Sync upstream into pinned (627f9ca4b363) - #4

Merged

gcharang merged 72 commits into

Jun 20, 2026

Commits on Jun 10, 2026

fix: gate the Socket supply-chain check on security axes, not the overall score (#780)

rayhanadev
and
cursoragent
authored
f5f539a
fix(only-export-components): skip framework route/special files (#776) (#782)

authored
c4f0e60
fix(nextjs-missing-metadata): stop flagging pages that inherit layout metadata (#784)

rayhanadev
and
cursoragent
authored
038aaf7

Commits on Jun 11, 2026

chore: bump deslop-js to ^0.0.23 (#785)

devin-ai-integration[bot]
and
aidenybai
authored
f63ed9d
feat: add --output-dir flag for the full diagnostics dump (#783)

authored
a48fb06

Commits on Jun 12, 2026

Commits on Jun 13, 2026

chore: bump deslop-js to ^0.0.24 (#802)

devin-ai-integration[bot]
and
aidenybai
authored
0a9d583
feat: rn-no-metro-babel-runtime-version — flag RN babel preset missing enableBabelRuntime (#801)

authored
0f91fa3
fix: resolve `react-doctor/api` imports in doctor.config.ts without local node_modules (#800)

devin-ai-integration[bot]
and
aidenybai
authored
3de9106
chore: version packages (#764)
github-actions[bot]
authored
094d470
feat: name Socket alerts and give axis-aware help in supply-chain diagnostics (#804)

NisargIO
and
aidenybai
authored
022790b
chore: version packages (#805)
github-actions[bot]
authored
0b30023
Add project-level security scan rules (#744)

aidenybai
and
rayhanadev
authored
eacdcf2
chore: version packages (#806)
github-actions[bot]
authored
f229c75

Commits on Jun 14, 2026

Commits on Jun 15, 2026

Commits on Jun 16, 2026

Commits on Jun 17, 2026

Commits on Jun 18, 2026

Commits on Jun 19, 2026

feat(cli): add --debug to surface the run's Sentry trace id (#881)

rayhanadev
and
claude
authored
50999f4
feat(action): skip the PR comment + mark the status "skipped" when no React files change (#863)

rayhanadev
and
claude
authored
740211c
chore(changeset): downgrade clickable-locations to a patch bump (#883)

rayhanadev
and
claude
authored
4e06b2a
fix: bare-name disable handling + server-fetch mutating-method false positive (#859)

rayhanadev
and
claude
authored
44db3e0
feat(cli): group findings a single fix resolves into one root-cause task (#882)

rayhanadev
and
claude
authored
a9d2713
feat(cli): warn before mass-fixing a migration-scale bucket (#884)

rayhanadev
and
claude
authored
869f220
chore(changeset): downgrade fix-group root-cause grouping to a patch bump

rayhanadev
and
claude
committed
66133f8
chore: version packages (#827)
github-actions[bot]
authored
96b5bb4
ci: action version-bump guard + faster CI (turbo remote cache, concurrency) (#885)

rayhanadev
and
claude
authored
242bf69
fix(ci): address post-merge Bugbot findings (cancel scope, self-test CLI, root-commit diff) (#888)

rayhanadev
and
claude
authored
439e8e1
fix: skip pnpm hardening check for monorepo sub-packages (#879)

authored
9f733f7
fix(core): support TypeScript 5 alongside 6 (#890)

rayhanadev
and
claude
authored
350a6ed
chore: vendor deslop-js + deslop-cli into the monorepo (#880)
aidenybai
authored
8bbcca8
perf(core): propagate V8 compile cache to oxlint batch subprocesses (#893)

rayhanadev
and
claude
authored
4560b6d
refactor(cli): unify onboarding/growth state into a lifecycle framework (#907)

rayhanadev
and
claude
authored
7e10716
fix: make GitHub Actions setup flow idempotent and stop bundling local changes (#906)

rayhanadev
and
claude
authored
8b91ac8

Commits on Jun 20, 2026