sentinello 3.7.5 → 3.7.6

package/dist/cli.cjs

@@ -39873,6 +39873,7 @@ function isNonEmptyString(v) {
 var DEFAULT_FEED_BASE = "https://osv-vulnerabilities.storage.googleapis.com";
 var BATCH_SIZE = 2e3;
 var OSV_INCREMENTAL_MAX_IDS = 2e4;
+var OSV_INCREMENTAL_STUCK_MS = 48 * 60 * 60 * 1e3;
 function feedBase() {
   const fromEnv = process.env.SENTINELLO_OSV_FEED_URL;
   if (fromEnv && fromEnv.trim().length > 0) return fromEnv.trim();
@@ -54591,6 +54592,7 @@ async function refreshOsv(options, meta3, item) {
   }
   const append = [];
   let failure2 = null;
+  let failedId = null;
   for (const id of changed.ids) {
     if (options.abortSignal && options.abortSignal.aborted) {
       failure2 = "the refresh was cancelled before every changed advisory was re-read";
@@ -54601,17 +54603,30 @@ async function refreshOsv(options, meta3, item) {
       for (const row of rows) append.push(row);
     } catch (err) {
       failure2 = id + " could not be re-read (" + errText(err) + ")";
+      if (!(options.abortSignal && options.abortSignal.aborted)) failedId = id;
       break;
     }
   }
   if (failure2 !== null) {
-    if (state) state.etag = null;
+    let message = failure2 + "; the previous OSV data is kept until a refresh re-reads all " + changed.ids.length + " changed advisories";
+    if (state) {
+      state.etag = null;
+      if (failedId !== null) {
+        const now = Date.now();
+        const failingSince = state.incrementalFailingSince ?? now;
+        if (now - failingSince >= OSV_INCREMENTAL_STUCK_MS) {
+          return await seedOsv(options, meta3, { ...item, kind: "seed" });
+        }
+        state.incrementalFailingSince = failingSince;
+        message += ". Refreshes have failed since " + new Date(failingSince).toISOString() + "; if " + failedId + " still cannot be re-read at " + new Date(failingSince + OSV_INCREMENTAL_STUCK_MS).toISOString() + ", the next run re-downloads the full OSV export";
+      }
+    }
     return {
       source: "osv",
       ecosystem: item.ecosystem,
       status: "error",
       rowCount: state?.recordCount ?? 0,
-      message: failure2 + "; the previous OSV data is kept until a refresh re-reads all " + changed.ids.length + " changed advisories"
+      message
     };
   }
   const path = advisoryFilePath(options.cacheDir, "osv", item.ecosystem);
@@ -54722,6 +54737,7 @@ function touch(meta3, source, ecosystem, etag) {
   if (!state) return;
   state.refreshedAt = Date.now();
   if (etag !== void 0) state.etag = etag;
+  delete state.incrementalFailingSince;
 }
 function touchGemnasiumSha(state, headSha) {
   state.refreshedAt = Date.now();
@@ -55679,8 +55695,8 @@ function createUi(options) {
 
 // src/help.ts
 var CLI_VERSION = (function resolveVersion() {
-  if ("3.7.5".length > 0) {
-    return "3.7.5";
+  if ("3.7.6".length > 0) {
+    return "3.7.6";
   }
   const fromEnv = process.env.SENTINELLO_VERSION;
   if (fromEnv && fromEnv.trim().length > 0) return fromEnv.trim();

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "sentinello",
-    "version": "3.7.5",
+    "version": "3.7.6",
     "license": "MIT",
     "description": "Scan the projects in a folder for vulnerable dependencies and write an advisory an agent can act on.",
     "keywords": [