dependabot-bun 0.365.0 → 0.366.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/bun/file_updater/package_json_updater.rb +8 -24
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: e9924d7d1cda3bed963b35ae4259b4287815e402aaeeda628f448e39346f5573
|
|
4
|
+
data.tar.gz: fda9c37bbe7e38fc29f6526e32da6dc479d97287d709f65f3f82953d7712947c
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 19fca763c06a4f26d3df6e268585bd35b9ee36757948967a6be2f6814541b289581a0d91b242d4f80910eeff01e2ead07634a37464722a87d569d01e06695ca8
|
|
7
|
+
data.tar.gz: 94ad2b16d5397402fd2fa9eb82719c97e7b065a1fd43658d4d3d09d1a9a0df934a76c04080be548f15832454be09df68e3e8a9fe08b68b93fd6504e5ec982ae1
|
|
@@ -41,8 +41,6 @@ module Dependabot
|
|
|
41
41
|
sig { returns(T::Array[Dependabot::Dependency]) }
|
|
42
42
|
attr_reader :dependencies
|
|
43
43
|
|
|
44
|
-
# rubocop:disable Metrics/PerceivedComplexity
|
|
45
|
-
|
|
46
44
|
sig { returns(T.nilable(String)) }
|
|
47
45
|
def updated_package_json_content
|
|
48
46
|
# checks if we are updating single dependency in package.json
|
|
@@ -59,27 +57,14 @@ module Dependabot
|
|
|
59
57
|
new_req: new_req
|
|
60
58
|
)
|
|
61
59
|
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
# the update continue.
|
|
71
|
-
|
|
72
|
-
Dependabot.logger.info(
|
|
73
|
-
"experiment: avoid_duplicate_updates_package_json.
|
|
74
|
-
Updating package.json for #{dep.name} "
|
|
75
|
-
)
|
|
76
|
-
|
|
77
|
-
raise "Expected content to change!"
|
|
78
|
-
end
|
|
79
|
-
|
|
80
|
-
if !Dependabot::Experiments.enabled?(:avoid_duplicate_updates_package_json) && (content == new_content)
|
|
81
|
-
raise "Expected content to change!"
|
|
82
|
-
end
|
|
60
|
+
# package.json does not always contain the same dependencies compared to the
|
|
61
|
+
# "dependencies" list. For example, the dependencies object can contain same name dependency
|
|
62
|
+
# "dep" => "1.0.0" and "dev" => "1.0.1" while package.json can only contain "dep" => "1.0.0".
|
|
63
|
+
# The other dependency is not present in package.json so we don't have to update it — this is
|
|
64
|
+
# most likely a transitive dependency which only needs an update in the lockfile. For a batch
|
|
65
|
+
# with a single unique dependency name we tolerate this no-op update, but when multiple unique
|
|
66
|
+
# dependencies are being updated and none change the content we treat that as unexpected and raise.
|
|
67
|
+
raise "Expected content to change!" if content == new_content && unique_deps_count > 1
|
|
83
68
|
|
|
84
69
|
content = new_content
|
|
85
70
|
end
|
|
@@ -98,7 +83,6 @@ module Dependabot
|
|
|
98
83
|
content
|
|
99
84
|
end
|
|
100
85
|
end
|
|
101
|
-
# rubocop:enable Metrics/PerceivedComplexity
|
|
102
86
|
sig do
|
|
103
87
|
params(
|
|
104
88
|
dependency: Dependabot::Dependency,
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-bun
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.366.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.366.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.366.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: debug
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -347,7 +347,7 @@ licenses:
|
|
|
347
347
|
- MIT
|
|
348
348
|
metadata:
|
|
349
349
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
350
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
350
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.366.0
|
|
351
351
|
rdoc_options: []
|
|
352
352
|
require_paths:
|
|
353
353
|
- lib
|