Comparing changes

…e0a56527c679f56e04d to dc37677b2e1c63e2034f94d8a5b11f265b73ba33 (#91) * ci(deps): bump pypa/gh-action-pypi-publish Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from ab69e431e9c9f48a3310be0a56527c679f56e04d to ba38be9e461d3875417946c167d0b5f3d385a247. - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](pypa/gh-action-pypi-publish@ab69e43...ba38be9) --- updated-dependencies: - dependency-name: pypa/gh-action-pypi-publish dependency-version: ba38be9e461d3875417946c167d0b5f3d385a247 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * Apply suggestions from code review Co-authored-by: lelia <2418071+lelia@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: lelia <2418071+lelia@users.noreply.github.com>

Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...3d3c42e) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: lelia <2418071+lelia@users.noreply.github.com>

…h 2 updates (#95) Bumps the python-minor-patch group with 2 updates in the / directory: [typing-extensions](https://github.com/python/typing_extensions) and [ruff](https://github.com/astral-sh/ruff). Updates `typing-extensions` from 4.15.0 to 4.16.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.15.0...4.16.0) Updates `ruff` from 0.15.14 to 0.15.20 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.14...0.15.20) --- updated-dependencies: - dependency-name: typing-extensions dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-minor-patch - dependency-name: ruff dependency-version: 0.15.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: lelia <2418071+lelia@users.noreply.github.com>

* Make package previews opt-in * Document contributing and preview workflows * Harden opt-in preview publishing

… stream (#101) * fix(fullscans): tolerate unknown purl types and skip unparseable artifacts (CE-362) The full-scan stream can include artifacts whose purl type is not in SocketPURL_Type (e.g. "generic"), and a single such artifact failed the entire FullScanStreamResponse parse, leaving consumers with zero packages and alerts for an otherwise-successful scan. - Add the standard purl types (generic, maven, gem, nuget, cargo, ...) to SocketPURL_Type - Fall back to UNKNOWN with a warning for unrecognized purl types, the same forward-compat approach SocketCategory uses (#78) - Skip individual artifacts that fail to parse in FullScanStreamResponse.from_dict instead of discarding the response - Bump version to 3.4.0 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(fullscans): skip artifacts without usable ids --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

* Add cached/query param support and 202 handling to diffscans.get DiffScans.get now accepts optional query params (cached, omit_unchanged, omit_license_details) and returns a {"status": "processing", "id": ...} dict on HTTP 202 instead of logging an error, so clients can poll GET /orgs/{org}/diff-scans/{id}?cached=true until the computed diff is ready rather than holding a single idle connection open while the backend computes (which idle-timeout middleboxes like Azure NAT gateways kill after ~4 minutes). Also encode list-valued query params (e.g. committers) as repeated params in create_from_repo/create_from_ids via urlencode(doseq=True). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * Harden diff-scan processing sentinel --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

* fix(purl): expose fail-open batch params and harden dedupe (CE-360) purl.post() defaulted to the batch API's fail-open behavior with no way to opt out: unresolved input purls are silently omitted from the response, so callers could not tell "clean" from "dropped". Add typed poll/timeout_sec/ alerts/purl_errors params (None => omit, preserving the fail-open default for existing callers) plus a strict=True guard that raises APIPartialResponse when requested purls are missing from the response. Also harden Dedupe.consolidate_and_merge_alerts to use .get() for key/type/severity/action so synthetic pendingScan/notFound status rows (built server-side from a minimal {type, key} base) no longer raise KeyError. Bump 3.3.0 -> 3.4.0. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: lelia <2418071+lelia@users.noreply.github.com> * fix(purl): preserve error stream records * fix(purl): define strict response semantics * fix(purl): preserve legacy boolean strings --------- Signed-off-by: lelia <2418071+lelia@users.noreply.github.com> Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

Navigation Menu

Uh oh!

Comparing changes

Open a pull request

Commits on Aug 5, 2026

This comparison is taking too long to generate.

Uh oh!