feat: socket-patch vendor — committable vendoring of patched dependencies by mikolalysenko · Pull Request #109 · SocketDev/socket-patch

refactor(cli): extract patch-source staging into commands/fetch_stage.rs

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

ef6ce86

feat(vendor): vendored-patch verification + Command::Vendor envelope tag

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

2405554

feat(apply): yield to vendor ownership (golang skip, --check exclusion, vendored event reason)

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

f7cda25

feat(cli): vendor command pipeline + vendor telemetry events (not yet wired)

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

22cfe19

docs: vendor command contract section + CHANGELOG entries

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

ed7df81

docs: single Added section in CHANGELOG Unreleased

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

28030b5

docs: place VEX golang fix under Unreleased, not 3.2.0

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

8df9beb

feat(vendor): all six ecosystem backends + CLI wiring + VEX integration

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

5456130

fix(vendor): prune empty ecosystem dirs on full revert

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

37ad10d

test(vendor): parser-contract + in-process suites; fix SOCKET_FORCE boolish parsing

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

65ed4bd

fix(vendor): correct event classification + capstone e2e proofs

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

1f42ad9

fix(vendor): security + scoping fixes from adversarial review

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

0e602d6

feat(vendor): v2 phase 1 — boolish env parsing, composer reference uuid, checksum pins

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

dd3a80c

feat(vendor): v2 phases 2-3+5 — gem CHECKSUMS, flavor probes, refactors, composer/gem capstones

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

4d78a43

chore(vendor): declare v2 backend module stubs

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

8d5b9cd

feat(vendor): v2 backend implementations (yarn classic/berry, pnpm, bun, poetry/pdm/pipenv)

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

a8a2e94

feat(vendor): wire v2 backends into the npm/pypi routers

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

630d8fe

docs(vendor): v2 contract — flavor matrix, checksum table, reason codes, CHANGELOG

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

f381a6e

test(vendor): npm-family build-proof capstones (yarn classic/berry, pnpm, bun)

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

68c627a

test(vendor): docker build-proof capstones for poetry/pdm/pipenv

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

611de94

style: cargo fmt --all

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

0287e75

Merge remote-tracking branch 'origin/main' into feat/vendor-command

Mikola Lysenko (mikolalysenko)

committed

ef88678

chore(vendor): drop spikes/ scratch from the branch

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

4a9309d

fix(clippy): clear the CI clippy gate

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

781eb8e

style(clippy): clear remaining --all-targets lints surfaced by rust 1.93

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

9de9d77

test(vendor): make unsupported-ecosystem test feature-aware

Mikola Lysenko (mikolalysenko)

and

Claude (claude)

committed

6d7de2a

Navigation Menu

Repository navigation

feat: socket-patch vendor — committable vendoring of patched dependencies - #109

feat: socket-patch vendor — committable vendoring of patched dependencies#109
Mikola Lysenko (mikolalysenko) merged 32 commits into
mainfrom
feat/vendor-command

Commits on Jun 9, 2026

refactor(cargo): patch crates in place; drop the [patch]-redirect backend + build guard

ci: drop removed cargo-coexist suite + go-guard-template lint step

refactor: remove the now-orphaned socket-patch-guard crate + stale references

refactor(go): parameterize replace-redirect engine by owner/base for the vendor backend

docs(vendor): record phase-0 spike findings + uv lock-shape fixtures

feat(vendor): core module — path convention, state ledger, marker, backend contract

Commits on Jun 10, 2026

refactor(cli): extract patch-source staging into commands/fetch_stage.rs

feat(vendor): vendored-patch verification + Command::Vendor envelope tag

feat(apply): yield to vendor ownership (golang skip, --check exclusion, vendored event reason)

feat(cli): vendor command pipeline + vendor telemetry events (not yet wired)

docs: vendor command contract section + CHANGELOG entries

docs: single Added section in CHANGELOG Unreleased

docs: place VEX golang fix under Unreleased, not 3.2.0

feat(vendor): all six ecosystem backends + CLI wiring + VEX integration

fix(vendor): prune empty ecosystem dirs on full revert

test(vendor): parser-contract + in-process suites; fix SOCKET_FORCE boolish parsing

fix(vendor): correct event classification + capstone e2e proofs

fix(vendor): security + scoping fixes from adversarial review

feat(vendor): v2 phase 1 — boolish env parsing, composer reference uuid, checksum pins

feat(vendor): v2 phases 2-3+5 — gem CHECKSUMS, flavor probes, refactors, composer/gem capstones

chore(vendor): declare v2 backend module stubs

feat(vendor): v2 backend implementations (yarn classic/berry, pnpm, bun, poetry/pdm/pipenv)

feat(vendor): wire v2 backends into the npm/pypi routers

docs(vendor): v2 contract — flavor matrix, checksum table, reason codes, CHANGELOG

test(vendor): npm-family build-proof capstones (yarn classic/berry, pnpm, bun)

test(vendor): docker build-proof capstones for poetry/pdm/pipenv

style: cargo fmt --all

Merge remote-tracking branch 'origin/main' into feat/vendor-command

chore(vendor): drop spikes/ scratch from the branch

fix(clippy): clear the CI clippy gate

style(clippy): clear remaining --all-targets lints surfaced by rust 1.93

test(vendor): make unsupported-ecosystem test feature-aware