From 78f459afc2a781208bd997cd15645550425ffaec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 22:19:38 +0000 Subject: [PATCH 1/2] Build(deps): Bump zod from 3.25.76 to 4.6.6 in /npm/socket-patch Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.6.6. - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.6.6) --- updated-dependencies: - dependency-name: zod dependency-version: 4.6.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- npm/socket-patch/package-lock.json | 214 ++++++++++++++++++++++++++++- npm/socket-patch/package.json | 2 +- 2 files changed, 211 insertions(+), 5 deletions(-) diff --git a/npm/socket-patch/package-lock.json b/npm/socket-patch/package-lock.json index 57c89b8a1..4deac81a2 100644 --- a/npm/socket-patch/package-lock.json +++ b/npm/socket-patch/package-lock.json @@ -9,7 +9,7 @@ "version": "5.0.1", "license": "MIT", "dependencies": { - "zod": "3.25.76" + "zod": "4.6.6" }, "bin": { "socket-patch": "bin/socket-patch" @@ -38,6 +38,212 @@ "@socketsecurity/socket-patch-win32-x64": "5.0.1" } }, + "node_modules/@socketsecurity/socket-patch-android-arm64": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-android-arm64/-/socket-patch-android-arm64-5.0.1.tgz", + "integrity": "sha512-DwtxJoNedhOCu4lPFwUUXbTVt6VZ2CUEvLOm3JaJMaqMMFHVmZC0nMdCaAVrYY+y/FkOczpNKqqa6fxDIBx2wg==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "android" + ] + }, + "node_modules/@socketsecurity/socket-patch-darwin-arm64": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-darwin-arm64/-/socket-patch-darwin-arm64-5.0.1.tgz", + "integrity": "sha512-8HkvG9ImaYkhZdW0h5WWZia6KVZ0RtOXQbyVq+HZnJz2pspRd9XhdQXTkpVmb5weaqjIU84ewMObKWF7jJH8kg==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@socketsecurity/socket-patch-darwin-x64": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-darwin-x64/-/socket-patch-darwin-x64-5.0.1.tgz", + "integrity": "sha512-KpRTmW3l6g51IGWpJrMNlAq03VItvczkMg6yBiQXhz+ZvrDOBa13nNBhvvrAEilRGe9zfYGNhXz6Q6ntZdU8fg==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "darwin" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-arm-gnu": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm-gnu/-/socket-patch-linux-arm-gnu-5.0.1.tgz", + "integrity": "sha512-tn7/DSpEFqJHNawC2l4HaCoTpGPh7eo3OiV96DtWkcv+iBkylHYKdmnooUOvYUzUO7GpRAJ3nLntcAs55Jehfg==", + "cpu": [ + "arm" + ], + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-arm-musl": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm-musl/-/socket-patch-linux-arm-musl-5.0.1.tgz", + "integrity": "sha512-Rw1wtCKM/eroHhgAFTeFT6dgT4VLeBj4gGYVqqMtLT6oMFp4tAl1AV/1DuC2Lh4OC8kQiI9D1TzItZ+gWxaQWQ==", + "cpu": [ + "arm" + ], + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-arm64-gnu": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm64-gnu/-/socket-patch-linux-arm64-gnu-5.0.1.tgz", + "integrity": "sha512-WrUAPoPQHN9BAnJo4b7WeBVjZqknoi3yAU6OR87a7Pdralnk3bsNhClr6DQpZ9FJjeTvwPA1rxJlnk5EFnX2pQ==", + "cpu": [ + "arm64" + ], + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-arm64-musl": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-arm64-musl/-/socket-patch-linux-arm64-musl-5.0.1.tgz", + "integrity": "sha512-kYS8Y6UK9UijvowP+qbmdjE0c0GV6i/Maksebcb+qODpMZvOrhfXIE8oxb7+UNGU5lR64UdfEe/YQPPLYf+Akg==", + "cpu": [ + "arm64" + ], + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-ia32-gnu": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-ia32-gnu/-/socket-patch-linux-ia32-gnu-5.0.1.tgz", + "integrity": "sha512-PTjRQOpeN83Fomi9kMSYSfpKom5sb4AzSraq2CMx5gcgDkExUnoT1IfuazLpiBVgYutnISXhK44Tu/ryTN7kXw==", + "cpu": [ + "ia32" + ], + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-ia32-musl": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-ia32-musl/-/socket-patch-linux-ia32-musl-5.0.1.tgz", + "integrity": "sha512-JjYnwEnx7NctNrqlJilMYVWFRWSN9mnyTJ8uKNRqmckwwHj0YxzR3JLuCeiLgnVW4bHcUBAvz4CN6s9ieQEhbw==", + "cpu": [ + "ia32" + ], + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-x64-gnu": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-x64-gnu/-/socket-patch-linux-x64-gnu-5.0.1.tgz", + "integrity": "sha512-tnegc3gbWmXUYsWgPPST8W361tv+tb9s9i+tyqvv6lubY1R94ANWspzqBVQj6Cnd9TLymT01KIzKxNWmdySJ1Q==", + "cpu": [ + "x64" + ], + "libc": [ + "glibc" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-linux-x64-musl": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-linux-x64-musl/-/socket-patch-linux-x64-musl-5.0.1.tgz", + "integrity": "sha512-boAPDb46ckhGddL1sIeQNNsoaL8S+qPTybG7RRbGFBH3+a30eW/z9eP1S9dIUdXz7JXQoZ7aQNp6AmN5Dyy6pQ==", + "cpu": [ + "x64" + ], + "libc": [ + "musl" + ], + "license": "MIT", + "optional": true, + "os": [ + "linux" + ] + }, + "node_modules/@socketsecurity/socket-patch-win32-arm64": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-win32-arm64/-/socket-patch-win32-arm64-5.0.1.tgz", + "integrity": "sha512-5dvqnKkct+tSDPxh1q9z+tYCD2J8KxD4OZRA4C4guXbBcwDpyYf5SGJAsp7t2GgQgVCkLlPQYbc3IlxsoOkkdw==", + "cpu": [ + "arm64" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@socketsecurity/socket-patch-win32-ia32": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-win32-ia32/-/socket-patch-win32-ia32-5.0.1.tgz", + "integrity": "sha512-JcPW/OYsP+TMiz96E4Wqt1ZijIawDaC0BHUq2ouox2iHnBAWjq4X8nbEETINR97/45rR3pde0PI+xNxSpV1XqQ==", + "cpu": [ + "ia32" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, + "node_modules/@socketsecurity/socket-patch-win32-x64": { + "version": "5.0.1", + "resolved": "https://registry.npmjs.org/@socketsecurity/socket-patch-win32-x64/-/socket-patch-win32-x64-5.0.1.tgz", + "integrity": "sha512-1gUxYbgoe3G9T214GkoopolDFfWm5w2ROQO+xTBgCsCGaZkCS7ZLaLvvzrDqH+nmmuNwLkkx3FuK7HAvm5vK2w==", + "cpu": [ + "x64" + ], + "license": "MIT", + "optional": true, + "os": [ + "win32" + ] + }, "node_modules/@types/node": { "version": "20.19.41", "resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.41.tgz", @@ -70,9 +276,9 @@ "license": "MIT" }, "node_modules/zod": { - "version": "3.25.76", - "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz", - "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==", + "version": "4.6.6", + "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.6.tgz", + "integrity": "sha512-4UmzQUF5fxvfcYHlbjBmejU+w+hbDnWFx4aS8kBx7nPBHcO2SqPbpAG8snbdg+Xse4pRefR98hgjFgIMCI/UhA==", "license": "MIT", "funding": { "url": "https://github.com/sponsors/colinhacks" diff --git a/npm/socket-patch/package.json b/npm/socket-patch/package.json index c536f8554..872017c49 100644 --- a/npm/socket-patch/package.json +++ b/npm/socket-patch/package.json @@ -42,7 +42,7 @@ "node": ">=18.0.0" }, "dependencies": { - "zod": "3.25.76" + "zod": "4.6.6" }, "devDependencies": { "typescript": "5.9.3", From d372cfeecc8a94083e37e462aa71cad2abae677f Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 23 Oct 2026 23:10:31 +0000 Subject: [PATCH 2/2] Read the zod pin in the npm drift test instead of hardcoding it test_release_lint_catches_npm_dependency_drift rewrote "zod": "3.25.76" to inject drift, so the zod 4.6.6 bump made the replace a no-op and the lint passed. Read the pinned version from package.json so the test keeps injecting real drift whatever zod version is pinned. Co-Authored-By: Claude --- scripts/tests/test_release.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/scripts/tests/test_release.py b/scripts/tests/test_release.py index a04c8898f..fa994954b 100644 --- a/scripts/tests/test_release.py +++ b/scripts/tests/test_release.py @@ -326,13 +326,15 @@ def test_release_lint_accepts_main_at_an_rc(self): def test_release_lint_catches_npm_dependency_drift(self): pkg = self.root / "npm/socket-patch/package.json" - rel._write(pkg, rel._read(pkg).replace('"zod": "3.25.76"', '"zod": "3.25.77"')) + # Read the pin instead of hardcoding it, so a zod bump doesn't break this test. + pinned = json.loads(rel._read(pkg))["dependencies"]["zod"] + rel._write(pkg, rel._read(pkg).replace(f'"zod": "{pinned}"', f'"zod": "{pinned}-drift"')) drift = self.lint("--sync-only") self.assertNotEqual(drift.returncode, 0, drift.stdout) self.assertIn("dependencies", drift.stdout + drift.stderr) - self.assertIn("node_modules/zod is 3.25.76", drift.stdout + drift.stderr) + self.assertIn(f"node_modules/zod is {pinned}", drift.stdout + drift.stderr) self.assertEqual(quiet(rel.main, ["--root", str(self.root), "npm-lock-check"]), 1) - rel._write(pkg, rel._read(pkg).replace('"zod": "3.25.77"', '"zod": "3.25.76"')) + rel._write(pkg, rel._read(pkg).replace(f'"zod": "{pinned}-drift"', f'"zod": "{pinned}"')) lock_path = self.root / "npm/socket-patch/package-lock.json" lock = json.loads(rel._read(lock_path)) del lock["packages"]["node_modules/typescript"]