Merge branch 'main' into scan_create_report

Author: pvdz

.dep-stats.json

@@ -1,6 +1,7 @@
 {
   "dependencies": {
     "@apideck/better-ajv-errors": "0.3.6",
+    "@octokit/rest": "^21.1.1",
     "@pnpm/lockfile.detect-dep-types": "^1001.0.6",
     "@pnpm/lockfile.fs": "^1001.1.8",
     "@pnpm/logger": "^1000.0.0",
@@ -33,6 +34,17 @@
   },
   "devDependencies": {},
   "esm": {
+    "@octokit/auth-token": "^5.0.0",
+    "@octokit/core": "^6.1.4",
+    "@octokit/endpoint": "^10.1.3",
+    "@octokit/graphql": "^8.1.2",
+    "@octokit/plugin-paginate-rest": "^11.4.2",
+    "@octokit/plugin-request-log": "^5.3.1",
+    "@octokit/plugin-rest-endpoint-methods": "^13.3.0",
+    "@octokit/request": "^9.2.2",
+    "@octokit/request-error": "^6.1.7",
+    "@octokit/rest": "^21.1.1",
+    "before-after-hook": "^3.0.2",
     "bundle-name": "^4.1.0",
     "default-browser": "^5.2.1",
     "default-browser-id": "^5.0.0",
@@ -45,6 +57,7 @@
     "open": "10.1.0",
     "run-applescript": "^7.0.0",
     "tiny-updater": "3.5.3",
+    "universal-user-agent": "^7.0.2",
     "when-exit": "^2.1.4"
   },
   "external": {
@@ -54,6 +67,7 @@
     "chalk-table": "1.0.2",
     "cmd-shim": "7.0.0",
     "common-tags": "1.8.2",
+    "fast-content-type-parse": "^2.0.0",
     "hpagent": "1.2.0",
     "ignore": "7.0.3",
     "micromatch": "4.0.8",
@@ -64,5 +78,7 @@
     "yargs-parser": "21.1.1",
     "yoctocolors-cjs": "2.1.2"
   },
-  "transitives": {}
+  "transitives": {
+    "fast-content-type-parse": "^2.0.0"
+  }
 }

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "socket",
-  "version": "0.14.68",
+  "version": "0.14.76",
   "description": "CLI tool for Socket.dev",
   "homepage": "https://github.com/SocketDev/socket-cli",
   "license": "MIT",
@@ -77,6 +77,7 @@
   },
   "dependencies": {
     "@apideck/better-ajv-errors": "0.3.6",
+    "@octokit/rest": "^21.1.1",
     "@pnpm/lockfile.detect-dep-types": "^1001.0.6",
     "@pnpm/lockfile.fs": "^1001.1.8",
     "@pnpm/logger": "^1000.0.0",
@@ -91,6 +92,7 @@
     "chalk-table": "1.0.2",
     "cmd-shim": "7.0.0",
     "common-tags": "1.8.2",
+    "fast-content-type-parse": "^2.0.0",
     "hpagent": "1.2.0",
     "ignore": "7.0.3",
     "meow": "13.2.0",
@@ -194,7 +196,7 @@
     "tiny-colors": "$yoctocolors-cjs",
     "typedarray": "npm:@socketregistry/typedarray@^1",
     "undici": "^6.21.1",
-    "vite": "^6.2.4",
+    "vite": "^6.2.5",
     "xml2js": "^0.5.0",
     "yaml": "2.7.1"
   },

package.json

@@ -26,6 +26,7 @@ describe('socket fix', async () => {
           Options
             --dryRun          Do input validation for a command and exit 0 when input is ok
             --help            Print this help
+            --test            Very the fix by running unit tests
             --testScript      The test script to run for each fix attempt"
       `
       )

src/commands/fix/cmd-fix.test.ts

@@ -16,6 +16,11 @@ const config: CliCommandConfig = {
   hidden: true,
   flags: {
     ...commonFlags,
+    test: {
+      type: 'boolean',
+      default: true,
+      description: 'Very the fix by running unit tests'
+    },
     testScript: {
       type: 'string',
       default: 'test',
@@ -54,7 +59,12 @@ async function run(
     return
   }
 
+  // Lazily access constants.spinner.
+  const { spinner } = constants
+
   await runFix({
+    spinner,
+    test: Boolean(cli.flags['test']),
     testScript: cli.flags['testScript'] as string | undefined
   })
 }

src/commands/fix/cmd-fix.ts

@@ -31,6 +31,7 @@ function isTopLevel(tree: SafeNode, node: SafeNode): boolean {
 type NpmFixOptions = {
   cwd?: string | undefined
   spinner?: Spinner | undefined
+  test?: boolean | undefined
   testScript?: string | undefined
 }
 
@@ -41,6 +42,7 @@ export async function npmFix(
   const {
     cwd = process.cwd(),
     spinner,
+    test = false,
     testScript = 'test'
   } = { __proto__: null, ...options } as NpmFixOptions
 
@@ -117,8 +119,10 @@ export async function npmFix(
           )
         ) {
           try {
-            // eslint-disable-next-line no-await-in-loop
-            await runScript(testScript, [], { spinner, stdio: 'ignore' })
+            if (test) {
+              // eslint-disable-next-line no-await-in-loop
+              await runScript(testScript, [], { spinner, stdio: 'ignore' })
+            }
 
             spinner?.info(`Patched ${name} ${oldVersion} -> ${node.version}`)