chore(release): bump to v5.17.0

Author: jdalton

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.17.0](https://github.com/SocketDev/socket-lib/releases/tag/v5.17.0) - 2026-04-14
+
+### Added — paths
+
+- `isUnixPath()` — detect MSYS/Git Bash drive letter notation (`/c/...`)
+
+### Changed — paths
+
+- `normalizePath()` now converts MSYS drive letters on Windows (`/c/path` → `C:/path`)
+- `fromUnixPath()` now produces native Windows paths with backslashes (`/c/path` → `C:\path`), making it the true inverse of `toUnixPath()`
+
 ## [5.16.0](https://github.com/SocketDev/socket-lib/releases/tag/v5.16.0) - 2026-04-14
 
 ### Added — paths

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@socketsecurity/lib",
-  "version": "5.16.0",
+  "version": "5.17.0",
   "packageManager": "pnpm@11.0.0-rc.0",
   "license": "MIT",
   "description": "Core utilities and infrastructure for Socket.dev security tools",

src/paths/normalize.ts

@@ -380,7 +380,7 @@ export function isRelative(pathLike: string | Buffer | URL): boolean {
  * Detection rules:
  * - Must start with `/` followed by a single ASCII letter (a-z, A-Z)
  * - The letter must be followed by `/` or be at the end of the string
- * - Examples: `/c/Users/name`, `/d/projects`, `/c`
+ * - Examples: `/c/tools/bin`, `/d/projects`, `/c`
  * - Non-matches: `/tmp`, `/usr/local`, `C:/Windows`
  *
  * @param {string | Buffer | URL} pathLike - The path to check
@@ -389,7 +389,7 @@ export function isRelative(pathLike: string | Buffer | URL): boolean {
  * @example
  * ```typescript
  * // MSYS drive letter paths
- * isUnixPath('/c/Users/name')         // true
+ * isUnixPath('/c/tools/bin')         // true
  * isUnixPath('/d/projects/app')       // true
  * isUnixPath('/c')                    // true
  * isUnixPath('/C/Windows')            // true
@@ -492,7 +492,7 @@ export function fromUnixPath(pathLike: string | Buffer | URL): string {
  *
  * // MSYS drive letters (Windows only)
  * normalizePath('/c/projects/app')              // 'C:/projects/app' (on Windows)
- * normalizePath('/d/Users/name')                // 'D:/Users/name' (on Windows)
+ * normalizePath('/d/tools/bin')                 // 'D:/tools/bin' (on Windows)
  *
  * // UNC paths
  * normalizePath('\\\\server\\share\\file')   // '//server/share/file'

test/unit/paths/normalize.test.mts

@@ -92,7 +92,7 @@ describe('paths/normalize', () => {
       'should convert MSYS drive letter paths on Windows',
       () => {
         expect(normalizePath('/c/projects/app')).toBe('C:/projects/app')
-        expect(normalizePath('/d/Users/name')).toBe('D:/Users/name')
+        expect(normalizePath('/d/tools/bin')).toBe('D:/tools/bin')
         expect(normalizePath('/z/path')).toBe('Z:/path')
       },
     )
@@ -106,7 +106,7 @@ describe('paths/normalize', () => {
 
     it.skipIf(isWindows)('should not convert MSYS-like paths on Unix', () => {
       expect(normalizePath('/c/projects/app')).toBe('/c/projects/app')
-      expect(normalizePath('/d/Users/name')).toBe('/d/Users/name')
+      expect(normalizePath('/d/tools/bin')).toBe('/d/tools/bin')
     })
 
     it.skipIf(!isWindows)(
@@ -294,7 +294,7 @@ describe('paths/normalize', () => {
 
   describe('isUnixPath', () => {
     it('should detect MSYS drive letter paths', () => {
-      expect(isUnixPath('/c/Users/name')).toBe(true)
+      expect(isUnixPath('/c/tools/bin')).toBe(true)
       expect(isUnixPath('/d/projects/app')).toBe(true)
       expect(isUnixPath('/z/path')).toBe(true)
       expect(isUnixPath('/C/Windows')).toBe(true)