bibliothecary 12.1.5 → 12.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8b70e5a827feb678f61dc5d2f3760be0b627ad948556ccb22dc74521df046c9
-  data.tar.gz: de4f2d64c252570088d1c223002d6942247c45a18f3382e88448338e097273e9
+  metadata.gz: 28a553f3ccc80b401878d7d1f05d9b2ca1504e52fc0705b101759665391f8316
+  data.tar.gz: db49351f1c52f112c5936a787135fe185bc4b4b9aab6ea02376fbe85735db512
 SHA512:
-  metadata.gz: cda3bfcd8d209364d5d8c6fe5b062f308437863f6e09ec05e05f473c486a425c6e0d68eaed3a8a8716119db7cb1ce65ee0921c781f9bacb1e927dd5a17bc7d58
-  data.tar.gz: efacaa12ee9cb7e88b876b4ea8fabf48bfa72ff2da49c4ee637d98bf4ad0f80219d3ad106c5cdc49560557dca078304729592fc89b79a9082ae501446a1d4236
+  metadata.gz: a63120979de0f7f661383b6c7efafda1acc0787821eae36164bb7469fc35bf5f9028cab9cf1c53e1289d30103c57cbc064bdc9cffc91feb48745744359a0ac73
+  data.tar.gz: 802a1ee3a8031b6b47f29f369cf8cade92e835784cbb35e7abaf25a6035160bc35043fa8fb23b47c7720b6e54139eb0f607d176f772a40869ddc030687e95bd3

data/CHANGELOG.md

@@ -13,6 +13,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 
+## [12.1.6] - 2025-04-29
+
+### Added
+
+### Changed
+
+- Use JSON.parser.parse() in bun.lock parser to work around overriden JSON.parse() method.
+- Don't raise an error in pnpm-lock.yaml v9 parser if devDependencies isn't found.
+
+### Removed
+
 ## [12.1.5] - 2025-03-17
 
 ### Added

data/lib/bibliothecary/parsers/npm.rb

@@ -324,8 +324,8 @@ module Bibliothecary
       end
 
       def self.parse_v9_pnpm_lock(parsed_contents, _source = nil)
-        dependencies = parsed_contents.fetch("importers", {}).fetch(".", {}).fetch("dependencies")
-        dev_dependencies = parsed_contents.fetch("importers", {}).fetch(".", {}).fetch("devDependencies")
+        dependencies = parsed_contents.fetch("importers", {}).fetch(".", {}).fetch("dependencies", {})
+        dev_dependencies = parsed_contents.fetch("importers", {}).fetch(".", {}).fetch("devDependencies", {})
         dependency_mapping = dependencies.merge(dev_dependencies)
 
         # "dependencies" is in "packages" for < v9 and in "snapshots" for >= v9
@@ -395,7 +395,11 @@ module Bibliothecary
       end
 
       def self.parse_bun_lock(file_contents, options: {})
-        manifest = JSON.parse(file_contents, allow_trailing_comma: true)
+        # The stdlib JSON gem 2.8+ supports trailing commas.
+        # The Oj gem does not support them as of writing, and will override
+        # JSON.parse() if Oj.mimic_json/optimize_rails has been called. Luckily
+        # JSON.parser is not overridden by Oj, so use it to call parse directly.
+        manifest = JSON.parser.parse(file_contents, allow_trailing_comma: true)
         source = options.fetch(:filename, nil)
 
         dev_deps = manifest.dig("workspaces", "", "devDependencies")&.keys&.to_set

data/lib/bibliothecary/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Bibliothecary
-  VERSION = "12.1.5"
+  VERSION = "12.1.6"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: bibliothecary
 version: !ruby/object:Gem::Version
-  version: 12.1.5
+  version: 12.1.6
 platform: ruby
 authors:
 - Andrew Nesbitt
 bindir: bin
 cert_chain: []
-date: 2025-03-18 00:00:00.000000000 Z
+date: 2025-04-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: commander