Skip to content

upgrading coana to version 14.12.194#1114

Merged
mtorp merged 5 commits intov1.xfrom
coana-14.12.194
Mar 11, 2026
Merged

upgrading coana to version 14.12.194#1114
mtorp merged 5 commits intov1.xfrom
coana-14.12.194

Conversation

@mtorp
Copy link
Contributor

@mtorp mtorp commented Mar 11, 2026

Summary

  • Upgrades @coana-tech/cli from 14.12.191 to 14.12.194
  • Adds --reach-disable-external-tool-checks flag to reachability commands (socket scan create --reach, socket scan reach)
  • Adds --disable-external-tool-checks flag to the socket fix command
  • Both flags pass --disable-external-tool-checks to the Coana CLI

Coana Changelog

For details on what's included in this Coana release, see the Coana Changelogs.


Note

Medium Risk
Touches command-line surface area and Coana invocation wiring for fix and reachability scans, so mis-wiring could change analysis behavior or break workflows; changes are otherwise additive and mostly diagnostics/dependency updates.

Overview
Updates the bundled @coana-tech/cli to 14.12.194 and bumps the CLI version to 1.1.70 (with changelog entry).

Adds new opt-out flags for Coana “external tool checks”: socket fix --disable-external-tool-checks and socket scan (create --reach|reach) --reach-disable-external-tool-checks, wiring them through to Coana invocations and defaulting the new reach option to false in CI/GitHub scan paths. Reachability execution now logs more details on Coana failures, spawnCoanaDlx returns more descriptive errors (exit code/signal), E2E reach tests are retried, and CI installs uv before running e2e tests.

Written by Cursor Bugbot for commit 7f4839d. This will update automatically on new commits. Configure here.

@mtorp mtorp requested review from BarrensZeppelin and barslev and removed request for BarrensZeppelin and barslev March 11, 2026 09:48
@socket-security
Copy link

socket-security bot commented Mar 11, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​coana-tech/​cli@​14.12.192 ⏵ 14.12.194961008098 +1100

View full report

@socket-security-staging
Copy link

socket-security-staging bot commented Mar 11, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​@​coana-tech/​cli@​14.12.192 ⏵ 14.12.194971008098 +1100

View full report

mtorp added 3 commits March 11, 2026 10:59
- Include exit code and signal in Coana failure messages
- Log Coana version, target, and cwd on reachability analysis failure
- Add retry: 2 to all scan reach e2e tests for transient CI failures
@mtorp mtorp merged commit 9871c02 into v1.x Mar 11, 2026
8 of 11 checks passed
@mtorp mtorp deleted the coana-14.12.194 branch March 11, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants