From f09e292f08f941d6d415deb5d2feb2ff4bab780b Mon Sep 17 00:00:00 2001 From: Matt Peake Date: Mon, 14 Sep 2026 14:42:56 -0400 Subject: [PATCH 1/2] chore(ci): repair Socket Firewall URLs in bun.lock Use the verified signed action release in a dedicated PR job. Include one controlled tarball URL to prove the action repairs the PR branch itself; the bot should restore the original lockfile exactly. --- .../scrub-socket-firewall-lockfile.yml | 19 +++++++++++++++++++ bun.lock | 2 +- 2 files changed, 20 insertions(+), 1 deletion(-) create mode 100644 .github/workflows/scrub-socket-firewall-lockfile.yml diff --git a/.github/workflows/scrub-socket-firewall-lockfile.yml b/.github/workflows/scrub-socket-firewall-lockfile.yml new file mode 100644 index 00000000..ca22f50e --- /dev/null +++ b/.github/workflows/scrub-socket-firewall-lockfile.yml @@ -0,0 +1,19 @@ +name: Repair lockfile registry URLs + +on: + pull_request: + paths: [bun.lock] + +permissions: {} + +jobs: + repair: + name: Repair bun.lock + runs-on: ubuntu-latest + timeout-minutes: 5 + permissions: + contents: write + steps: + # Reads the PR head through GitHub's API; no checkout or install is needed. + - name: Repair Socket Firewall URLs + uses: workos/setup-socket-firewall/lockfile-scrub@195977cfa38ab4d70363af5403a106dbc54a61eb # v1 diff --git a/bun.lock b/bun.lock index d20ded05..47f2fc70 100644 --- a/bun.lock +++ b/bun.lock @@ -472,7 +472,7 @@ "chai": ["chai@6.2.2", "", {}, "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg=="], - "chalk": ["chalk@5.6.2", "", {}, "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA=="], + "chalk": ["chalk@5.6.2", "https://socket-firewall.workos.dev/chalk/-/chalk-5.6.2.tgz", {}, "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA=="], "chardet": ["chardet@2.2.0", "", {}, "sha512-rddelWYNPRrXq6PtNEN2S3f6t9ILzvqaN5pVgi4kqt9jHQaXIial9PznB5iSPVlQSLNaaH22ItWz3EJtQ10+OA=="], From 9e42a5f86e54fbc8bbc1c0907d1c61a575cef33a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 18:43:11 +0000 Subject: [PATCH 2/2] chore: normalize lockfile registry URLs --- bun.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bun.lock b/bun.lock index 47f2fc70..d20ded05 100644 --- a/bun.lock +++ b/bun.lock @@ -472,7 +472,7 @@ "chai": ["chai@6.2.2", "", {}, "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg=="], - "chalk": ["chalk@5.6.2", "https://socket-firewall.workos.dev/chalk/-/chalk-5.6.2.tgz", {}, "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA=="], + "chalk": ["chalk@5.6.2", "", {}, "sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA=="], "chardet": ["chardet@2.2.0", "", {}, "sha512-rddelWYNPRrXq6PtNEN2S3f6t9ILzvqaN5pVgi4kqt9jHQaXIial9PznB5iSPVlQSLNaaH22ItWz3EJtQ10+OA=="],