Skip to content

Conversation

@jdalton
Copy link
Contributor

@jdalton jdalton commented Nov 18, 2025

Summary

Pin @coana-tech/cli to exact versions instead of using tilde ranges.

Changes

  • Update @coana-tech/cli from 14.12.51 to 14.12.88
  • Remove tilde (~) prefix from version specification in dlx.mts
  • Update test expectations to match exact version format

Note

Pin @coana-tech/cli to an exact version and bump it to 14.12.88, updating dlx usage and tests to remove tilde ranges.

  • Dependencies:
    • Update @coana-tech/cli from 14.12.51 to 14.12.88 in package.json (lockfile updated accordingly).
  • Utils:
    • In src/utils/dlx.mts, use exact constants.ENV.INLINED_SOCKET_CLI_COANA_TECH_CLI_VERSION (remove ~ prefix) when spawning @coana-tech/cli.
  • Tests:
    • Adjust expectations in src/utils/dlx.test.mts to assert @coana-tech/[email protected] (no tilde) for pnpm and npm cases.

Written by Cursor Bugbot for commit 2043149. Configure here.

Updated @coana-tech/cli from 14.12.51 to 14.12.88 and removed the tilde
prefix from version specification in dlx.mts to pin to exact versions.

Changes:
- Remove tilde (~) prefix from coana version in dlx.mts
- Update @coana-tech/cli to 14.12.88 (latest)
- Update test expectations to match exact version format
@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​coana-tech/​cli@​14.12.51 ⏵ 14.12.8889 +310080 +196 +1100

View full report

@socket-security-staging
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​coana-tech/​cli@​14.12.51 ⏵ 14.12.8889 +310080 +196 +1100

View full report

@jdalton jdalton merged commit 62b3aea into v1.x Nov 18, 2025
8 checks passed
@jdalton jdalton deleted the jdalton/coana-pin branch November 18, 2025 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants