@socketsecurity/lib 6.0.4 → 6.0.5

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.0.5](https://github.com/SocketDev/socket-lib/releases/tag/v6.0.5) - 2026-05-28
+
+### Fixed
+
+- **`/*@__PURE__*/` annotations in three modules** were positioned where rolldown (and any bundler honoring tree-shaking pure-call hints) ignored them, emitting `INVALID_ANNOTATION` warnings during downstream builds. The annotations are now adjacent to their `require()` call expressions in `globs/matcher` (`getMatchesGlob`'s `path.matchesGlob` probe) and `strings/width` (`getEastAsianWidth`'s lazy load). A stale `/*@__PURE__*/` on the `Logger` class declaration in `logger/node` was removed — class declarations are not call expressions and the annotation was being silently dropped.
+
 ## [6.0.4](https://github.com/SocketDev/socket-lib/releases/tag/v6.0.4) - 2026-05-28
 
 ### Added

package/dist/constants/socket.js

@@ -33,7 +33,7 @@ const SOCKET_REGISTRY_APP_NAME = "registry";
 const SOCKET_WHEELHOUSE_APP_NAME = "wheelhouse";
 const SOCKET_APP_PREFIX = "_";
 const SOCKET_LIB_NAME = "@socketsecurity/lib";
-const SOCKET_LIB_VERSION = "6.0.4";
+const SOCKET_LIB_VERSION = "6.0.5";
 const SOCKET_IPC_HANDSHAKE = "SOCKET_IPC_HANDSHAKE";
 const CACHE_SOCKET_API_DIR = "socket-api";
 const REGISTRY = "registry";

package/dist/globs/matcher.js

@@ -97,7 +97,7 @@ function getGlobMatcher(glob, options) {
 /* @__NO_SIDE_EFFECTS__ */
 function getMatchesGlob() {
 	if (!_matchesGlobProbed) {
-		const fn = require("node:path").matchesGlob;
+		const fn = (/* @__PURE__ */ require("node:path")).matchesGlob;
 		/* c8 ignore start */
 		if (typeof fn === "function") _matchesGlob = fn;
 		/* c8 ignore stop */

package/dist/logger/node.js

@@ -43,7 +43,6 @@ node_process = require_runtime.__toESM(node_process);
 * Enhanced console logger with indentation, colored symbols, and stream
 * management.
 */
-/*@__PURE__*/
 var Logger = class Logger {
 	/**
 	* Static reference to log symbols for convenience.

package/dist/strings/width.js

@@ -23,7 +23,7 @@ const require_ansi_strip = require('../ansi/strip.js');
 let _eastAsianWidth;
 /* @__NO_SIDE_EFFECTS__ */
 function getEastAsianWidth() {
-	if (_eastAsianWidth === void 0) _eastAsianWidth = require("../external/get-east-asian-width").eastAsianWidth;
+	if (_eastAsianWidth === void 0) _eastAsianWidth = (/* @__PURE__ */ require("../external/get-east-asian-width")).eastAsianWidth;
 	return _eastAsianWidth;
 }
 const segmenter = new Intl.Segmenter();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "6.0.4",
+  "version": "6.0.5",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [
     "Socket.dev",
@@ -2804,8 +2804,8 @@
     "@socketregistry/packageurl-js": "npm:@socketregistry/packageurl-js@1.4.2",
     "@socketregistry/packageurl-js-stable": "npm:@socketregistry/packageurl-js@1.4.2",
     "@socketregistry/yocto-spinner": "1.0.25",
-    "@socketsecurity/lib": "npm:@socketsecurity/lib@6.0.3",
-    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.3",
+    "@socketsecurity/lib": "npm:@socketsecurity/lib@6.0.4",
+    "@socketsecurity/lib-stable": "npm:@socketsecurity/lib@6.0.4",
     "@socketsecurity/sdk": "npm:@socketsecurity/sdk@4.0.1",
     "@socketsecurity/sdk-stable": "npm:@socketsecurity/sdk@4.0.1",
     "@types/node": "24.9.2",