Skip to content

Bump pinned Coana CLI to 15.12.11 - #417

Merged
lelia merged 3 commits into
mainfrom
coana-15.12.11
Oct 21, 2026
Merged

lelia merged 3 commits into
mainfrom
coana-15.12.11

Conversation

@socket-pr-bot

@socket-pr-bot socket-pr-bot Bot commented Oct 21, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Bumps the pinned reachability engine, the Coana CLI, from 15.12.10 to 15.12.11, refreshes the vendored coana-cache.mjs from that release, and bumps the Python CLI version to 2.11.2.
  • This PR was created automatically by a bot.

Engine changelog

For what is included in this engine release, see the reachability analysis changelog.


Note

Low Risk
Routine pinned-engine and semver bump with no application logic changes; reachability behavior may shift only per the Coana 15.12.11 release notes.

Overview
Releases Socket Python CLI 2.11.2 and moves the default reachability engine from Coana CLI 15.12.10 to 15.12.11.

The pinned version in DEFAULT_COANA_CLI_VERSION (reachability.py) and the documented --reach-version default in docs/cli-reference.md are updated together. pyproject.toml, socketsecurity/__init__.py, and uv.lock reflect the package version bump. CHANGELOG adds a 2.11.2 entry pointing at the reachability analysis changelog for engine-specific changes.

Reviewed by Cursor Bugbot for commit 89e28eb. Configure here.

@socket-pr-bot
socket-pr-bot Bot requested a review from a team as a code owner October 21, 2026 08:03
@socket-pr-bot
socket-pr-bot Bot deployed to socket-firewall October 21, 2026 08:03 Active

@lelia lelia left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking into e2e failures - suspect it's due to the Node changes

EDIT: Coana 15.12.11 is the first release to require Node ≥ 22.13.0. Versions 15.12.8 to 15.12.10 have no engines field on npm. The e2e-reachability job pins setup-node to 20, so it ran Node 20.20.2. Coana refused to start with this error:

Missing required external tools: node: Requires Node.js version 22.13.0 or higher (current: 20.20.2)

So, the end-to-end tests were working as intended here 🙂

Coana CLI 15.12.11 requires Node.js 22.13 or later. The e2e-reachability
job pinned Node 20, so the engine exited 3 before producing a facts file.
@lelia
lelia deployed to socket-firewall October 21, 2026 19:37 — with GitHub Actions Active
virtualenv is a dev-only transitive dependency (pre-commit, hatch). Four
advisories published against 21.12.1 failed the required dependency-audit
check. distlib moves with it.
@lelia
lelia deployed to socket-firewall October 21, 2026 19:41 — with GitHub Actions Active
@lelia

lelia commented Oct 21, 2026

Copy link
Copy Markdown
Contributor

Fixing virtualenv blocker as well (critical CVE found in current version)

@lelia
lelia merged commit e6093a2 into main Oct 21, 2026
32 checks passed

This branch was successfully deployed

1 active deployment
socket-firewall — e4865a55 Deployed Oct 21, 2026 by lelia via python-sfw-smoke-enterprise #506
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant