socket 1.1.21 → 1.1.22

package/CHANGELOG.md

@@ -4,6 +4,15 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.1.22](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.22) - 2025-09-20
+
+### Changed
+- Rename `--only-compute` flag to `--dont-apply-fixes` for `socket fix`, but keep old flag as an alias.
+
+### Fixed
+- Resolved interactive prompts in `socket optimize` when using pnpm
+- Sanitize extracted git repository names to be compatible with the Socket API.
+
 ## [1.1.21](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.22) - 2025-09-20
 
 ### Added

package/dist/cli.js

@@ -3546,10 +3546,10 @@ async function coanaFix(fixConfig) {
   const {
     autopilot,
     cwd,
+    dontApplyFixes,
     ghsas,
     glob,
     limit,
-    onlyCompute,
     orgSlug,
     outputFile,
     spinner
@@ -3594,7 +3594,7 @@ async function coanaFix(fixConfig) {
   const shouldOpenPrs = fixEnv.isCi && fixEnv.repoInfo;
   if (!shouldOpenPrs) {
     // Inform user about local mode when fixes will be applied.
-    if (!onlyCompute && ghsas.length) {
+    if (!dontApplyFixes && ghsas.length) {
       const envCheck = checkCiEnvVars();
       if (envCheck.present.length) {
         // Some CI vars are set but not all - show what's missing.
@@ -3616,7 +3616,7 @@ async function coanaFix(fixConfig) {
         }
       };
     }
-    const fixCResult = await utils.spawnCoanaDlx(['compute-fixes-and-upgrade-purls', cwd, '--manifests-tar-hash', tarHash, '--apply-fixes-to', ...(isAll ? ['all'] : ghsas), ...(fixConfig.rangeStyle ? ['--range-style', fixConfig.rangeStyle] : []), ...(glob ? ['--glob', glob] : []), ...(onlyCompute ? [constants.FLAG_DRY_RUN] : []), ...(outputFile ? ['--output-file', outputFile] : []), ...fixConfig.unknownFlags], fixConfig.orgSlug, {
+    const fixCResult = await utils.spawnCoanaDlx(['compute-fixes-and-upgrade-purls', cwd, '--manifests-tar-hash', tarHash, '--apply-fixes-to', ...(isAll ? ['all'] : ghsas), ...(fixConfig.rangeStyle ? ['--range-style', fixConfig.rangeStyle] : []), ...(glob ? ['--glob', glob] : []), ...(dontApplyFixes ? [constants.FLAG_DRY_RUN] : []), ...(outputFile ? ['--output-file', outputFile] : []), ...fixConfig.unknownFlags], fixConfig.orgSlug, {
       cwd,
       spinner,
       stdio: 'inherit'
@@ -3905,11 +3905,11 @@ async function convertIdsToGhsas(ids) {
 async function handleFix({
   autopilot,
   cwd,
+  dontApplyFixes,
   ghsas,
   glob,
   limit,
   minSatisfying,
-  onlyCompute,
   orgSlug,
   outputFile,
   outputKind,
@@ -3926,7 +3926,7 @@ async function handleFix({
     glob,
     limit,
     minSatisfying,
-    onlyCompute,
+    dontApplyFixes,
     outputFile,
     outputKind,
     prCheck,
@@ -3935,6 +3935,7 @@ async function handleFix({
   });
   await outputFixResult(await coanaFix({
     autopilot,
+    dontApplyFixes,
     cwd,
     // Convert mixed CVE/GHSA/PURL inputs to GHSA IDs only
     ghsas: await convertIdsToGhsas(ghsas),
@@ -3944,7 +3945,6 @@ async function handleFix({
     rangeStyle,
     spinner,
     unknownFlags,
-    onlyCompute,
     outputFile
   }), outputKind);
 }
@@ -3964,6 +3964,12 @@ const generalFlags$2 = {
     default: false,
     description: `Enable auto-merge for pull requests that Socket opens.\nSee ${vendor.terminalLinkExports('GitHub documentation', 'https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/managing-auto-merge-for-pull-requests-in-your-repository')} for managing auto-merge for pull requests in your repository.`
   },
+  dontApplyFixes: {
+    aliases: ['onlyCompute'],
+    type: 'boolean',
+    default: false,
+    description: 'Compute fixes only, do not apply them. Logs what upgrades would be applied. If combined with --output-file, the output file will contain the upgrades that would be applied.'
+  },
   id: {
     type: 'string',
     default: [],
@@ -3989,11 +3995,6 @@ Available styles:
   * preserve - Retain the existing version range style as-is
       `.trim()
   },
-  onlyCompute: {
-    type: 'boolean',
-    default: false,
-    description: 'Compute fixes only, do not apply them. Logs what upgrades would be applied. If combined with --output-file, the output file will contain the upgrades that would be applied.'
-  },
   outputFile: {
     type: 'string',
     default: '',
@@ -4099,12 +4100,12 @@ async function run$K(argv, importMeta, {
   });
   const {
     autopilot,
+    dontApplyFixes,
     glob,
     json,
     limit,
     markdown,
     maxSatisfying,
-    onlyCompute,
     outputFile,
     prCheck,
     rangeStyle,
@@ -4149,6 +4150,7 @@ async function run$K(argv, importMeta, {
   const ghsas = arrays.arrayUnique([...utils.cmdFlagValueToArray(cli.flags['id']), ...utils.cmdFlagValueToArray(cli.flags['ghsa']), ...utils.cmdFlagValueToArray(cli.flags['purl'])]);
   await handleFix({
     autopilot,
+    dontApplyFixes,
     cwd,
     ghsas,
     glob,
@@ -4160,7 +4162,6 @@ async function run$K(argv, importMeta, {
     rangeStyle,
     spinner,
     unknownFlags,
-    onlyCompute,
     outputFile
   });
 }
@@ -4361,7 +4362,7 @@ const cmdInstall = {
 async function outputCmdJson(cwd) {
   logger.logger.info('Target cwd:', constants.default.ENV.VITEST ? constants.REDACTED : utils.tildify(cwd));
   const sockJsonPath = path.join(cwd, constants.SOCKET_JSON);
-  const tildeSockJsonPath = constants.default.ENV.VITEST ? '<redacted>' : utils.tildify(sockJsonPath);
+  const tildeSockJsonPath = constants.default.ENV.VITEST ? constants.REDACTED : utils.tildify(sockJsonPath);
   if (!fs$1.existsSync(sockJsonPath)) {
     logger.logger.fail(`Not found: ${tildeSockJsonPath}`);
     process.exitCode = 1;
@@ -14944,5 +14945,5 @@ void (async () => {
     await utils.captureException(e);
   }
 })();
-//# debugId=506030ac-6b44-42d9-8af7-b61f2468318b
+//# debugId=4aa44248-7031-4a9e-8cad-1c9fbaa730ef
 //# sourceMappingURL=cli.js.map