dependabot-bun 0.387.0 → 0.389.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d3bea34e437e075d20d2e46d6c1435c8a4b7c0424a1d26581b67f997b7f5a9ae
4
- data.tar.gz: 5b1d0a8a7a72c9e608ea4e420c472597ff91824b6509e08656ea4d098c82f260
3
+ metadata.gz: 22834707df55df4ac0a7ac6780eccb4888052824833bbab428b11e10142871df
4
+ data.tar.gz: c557dcb417537da0427682aa54ef50f2a4d096707b2eecf3b0a2e727eae95172
5
5
  SHA512:
6
- metadata.gz: a8bce40fdf18cabd08f3cd1b86ea6a8a1c54bdbadc5f3d69f4b86bb23550c5f1587c5d24d3239a0480225629a30f8b4ee364a72c1bbf6ce7aa24294d952bda3e
7
- data.tar.gz: a409ae74a2305513aaabb1eb89327828529d4c5840bd5423e9785360ac251d137d4fcf2e1a2545bdfad4bec2005a3fef4bcfc03fa1bbf24fc3d35f202c828c46
6
+ metadata.gz: 5d1471eeeeb325f22b47c5fa57d6f02890f84b18525e07ab58b83a0b4e95bca08719696765f3e9d9a9d42c2d578f2db2c6b84c547b055d48961f718fa7735c26
7
+ data.tar.gz: 837703736f6acb5a04b29209746ddfb8481d9d2f8264ba0dd25d2b4fd584b5770bab5b6745828d15dcbd284c60179ae61ee1a8efe9130592a5098372bfff2b69
@@ -0,0 +1,28 @@
1
+ const globals = require("globals");
2
+ const js = require("@eslint/js");
3
+ const eslintConfigPrettier = require("eslint-config-prettier/flat");
4
+
5
+ module.exports = [
6
+ js.configs.recommended,
7
+ {
8
+ languageOptions: {
9
+ globals: {
10
+ ...globals.node,
11
+ ...globals.jest,
12
+ },
13
+ ecmaVersion: "latest",
14
+ },
15
+ },
16
+ {
17
+ rules: {
18
+ "no-unused-vars": [
19
+ "error",
20
+ { argsIgnorePattern: "^_", destructuredArrayIgnorePattern: "^_" },
21
+ ],
22
+ },
23
+ },
24
+ eslintConfigPrettier,
25
+ {
26
+ ignores: ["dist/**", "build/**"],
27
+ },
28
+ ];
@@ -44,7 +44,11 @@ class LightweightInstall extends Install {
44
44
  }
45
45
  }
46
46
 
47
- const LOCKFILE_ENTRY_REGEX = /^(.*)@([^@]*?)$/;
47
+ // Matches a yarn lockfile entry key, correctly handling:
48
+ // - scoped packages: @scope/name@requirement
49
+ // - unscoped packages: name@requirement
50
+ // - git URLs with credentials: name@https://token@host/path (@ preserved in requirement)
51
+ const LOCKFILE_ENTRY_REGEX = /^(@[^@]+|[^@]+)@(.*)$/;
48
52
 
49
53
  module.exports = {
50
54
  isString,
@@ -1,13 +1,12 @@
1
1
  const parse = require("@dependabot/yarn-lib/lib/lockfile/parse").default;
2
2
  const stringify = require("@dependabot/yarn-lib/lib/lockfile/stringify")
3
3
  .default;
4
+ const { LOCKFILE_ENTRY_REGEX } = require("./helpers");
4
5
 
5
6
  // Get an array of a dependency's requested version ranges from a lockfile
6
7
  function getRequestedVersions(depName, lockfileJson) {
7
8
  const requestedVersions = [];
8
- // Matching dependency name and version requirements which could be a full url:
9
- // dep@version, @private-dep@version, private-dep@https:://token@gh.com...#ref
10
- const re = /^(.[^@]*)@(.*?)$/;
9
+ const re = LOCKFILE_ENTRY_REGEX;
11
10
 
12
11
  Object.entries(lockfileJson).forEach(([name, _]) => {
13
12
  if (name.match(re)) {
@@ -21,8 +21,10 @@
21
21
  "helper": "run.js"
22
22
  },
23
23
  "devDependencies": {
24
+ "@eslint/js": "^9.16.0",
24
25
  "eslint": "^9.16.0",
25
26
  "eslint-config-prettier": "^9.1.0",
27
+ "globals": "^13.24.0",
26
28
  "jest": "^29.7.0",
27
29
  "prettier": "^3.4.2"
28
30
  }
@@ -820,6 +822,19 @@
820
822
  }
821
823
  }
822
824
  },
825
+ "node_modules/@eslint/eslintrc/node_modules/globals": {
826
+ "version": "14.0.0",
827
+ "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
828
+ "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
829
+ "dev": true,
830
+ "license": "MIT",
831
+ "engines": {
832
+ "node": ">=18"
833
+ },
834
+ "funding": {
835
+ "url": "https://github.com/sponsors/sindresorhus"
836
+ }
837
+ },
823
838
  "node_modules/@eslint/eslintrc/node_modules/js-yaml": {
824
839
  "version": "4.1.0",
825
840
  "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
@@ -2950,9 +2965,9 @@
2950
2965
  }
2951
2966
  },
2952
2967
  "node_modules/@tootallnate/once": {
2953
- "version": "2.0.0",
2954
- "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz",
2955
- "integrity": "sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==",
2968
+ "version": "2.0.1",
2969
+ "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.1.tgz",
2970
+ "integrity": "sha512-HqmEUIGRJ5fSXchkVgR5F7qn48bDBzv0kWj/Kfu5e6uci4UlEeng4331LnBkWffb++Ei3FOVLxo8JJWMFBDMeQ==",
2956
2971
  "engines": {
2957
2972
  "node": ">= 10"
2958
2973
  }
@@ -5474,12 +5489,16 @@
5474
5489
  }
5475
5490
  },
5476
5491
  "node_modules/globals": {
5477
- "version": "14.0.0",
5478
- "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
5479
- "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
5492
+ "version": "13.24.0",
5493
+ "resolved": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz",
5494
+ "integrity": "sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==",
5480
5495
  "dev": true,
5496
+ "license": "MIT",
5497
+ "dependencies": {
5498
+ "type-fest": "^0.20.2"
5499
+ },
5481
5500
  "engines": {
5482
- "node": ">=18"
5501
+ "node": ">=8"
5483
5502
  },
5484
5503
  "funding": {
5485
5504
  "url": "https://github.com/sponsors/sindresorhus"
@@ -5970,27 +5989,13 @@
5970
5989
  }
5971
5990
  },
5972
5991
  "node_modules/ip-address": {
5973
- "version": "9.0.5",
5974
- "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-9.0.5.tgz",
5975
- "integrity": "sha512-zHtQzGojZXTwZTHQqra+ETKd4Sn3vgi7uBmlPoXVWZqYvuKmtI0l/VZTjqGmJY9x88GGOaZ9+G9ES8hC4T4X8g==",
5976
- "dependencies": {
5977
- "jsbn": "1.1.0",
5978
- "sprintf-js": "^1.1.3"
5979
- },
5992
+ "version": "10.2.0",
5993
+ "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
5994
+ "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==",
5980
5995
  "engines": {
5981
5996
  "node": ">= 12"
5982
5997
  }
5983
5998
  },
5984
- "node_modules/ip-address/node_modules/jsbn": {
5985
- "version": "1.1.0",
5986
- "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-1.1.0.tgz",
5987
- "integrity": "sha512-4bYVV3aAMtDTTu4+xsDYa6sy9GyJ69/amsu9sYF2zqjiEoZA5xJi3BrfX3uY+/IekIu7MwdObdbDWpoZdBv3/A=="
5988
- },
5989
- "node_modules/ip-address/node_modules/sprintf-js": {
5990
- "version": "1.1.3",
5991
- "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.1.3.tgz",
5992
- "integrity": "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA=="
5993
- },
5994
5999
  "node_modules/is-arguments": {
5995
6000
  "version": "1.1.0",
5996
6001
  "resolved": "https://registry.npmjs.org/is-arguments/-/is-arguments-1.1.0.tgz",
@@ -15254,11 +15259,11 @@
15254
15259
  }
15255
15260
  },
15256
15261
  "node_modules/socks": {
15257
- "version": "2.8.3",
15258
- "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.3.tgz",
15259
- "integrity": "sha512-l5x7VUUWbjVFbafGLxPWkYsHIhEvmF85tbIeFZWc8ZPtoMyybuEhL7Jye/ooC4/d48FgOjSJXgsF/AJPYCW8Zw==",
15262
+ "version": "2.8.9",
15263
+ "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.9.tgz",
15264
