diff --git a/CHANGELOG.md b/CHANGELOG.md index 3dd608933..2caaa16b8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -23,6 +23,131 @@ a version without a non-empty section in this file. ## [Unreleased] +## [5.1.0] — 2026-11-06 + +### Added + +- **RubyGems.** + - **Agent mode patches gems with native (C) extensions for real.** When + `apply` (or `scan` / `get --mode agent`) patches a gem whose patch changes + native-extension sources (such as `ext/**/*.c` or an `extconf.rb`), it + now rebuilds the gem's extensions with RubyGems' own builder, the step + `gem pristine --extensions` runs, using the Ruby that owns the gem home. + Both the copy under `extensions///` and the copy under the + gem's `lib/` are rebuilt, so Ruby stops loading the stale install-time + `.so` / `.bundle`. A build that fails puts the original sources and build + back (`native_extension_build_failed`), and a copy that can't be rebuilt + in place (a precompiled platform gem, a Bundler git checkout, no matching + Ruby) is refused with `native_extensions_unsupported` before anything is + written. Sources an earlier release patched without a rebuild are rebuilt + on the next `apply` (`native_extension_rebuilt` warning). `vex` and + `apply --check` attest such a patch only once its rebuild is recorded, + and otherwise report `native_extension_not_rebuilt`. `rollback` and + `remove` restore the original build. Callers that compile the extension + themselves can opt out with `--no-gem-native-rebuild` (env + `SOCKET_NO_GEM_NATIVE_REBUILD`): the sources are written without a + rebuild, with a `native_extension_not_rebuilt` warning, and `vex` does + not attest them. Hosted copies are unaffected, since RubyGems compiles + the patched gem itself (#1996, #1998). + +### Fixed + +- **RubyGems.** + - With Bundler 4.1 `override "other", with: "gem", in: "parent"`, hosted + `rollback` and `remove` treat the override target as transitive and give + back the original lock and Gemfile byte for byte, instead of writing a + new exact `gem "gem", "x.y.z"` pin that blocked later upgrades (#1989, + #1991). + - Gemspec directives and development dependencies are read as Ruby code: + `=begin`/`=end` blocks, heredoc bodies and `__END__` data are skipped, so + a commented-out dev dependency no longer adds a bogus requirement and a + heredoc no longer refuses the Gemfile (#1932, #1936). +- **npm family.** + - pnpm workspace globs with brace sets and character classes + (`packages/{a,b}`, `packages/[ab]*`) are read the way pnpm reads them in + every mode instead of being refused or read as every directory; shapes + pnpm reads its own way (extglobs, `[!a]`, a `+` after a class, stepped or + punctuation-spanning brace ranges) are still refused, and commented + importer lines in `pnpm-lock.yaml` are ignored (#1846, #1863). + - Quoted values, YAML escapes and duplicate keys in `pnpm-workspace.yaml`, + `.yarnrc.yml` and `.modules.yaml` decode one way, as pnpm reads them, so + settings such as `modulesDir` or `lockfileDir` no longer resolve to + different paths depending on the command (#1918, #1973). + - yarn classic's `.yarnrc` is read as yarn 1.22 reads the whole file: + `--modules-folder 'deps'` no longer sends the crawler to a folder yarn + never installs into, and a file yarn can't parse sets nothing (#1901, + #1915). + - A malformed `package.json` `workspaces` field (a non-string item, `null`, + the wrong type) is judged the same way everywhere; the Bun member walk + falls back to `bun.lock` instead of reading no members (#1900, #1971). + - `apply` and `rollback` no longer touch package copies inside a store + nested in another store's entry, which `scan` never reports, and keep + the peer-variant copies of a project that lives under `~/.bun`, + `~/.deno` or `~/.vlt` (#1899, #1986). + - Hosted npm warns `redirect_npm_omit_lockfile_registry_resolved` when any + npm config layer sets `omit-lockfile-registry-resolved`, which makes the + next `npm install` drop the hosted URL and fail with `EINTEGRITY`, and + names where it is set and the remedies (#1871, #1872). +- **PyPI.** + - A requirements line pinned through an environment variable + (`six==${SIXV}`) is refused by `vendor` with + `pypi_requirement_env_templated`, and `vendor --check` and `vex` read it + as possibly installing any release, so the patch is no longer attested + while `pip install -r` can install the unpatched one (#1873, #1874). + - A hosted scan of a Python project with no lockfile the rewriters read now + warns `redirect_pypi_no_lockfile`, naming the files looked for and the + project's own lock command, instead of passing silently (#638, #1885). + - After a hosted rollback, a vendored rollback or `vendor --revert` of a + requirements-file pin, the reinstall advisory covers pip and names the + requirements files to reinstall from (#1953, #1954). + - The hosted Pipenv stale-install warning ends with the same runnable + remedy as vendored mode and never prints an option-like package name + into a shell command (#1878, #1883). + - A `poetry.lock` in an old format (0, 1.0, 1.1) keeps its "written by + Poetry < 1.4" warnings and refusals even when a hand-merged header claims + a newer Poetry (#1847, #1865). +- **Go.** In a go 1.16 (unpruned) module where a dependency imports a fork + that the root `go.mod` replaces with the patched module, `apply`, + `apply --check`, hosted mode and `vex` read the module graph to tell + whether the patch is really built, instead of reporting it applied while + `go build` linked the unpatched code (#1840, #1843). +- **Maven.** A Maven 4 root that builds its subdirectories implicitly + (model 4.1.0, `pom` packaging, no ``) is treated as a reactor + by hosted mode, `vex` and the Maven cache scope, not only by vendored mode, + so a root-only pin is no longer attested while a module keeps its own + version (#1809, #1886). +- **Vendoring.** + - Vendored dry runs leave already-vendored patches out of the "Would + download and vendor" headline and list them as skipped, matching the wet + run and the JSON (#1850, #1856). + - Run from a workspace member with no lockfile of its own, a vendored + `scan`, `get` or `vendor` names the lock that installs the member and + where to run from (#1904, #1913). + - npm package-lock packages installed from a URL or git spec, and workspace + members, are refused before their patch is downloaded; dry runs preview + them as refused and they no longer hold a `--max-new-patches` rollout + slot (#1976, #1977). + - In a vlt project, `vendor` no longer requests service downloads for + packages it then refuses (#1909, #1947). +- **General.** + - The nested-project remedy quotes its path for the shell it prints for, + including Windows and `%` (#1859, #1884). + - Patch and vendor download errors read the same on every path (size + limit, HTTP status with a bounded body excerpt), and artifact downloads + log under `--debug` (#1869, #1870). + +### Maintenance + +- Code consolidation with no output change: one lock-rewrite driver for + Poetry and PDM (#1898) and module sweeps across the CLI and core + (#1855, #1864, #1875, #1884, #1892, #1897, #1903, #1907, #1914, #1920, + #1923, #1929, #1939, #1948, #1967, #1975, #1985, #1990). +- Test and CI infrastructure: shared test env guard, docker harness, PTY + runner, `copy_tree` and apply fixtures; hermetic children scrub color + variables; failing tests are annotated in CI; offline bun.lockb rollback + mock and a Windows venv layout in the PyPI fixture (#1891, #1890, #1905, + #1944, #1955, #1964, #1972, #1978, #1988, #1994). + ## [5.0.1] — 2026-10-13 ### Fixed diff --git a/Cargo.lock b/Cargo.lock index 06ae78190..9527cc78a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -1891,7 +1891,7 @@ checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03" [[package]] name = "socket-patch-bench" -version = "5.0.1" +version = "5.1.0" dependencies = [ "base64", "clap", @@ -1910,7 +1910,7 @@ dependencies = [ [[package]] name = "socket-patch-cli" -version = "5.0.1" +version = "5.1.0" dependencies = [ "base64", "clap", @@ -1944,7 +1944,7 @@ dependencies = [ [[package]] name = "socket-patch-core" -version = "5.0.1" +version = "5.1.0" dependencies = [ "aho-corasick", "base64", @@ -1986,7 +1986,7 @@ dependencies = [ [[package]] name = "socket-patch-node" -version = "5.0.1" +version = "5.1.0" dependencies = [ "napi", "napi-build", diff --git a/Cargo.toml b/Cargo.toml index b3668ab4c..2f20a92cd 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -14,13 +14,13 @@ default-members = [ resolver = "2" [workspace.package] -version = "5.0.1" +version = "5.1.0" edition = "2021" license = "MIT" repository = "https://github.com/SocketDev/socket-patch" [workspace.dependencies] -socket-patch-core = { path = "crates/socket-patch-core", version = "=5.0.1" } +socket-patch-core = { path = "crates/socket-patch-core", version = "=5.1.0" } clap = { version = "=4.5.60", features = ["derive", "env"] } serde = { version = "=1.0.228", features = ["derive"] } serde_json = { version = "=1.0.149", features = ["preserve_order", "raw_value"] } diff --git a/npm/socket-patch-android-arm64/package.json b/npm/socket-patch-android-arm64/package.json index 9864dab47..673e1b678 100644 --- a/npm/socket-patch-android-arm64/package.json +++ b/npm/socket-patch-android-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-android-arm64", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Android ARM64", "os": [ "android" diff --git a/npm/socket-patch-darwin-arm64/package.json b/npm/socket-patch-darwin-arm64/package.json index 6c5cef673..acd8a9076 100644 --- a/npm/socket-patch-darwin-arm64/package.json +++ b/npm/socket-patch-darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-darwin-arm64", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for macOS ARM64", "os": [ "darwin" diff --git a/npm/socket-patch-darwin-x64/package.json b/npm/socket-patch-darwin-x64/package.json index 540f74c88..0c3536f30 100644 --- a/npm/socket-patch-darwin-x64/package.json +++ b/npm/socket-patch-darwin-x64/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-darwin-x64", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for macOS x64", "os": [ "darwin" diff --git a/npm/socket-patch-linux-arm-gnu/package.json b/npm/socket-patch-linux-arm-gnu/package.json index 9d5156389..d89e96788 100644 --- a/npm/socket-patch-linux-arm-gnu/package.json +++ b/npm/socket-patch-linux-arm-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-arm-gnu", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux ARM (glibc)", "os": [ "linux" diff --git a/npm/socket-patch-linux-arm-musl/package.json b/npm/socket-patch-linux-arm-musl/package.json index 98c779b1f..e797a27d2 100644 --- a/npm/socket-patch-linux-arm-musl/package.json +++ b/npm/socket-patch-linux-arm-musl/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-arm-musl", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux ARM (musl)", "os": [ "linux" diff --git a/npm/socket-patch-linux-arm64-gnu/package.json b/npm/socket-patch-linux-arm64-gnu/package.json index 752ada98c..a343d1331 100644 --- a/npm/socket-patch-linux-arm64-gnu/package.json +++ b/npm/socket-patch-linux-arm64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-arm64-gnu", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux ARM64 (glibc)", "os": [ "linux" diff --git a/npm/socket-patch-linux-arm64-musl/package.json b/npm/socket-patch-linux-arm64-musl/package.json index c2317409f..1a431d315 100644 --- a/npm/socket-patch-linux-arm64-musl/package.json +++ b/npm/socket-patch-linux-arm64-musl/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-arm64-musl", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux ARM64 (musl)", "os": [ "linux" diff --git a/npm/socket-patch-linux-ia32-gnu/package.json b/npm/socket-patch-linux-ia32-gnu/package.json index