socket 0.14.134 → 0.14.136

package/dist/cli.js

@@ -28,41 +28,6 @@ const spawn = require('@socketsecurity/registry/lib/spawn')
 const sorts = require('@socketsecurity/registry/lib/sorts')
 const registryConstants = require('@socketsecurity/registry/lib/constants')
 const promises = require('@socketsecurity/registry/lib/promises')
-require('node:os')
-require('node:buffer')
-require('node:util')
-require('node:path')
-require('node:fs')
-require('node:tty')
-require('node:https')
-require('node:http')
-require('node:url')
-require('node:process')
-require('node:events')
-require('node:http')
-require('node:https')
-require('node:readline')
-require('@socketsecurity/registry/lib/constants/abort-signal')
-require('node:fs/promises')
-require('node:child_process')
-require('node:os')
-require('node:tty')
-require('node:crypto')
-require('node:constants')
-require('node:stream')
-require('node:assert')
-require('node:stream')
-require('node:string_decoder')
-require('node:path/win32')
-require('node:module')
-require('node:events')
-require('node:buffer')
-require('node:string_decoder')
-require('node:child_process')
-require('@socketsecurity/registry/lib/fs')
-require('node:timers/promises')
-require('node:module')
-require('@socketsecurity/registry/lib/env')
 
 function failMsgWithBadge(badge, msg) {
   return `${vendor.yoctocolorsCjsExports.bgRed(vendor.yoctocolorsCjsExports.bold(vendor.yoctocolorsCjsExports.white(` ${badge}: `)))} ${vendor.yoctocolorsCjsExports.bold(msg)}`
@@ -938,7 +903,7 @@ function emitBanner(name) {
   logger.logger.error(getAsciiHeader(name))
 }
 function getAsciiHeader(command) {
-  const cliVersion = '0.14.134:c664da6:42d10399:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
+  const cliVersion = '0.14.136:113c579:c704dd58:pub' // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION_HASH']".
   const nodeVersion = process$1.version
   const apiToken = shadowNpmInject.getDefaultToken()
   const defaultOrg = shadowNpmInject.getConfigValue('defaultOrg')
@@ -1409,7 +1374,7 @@ async function runCycloneDX(yargvWithYes) {
   await shadowBin(NPX$3, [
     ...yesArgs,
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_CYCLONEDX_CDXGEN_VERSION']".
-    `@cyclonedx/cdxgen@${'11.2.4'}`,
+    `@cyclonedx/cdxgen@${'11.2.5'}`,
     ...argvToArray(yargv)
   ])
   if (cleanupPackageLock) {
@@ -4087,7 +4052,7 @@ async function npmFix(
       continue
     }
     if (!infos.length) {
-      debug.debugLog(`No vulnerability info found for ${name}`)
+      debug.debugLog(`No vuln info found for ${name}`)
       continue
     }
     // eslint-disable-next-line no-await-in-loop
@@ -4151,7 +4116,9 @@ async function npmFix(
             ? packument.versions[newVersion]
             : undefined
           if (!(newVersion && newVersionPackument)) {
-            spinner?.fail(`No update found for ${oldSpec}.`)
+            debug.debugLog(
+              `No suitable update. ${oldSpec} needs >=${firstPatchedVersionIdentifier}, skipping`
+            )
             continue
           }
           const newVersionRange = shadowNpmInject.applyRange(
@@ -4498,7 +4465,7 @@ async function pnpmFix(
       continue
     }
     if (!infos.length) {
-      debug.debugLog(`No vulnerability info found for ${name}`)
+      debug.debugLog(`No vuln info found for ${name}`)
       continue
     }
     // eslint-disable-next-line no-await-in-loop
@@ -4565,7 +4532,9 @@ async function pnpmFix(
             ? packument.versions[newVersion]
             : undefined
           if (!(newVersion && newVersionPackument)) {
-            spinner?.fail(`No update found for ${oldSpec}.`)
+            debug.debugLog(
+              `No suitable update. ${oldSpec} needs >=${firstPatchedVersionIdentifier}, skipping`
+            )
             continue
           }
           const overrideKey = `${name}@${vulnerableVersionRange}`
@@ -12283,7 +12252,7 @@ void (async () => {
   await vendor.updater({
     name: SOCKET_CLI_BIN_NAME,
     // The '@rollup/plugin-replace' will replace "process.env['INLINED_SOCKET_CLI_VERSION']".
-    version: '0.14.134',
+    version: '0.14.136',
     ttl: 86_400_000 /* 24 hours in milliseconds */
   })
   try {
@@ -12351,5 +12320,5 @@ void (async () => {
     await shadowNpmInject.captureException(e)
   }
 })()
-//# debugId=9316eeea-6bd5-477a-92e3-f9fde7d20f1d
+//# debugId=d1f3e62c-0da3-4358-9b93-795691773bd8
 //# sourceMappingURL=cli.js.map