chore(release): 3.3.0 - #116
Merged
Merged
Conversation
lelia
had a problem deploying
to
socket-firewall
September 15, 2026 18:32 — with 
GitHub Actions
Failure
Release prep for 3.3.0, bundling #114 and #115. #115 adds the `--scan-all` / `--no-scan-all` CLI flags, so this is a minor bump rather than a patch. Bumps pyproject.toml, socket_basics/version.py, socket_basics/__init__.py, action.yml and uv.lock to 3.3.0, synchronizes 83 current-release references across README.md and docs/**, and stamps [Unreleased] as [3.3.0] - 2026-09-15. Also pins the Socket Python CLI to 2.9.0 in Dockerfile.heavy and app_tests/Dockerfile, ahead of that release publishing to PyPI.
lelia
force-pushed
the
lelia/release-prep-prs-114-115
branch
from
September 15, 2026 18:47
4854c6b to
a11d267
Compare
lelia
had a problem deploying
to
socket-firewall
September 15, 2026 18:47 — with
GitHub Actions
Failure
lelia
had a problem deploying
to
socket-firewall
September 15, 2026 18:47 — with
GitHub Actions
Error
lelia
marked this pull request as ready for review
September 15, 2026 18:47
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Release prep for 3.3.0, bundling #114 and #115. Version files,
uv.lockandevery current-release reference in
README.mdanddocs/**are bumped, and the[Unreleased]changelog section is stamped as[3.3.0] - 2026-09-15.Minor, not patch. #114 is a bug fix on its own, but #115 adds the
--scan-all/--no-scan-allCLI flags — new surface area, so the batch is aminor bump.
Changes
pyproject.toml,socket_basics/version.py,socket_basics/__init__.py,action.yml,uv.lock→ 3.3.0README.mdanddocs/**(version strings only — verified)
CHANGELOG.md:[Unreleased]→[3.3.0] - 2026-09-15, carrying the entriesfrom fix(notifications): read gh token param in PR notifier #114 and feat(config): add
--scan-alland--no-scan-allCLI flags #115 with PR references added, plus a short lead-in noting thatthe fix(notifications): read gh token param in PR notifier #114 fix changes behavior for dashboard-configured GitHub tokens
Dockerfile.heavy,app_tests/Dockerfile:SOCKET_PYTHON_CLI_VERSION2.8.0 → 2.9.0
Socket Python CLI 2.9.0
Published and verified on PyPI — both
socketsecurity-2.9.0-py3-none-any.whland
socketsecurity-2.9.0.tar.gzare present, and a clean resolve on Python3.12 succeeds (pulls
socketdev==3.6.0). Thesmoke-testworkflow runs on thisPR because it path-filters on
Dockerfile.heavy, so the heavy leg builds thenew pin for real here.
Merge order
#114 and #115 are both merged. This branch has been rebased onto
main, theCHANGELOG.mdconflict is resolved (entries under[3.3.0],[Unreleased]left empty), and the diff is now narrow — release metadata, docs version
strings and the two Dockerfile pins.
Testing
scripts/sync_release_version.py --check→ in sync at 3.3.0scripts/check_release_docs.py --check→ in sync, release 3.3.0, tool pins{trufflehog: 3.96.0, opengrep: 1.26.0, trivy: 0.73.0}uv sync --locked --extra dev→ lockfile consistent with the bumped projectuv run --no-sync pytest -q tests/→ 399 passed (post-rebase, includingthe tests fix(notifications): read gh token param in PR notifier #114 and feat(config): add
--scan-alland--no-scan-allCLI flags #115 brought in)socketsecurity==2.9.0dependency resolution verified in a clean 3.12 venvRelease checklist
python3 scripts/prep_release.py --version 3.3.0completed successfullyuv.lockare synchronizedCHANGELOG.mdcontains reviewed, human-authored notes for this versionsocketsecurity==2.9.0published to PyPI--scan-alland--no-scan-allCLI flags #115 merged🤖 Generated with Claude Code
Note
Low Risk
This PR only updates versions, changelog, docs, and a bundled CLI pin; behavioral impact comes after tag/publish from already-merged #114/#114 (dashboard GitHub tokens may start posting PR comments).
Overview
Release 3.3.0 — bumps package metadata (
pyproject.toml,socket_basicsversion modules,uv.lock), pointsaction.ymlatghcr.io/socketdev/socket-basics:3.3.0, and syncs current-release examples acrossREADME.mdanddocs/**from 3.2.0 to 3.3.0.CHANGELOG.mdpromotes the existing[Unreleased]notes into[3.3.0] - 2026-09-15, including PR refs for #115 (--scan-all/--no-scan-allCLI parity and clearer unresolvable-scope errors) and #114 (GitHub PR notifier readsgithub_tokenfrom dashboard config).Dockerfile.heavyandapp_tests/Dockerfilepin Socket Python CLI 2.8.0 → 2.9.0; no application source changes appear in this diff.Reviewed by Cursor Bugbot for commit a11d267. Configure here.