+ "integrity": "sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==",
15260
15265
  "dependencies": {
15261
- "ip-address": "^9.0.5",
15266
+ "ip-address": "^10.1.1",
15262
15267
  "smart-buffer": "^4.2.0"
15263
15268
  },
15264
15269
  "engines": {
@@ -15887,6 +15892,19 @@
15887
15892
  "node": ">=4"
15888
15893
  }
15889
15894
  },
15895
+ "node_modules/type-fest": {
15896
+ "version": "0.20.2",
15897
+ "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
15898
+ "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==",
15899
+ "dev": true,
15900
+ "license": "(MIT OR CC0-1.0)",
15901
+ "engines": {
15902
+ "node": ">=10"
15903
+ },
15904
+ "funding": {
15905
+ "url": "https://github.com/sponsors/sindresorhus"
15906
+ }
15907
+ },
15890
15908
  "node_modules/unique-filename": {
15891
15909
  "version": "4.0.0",
15892
15910
  "resolved": "https://registry.npmjs.org/unique-filename/-/unique-filename-4.0.0.tgz",
@@ -16260,11 +16278,17 @@
16260
16278
  "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="
16261
16279
  },
16262
16280
  "node_modules/yaml": {
16263
- "version": "2.3.1",
16264
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.3.1.tgz",
16265
- "integrity": "sha512-2eHWfjaoXgTBC2jNM1LRef62VQa0umtvRiDSk6HSzW7RvS5YtkabJrwYLLEKWBc8a5U2PTSCs+dJjUTJdlHsWQ==",
16281
+ "version": "2.9.0",
16282
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
16283
+ "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
16284
+ "bin": {
16285
+ "yaml": "bin.mjs"
16286
+ },
16266
16287
  "engines": {
16267
- "node": ">= 14"
16288
+ "node": ">= 14.6"
16289
+ },
16290
+ "funding": {
16291
+ "url": "https://github.com/sponsors/eemeli"
16268
16292
  }
16269
16293
  },
16270
16294
  "node_modules/yargs": {
@@ -16947,6 +16971,12 @@
16947
16971
  "ms": "^2.1.3"
16948
16972
  }
16949
16973
  },
16974
+ "globals": {
16975
+ "version": "14.0.0",
16976
+ "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
16977
+ "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
16978
+ "dev": true
16979
+ },
16950
16980
  "js-yaml": {
16951
16981
  "version": "4.1.0",
16952
16982
  "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
@@ -18495,9 +18525,9 @@
18495
18525
  }
18496
18526
  },
18497
18527
  "@tootallnate/once": {
18498
- "version": "2.0.0",
18499
- "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.0.tgz",
18500
- "integrity": "sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A=="
18528
+ "version": "2.0.1",
18529
+ "resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-2.0.1.tgz",
18530
+ "integrity": "sha512-HqmEUIGRJ5fSXchkVgR5F7qn48bDBzv0kWj/Kfu5e6uci4UlEeng4331LnBkWffb++Ei3FOVLxo8JJWMFBDMeQ=="
18501
18531
  },
18502
18532
  "@tufjs/canonical-json": {
18503
18533
  "version": "2.0.0",
@@ -20399,10 +20429,13 @@
20399
20429
  }
20400
20430
  },
20401
20431
  "globals": {
20402
- "version": "14.0.0",
20403
- "resolved": "https://registry.npmjs.org/globals/-/globals-14.0.0.tgz",
20404
- "integrity": "sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==",
20405
- "dev": true
20432
+ "version": "13.24.0",
20433
+ "resolved": "https://registry.npmjs.org/globals/-/globals-13.24.0.tgz",
20434
+ "integrity": "sha512-AhO5QUcj8llrbG09iWhPU2B204J1xnPeL8kQmVorSsy+Sjj1sk8gIyh6cUocGmH4L0UuhAJy+hJMRA4mgA4mFQ==",
20435
+ "dev": true,
20436
+ "requires": {
20437
+ "type-fest": "^0.20.2"
20438
+ }
20406
20439
  },
20407
20440
  "graceful-fs": {
20408
20441
  "version": "4.2.10",
@@ -20783,25 +20816,9 @@
20783
20816
  }
20784
20817
  },
20785
20818
  "ip-address": {
20786
- "version": "9.0.5",
20787
- "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-9.0.5.tgz",
20788
- "integrity": "sha512-zHtQzGojZXTwZTHQqra+ETKd4Sn3vgi7uBmlPoXVWZqYvuKmtI0l/VZTjqGmJY9x88GGOaZ9+G9ES8hC4T4X8g==",
20789
- "requires": {
20790
- "jsbn": "1.1.0",
20791
- "sprintf-js": "^1.1.3"
20792
- },
20793
- "dependencies": {
20794
- "jsbn": {
20795
- "version": "1.1.0",
20796
- "resolved": "https://registry.npmjs.org/jsbn/-/jsbn-1.1.0.tgz",
20797
- "integrity": "sha512-4bYVV3aAMtDTTu4+xsDYa6sy9GyJ69/amsu9sYF2zqjiEoZA5xJi3BrfX3uY+/IekIu7MwdObdbDWpoZdBv3/A=="
20798
- },
20799
- "sprintf-js": {
20800
- "version": "1.1.3",
20801
- "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.1.3.tgz",
20802
- "integrity": "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA=="
20803
- }
20804
- }
20819
+ "version": "10.2.0",
20820
+ "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.2.0.tgz",
20821
+ "integrity": "sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA=="
20805
20822
  },
20806
20823
  "is-arguments": {
20807
20824
  "version": "1.1.0",
@@ -27681,11 +27698,11 @@
27681
27698
  "integrity": "sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg=="
27682
27699
  },
27683
27700
  "socks": {
27684
- "version": "2.8.3",
27685
- "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.3.tgz",
27686
- "integrity": "sha512-l5x7VUUWbjVFbafGLxPWkYsHIhEvmF85tbIeFZWc8ZPtoMyybuEhL7Jye/ooC4/d48FgOjSJXgsF/AJPYCW8Zw==",
27701
+ "version": "2.8.9",
27702
+ "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.9.tgz",
27703
+ "integrity": "sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==",
27687
27704
  "requires": {
27688
- "ip-address": "^9.0.5",
27705
+ "ip-address": "^10.1.1",
27689
27706
  "smart-buffer": "^4.2.0"
27690
27707
  }
27691
27708
  },
@@ -28183,6 +28200,12 @@
28183
28200
  "integrity": "sha512-0fr/mIH1dlO+x7TlcMy+bIDqKPsw/70tVyeHW787goQjhmqaZe10uwLujubK9q9Lg6Fiho1KUKDYz0Z7k7g5/g==",
28184
28201
  "dev": true
28185
28202
  },
28203
+ "type-fest": {
28204
+ "version": "0.20.2",
28205
+ "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
28206
+ "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==",
28207
+ "dev": true
28208
+ },
28186
28209
  "unique-filename": {
28187
28210
  "version": "4.0.0",
28188
28211
  "resolved": "https://registry.npmjs.org/unique-filename/-/unique-filename-4.0.0.tgz",
@@ -28451,9 +28474,9 @@
28451
28474
  "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A=="
28452
28475
  },
28453
28476
  "yaml": {
28454
- "version": "2.3.1",
28455
- "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.3.1.tgz",
28456
- "integrity": "sha512-2eHWfjaoXgTBC2jNM1LRef62VQa0umtvRiDSk6HSzW7RvS5YtkabJrwYLLEKWBc8a5U2PTSCs+dJjUTJdlHsWQ=="
28477
+ "version": "2.9.0",
28478
+ "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
28479
+ "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA=="
28457
28480
  },
28458
28481
  "yargs": {
28459
28482
  "version": "17.7.2",
data/helpers/package.json CHANGED
@@ -21,8 +21,10 @@
21
21
  "patch-package": "^8.0.0"
22
22
  },
23
23
  "devDependencies": {
24
+ "@eslint/js": "^9.16.0",
24
25
  "eslint": "^9.16.0",
25
26
  "eslint-config-prettier": "^9.1.0",
27
+ "globals": "^13.24.0",
26
28
  "jest": "^29.7.0",
27
29
  "prettier": "^3.4.2"
28
30
  }