chore(deps): update @socketsecurity/lib to 2.9.1

jdalton · jdalton · commit ed821c83b720 · 2025-10-30T18:45:15.000-04:00
diff --git a/.github/workflows/build-sea.yml b/.github/workflows/build-sea.yml
@@ -53,8 +53,11 @@ jobs:
         id: deps-cache-key
         shell: bash
         run: |
+          # Include pnpm-lock.yaml to detect dependency changes (e.g., @socketsecurity/lib updates).
           HASH=$(find packages/bootstrap packages/socket -type f \( -name "*.mts" -o -name "*.ts" -o -name "*.mjs" -o -name "*.js" -o -name "*.json" \) ! -path "*/node_modules/*" ! -path "*/dist/*" ! -path "*/build/*" | sort | xargs sha256sum | sha256sum | cut -d' ' -f1)
-          echo "hash=$HASH" >> $GITHUB_OUTPUT
+          LOCK_HASH=$(sha256sum pnpm-lock.yaml | cut -d' ' -f1)
+          COMBINED_HASH=$(echo "$HASH-$LOCK_HASH" | sha256sum | cut -d' ' -f1)
+          echo "hash=$COMBINED_HASH" >> $GITHUB_OUTPUT
 
       - name: Restore build-deps cache
         id: deps-cache
diff --git a/package.json b/package.json
@@ -39,7 +39,7 @@
     "@socketregistry/packageurl-js": "1.3.0",
     "@socketregistry/yocto-spinner": "1.0.24",
     "@socketsecurity/config": "3.0.1",
-    "@socketsecurity/lib": "2.9.0",
+    "@socketsecurity/lib": "2.9.1",
     "@socketsecurity/registry": "2.0.0",
     "@socketsecurity/sdk": "3.0.21",
     "@types/cmd-shim": "5.0.2",
diff --git a/packages/bootstrap/package.json b/packages/bootstrap/package.json
@@ -22,7 +22,7 @@
     "@babel/types": "^7.28.5",
     "@socketsecurity/build-infra": "workspace:*",
     "@socketsecurity/cli": "workspace:*",
-    "@socketsecurity/lib": "2.9.0",
+    "@socketsecurity/lib": "2.9.1",
     "del-cli": "catalog:",
     "esbuild": "catalog:",
     "magic-string": "catalog:",
diff --git a/packages/bootstrap/src/shared/bootstrap-shared.mjs b/packages/bootstrap/src/shared/bootstrap-shared.mjs
@@ -134,6 +134,7 @@ export async function downloadCli() {
     const result = await dlxPackage(
       [], // Empty args - we don't want to execute anything.
       {
+        binaryName: 'socket', // @socketsecurity/cli has bin: { socket: '...' }.
         force: false, // Use cached version if available.
         package: '@socketsecurity/cli',
         spawnOptions: {
diff --git a/packages/build-infra/package.json b/packages/build-infra/package.json
@@ -24,7 +24,7 @@
   "dependencies": {
     "@babel/parser": "catalog:",
     "@babel/traverse": "catalog:",
-    "@socketsecurity/lib": "2.9.0",
+    "@socketsecurity/lib": "2.9.1",
     "magic-string": "catalog:"
   }
 }
diff --git a/packages/codet5-models-builder/package.json b/packages/codet5-models-builder/package.json
@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.9.0"
+    "@socketsecurity/lib": "2.9.1"
   }
 }
diff --git a/packages/minilm-builder/package.json b/packages/minilm-builder/package.json
@@ -11,6 +11,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.9.0"
+    "@socketsecurity/lib": "2.9.1"
   }
 }
diff --git a/packages/node-smol-builder/package.json b/packages/node-smol-builder/package.json
@@ -2,7 +2,7 @@
   "dependencies": {
     "@socketsecurity/bootstrap": "workspace:*",
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.9.0"
+    "@socketsecurity/lib": "2.9.1"
   },
   "description": "Custom Node.js binary builder with Socket security patches",
   "devDependencies": {
diff --git a/packages/onnxruntime/package.json b/packages/onnxruntime/package.json
@@ -15,6 +15,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.9.0"
+    "@socketsecurity/lib": "2.9.1"
   }
 }
diff --git a/packages/sbom-generator/package.json b/packages/sbom-generator/package.json
@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "@iarna/toml": "^2.2.5",
-    "@socketsecurity/lib": "2.9.0",
+    "@socketsecurity/lib": "2.9.1",
     "@yarnpkg/parsers": "^3.0.0",
     "fast-xml-parser": "^4.3.2",
     "yaml": "^2.3.4"
diff --git a/packages/sbom-generator/src/enrichment/index.mts b/packages/sbom-generator/src/enrichment/index.mts
@@ -294,8 +294,8 @@ function transformSocketResponse(
     supplyChainRisk:
       (response.supplyChainRisk as 'low' | 'medium' | 'high' | 'critical') ||
       'low',
-    quality: response.quality,
-    licenseInfo: response.license,
+    ...(response.quality && { quality: response.quality }),
+    ...(response.license && { licenseInfo: response.license }),
     socketUrl: `https://socket.dev/${packageInfo.ecosystem}/package/${encodeURIComponent(packageInfo.name)}`,
   }
 }
diff --git a/packages/sbom-generator/src/formatters/socket-facts.mts b/packages/sbom-generator/src/formatters/socket-facts.mts
@@ -472,10 +472,12 @@ function buildComponentSummary(enriched: EnrichedArtifact[]): string {
     // Show top reachable vulnerability.
     if (reachableCount > 0) {
       const topVuln = reachableVulns[0]
-      const confidence = topVuln.vuln.confidence?.toFixed(2) || '?'
-      lines.push(
-        `   Confidence: ${confidence} - ${topVuln.metadata.reachabilityData?.publicComment || topVuln.metadata.ghsaId}`,
-      )
+      if (topVuln) {
+        const confidence = topVuln.vuln.confidence?.toFixed(2) || '?'
+        lines.push(
+          `   Confidence: ${confidence} - ${topVuln.metadata.reachabilityData?.publicComment || topVuln.metadata.ghsaId}`,
+        )
+      }
     }
   }
 
