From 317b2e3aa5e0c108e904b43625ee5ca1e28faf05 Mon Sep 17 00:00:00 2001
From: jdalton <john.david.dalton@gmail.com>
Date: Mon, 26 Jan 2026 18:36:13 -0500
Subject: [PATCH] fix(deps): always update Socket packages in update script

The update script was only updating @socketsecurity/* packages when
--apply flag was passed. This meant newly released Socket packages
within taze's 7-day maturity period were being skipped during regular
updates.

Now Socket packages are always updated to bypass the maturity period,
ensuring teams get the latest Socket packages immediately.
---
 scripts/update.mjs | 58 ++++++++++++++++++++++------------------------
 1 file changed, 28 insertions(+), 30 deletions(-)

diff --git a/scripts/update.mjs b/scripts/update.mjs
index b8d2c92d..118cdf76 100644
--- a/scripts/update.mjs
+++ b/scripts/update.mjs
@@ -49,40 +49,38 @@ async function main() {
       process.stdout.write('\r\x1b[K')
     }
 
-    // Always update Socket packages when applying (bypass taze maturity period).
-    if (apply) {
-      if (!quiet) {
-        logger.progress('Updating Socket packages...')
-      }
+    // Always update Socket packages (bypass taze maturity period).
+    if (!quiet) {
+      logger.progress('Updating Socket packages...')
+    }
 
-      const socketResult = await spawn(
-        'pnpm',
-        [
-          'update',
-          '@socketsecurity/*',
-          '@socketregistry/*',
-          '@socketbin/*',
-          '--latest',
-          '-r',
-        ],
-        {
-          shell: WIN32,
-          stdio: quiet ? 'pipe' : 'inherit',
-        },
-      )
+    const socketResult = await spawn(
+      'pnpm',
+      [
+        'update',
+        '@socketsecurity/*',
+        '@socketregistry/*',
+        '@socketbin/*',
+        '--latest',
+        '-r',
+      ],
+      {
+        shell: WIN32,
+        stdio: quiet ? 'pipe' : 'inherit',
+      },
+    )
 
-      // Clear progress line.
-      if (!quiet) {
-        process.stdout.write('\r\x1b[K')
-      }
+    // Clear progress line.
+    if (!quiet) {
+      process.stdout.write('\r\x1b[K')
+    }
 
-      if (socketResult.code !== 0) {
-        if (!quiet) {
-          logger.fail('Failed to update Socket packages')
-        }
-        process.exitCode = 1
-        return
+    if (socketResult.code !== 0) {
+      if (!quiet) {
+        logger.fail('Failed to update Socket packages')
       }
+      process.exitCode = 1
+      return
     }
 
     if (result.code !== 0) {