fix(deps): always update Socket packages in update script (#1059)

The update script was only updating @socketsecurity/* packages when
--apply flag was passed. This meant newly released Socket packages
within taze's 7-day maturity period were being skipped during regular
updates.

Now Socket packages are always updated to bypass the maturity period,
ensuring teams get the latest Socket packages immediately.

Author: jdalton

pnpm-workspace.yaml

@@ -40,7 +40,7 @@ catalog:
   '@socketsecurity/config': 3.0.1
   '@socketsecurity/lib': 5.5.3
   '@socketsecurity/registry': 2.0.2
-  '@socketsecurity/sdk': 3.2.0
+  '@socketsecurity/sdk': 3.3.0
   '@types/cmd-shim': 5.0.2
   '@types/ink': 2.0.3
   '@types/js-yaml': 4.0.9

scripts/update.mjs

@@ -49,40 +49,38 @@ async function main() {
       process.stdout.write('\r\x1b[K')
     }
 
-    // Always update Socket packages when applying (bypass taze maturity period).
-    if (apply) {
-      if (!quiet) {
-        logger.progress('Updating Socket packages...')
-      }
+    // Always update Socket packages (bypass taze maturity period).
+    if (!quiet) {
+      logger.progress('Updating Socket packages...')
+    }
 
-      const socketResult = await spawn(
-        'pnpm',
-        [
-          'update',
-          '@socketsecurity/*',
-          '@socketregistry/*',
-          '@socketbin/*',
-          '--latest',
-          '-r',
-        ],
-        {
-          shell: WIN32,
-          stdio: quiet ? 'pipe' : 'inherit',
-        },
-      )
+    const socketResult = await spawn(
+      'pnpm',
+      [
+        'update',
+        '@socketsecurity/*',
+        '@socketregistry/*',
+        '@socketbin/*',
+        '--latest',
+        '-r',
+      ],
+      {
+        shell: WIN32,
+        stdio: quiet ? 'pipe' : 'inherit',
+      },
+    )
 
-      // Clear progress line.
-      if (!quiet) {
-        process.stdout.write('\r\x1b[K')
-      }
+    // Clear progress line.
+    if (!quiet) {
+      process.stdout.write('\r\x1b[K')
+    }
 
-      if (socketResult.code !== 0) {
-        if (!quiet) {
-          logger.fail('Failed to update Socket packages')
-        }
-        process.exitCode = 1
-        return
+    if (socketResult.code !== 0) {
+      if (!quiet) {
+        logger.fail('Failed to update Socket packages')
       }
+      process.exitCode = 1
+      return
     }
 
     if (result.code !== 0) {