feat: migrate patch command to @socketsecurity/socket-patch@1.2.0

Author: jdalton

CHANGELOG.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [Unreleased]
+
+### Changed
+- Updated to @socketsecurity/socket-patch@1.2.0.
+
 ## [2.1.0](https://github.com/SocketDev/socket-cli/releases/tag/v2.1.0) - 2025-11-02
 
 ### Added

packages/cli/external-tools.json

@@ -24,6 +24,12 @@
     "package": "socketsecurity",
     "version": "^2.2.15"
   },
+  "socket-patch": {
+    "description": "Socket Patch CLI for applying security patches",
+    "type": "npm",
+    "package": "@socketsecurity/socket-patch",
+    "version": "1.2.0"
+  },
   "sfw": {
     "description": "Socket Firewall (sfw)",
     "type": "standalone",

packages/cli/scripts/build.mjs

@@ -3,8 +3,7 @@
  * Options: --quiet, --verbose, --force, --watch
  */
 
-import { copyFileSync } from 'node:fs'
-import { promises as fs } from 'node:fs'
+import { copyFileSync, promises as fs } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 

packages/cli/scripts/esbuild-shared.mjs

@@ -137,12 +137,30 @@ export function getInlinedEnvVars() {
   const externalTools = JSON.parse(
     readFileSync(path.join(rootPath, 'external-tools.json'), 'utf-8'),
   )
-  const cdxgenVersion = externalTools['@cyclonedx/cdxgen']?.version || ''
-  const coanaVersion = externalTools['@coana-tech/cli']?.version || ''
-  const pyCliVersion = externalTools['socketsecurity']?.version || ''
-  const pythonBuildTag = externalTools['python']?.buildTag || ''
-  const pythonVersion = externalTools['python']?.version || ''
-  const sfwVersion = externalTools['sfw']?.version || ''
+
+  function getExternalToolVersion(key, field = 'version') {
+    const tool = externalTools[key]
+    if (!tool) {
+      throw new Error(
+        `External tool "${key}" not found in external-tools.json. Please add it to the configuration.`,
+      )
+    }
+    const value = tool[field]
+    if (!value) {
+      throw new Error(
+        `External tool "${key}" is missing required field "${field}" in external-tools.json.`,
+      )
+    }
+    return value
+  }
+
+  const cdxgenVersion = getExternalToolVersion('@cyclonedx/cdxgen')
+  const coanaVersion = getExternalToolVersion('@coana-tech/cli')
+  const pyCliVersion = getExternalToolVersion('socketsecurity')
+  const pythonBuildTag = getExternalToolVersion('python', 'buildTag')
+  const pythonVersion = getExternalToolVersion('python')
+  const sfwVersion = getExternalToolVersion('sfw')
+  const socketPatchVersion = getExternalToolVersion('socket-patch')
 
   // Build-time constants that can be overridden by environment variables.
   const publishedBuild =
@@ -166,6 +184,7 @@ export function getInlinedEnvVars() {
     INLINED_SOCKET_CLI_CYCLONEDX_CDXGEN_VERSION: JSON.stringify(cdxgenVersion),
     INLINED_SOCKET_CLI_PYCLI_VERSION: JSON.stringify(pyCliVersion),
     INLINED_SOCKET_CLI_SFW_VERSION: JSON.stringify(sfwVersion),
+    INLINED_SOCKET_CLI_SOCKET_PATCH_VERSION: JSON.stringify(socketPatchVersion),
     INLINED_SOCKET_CLI_SYNP_VERSION: JSON.stringify(synpVersion),
     INLINED_SOCKET_CLI_PUBLISHED_BUILD: JSON.stringify(
       publishedBuild ? '1' : '',