Commits on Aug 5, 2026

1. fix(deps): declare form-data so a fresh install can upload

   The bundled Socket SDK loads form-data through a runtime require the
   first time a command uploads files. form-data was only reachable in this
   repo's dev tree, through the pnpm override, so the published package
   shipped a require for something a consumer never installed: a fresh
   install threw "Cannot find module 'form-data'" on the first upload, and
   `socket scan create` in a clean CI job could not get past it.
   
   Declaring it in dependencies puts it in the consumer's install. The
   override stays as is so the dev tree and the published tree agree on
   4.0.6.

   

   jdalton committed Aug 5, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for 8480430
   • Browse repository at this point

   Copy the full SHA

   8480430 View commit details

   Browse the repository at this point in the history

2. test(dist): assert every runtime require in dist is declared or builtin

   Parses the built dist/*.js with rollup's parser and collects every
   require()/createRequire() call made with a string literal, then checks
   that each bare specifier names a Node builtin or a package.json
   dependencies entry. That is the contract a consumer's install has to
   satisfy, and nothing else was checking it.
   
   Parsing instead of grepping matters here: vendor.js repeats several of
   those specifiers inside doc comments and code-generation strings, so a
   text scan reports micromatch, picomatch, braces and ajv subpaths as
   findings that are not really there.
   
   Run against the dependencies block before the previous commit, the test
   fails with:
   
     - []
     + [
     +   "dist/vendor.js requires \"form-data\" (package \"form-data\")",
     + ]
   
   The scan stays on dist/. external/ ships copies of blessed and
   blessed-contrib whose terminal widget requires pty.js and term.js behind
   a try/catch, which is a separate question from what the bundle needs.

   

   jdalton committed Aug 5, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for 0c3fea0
   • Browse repository at this point

   Copy the full SHA

   0c3fea0 View commit details

   Browse the repository at this point in the history

3. chore(release): 1.1.154

   

   jdalton committed Aug 5, 2026
   Configuration menu

   • View commit details
   • Copy full SHA for 02b3cef
   • Browse repository at this point

   Copy the full SHA

   02b3cef View commit details

   Browse the repository at this point in the history