fix(scripts): use #socketsecurity/lib path alias for stable imports

Scripts were using inconsistent import patterns (@socketsecurity/lib vs
#socketsecurity/lib), causing lint failures in CI. The lint job runs before
build, so self-referential @socketsecurity/lib imports fail when dist/ doesn't
exist yet.

Changed all script imports to use #socketsecurity/lib/* which maps to the
stable external package @socketsecurity/lib-stable/* via package.json imports
field.

Author: jdalton

CHANGELOG.md

@@ -5,6 +5,37 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.2.1](https://github.com/SocketDev/socket-lib/releases/tag/v3.2.1) - 2025-11-02
+
+### Changed
+
+- **Logger/Spinner**: Use module-level constants to prevent duplicate instances
+  - Call `getDefaultLogger()` and `getDefaultSpinner()` once at module scope
+  - Reduces function call overhead and prevents multiple instance creation
+  - Applied in `src/dlx-manifest.ts`, `src/stdio/mask.ts`, and `src/spinner.ts`
+  - Follows DRY principle and aligns with socket-registry/socket-sdk-js patterns
+
+### Fixed
+
+- **Scripts**: Fixed undefined logger variable in update script
+  - Replaced undefined `log` references with `_logger` throughout `scripts/update.mjs`
+  - Resolves ESLint errors that blocked test execution
+- **Tests**: Improved stdout test stability by checking call delta instead of absolute counts
+  - Fixed flaky CI failures where spy call count was 101 instead of expected 100
+  - More robust approach handles potential state leakage between tests
+- **Tests**: Removed unnecessary 10ms delay in cache-with-ttl test
+  - Cache with memoization enabled updates in-memory storage synchronously
+  - Delay was insufficient in CI and unnecessary given synchronous behavior
+  - Resolves flaky CI failures where cached values returned undefined
+
+## [3.2.0](https://github.com/SocketDev/socket-lib/releases/tag/v3.2.0) - 2025-11-02
+
+### Added
+
+- **DLX**: Unified manifest for packages and binaries
+  - Centralized manifest system for tracking DLX-compatible packages
+  - Simplifies package and binary lookups for dependency-free execution
+
 ## [3.1.3](https://github.com/SocketDev/socket-lib/releases/tag/v3.1.3) - 2025-11-02
 
 ### Changed

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "3.2.0",
+  "version": "3.2.1",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",
   "keywords": [

scripts/test.mjs

@@ -9,7 +9,7 @@ import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 import { getDefaultLogger } from '#socketsecurity/lib/logger'
-import { getDefaultSpinner } from '@socketsecurity/lib/spinner'
+import { getDefaultSpinner } from '#socketsecurity/lib/spinner'
 import { printHeader } from '#socketsecurity/lib/stdio/header'
 
 import { getLocalPackageAliases } from './utils/get-local-package-aliases.mjs'

scripts/utils/changed-test-mapper.mjs

@@ -9,8 +9,8 @@ import path from 'node:path'
 import {
   getChangedFilesSync,
   getStagedFilesSync,
-} from '@socketsecurity/lib/git'
-import { normalizePath } from '@socketsecurity/lib/path'
+} from '#socketsecurity/lib/git'
+import { normalizePath } from '#socketsecurity/lib/path'
 
 const rootPath = path.resolve(process.cwd())
 

scripts/utils/interactive-runner.mjs

@@ -3,7 +3,7 @@
  * Standardized across all socket-* repositories.
  */
 
-import { runWithMask } from '@socketsecurity/lib/stdio/mask'
+import { runWithMask } from '#socketsecurity/lib/stdio/mask'
 
 /**
  * Run a command with interactive output control.