fix(fix): make --ecosystems case-insensitive

[Martin Torp (mtorp)]

Summary

• Lowercase --ecosystems input before validation so NPM, Npm, and npm are all accepted, matching the behavior already in place for --package-managers (feat(fix): add --package-managers flag #1292).
• Update --ecosystems help text to mention case-insensitivity.
• Upgrade @coana-tech/cli from 15.2.2 to 15.2.4.
• Bump patch version to 1.1.93 and add a CHANGELOG entry.

Why

--package-managers was added in #1292 as case-insensitive (input gets uppercased before validation against an ALL-CAPS list). --ecosystems, however, validates input verbatim against an all-lowercase list, so passing NPM would fail with "Invalid ecosystem". Asymmetric UX between two related filters; this commit makes --ecosystems mirror --package-managers.

Coana Changelog

For details on what's included in the 15.2.4 Coana release, see the Coana Changelogs.

Test plan

• New integration test: should accept --ecosystems case-insensitively (passes NPM,PyPI)
• Existing --ecosystems integration tests still pass
• Help-text snapshot updated
• eslint + tsgo pass on the changed files
• CI green

---

Note

Low Risk
Low risk: small input-normalization change for socket fix flag parsing plus a dependency bump; behavior change is limited to validation of --ecosystems values.

Overview
socket fix --ecosystems now normalizes provided ecosystem values to lowercase before validation, making the flag case-insensitive (aligned with --package-managers), and updates the help text accordingly.

Adds an integration test covering mixed-case --ecosystems input, bumps @coana-tech/cli to 15.2.4, and increments the CLI version to 1.1.93 with a matching CHANGELOG.md entry.

^{Reviewed by Cursor Bugbot for commit 444d139. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​coana-tech/​cli@​15.2.2 ⏵ 15.2.4	+5		+21	+3

View full report

[socket-security-staging]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​coana-tech/​cli@​15.2.2 ⏵ 15.2.4	+50		+1	+1

View full report