socket 1.1.76 → 1.1.78

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [1.1.78](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.78) - 2026-04-01
+
+### Fixed
+- `socket scan create`, `socket scan reach`, and `socket fix` now respect `projectIgnorePaths` from `socket.yml` when collecting files
+
+## [1.1.77](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.77) - 2026-04-01
+
+### Fixed
+- Improved error message when using `--reach` with an invalid, expired, or revoked API token. Previously showed a misleading "Unable to verify plan permissions" error; now clearly indicates the authentication failure.
+
+### Changed
+- Updated the Coana CLI to v `14.12.201`.
+
 ## [1.1.74](https://github.com/SocketDev/socket-cli/releases/tag/v1.1.74) - 2026-03-19
 
 ### Fixed

package/dist/cli.js

@@ -1592,6 +1592,14 @@ async function performReachabilityAnalysis(options) {
   // Check if user has enterprise plan for reachability analysis.
   const orgsCResult = await utils.fetchOrganization();
   if (!orgsCResult.ok) {
+    const httpCode = orgsCResult.data?.code;
+    if (httpCode === constants.default.HTTP_STATUS_UNAUTHORIZED) {
+      return {
+        ok: false,
+        message: 'Authentication failed',
+        cause: 'Your API token appears to be invalid, expired, or revoked. Please check your token and try again.'
+      };
+    }
     return {
       ok: false,
       message: 'Unable to verify plan permissions',
@@ -2277,7 +2285,12 @@ async function handleCreateNewScan({
   require$$9.debugFn('notice', `Fetched ${supportedFilesCResult.data['size']} supported file types`);
   spinner.start('Searching for local files to include in scan...');
   const supportedFiles = supportedFilesCResult.data;
+
+  // Load socket.yml to respect projectIgnorePaths when collecting files.
+  const socketYmlResult = utils.findSocketYmlSync(cwd);
+  const socketConfig = socketYmlResult.ok ? socketYmlResult.data?.parsed : undefined;
   const packagePaths = await utils.getPackageFilesForScan(targets, supportedFiles, {
+    config: socketConfig,
     cwd
   });
   spinner.successAndStop(`Found ${packagePaths.length} ${words.pluralize('file', packagePaths.length)} to include in scan.`);
@@ -3819,7 +3832,12 @@ async function coanaFix(fixConfig) {
     return supportedFilesCResult;
   }
   const supportedFiles = supportedFilesCResult.data;
+
+  // Load socket.yml to respect projectIgnorePaths when collecting files.
+  const socketYmlResult = utils.findSocketYmlSync(cwd);
+  const socketConfig = socketYmlResult.ok ? socketYmlResult.data?.parsed : undefined;
   const scanFilepaths = await utils.getPackageFilesForScan(['.'], supportedFiles, {
+    config: socketConfig,
     cwd
   });
   // Exclude any .socket.facts.json files that happen to be in the scan
@@ -11210,7 +11228,6 @@ async function run$d(argv, importMeta, {
       ...generalFlags$1,
       ...reachabilityFlags
     },
-    // TODO: Your project's "socket.yml" file's "projectIgnorePaths".
     help: command => `
     Usage
       $ ${command} [options] [TARGET...]
@@ -13353,7 +13370,12 @@ async function handleScanReach({
   }
   spinner.start('Searching for local manifest files to include in reachability analysis...');
   const supportedFiles = supportedFilesCResult.data;
+
+  // Load socket.yml to respect projectIgnorePaths when collecting files.
+  const socketYmlResult = utils.findSocketYmlSync(cwd);
+  const socketConfig = socketYmlResult.ok ? socketYmlResult.data?.parsed : undefined;
   const packagePaths = await utils.getPackageFilesForScan(targets, supportedFiles, {
+    config: socketConfig,
     cwd
   });
   spinner.successAndStop(`Found ${packagePaths.length} ${words.pluralize('manifest file', packagePaths.length)} for reachability analysis.`);
@@ -15507,5 +15529,5 @@ process.on('unhandledRejection', async (reason, promise) => {
   // eslint-disable-next-line n/no-process-exit
   process.exit(1);
 });
-//# debugId=19d5ebed-3e81-4f49-9ae1-2f169c3b6c3d
+//# debugId=eee29af9-4818-4849-9195-de65323ca372
 //# sourceMappingURL=cli.js.map