dependabot-npm_and_yarn 0.102.0 → 0.102.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package.json +1 -1
  3. data/helpers/yarn.lock +4 -4
  4. data/lib/dependabot/npm_and_yarn/update_checker.rb +1 -0
  5. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e065249385d5d40fa7a235a1f3eae13f38cc1e3f4da10599f195b4701cdc5421
4
- data.tar.gz: 8e02e117d6956a77d0ee4af6f7468ea40638d3a4889cd82d84e5b2151b57b003
3
+ metadata.gz: 8333cae6b07821e307a7c84324a9c119e4fed936de9a48ac3720ee5522c1b8c2
4
+ data.tar.gz: bb727480945231f4f0a9046f06977e73791f35f4f85f3e87ab4d942a8e3335bf
5
5
  SHA512:
6
- metadata.gz: 7d4c25c44cc1b8e03508f635a9c74cc91930191214f42782786110b2fabc832a1c8199381eddb5832898783c770e31c31c6b210498de24a079f0c6f4b95708ee
7
- data.tar.gz: 6e9205e22f72554828eb6c86d9ac9020c0189caed145f19abf7be4f434c6052d8512b4acab5daa247f9a2f56b06f81c4ccd8324e0688bc24d5b1ec79731cbaff
6
+ metadata.gz: c3b7aab6b05cca32e83d55709bd2a7a0f4edde2194e72a18ef2abf283dbad44a55e9fdb1e300835734f6097b295b370ca7bf9795e5a7f80e5fa92bc478845f31
7
+ data.tar.gz: f3f3744b96fc88d7be20b0d03acaa6988b5ec1fc0fd2bf0029d35abd462658f08db42307bf489e6429343b6772a3b12380523b32ae0ca4068abb653b9c6f9846
data/helpers/package.json CHANGED
@@ -18,6 +18,6 @@
18
18
  "eslint-plugin-prettier": "^3.0.1",
19
19
  "jest": "^24.7.1",
20
20
  "nock": "^10.0.6",
21
- "prettier": "^1.16.4"
21
+ "prettier": "^1.17.0"
22
22
  }
23
23
  }
data/helpers/yarn.lock CHANGED
@@ -4823,10 +4823,10 @@ prettier-linter-helpers@^1.0.0:
4823
4823
  dependencies:
4824
4824
  fast-diff "^1.1.2"
4825
4825
 
4826
- prettier@^1.16.4:
4827
- version "1.16.4"
4828
- resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.16.4.tgz#73e37e73e018ad2db9c76742e2647e21790c9717"
4829
- integrity sha512-ZzWuos7TI5CKUeQAtFd6Zhm2s6EpAD/ZLApIhsF9pRvRtM1RFo61dM/4MSRUA0SuLugA/zgrZD8m0BaY46Og7g==
4826
+ prettier@^1.17.0:
4827
+ version "1.17.0"
4828
+ resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.17.0.tgz#53b303676eed22cc14a9f0cec09b477b3026c008"
4829
+ integrity sha512-sXe5lSt2WQlCbydGETgfm1YBShgOX4HxQkFPvbxkcwgDvGDeqVau8h+12+lmSVlP3rHPz0oavfddSZg/q+Szjw==
4830
4830
 
4831
4831
  pretty-format@^24.7.0:
4832
4832
  version "24.7.0"
data/lib/dependabot/npm_and_yarn/update_checker.rb CHANGED
@@ -38,6 +38,7 @@ module Dependabot
38
38
 
39
39
  def lowest_resolvable_security_fix_version
40
40
  raise "Dependency not vulnerable!" unless vulnerable?
41
+ return latest_resolvable_version unless dependency.top_level?
41
42
 
42
43
  # TODO: Might want to check resolvability here?
43
44
  latest_version_finder.lowest_security_fix_version
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.102.0
4
+ version: 0.102.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.102.0
19
+ version: 0.102.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.102.0
26
+ version: 0.102.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement