Skip to content

chore(release): 1.8.2 - #1618

Merged
Martin Torp (mtorp) merged 1 commit into
v1.xfrom
npm-publish-v1.8.2
Oct 13, 2026
Merged

Martin Torp (mtorp) merged 1 commit into
v1.xfrom
npm-publish-v1.8.2

Conversation

@socket-release-bot

@socket-release-bot socket-release-bot Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

Bumps package.json to 1.8.2 and moves the ## [Unreleased] notes under the 1.8.2 heading.

To release:

  1. Review the CHANGELOG section and squash-merge this PR.
  2. Dispatch Publish to npm registry on v1.x with dry-run: false. It tags the merge commit, cuts the GitHub release, and stages all three packages.
  3. Approve each staged package with pnpm stage approve.

If v1.x moves before this merges, re-dispatch with mode: release-pr to rebuild the bump on the new tip.


Note

Low Risk
Version and changelog-only change with no runtime code modifications in this PR.

Overview
Release 1.8.2 — bumps package.json from 1.8.1 to 1.8.2 and replaces the ## [Unreleased] section in CHANGELOG.md with a dated 1.8.2 entry (2026-10-13).

The changelog text documents the user-facing fix shipped in this release: reachability scans in pnpm/yarn no longer surface a Socket API 403 when using a repository-scoped token, because the pre-Coana safety check now uses Socket’s public token and limits the lookup to the Coana package.

Reviewed by Cursor Bugbot for commit 42a98e0. Configure here.

@mtorp
Martin Torp (mtorp) merged commit 0864a57 into v1.x Oct 13, 2026
14 checks passed
@mtorp
Martin Torp (mtorp) deleted the npm-publish-v1.8.2 branch October 13, 2026 13:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant