseUrl = getDefaultAPIBase
       })
     };
   }
-  const packageJsonPath = _nodePath.join(rootPath, 'package.json');
-  const packageJson = await _promises.readFile(packageJsonPath, 'utf8');
   const sdkOptions = {
     agent,
     baseUrl: apiBaseUrl,
-    userAgent: (0, _sdk.createUserAgentFromPkgJson)(JSON.parse(packageJson))
+    userAgent: (0, _sdk.createUserAgentFromPkgJson)(require(_constants.rootPkgJsonPath))
   };
   return new _sdk.SocketSdk(apiKey || '', sdkOptions);
 }
 
 exports.colorOrMarkdown = colorOrMarkdown;
-exports.constants = constants;
 exports.errors = errors;
 exports.misc = misc;
 exports.sdk = sdk;

package/dist/require/settings.d.ts

@@ -0,0 +1,9 @@
+interface Settings {
+    apiKey?: string | null;
+    enforcedOrgs?: string[] | null;
+    apiBaseUrl?: string | null;
+    apiProxy?: string | null;
+}
+declare function getSetting<Key extends keyof Settings>(key: Key): Settings[Key];
+declare function updateSetting<Key extends keyof Settings>(key: Key, value: Settings[Key]): void;
+export { getSetting, updateSetting };

package/dist/{vendor.js → require/vendor.js}

@@ -1,9 +1,9 @@
 'use strict';
 
-var require$$1$1 = require('node:path');
 var require$$8 = require('node:url');
 var require$$0 = require('node:fs');
 var require$$1 = require('node:os');
+var require$$1$1 = require('node:path');
 var require$$0$1 = require('node:process');
 var require$$0$2 = require('node:util');
 var require$$1$2 = require('node:tty');
@@ -13,6 +13,10 @@ var require$$2$2 = require('node:buffer');
 var require$$2$1 = require('node:child_process');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
+function getDefaultExportFromCjs (x) {
+	return x && x.__esModule && Object.prototype.hasOwnProperty.call(x, 'default') ? x['default'] : x;
+}
+
 var interopRequireWildcard = {};
 
 var _typeof$1 = {};
@@ -9976,6 +9980,7 @@ open$1.default = open;
 
