dependabot-bun 0.296.0 → 0.296.3

data/helpers/package.json

@@ -0,0 +1,29 @@
+{
+  "name": "@dependabot/helper",
+  "private": true,
+  "bin": {
+    "helper": "run.js"
+  },
+  "scripts": {
+    "lint": "eslint .",
+    "test": "jest",
+    "postinstall": "patch-package"
+  },
+  "dependencies": {
+    "@dependabot/yarn-lib": "^1.22.22",
+    "@npmcli/arborist": "^8.0.0",
+    "detect-indent": "^6.1.0",
+    "nock": "^13.5.6",
+    "npm": "6.14.18",
+    "@pnpm/lockfile-file": "^9.1.2",
+    "@pnpm/dependency-path": "^5.1.1",
+    "semver": "^7.6.3",
+    "patch-package": "^8.0.0"
+  },
+  "devDependencies": {
+    "eslint": "^9.16.0",
+    "eslint-config-prettier": "^9.1.0",
+    "jest": "^29.7.0",
+    "prettier": "^3.4.2"
+  }
+}

data/helpers/patches/npm++pacote+9.5.12.patch

@@ -0,0 +1,14 @@
+diff --git a/node_modules/npm/node_modules/pacote/lib/util/git.js b/node_modules/npm/node_modules/pacote/lib/util/git.js
+index 7642eb2..7bb3324 100644
+--- a/node_modules/npm/node_modules/pacote/lib/util/git.js
++++ b/node_modules/npm/node_modules/pacote/lib/util/git.js
+@@ -25,7 +25,8 @@ const GOOD_ENV_VARS = new Set([
+   'GIT_SSH',
+   'GIT_SSH_COMMAND',
+   'GIT_SSL_CAINFO',
+-  'GIT_SSL_NO_VERIFY'
++  'GIT_SSL_NO_VERIFY',
++  'GIT_CONFIG_GLOBAL'
+ ])
+ 
+ const GIT_TRANSIENT_ERRORS = [

data/helpers/run.js

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+
+const process = require('process');
+
+function output(obj) {
+  process.stdout.write(JSON.stringify(obj));
+}
+
+const input = [];
+process.stdin.on("data", (data) => input.push(data));
+process.stdin.on("end", () => {
+  const request = JSON.parse(input.join(""));
+  const [manager, functionName] = request.function.split(":");
+  const helpers = require(`./lib/${manager}`);
+  const func = helpers[functionName];
+  if (!func) {
+    output({ error: `Invalid function ${request.function}` });
+    process.exit(1);
+  }
+
+  func
+    .apply(null, request.args)
+    .then((result) => {
+      output({ result: result });
+    })
+    .catch((error) => {
+      output({ error: error.message });
+      process.exit(1);
+    });
+});

data/helpers/test/npm6/conflicting-dependency-parser.test.js

@@ -0,0 +1,66 @@
+const path = require("path");
+const os = require("os");
+const fs = require("fs");
+const {
+  findConflictingDependencies,
+} = require("../../lib/npm/conflicting-dependency-parser");
+const helpers = require("./helpers");
+
+describe("findConflictingDependencies", () => {
+  let tempDir;
+  beforeEach(() => {
+    tempDir = fs.mkdtempSync(os.tmpdir() + path.sep);
+  });
+  afterEach(() => fs.rm(tempDir, { recursive: true }, () => {}));
+
+  it("finds conflicting dependencies", async () => {
+    helpers.copyDependencies("conflicting-dependency-parser/simple", tempDir);
+
+    const result = await findConflictingDependencies(tempDir, "abind", "2.0.0");
+    expect(result).toEqual([
+      {
+        explanation: "objnest@4.1.2 requires abind@^1.0.0",
+        name: "objnest",
+        version: "4.1.2",
+        requirement: "^1.0.0",
+      },
+    ]);
+  });
+
+  it("finds the top-level conflicting dependency", async () => {
+    helpers.copyDependencies("conflicting-dependency-parser/nested", tempDir);
+
+    const result = await findConflictingDependencies(tempDir, "abind", "2.0.0");
+    expect(result).toEqual([
+      {
+        explanation: "askconfig@4.0.4 requires abind@^1.0.4 via objnest@5.0.10",
+        name: "objnest",
+        version: "5.0.10",
+        requirement: "^1.0.4",
+      },
+    ]);
+  });
+
+  it("explains a deeply nested dependency", async () => {
+    helpers.copyDependencies(
+      "conflicting-dependency-parser/deeply-nested",
+      tempDir
+    );
+
+    const result = await findConflictingDependencies(tempDir, "abind", "2.0.0");
+    expect(result).toEqual([
+      {
+        explanation: "apass@1.1.0 requires abind@^1.0.0 via cipherjson@2.1.0",
+        name: "cipherjson",
+        version: "2.1.0",
+        requirement: "^1.0.0",
+      },
+      {
+        explanation: `apass@1.1.0 requires abind@^1.0.0 via a transitive dependency on objnest@3.0.9`,
+        name: "objnest",
+        version: "3.0.9",
+        requirement: "^1.0.0",
+      },
+    ]);
+  });
+});