René's URL Explorer Experiment

Title: feat(scan): unified auto-update engine — --sync, --prune, --dry-run (v3.0) by mikolalysenko · Pull Request #79 · SocketDev/socket-patch · GitHub

Open Graph Title: feat(scan): unified auto-update engine — --sync, --prune, --dry-run (v3.0) by mikolalysenko · Pull Request #79 · SocketDev/socket-patch

X Title: feat(scan): unified auto-update engine — --sync, --prune, --dry-run (v3.0) by mikolalysenko · Pull Request #79 · SocketDev/socket-patch

Description: Summary Makes socket-patch scan the single-command auto-update engine for bots / cron jobs / CI workflows. MAJOR bump 2.1.4 → 3.0.0 driven by new flags + the per-patch "updated" action vocabulary. socket-patch scan --json --sync --yes | jq '{ applied: [.apply.patches[] | select(.action == "added" or .action == "updated") | .purl], pruned: .gc.prunedManifestEntries, bytes_freed: .gc.bytesFreed }' # Pipe into peter-evans/create-pull-request to open a PR with the changes. What this PR adds Discovery + apply (existing): --apply flag opts JSON mode into the full discover → select → apply pipeline. Top-level updates array always lists PURLs whose UUID would change vs the local manifest. Per-patch action vocabulary: "added", "updated" (with oldUuid), "skipped", "failed". decide_patch_action / detect_updates pure helpers + 12 unit tests. Opt-in GC (new in v3.0): --prune opts into garbage collection: removes manifest entries for uninstalled packages, sweeps orphan blob/diff/package-archive files. Off by default to preserve manifest state across temporary uninstalls. --sync is sugar for --apply --prune — the canonical single-flag bot invocation. --dry-run / -d previews --apply / --prune / --sync actions without mutating disk. Emits apply.patches[*] populated via decide_patch_action and gc.prunable* / gc.orphan* via the cleanup helpers' built-in dry-run mode. detect_prunable, GcSummary, run_apply_gc, preview_apply_gc helpers + 5 unit tests. repair / gc remain first-class: The gc visible alias on repair stays. Both appear in socket-patch --help. Use repair / gc for cleanup-without-apply; use scan --sync for the combined workflow. 3 contract tests guard the visible_alias from regressing. e2e tests + CI: New tests/e2e_scan.rs with 11 #[ignore] scenarios against the real Socket API (mirrors tests/e2e_npm.rs). Covers added/updated/skipped, default-no-prune, --prune flag, orphan blob cleanup, --sync full lifecycle, --dry-run non-mutation, GC field omission contract. CI matrix gains e2e_scan slots on ubuntu + macos. Workspace v3.0.0: Cargo.toml bumped 2.1.4 → 3.0.0; scripts/version-sync.sh 3.0.0 propagated to all 16 npm wrappers + pypi. Drive-by Windows path-traversal fix in socket-patch-core (PR #67 had a latent gap exposed when CI re-enabled). CI tightened: macOS added to test matrix, test-release job added, explicit cargo build step before tests. Breaking changes (MAJOR) scan --apply per-patch JSON: "action": "added" may now be "action": "updated" with an oldUuid field when the PURL already had a different UUID. Scripts that hard-coded action == "added" break. repair/gc is no longer needed for the combined workflow — bots should switch to scan --sync. Both repair and gc still work for cleanup-only invocations. How a bot uses this socket-patch scan --json --sync --yes > scan-result.json Exit code: 0 on full success, 1 if any apply.patches[*].action == "failed" (top-level status becomes "partial_failure"). A bot can pipe the JSON through jq and into peter-evans/create-pull-request (or its equivalent) with a summary of what changed. Tests (all green) cargo build --workspace --all-features ✓ cargo clippy --workspace --all-features -- -D warnings ✓ cargo test --workspace --all-features ✓ 416 lib tests in core 100 lib tests in CLI (severity_order, detect_updates, detect_prunable, decide_patch_action) 30 in cli_parse_scan (parser snapshot + subprocess JSON-shape) 18 in cli_parse_repair (parser + visible-alias contract) 11 in tests/e2e_scan.rs (#[ignore], run with --ignored) Test plan cargo build/clippy/test --workspace --all-features Smoke: socket-patch --help shows repair [aliases: gc] Smoke: socket-patch scan --help documents --apply, --prune, --sync, -d/--dry-run CI: e2e_scan matrix passes on ubuntu + macos (real Socket API) Reviewer to confirm v3.0 semver bump is appropriate Assisted-by: Claude Code:claude-opus-4-7

Open Graph Description: Summary Makes socket-patch scan the single-command auto-update engine for bots / cron jobs / CI workflows. MAJOR bump 2.1.4 → 3.0.0 driven by new flags + the per-patch "updated" action vo...

X Description: Summary Makes socket-patch scan the single-command auto-update engine for bots / cron jobs / CI workflows. MAJOR bump 2.1.4 → 3.0.0 driven by new flags + the per-patch "updated" a...

Opengraph URL: https://github.com/SocketDev/socket-patch/pull/79

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width