@socketsecurity/cli 0.14.73 → 0.14.75

package/dist/require/cli.js

@@ -911,7 +911,7 @@ function emitBanner(name) {
   logger.logger.error(getAsciiHeader(name))
 }
 function getAsciiHeader(command) {
-  const cliVersion = '0.14.73:3036c50:e5664d53:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
+  const cliVersion = '0.14.75:48886e4:2e791c39:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
   const nodeVersion = process$1.version
   const apiToken = shadowNpmInject.getDefaultToken()
   const shownToken = apiToken ? getLastFiveOfApiToken(apiToken) : 'no'
@@ -3185,6 +3185,28 @@ async function commitAndPushFix(branchName, commitMsg, cwd) {
     cwd
   })
 }
+async function waitForBranchToBeReadable(octokit, owner, repo, branch) {
+  const maxRetries = 10
+  const delay = 1500
+  for (let i = 0; i < maxRetries; i++) {
+    try {
+      // eslint-disable-next-line no-await-in-loop
+      const ref = await octokit.git.getRef({
+        owner,
+        repo,
+        ref: `heads/${branch}`
+      })
+      if (ref) {
+        return
+      }
+    } catch (err) {
+      // Still not ready
+    }
+    // eslint-disable-next-line no-await-in-loop
+    await new Promise(resolve => setTimeout(resolve, delay))
+  }
+  throw new Error(`Branch "${branch}" never became visible to GitHub API`)
+}
 async function createPullRequest({
   base = 'main',
   body,
@@ -3196,7 +3218,7 @@ async function createPullRequest({
   const octokit = new vendor.Octokit({
     auth: process.env['SOCKET_AUTOFIX_PAT'] ?? process.env['GITHUB_TOKEN']
   })
-  await new Promise(resolve => setTimeout(resolve, 3000)) // 3s
+  await waitForBranchToBeReadable(octokit, owner, repo, head)
   await octokit.pulls.create({
     owner,
     repo,
@@ -3342,6 +3364,19 @@ async function pnpmFix(pkgEnvDetails, options) {
               const commitMsg = `fix: upgrade ${name} to ${targetVersion}`
               const { owner, repo } = getRepoInfo()
               // eslint-disable-next-line no-await-in-loop
+              await spawn.spawn(
+                'git',
+                [
+                  'remote',
+                  'set-url',
+                  'origin',
+                  `https://x-access-token:${process.env['SOCKET_AUTOFIX_PAT']}@github.com/${owner}/${repo}`
+                ],
+                {
+                  cwd
+                }
+              )
+              // eslint-disable-next-line no-await-in-loop
               await commitAndPushFix(branchName, commitMsg, cwd)
               // eslint-disable-next-line no-await-in-loop
               await createPullRequest({
@@ -11016,7 +11051,7 @@ void (async () => {
   await vendor.updater({
     name: SOCKET_CLI_BIN_NAME,
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
-    version: '0.14.73',
+    version: '0.14.75',
     ttl: 86_400_000 /* 24 hours in milliseconds */
   })
   try {
@@ -11087,5 +11122,5 @@ void (async () => {
     await shadowNpmInject.captureException(e)
   }
 })()
-//# debugId=825a78ba-f858-4468-95cb-b2f5c0462a07
+//# debugId=93b6c368-e5b7-4e14-bf24-719f4e722075
 //# sourceMappingURL=cli.js.map