e9b93747f..6d21e39aa 100644 --- a/npm/socket-patch-linux-ia32-gnu/package.json +++ b/npm/socket-patch-linux-ia32-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-ia32-gnu", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux ia32 (glibc)", "os": [ "linux" diff --git a/npm/socket-patch-linux-ia32-musl/package.json b/npm/socket-patch-linux-ia32-musl/package.json index c2357f9e1..dcc47f953 100644 --- a/npm/socket-patch-linux-ia32-musl/package.json +++ b/npm/socket-patch-linux-ia32-musl/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-ia32-musl", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux ia32 (musl)", "os": [ "linux" diff --git a/npm/socket-patch-linux-x64-gnu/package.json b/npm/socket-patch-linux-x64-gnu/package.json index 2790f998f..e47b7ef67 100644 --- a/npm/socket-patch-linux-x64-gnu/package.json +++ b/npm/socket-patch-linux-x64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-x64-gnu", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux x64 (glibc)", "os": [ "linux" diff --git a/npm/socket-patch-linux-x64-musl/package.json b/npm/socket-patch-linux-x64-musl/package.json index 58d717bc2..42c08c1bb 100644 --- a/npm/socket-patch-linux-x64-musl/package.json +++ b/npm/socket-patch-linux-x64-musl/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-linux-x64-musl", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Linux x64 (musl)", "os": [ "linux" diff --git a/npm/socket-patch-win32-arm64/package.json b/npm/socket-patch-win32-arm64/package.json index ed1a96f5c..891fa3e21 100644 --- a/npm/socket-patch-win32-arm64/package.json +++ b/npm/socket-patch-win32-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-win32-arm64", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Windows ARM64", "os": [ "win32" diff --git a/npm/socket-patch-win32-ia32/package.json b/npm/socket-patch-win32-ia32/package.json index df3d1a3a4..19cc2341e 100644 --- a/npm/socket-patch-win32-ia32/package.json +++ b/npm/socket-patch-win32-ia32/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-win32-ia32", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Windows ia32", "os": [ "win32" diff --git a/npm/socket-patch-win32-x64/package.json b/npm/socket-patch-win32-x64/package.json index be495250b..2e2854a36 100644 --- a/npm/socket-patch-win32-x64/package.json +++ b/npm/socket-patch-win32-x64/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch-win32-x64", - "version": "5.0.1", + "version": "5.1.0", "description": "socket-patch binary for Windows x64", "os": [ "win32" diff --git a/npm/socket-patch/package-lock.json b/npm/socket-patch/package-lock.json index 4deac81a2..b570c872e 100644 --- a/npm/socket-patch/package-lock.json +++ b/npm/socket-patch/package-lock.json @@ -1,12 +1,12 @@ { "name": "@socketsecurity/socket-patch", - "version": "5.0.1", + "version": "5.1.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@socketsecurity/socket-patch", - "version": "5.0.1", + "version": "5.1.0", "license": "MIT", "dependencies": { "zod": "4.6.6" @@ -22,228 +22,22 @@ "node": ">=18.0.0" }, "optionalDependencies": { - "@socketsecurity/socket-patch-android-arm64": "5.0.1", - "@socketsecurity/socket-patch-darwin-arm64": "5.0.1", - "@socketsecurity/socket-patch-darwin-x64": "5.0.1", - "@socketsecurity/socket-patch-linux-arm-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-arm-musl": "5.0.1", - "@socketsecurity/socket-patch-linux-arm64-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-arm64-musl": "5.0.1", - "@socketsecurity/socket-patch-linux-ia32-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-ia32-musl": "5.0.1", - "@socketsecurity/socket-patch-linux-x64-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-x64-musl": "5.0.1", - "@socketsecurity/socket-patch-win32-arm64": "5.0.1", - "@socketsecurity/socket-patch-win32-ia32": "5.0.1", - "@socketsecurity/socket-patch-win32-x64": "5.0.1" + "@socketsecurity/socket-patch-android-arm64": "5.1.0", + "@socketsecurity/socket-patch-darwin-arm64": "5.1.0", + "@socketsecurity/socket-patch-darwin-x64": "5.1.0", + "@socketsecurity/socket-patch-linux-arm-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-arm-musl": "5.1.0", + "@socketsecurity/socket-patch-linux-arm64-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-arm64-musl": "5.1.0", + "@socketsecurity/socket-patch-linux-ia32-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-ia32-musl": "5.1.0", + "@socketsecurity/socket-patch-linux-x64-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-x64-musl": "5.1.0", + "@socketsecurity/socket-patch-win32-arm64": "5.1.0", + "@socketsecurity/socket-patch-win32-ia32": "5.1.0", + "@socketsecurity/socket-patch-win32-x64": "5.1.0" } }, - "node_modules/@socketsecurity/socket-patch-android-arm64": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-android-arm64/-/socket-patch-android-arm64-5.0.1.tgz", - "integrity": "sha512-DwtxJoNedhOCu4lPFwUUXbTVt6VZ2CUEvLOm3JaJMaqMMFHVmZC0nMdCaAVrYY+y/FkOczpNKqqa6fxDIBx2wg==", - "cpu": [ - "arm64" - ], - "license": "MIT", - "optional": true, - "os": [ - "android" - ] - }, - "node_modules/@socketsecurity/socket-patch-darwin-arm64": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-darwin-arm64/-/socket-patch-darwin-arm64-5.0.1.tgz", - "integrity": "sha512-8HkvG9ImaYkhZdW0h5WWZia6KVZ0RtOXQbyVq+HZnJz2pspRd9XhdQXTkpVmb5weaqjIU84ewMObKWF7jJH8kg==", - "cpu": [ - "arm64" - ], - "license": "MIT", - "optional": true, - "os": [ - "darwin" - ] - }, - "node_modules/@socketsecurity/socket-patch-darwin-x64": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-darwin-x64/-/socket-patch-darwin-x64-5.0.1.tgz", - "integrity": "sha512-KpRTmW3l6g51IGWpJrMNlAq03VItvczkMg6yBiQXhz+ZvrDOBa13nNBhvvrAEilRGe9zfYGNhXz6Q6ntZdU8fg==", - "cpu": [ - "x64" - ], - "license": "MIT", - "optional": true, - "os": [ - "darwin" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-arm-gnu": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm-gnu/-/socket-patch-linux-arm-gnu-5.0.1.tgz", - "integrity": "sha512-tn7/DSpEFqJHNawC2l4HaCoTpGPh7eo3OiV96DtWkcv+iBkylHYKdmnooUOvYUzUO7GpRAJ3nLntcAs55Jehfg==", - "cpu": [ - "arm" - ], - "libc": [ - "glibc" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-arm-musl": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm-musl/-/socket-patch-linux-arm-musl-5.0.1.tgz", - "integrity": "sha512-Rw1wtCKM/eroHhgAFTeFT6dgT4VLeBj4gGYVqqMtLT6oMFp4tAl1AV/1DuC2Lh4OC8kQiI9D1TzItZ+gWxaQWQ==", - "cpu": [ - "arm" - ], - "libc": [ - "musl" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-arm64-gnu": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm64-gnu/-/socket-patch-linux-arm64-gnu-5.0.1.tgz", - "integrity": "sha512-WrUAPoPQHN9BAnJo4b7WeBVjZqknoi3yAU6OR87a7Pdralnk3bsNhClr6DQpZ9FJjeTvwPA1rxJlnk5EFnX2pQ==", - "cpu": [ - "arm64" - ], - "libc": [ - "glibc" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-arm64-musl": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm64-musl/-/socket-patch-linux-arm64-musl-5.0.1.tgz", - "integrity": "sha512-kYS8Y6UK9UijvowP+qbmdjE0c0GV6i/Maksebcb+qODpMZvOrhfXIE8oxb7+UNGU5lR64UdfEe/YQPPLYf+Akg==", - "cpu": [ - "arm64" - ], - "libc": [ - "musl" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-ia32-gnu": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-ia32-gnu/-/socket-patch-linux-ia32-gnu-5.0.1.tgz", - "integrity": "sha512-PTjRQOpeN83Fomi9kMSYSfpKom5sb4AzSraq2CMx5gcgDkExUnoT1IfuazLpiBVgYutnISXhK44Tu/ryTN7kXw==", - "cpu": [ - "ia32" - ], - "libc": [ - "glibc" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-ia32-musl": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-ia32-musl/-/socket-patch-linux-ia32-musl-5.0.1.tgz", - "integrity": "sha512-JjYnwEnx7NctNrqlJilMYVWFRWSN9mnyTJ8uKNRqmckwwHj0YxzR3JLuCeiLgnVW4bHcUBAvz4CN6s9ieQEhbw==", - "cpu": [ - "ia32" - ], - "libc": [ - "musl" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-x64-gnu": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-x64-gnu/-/socket-patch-linux-x64-gnu-5.0.1.tgz", - "integrity": "sha512-tnegc3gbWmXUYsWgPPST8W361tv+tb9s9i+tyqvv6lubY1R94ANWspzqBVQj6Cnd9TLymT01KIzKxNWmdySJ1Q==", - "cpu": [ - "x64" - ], - "libc": [ - "glibc" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-linux-x64-musl": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-x64-musl/-/socket-patch-linux-x64-musl-5.0.1.tgz", - "integrity": "sha512-boAPDb46ckhGddL1sIeQNNsoaL8S+qPTybG7RRbGFBH3+a30eW/z9eP1S9dIUdXz7JXQoZ7aQNp6AmN5Dyy6pQ==", - "cpu": [ - "x64" - ], - "libc": [ - "musl" - ], - "license": "MIT", - "optional": true, - "os": [ - "linux" - ] - }, - "node_modules/@socketsecurity/socket-patch-win32-arm64": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-win32-arm64/-/socket-patch-win32-arm64-5.0.1.tgz", - "integrity": "sha512-5dvqnKkct+tSDPxh1q9z+tYCD2J8KxD4OZRA4C4guXbBcwDpyYf5SGJAsp7t2GgQgVCkLlPQYbc3IlxsoOkkdw==", - "cpu": [ - "arm64" - ], - "license": "MIT", - "optional": true, - "os": [ - "win32" - ] - }, - "node_modules/@socketsecurity/socket-patch-win32-ia32": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-win32-ia32/-/socket-patch-win32-ia32-5.0.1.tgz", - "integrity": "sha512-JcPW/OYsP+TMiz96E4Wqt1ZijIawDaC0BHUq2ouox2iHnBAWjq4X8nbEETINR97/45rR3pde0PI+xNxSpV1XqQ==", - "cpu": [ - "ia32" - ], - "license": "MIT", - "optional": true, - "os": [ - "win32" - ] - }, - "node_modules/@socketsecurity/socket-patch-win32-x64": { - "version": "5.0.1", - "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-win32-x64/-/socket-patch-win32-x64-5.0.1.tgz", - "integrity": "sha512-1gUxYbgoe3G9T214GkoopolDFfWm5w2ROQO+xTBgCsCGaZkCS7ZLaLvvzrDqH+nmmuNwLkkx3FuK7HAvm5vK2w==", - "cpu": [ - "x64" - ], - "license": "MIT", - "optional": true, - "os": [ - "win32" - ] - }, "node_modules/@types/node": { "version": "20.19.41", "resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.41.tgz", diff --git a/npm/socket-patch/package.json b/npm/socket-patch/package.json index 872017c49..a269a25ef 100644 --- a/npm/socket-patch/package.json +++ b/npm/socket-patch/package.json @@ -1,6 +1,6 @@ { "name": "@socketsecurity/socket-patch", - "version": "5.0.1", + "version": "5.1.0", "description": "CLI tool and schema library for applying security patches to dependencies", "bin": { "socket-patch": "bin/socket-patch" @@ -49,19 +49,19 @@ "@types/node": "20.19.41" }, "optionalDependencies": { - "@socketsecurity/socket-patch-android-arm64": "5.0.1", - "@socketsecurity/socket-patch-darwin-arm64": "5.0.1", - "@socketsecurity/socket-patch-darwin-x64": "5.0.1", - "@socketsecurity/socket-patch-linux-arm-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-arm-musl": "5.0.1", - "@socketsecurity/socket-patch-linux-arm64-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-arm64-musl": "5.0.1", - "@socketsecurity/socket-patch-linux-ia32-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-ia32-musl": "5.0.1", - "@socketsecurity/socket-patch-linux-x64-gnu": "5.0.1", - "@socketsecurity/socket-patch-linux-x64-musl": "5.0.1", - "@socketsecurity/socket-patch-win32-arm64": "5.0.1", - "@socketsecurity/socket-patch-win32-ia32": "5.0.1", - "@socketsecurity/socket-patch-win32-x64": "5.0.1" + "@socketsecurity/socket-patch-android-arm64": "5.1.0", + "@socketsecurity/socket-patch-darwin-arm64": "5.1.0", + "@socketsecurity/socket-patch-darwin-x64": "5.1.0", + "@socketsecurity/socket-patch-linux-arm-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-arm-musl": "5.1.0", + "@socketsecurity/socket-patch-linux-arm64-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-arm64-musl": "5.1.0", + "@socketsecurity/socket-patch-linux-ia32-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-ia32-musl": "5.1.0", + "@socketsecurity/socket-patch-linux-x64-gnu": "5.1.0", + "@socketsecurity/socket-patch-linux-x64-musl": "5.1.0", + "@socketsecurity/socket-patch-win32-arm64": "5.1.0", + "@socketsecurity/socket-patch-win32-ia32": "5.1.0", + "@socketsecurity/socket-patch-win32-x64": "5.1.0" } }