@@ -495,14 +497,6 @@ function buildDependencyGraph(
   if (rootComponent) {
     lines.push(`\n${rootComponent.name}@${rootComponent.version}`)
 
-    // Map artifacts by PURL for quick lookup.
-    const artifactMap = new Map(
-      enriched.map(e => [
-        `pkg:${e.artifact.type}/${e.artifact.name}@${e.artifact.version}`,
-        e,
-      ]),
-    )
-
     // Show direct dependencies with reachability status.
     for (const e of enriched.filter(e => e.artifact.direct).slice(0, 10)) {
       const statusBadge = e.reachableVulns.length > 0 ? '🔴' : '⚪'
diff --git a/packages/socket/package.json b/packages/socket/package.json
@@ -41,7 +41,7 @@
     "socket": "dist/bootstrap.js"
   },
   "devDependencies": {
-    "@socketsecurity/lib": "2.9.0",
+    "@socketsecurity/lib": "2.9.1",
     "esbuild": "^0.24.0"
   }
 }
diff --git a/packages/socketbin-cli-ai/package.json b/packages/socketbin-cli-ai/package.json
@@ -18,7 +18,7 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.9.0"
+    "@socketsecurity/lib": "2.9.1"
   },
   "devDependencies": {
     "esbuild": "0.25.10"
diff --git a/packages/yoga-layout/package.json b/packages/yoga-layout/package.json
@@ -15,6 +15,6 @@
   },
   "dependencies": {
     "@socketsecurity/build-infra": "workspace:*",
-    "@socketsecurity/lib": "2.9.0"
+    "@socketsecurity/lib": "2.9.1"
   }
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml

Original file line number	Diff line number	Diff line change
`@@ -134,6 +134,7 @@ export async function downloadCli() {`
`134`	`134`	`const result = await dlxPackage(`
`135`	`135`	`[], // Empty args - we don't want to execute anything.`
`136`	`136`	`{`
	`137`	`+ binaryName: 'socket', // @socketsecurity/cli has bin: { socket: '...' }.`
`137`	`138`	`force: false, // Use cached version if available.`
`138`	`139`	`package: '@socketsecurity/cli',`
`139`	`140`	`spawnOptions: {`
Original file line number	Diff line number	Diff line change
`@@ -24,7 +24,7 @@`
`24`	`24`	`"dependencies": {`
`25`	`25`	`"@babel/parser": "catalog:",`
`26`	`26`	`"@babel/traverse": "catalog:",`
`27`		`- "@socketsecurity/lib": "2.9.0",`
	`27`	`+ "@socketsecurity/lib": "2.9.1",`
`28`	`28`	`"magic-string": "catalog:"`
`29`	`29`	`}`
`30`	`30`	`}`
Original file line number	Diff line number	Diff line change
`@@ -11,6 +11,6 @@`
`11`	`11`	`},`
`12`	`12`	`"dependencies": {`
`13`	`13`	`"@socketsecurity/build-infra": "workspace:*",`
`14`		`- "@socketsecurity/lib": "2.9.0"`
	`14`	`+ "@socketsecurity/lib": "2.9.1"`
`15`	`15`	`}`
`16`	`16`	`}`
Original file line number	Diff line number	Diff line change
`@@ -15,6 +15,6 @@`
`15`	`15`	`},`
`16`	`16`	`"dependencies": {`
`17`	`17`	`"@socketsecurity/build-infra": "workspace:*",`
`18`		`- "@socketsecurity/lib": "2.9.0"`
	`18`	`+ "@socketsecurity/lib": "2.9.1"`
`19`	`19`	`}`
`20`	`20`	`}`