An open index of dependabot pull requests across open source projects.

chore(deps): bump @socketsecurity/lib from 5.5.3 to 5.6.0

Open
Number: #1083
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Unknown
Comments: 3
Created: February 16, 2026 at 05:53 AM UTC
(4 months ago)
Updated: February 17, 2026 at 06:00 PM UTC
(3 months ago)
Labels:
dependencies javascript
Description:

Bumps @socketsecurity/lib from 5.5.3 to 5.6.0.

Changelog

Sourced from @​socketsecurity/lib's changelog.

5.6.0 - 2026-02-08

Added

  • http-request: Added automatic default headers for JSON and text requests
    • httpJson() now automatically sets Accept: application/json header
    • httpJson() automatically sets Content-Type: application/json when body is present
    • httpText() now automatically sets Accept: text/plain header
    • httpText() automatically sets Content-Type: text/plain when body is present
    • User-provided headers always override defaults
    • Simplifies API usage - no need to manually set common headers

Changed

  • http-request: Renamed HTTP helper functions to support all HTTP methods (BREAKING CHANGE)
    • httpGetJson()httpJson() - Now supports GET, POST, PUT, DELETE, PATCH, etc.
    • httpGetText()httpText() - Now supports all HTTP methods via method option
    • Functions now accept method parameter in options (defaults to 'GET')
    • More flexible API that matches modern fetch-style conventions
    • Migration: Replace httpGetJson() calls with httpJson() and httpGetText() with httpText()

Fixed

  • http-request: Fixed Content-Type header incorrectly sent with empty string body
    • Empty string body ("") no longer triggers Content-Type header
    • Changed condition from if (body !== undefined) to if (body) for semantic correctness
    • Empty string represents "no content" and should not declare a Content-Type
    • Affects httpJson() and httpText() functions
    • Fixes potential API compatibility issues with servers expecting no Content-Type for empty bodies
    • Added comprehensive test coverage for empty string edge case
Commits
  • 6580b33 chore: bump version to 5.6.0
  • 61bd1e1 chore(deps): update dependencies
  • 540d187 fix(http-request): prevent Content-Type header for empty string body
  • dc46e82 refactor(http-request): sort functions alphabetically
  • 89e796d feat(http-request): rename helpers and add default headers
  • c2e623d feat(quality-scan): add documentation accuracy scan
  • bbf489a feat(quality-scan): add quality-scan skill and zizmor security scanner
  • b408ecc fix(deps): always update Socket packages in update script (#85)
  • 88a21f3 fix(scripts): update script messaging and add @socketbin/* scope
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Package Dependencies
Ecosystem:
npm
Version Change:
5.5.3 → 5.6.0
Update Type:
Minor
Technical Details
ID: 13853740
UUID: 3946029508
Node ID: PR_kwDOIREOSc7EAmTK
Host: GitHub
Repository: SocketDev/socket-cli