Skip to content

feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage #117

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Mikola Lysenko (mikolalysenko) merged 30 commits into from
Jul 2, 2026
Merged

feat: three patch-apply modes — hosted, vendored, agent — with full ecosystem + VEX coverage #117

Changes from 1 commit
Commits
Show all changes
30 commits
Select commit Hold shift + click to select a range
c7d668e
feat(cli): add `scan --redirect` hosted-vendored-patch mode
mikolalysenko Jul 1, 2026
8fcd7b3
feat(vex): attest redirected patches with a (redirected) provenance m…
mikolalysenko Jul 1, 2026
7b23bc8
Merge remote-tracking branch 'origin/main' into feat/scan-redirect-mode
mikolalysenko Jul 1, 2026
b47b9d4
style: cargo fmt
mikolalysenko Jul 1, 2026
554b486
test(vex): real-install npm redirect capstone + docker gem/composer V…
mikolalysenko Jul 1, 2026
baedf28
fix(redirect,vex): fail-closed attestation, idempotent rewriters, sur…
mikolalysenko Jul 1, 2026
be23ae2
fix(ci): check the redirect golden fixtures out byte-exact on Windows
mikolalysenko Jul 1, 2026
e93f21c
chore: exclude test fixtures from Socket dependency scanning
mikolalysenko Jul 1, 2026
0c925d1
feat(cli): three-mode selector, maven hosted rewriter, nuget config f…
mikolalysenko Jul 2, 2026
a8dfb7e
feat(vendor): NuGet and Maven vendored backends with fragment-level r…
mikolalysenko Jul 2, 2026
1cfd02c
test: three-mode × ecosystem behavioral matrix
mikolalysenko Jul 2, 2026
a85f454
docs: three-mode README, CHANGELOG, CLI_CONTRACT + support matrix
mikolalysenko Jul 2, 2026
8399416
test(vendor): jsr is the unsupported-ecosystem exemplar now that nuge…
mikolalysenko Jul 2, 2026
56f3550
fix(cli): mode-conflict errors match the clap contract phrasing
mikolalysenko Jul 2, 2026
d9aa32f
docs: spell out Maven's checksum-failure fallback for hosted mode
mikolalysenko Jul 2, 2026
7ee80d7
refactor(core): factor bun text-lock grammar + share uri encode; gene…
mikolalysenko Jul 2, 2026
1db0d6d
feat(patches): Rush monorepo support — vendored refusal, scan invento…
mikolalysenko Jul 2, 2026
2716592
feat(core): yarn-berry + bun hosted registry-redirect rewriters + sha…
mikolalysenko Jul 2, 2026
20534a0
feat(cli): berry/bun redirect plumbing + bun.lockb auto-migration
mikolalysenko Jul 2, 2026
8154b18
feat(cli): scan --redirect discovers Rush pnpm locks + stale repo-sta…
mikolalysenko Jul 2, 2026
d6f736b
test(redirect,repair): pnpm hosted-lock legs + flavor repair matrix
mikolalysenko Jul 2, 2026
29bbb80
test(apply): agent-mode legs for bun, yarn-berry node-modules, rush farm
mikolalysenko Jul 2, 2026
58decbc
feat(redirect): fail-closed maven suffixing + trusted checksums
mikolalysenko Jul 2, 2026
bd317b8
test(redirect): real-install berry + bun hosted capstones
mikolalysenko Jul 2, 2026
dea45e6
test(docker): yarn berry 4.x agent + vendored e2e legs
mikolalysenko Jul 2, 2026
9063242
test(redirect): Rush hosted-mode redirect capstone (sim + gated real …
mikolalysenko Jul 2, 2026
bd76bcb
test(redirect): clippy cleanups in berry + rush redirect legs
mikolalysenko Jul 2, 2026
bf74543
docs: berry/bun + Rush hosted support, maven fail-closed, de-document…
mikolalysenko Jul 2, 2026
8f591de
style(core): satisfy clippy cloned_ref_to_slice_refs in rewriter tests
mikolalysenko Jul 2, 2026
14088c9
test(cli): fix windows + release CI failures in in-process suites
mikolalysenko Jul 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
fix(ci): check the redirect golden fixtures out byte-exact on Windows 
The fixtures are a byte-for-byte cross-language contract; Windows
runners' CRLF checkout conversion made redirect_golden_fixtures_match
fail on the generated-vs-expected comparison. -text disables EOL
conversion for the fixture tree (contents are already committed LF).

Assisted-by: Claude Code:claude-fable-5
  • Loading branch information
@mikolalysenko
mikolalysenko committed Jul 1, 2026
commit be23ae22298bf55919c75622ad7a3bdd64fc62d1
5 changes: 5 additions & 0 deletions .gitattributes
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
# The redirect golden fixtures are a byte-exact cross-language contract
# (consumed by both this crate's redirect_golden.rs and the depscan backend's
# golden.test.ts). EOL conversion on checkout (Windows CRLF) breaks the
# byte-for-byte comparison, so they are checked out exactly as committed.
crates/socket-patch-core/tests/fixtures/redirect/** -text
Loading