feat: migrate patch command to @socketsecurity/socket-patch@1.2.0

Author: jdalton

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [Unreleased]
+
+### Changed
+- Updated to @socketsecurity/socket-patch@1.2.0.
+
 ## [2.1.0](https://github.com/SocketDev/socket-cli/releases/tag/v2.1.0) - 2025-11-02
 
 ### Added

packages/cli/.config/esbuild.cli.build.mjs

@@ -101,7 +101,7 @@ const config = {
   format: 'cjs',
 
   // With platform: 'node', esbuild automatically externalizes all Node.js built-ins.
-  external: [],
+  external: ['@socketsecurity/socket-patch'],
 
   // Suppress warnings for intentional CommonJS compatibility code.
   logOverride: {

packages/cli/external-tools.json

@@ -24,6 +24,12 @@
     "package": "socketsecurity",
     "version": "^2.2.15"
   },
+  "socket-patch": {
+    "description": "Socket Patch CLI for applying security patches",
+    "type": "npm",
+    "package": "@socketsecurity/socket-patch",
+    "version": "1.2.0"
+  },
   "sfw": {
     "description": "Socket Firewall (sfw)",
     "type": "standalone",

packages/cli/package.json

@@ -194,5 +194,8 @@
     "patchedDependencies": {
       "ink@6.3.1": "patches/ink@6.3.1.patch"
     }
+  },
+  "dependencies": {
+    "@socketsecurity/socket-patch": "1.2.0"
   }
 }

packages/cli/scripts/build.mjs

@@ -3,8 +3,7 @@
  * Options: --quiet, --verbose, --force, --watch
  */
 
-import { copyFileSync } from 'node:fs'
-import { promises as fs } from 'node:fs'
+import { copyFileSync, promises as fs } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'