GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — fix: use npx/pnpm dlx @socketsecurity/socket-patch and add dependencies script by mikolalysenko · Pull Request #63 · SocketDev/socket-patch

Conversation

@mikolalysenko

@mikolalysenko Mikola Lysenko (mikolalysenko) commented Apr 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • Update setup command to generate npx @socketsecurity/socket-patch apply (or pnpm dlx for pnpm projects) instead of bare socket patch apply
  • Add dependencies lifecycle script alongside postinstall for npm v7+ compatibility
  • Detect pnpm projects via pnpm-lock.yaml / pnpm-workspace.yaml lockfile presence
  • Add PackageManager enum threaded through detect -> update -> setup pipeline

Rebased on latest main (v2.1.4), incorporates upstream PackageJsonFindResult and pnpm monorepo root-only filtering.

Supersedes #60.

Test plan

  • All 268 cargo tests pass (including upstream's new tests)
  • New tests for PackageManager detection, pnpm dlx command generation, and dependencies script
  • E2E tests in depscan repo (companion PR: https://github.com/SocketDev/depscan/pull/19148)

🤖 Generated with Claude Code

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
@mikolalysenko @claude
fix: use npx/pnpm dlx @socketsecurity/socket-patch and add dependenci…
89a7abe
…es script

Update the setup command to generate the correct npx/pnpm dlx command
prefix based on lockfile detection, and configure both postinstall
and dependencies lifecycle scripts.

- Add PackageManager enum (Npm/Pnpm) with lockfile detection
- Generate `npx @socketsecurity/socket-patch apply` for npm projects
- Generate `pnpm dlx @socketsecurity/socket-patch apply` for pnpm projects
- Add dependencies lifecycle script alongside postinstall
- Thread PackageManager through detect -> update -> setup pipeline

Co-Authored-By: Claude Opus 4.6 (1M context) <[email protected]>
Wenxin-Jiang
Wenxin Jiang (Wenxin-Jiang) approved these changes Apr 9, 2026
View reviewed changes
@mikolalysenko
Mikola Lysenko (mikolalysenko) merged commit d2cf981 into main Apr 9, 2026
19 checks passed

Uh oh!

There was an error while loading. Please reload this page.

@mikolalysenko
Mikola Lysenko (mikolalysenko) deleted the chore/update-patch-setup-v2 branch April 9, 2026 20:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Wenxin-Jiang Wenxin Jiang (Wenxin-Jiang) Wenxin-Jiang approved these changes

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

2 participants

@mikolalysenko @Wenxin-Jiang
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.