dependabot-bun 0.351.0 → 0.352.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/build +1 -1
  3. data/helpers/lib/npm6/peer-dependency-checker.js +0 -1
  4. data/helpers/lib/npm6/subdependency-updater.js +0 -1
  5. data/helpers/lib/npm6/updater.js +0 -1
  6. data/lib/dependabot/bun/file_parser/bun_lock.rb +10 -0
  7. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e66e8bcf95454c6320dfb51db0b70f4b8fe7110477ba768c55d37cdb398de0d5
4
- data.tar.gz: b34b64dae5939517b9ab905b76dc9644e1b2eaa692e36fed0f0af0bcb6e5eb84
3
+ metadata.gz: 74d169153577b5124747fe98ad527b8aca82cfd8543b024f518404d9a99e2105
4
+ data.tar.gz: ff132577ce8535649d72a4de977cccadd7994b4ba05e1c8aca51e20c7e4ae7a0
5
5
  SHA512:
6
- metadata.gz: ca11413fd458ad38e5e8e0efda37c08492e810e5651f673fa8a645a24c8e686536b2360f91dc378af78ea7da6efc4edb997589b3a0c2934e86d23cee5fb2e413
7
- data.tar.gz: '045597ea5f9c53be48491c8e4c107b5da82f1a7cd73b01fb1f9af8837a123c55386b5afa39733a38574d5d8f4c61bfd211655f3f4ea68bc3a2c4ac638dc668ba'
6
+ metadata.gz: 0a58e4822e5f0175f6260273b336c9e814f671ada174de5d62b574a6d33f1bd0bf8631fc04d89894cc642bbae97d7acc54582dab62aeac1b0bd05aed92ce9f03
7
+ data.tar.gz: 03cfc8cdb72a64b05e5b7db28261f8246a32adc9a0a55d84da9363007d99fd6c2eb1b5468d9a5e50cda5577b60a811e91195e48f3eb7dbec1a901bcae7a4e072
data/helpers/build CHANGED
@@ -23,4 +23,4 @@ cp -r \
23
23
  "$install_dir"
24
24
 
25
25
  cd "$install_dir"
26
- npm ci --no-audit --fetch-timeout=600000 --fetch-retries=5 --no-dry-run --no-ignore-scripts
26
+ npm ci --fetch-timeout=600000 --fetch-retries=5
data/helpers/lib/npm6/peer-dependency-checker.js CHANGED
@@ -45,7 +45,6 @@ async function checkPeerDependencies(
45
45
  {
46
46
  loglevel: "silent",
47
47
  force: true,
48
- audit: false,
49
48
  "prefer-offline": true,
50
49
  "ignore-scripts": true,
51
50
  save: false,
data/helpers/lib/npm6/subdependency-updater.js CHANGED
@@ -39,7 +39,6 @@ async function updateDependencyFile(directory, lockfileName, dependencies) {
39
39
  {
40
40
  loglevel: "silent",
41
41
  force: true,
42
- audit: false,
43
42
  "prefer-offline": true,
44
43
  "ignore-scripts": true,
45
44
  },
data/helpers/lib/npm6/updater.js CHANGED
@@ -39,7 +39,6 @@ async function updateDependencyFiles(directory, lockfileName, dependencies) {
39
39
  {
40
40
  loglevel: "silent",
41
41
  force: true,
42
- audit: false,
43
42
  "prefer-offline": true,
44
43
  "ignore-scripts": true,
45
44
  },
data/lib/dependabot/bun/file_parser/bun_lock.rb CHANGED
@@ -32,6 +32,16 @@ module Dependabot
32
32
  raise_invalid!("expected 'lockfileVersion' to be an integer") unless version.is_a?(Integer)
33
33
  raise_invalid!("expected 'lockfileVersion' to be >= 0") unless version >= 0
34
34
 
35
+ # configVersion was introduced in Bun v1.3.2 to control install behavior.
36
+ # When present, it must be preserved or Bun will use different install defaults.
37
+ # See https://bun.sh/blog/bun-v1.3.2#lockfile-configversion-stabilizes-install-defaults
38
+ if content.key?("configVersion")
39
+ config_version = content["configVersion"]
40
+ unless config_version.is_a?(Integer) && config_version >= 0
41
+ raise_invalid!("expected 'configVersion' to be a non-negative integer")
42
+ end
43
+ end
44
+
35
45
  T.let(content, T.untyped)
36
46
  end
37
47
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-bun
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.351.0
4
+ version: 0.352.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.351.0
18
+ version: 0.352.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.351.0
25
+ version: 0.352.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -347,7 +347,7 @@ licenses:
347
347
  - MIT
348
348
  metadata:
349
349
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
350
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.351.0
350
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.352.0
351
351
  rdoc_options: []
352
352
  require_paths:
353
353
  - lib