chore: update @socketsecurity/lib to 3.2.8 and remove unused SHA256 generation (#880)

* refactor(scripts): remove unused SHA256 checksum generation from compress-cli

The .bz.sha256 checksum file was generated but never used by the runtime
or build process. Removes SHA256 generation to align with cli-with-sentry
implementation and avoid creating unnecessary dist artifacts.

* chore(deps): update @socketsecurity/lib to 3.2.8

Updates socket-lib dependency from 3.2.6 to 3.2.8 in the workspace catalog.

Author: jdalton

packages/cli/scripts/compress-cli.mjs

@@ -7,7 +7,6 @@
  * The compressed file is decompressed at runtime by dist/index.js.
  */
 
-import crypto from 'node:crypto'
 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
@@ -50,12 +49,4 @@ logger.success(
   `Compressed: ${(originalSize / 1024 / 1024).toFixed(2)} MB → ${(compressedSize / 1024 / 1024).toFixed(2)} MB (${compressionRatio}% reduction)`,
 )
 
-// Generate SHA256 checksum for integrity validation.
-const sha256 = crypto.createHash('sha256').update(compressed).digest('hex')
-const checksumPath = path.join(distPath, 'cli.js.bz.sha256')
-writeFileSync(checksumPath, `${sha256}  cli.js.bz\n`)
-
-logger.success(`SHA256: ${sha256}`)
-logger.log(`Checksum written to: ${path.relative(rootPath, checksumPath)}`)
-
 logger.log('')

pnpm-lock.yaml

@@ -39,7 +39,7 @@ catalog:
   '@socketregistry/packageurl-js': 1.3.5
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
-  '@socketsecurity/lib': 3.2.6
+  '@socketsecurity/lib': 3.2.8
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/sdk': 3.1.3
   '@types/cmd-shim': 5.0.2