 exports.build = build;
 exports.dist = dist$1;
+exports.getDefaultExportFromCjs = getDefaultExportFromCjs;
 exports.interopRequireDefault = interopRequireDefault;
 exports.interopRequireWildcard = interopRequireWildcard;
 exports.isInteractive = isInteractive$1;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/cli",
-  "version": "0.14.28",
+  "version": "0.14.30",
   "description": "CLI tool for Socket.dev",
   "homepage": "http://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -14,10 +14,44 @@
     "url": "https://socket.dev"
   },
   "bin": {
-    "cli": "dist/cli.js",
-    "socket": "dist/cli.js",
-    "socket-npm": "dist/npm-cli.js",
-    "socket-npx": "dist/npx-cli.js"
+    "cli": "./bin/cli.js",
+    "socket": "./bin/cli.js",
+    "socket-npm": "./bin/npm-cli.js",
+    "socket-npx": "./bin/npx-cli.js"
+  },
+  "exports": {
+    "./bin/cli.js": {
+      "module-sync": {
+        "types": "./dist/module-sync/cli.d.ts",
+        "default": "./dist/module-sync/cli.js"
+      },
+      "require": {
+        "types": "./dist/require/cli.d.ts",
+        "default": "./dist/require/cli.js"
+      }
+    },
+    "./bin/npm-cli.js": {
+      "module-sync": {
+        "types": "./dist/module-sync/npm-cli.d.ts",
+        "default": "./dist/module-sync/npm-cli.js"
+      },
+      "require": {
+        "types": "./dist/require/npm-cli.d.ts",
+        "default": "./dist/require/npm-cli.js"
+      }
+    },
+    "./bin/npx-cli.js": {
+      "module-sync": {
+        "types": "./dist/module-sync/npx-cli.d.ts",
+        "default": "./dist/module-sync/npx-cli.js"
+      },
+      "require": {
+        "types": "./dist/require/npx-cli.d.ts",
+        "default": "./dist/require/npx-cli.js"
+      }
+    },
+    "./package.json": "./package.json",
+    "./translations.json": "./translations.json"
   },
   "scripts": {
     "build": "run-s build:*",
@@ -32,22 +66,22 @@
     "lint": "oxlint -c=./.oxlintrc.json --ignore-path=./.prettierignore --tsconfig=./tsconfig.json .",
     "lint:fix": "npm run lint -- --fix && npm run lint:fix:fast",
     "lint:fix:fast": "prettier --cache --log-level warn --write .",
-    "prepare": "husky",
+    "prepare": "husky && custompatch",
     "test": "run-s check build:* test:*",
     "test:c8": "c8 --reporter=none node --test 'test/socket-npm.test.cjs'",
     "test-ci": "run-s build:* test:*",
-    "test:unit": "tap",
-    "test:coverage": "cp -r .tap/coverage/*.json coverage/tmp && c8 --reporter=lcov --reporter=text --include 'dist/*.js' --exclude 'dist/vendor.js' report"
+    "test:unit": "tap-run",
+    "test:coverage": "cp -r .tap/coverage/*.json coverage/tmp && c8 --reporter=lcov --reporter=text --include 'dist/{module-sync,require}/*.js' --exclude 'dist/require/vendor.js' report"
   },
   "dependencies": {
     "@apideck/better-ajv-errors": "^0.3.6",
-    "@cyclonedx/cdxgen": "^11.0.3",
+    "@cyclonedx/cdxgen": "^11.0.5",
     "@inquirer/prompts": "^7.1.0",
     "@npmcli/promise-spawn": "^8.0.2",
     "@socketregistry/hyrious__bun.lockb": "1.0.5",
     "@socketregistry/yocto-spinner": "^1.0.1",
     "@socketsecurity/config": "^2.1.3",
-    "@socketsecurity/registry": "^1.0.32",
+    "@socketsecurity/registry": "^1.0.33",
     "@socketsecurity/sdk": "^1.3.0",
     "blessed": "^0.1.81",
     "blessed-contrib": "^4.11.0",
@@ -72,18 +106,19 @@
     "@babel/plugin-proposal-export-default-from": "^7.25.9",
     "@babel/plugin-syntax-dynamic-import": "^7.8.3",
     "@babel/plugin-transform-export-namespace-from": "^7.25.9",
-    "@babel/plugin-transform-modules-commonjs": "^7.25.9",
+    "@babel/plugin-transform-modules-commonjs": "^7.26.3",
     "@babel/plugin-transform-runtime": "^7.25.9",
     "@babel/preset-env": "^7.26.0",
     "@babel/preset-typescript": "^7.26.0",
     "@babel/runtime": "^7.26.0",
-    "@eslint/compat": "^1.2.3",
+    "@eslint/compat": "^1.2.4",
     "@eslint/js": "^9.16.0",
     "@rollup/plugin-commonjs": "^28.0.1",
     "@rollup/plugin-json": "^6.1.0",
     "@rollup/plugin-node-resolve": "^15.3.0",
     "@rollup/plugin-replace": "^6.0.1",
     "@rollup/pluginutils": "^5.1.3",
+    "@tapjs/run": "^4.0.1",
     "@types/blessed": "^0.1.25",
     "@types/micromatch": "^4.0.9",
     "@types/mocha": "^10.0.10",
@@ -99,29 +134,29 @@
     "@typescript-eslint/eslint-plugin": "^8.17.0",
     "@typescript-eslint/parser": "^8.17.0",
     "c8": "^10.1.2",
+    "custompatch": "^1.0.28",
     "eslint": "^9.16.0",
-    "eslint-import-resolver-oxc": "^0.5.0",
+    "eslint-import-resolver-oxc": "^0.6.0",
     "eslint-plugin-depend": "^0.12.0",
-    "eslint-plugin-import-x": "^4.4.3",
+    "eslint-plugin-import-x": "^4.5.0",
     "eslint-plugin-n": "^17.14.0",
     "eslint-plugin-sort-destructure-keys": "^2.0.0",
     "eslint-plugin-unicorn": "^56.0.1",
     "husky": "^9.1.7",
     "is-interactive": "^2.0.0",
     "is-unicode-supported": "^2.1.0",
-    "knip": "^5.39.0",
+    "knip": "^5.39.2",
     "magic-string": "^0.30.14",
     "meow": "^13.2.0",
     "mock-fs": "^5.4.1",
     "nock": "^13.5.6",
     "npm-run-all2": "^7.0.1",
     "open": "^10.1.0",
-    "oxlint": "0.14.0",
-    "prettier": "3.4.1",
+    "oxlint": "0.14.1",
+    "prettier": "3.4.2",
     "read-package-up": "^11.0.0",
-    "rollup": "4.28.0",
+    "rollup": "4.28.1",
     "rollup-plugin-ts": "^3.4.5",
-    "tap": "^21.0.1",
     "terminal-link": "^3.0.0",
     "tiny-updater": "^3.5.2",
     "type-coverage": "^2.29.7",