Merge remote-tracking branch 'origin/main' into feat/migrate-to-socket-patch

Author: jdalton

package.json

@@ -1,7 +1,7 @@
 {
   "name": "socket-cli-monorepo",
   "version": "0.0.0",
-  "packageManager": "pnpm@10.27.0",
+  "packageManager": "pnpm@10.28.0",
   "private": true,
   "engines": {
     "node": ">=24.10.0",
@@ -165,7 +165,7 @@
       "es-define-property": "catalog:",
       "es-set-tostringtag": "catalog:",
       "function-bind": "catalog:",
-      "glob": ">=11.1.0",
+      "glob": ">=13.0.0",
       "globalthis": "catalog:",
       "gopd": "catalog:",
       "graceful-fs": "catalog:",

packages/cli/package.json

@@ -88,7 +88,7 @@
     "@socketsecurity/lib": "catalog:",
     "@socketsecurity/registry": "catalog:",
     "@socketsecurity/sdk": "catalog:",
-    "@types/react": "^19.2.7",
+    "@types/react": "^19.2.8",
     "ajv-dist": "catalog:",
     "ansi-regex": "catalog:",
     "brace-expansion": "catalog:",

pnpm-lock.yaml

@@ -38,7 +38,7 @@ catalog:
   '@socketregistry/packageurl-js': 1.3.5
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
-  '@socketsecurity/lib': 5.4.1
+  '@socketsecurity/lib': 5.5.1
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/sdk': 3.2.0
   '@types/cmd-shim': 5.0.2

pnpm-workspace.yaml

@@ -27,16 +27,13 @@ async function main() {
       logger.log('\n🔨 Monorepo Dependency Update\n')
     }
 
-    // Build taze command with appropriate flags for monorepo.
-    const tazeArgs = ['exec', 'taze', '-r']
+    // Build taze command with appropriate flags for monorepo
+    const tazeArgs = ['exec', 'taze', '-r', '-w']
 
-    if (apply) {
-      tazeArgs.push('-w')
-      if (!quiet) {
+    if (!quiet) {
+      if (apply) {
         logger.progress('Updating dependencies across monorepo...')
-      }
-    } else {
-      if (!quiet) {
+      } else {
         logger.progress('Checking for updates across monorepo...')
       }
     }
@@ -52,8 +49,8 @@ async function main() {
       process.stdout.write('\r\x1b[K')
     }
 
-    // If applying updates, also update Socket packages.
-    if (apply && result.code === 0) {
+    // Always update Socket packages when applying (bypass taze maturity period).
+    if (apply) {
       if (!quiet) {
         logger.progress('Updating Socket packages...')
       }