dependabot-npm_and_yarn 0.119.6 → 0.120.4

data/lib/dependabot/npm_and_yarn/metadata_finder.rb

@@ -156,9 +156,8 @@ module Dependabot
 
         response = Excon.get(
           "#{dependency_url}/latest",
-          headers: registry_auth_headers,
           idempotent: true,
-          **SharedHelpers.excon_defaults
+          **SharedHelpers.excon_defaults(headers: registry_auth_headers)
         )
 
         if response.status == 200
@@ -184,9 +183,8 @@ module Dependabot
 
         response = Excon.get(
           dependency_url,
-          headers: registry_auth_headers,
           idempotent: true,
-          **SharedHelpers.excon_defaults
+          **SharedHelpers.excon_defaults(headers: registry_auth_headers)
         )
 
         return @npm_listing = {} if response.status >= 500

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -237,18 +237,16 @@ module Dependabot
             begin
               status = Excon.get(
                 dependency_url + "/#{version}",
-                headers: registry_auth_headers,
                 idempotent: true,
-                **SharedHelpers.excon_defaults
+                **SharedHelpers.excon_defaults(headers: registry_auth_headers)
               ).status
 
               if status == 404 && dependency_registry != "registry.npmjs.org"
                 # Some registries don't handle escaped package names properly
                 status = Excon.get(
                   dependency_url.gsub("%2F", "/") + "/#{version}",
-                  headers: registry_auth_headers,
                   idempotent: true,
-                  **SharedHelpers.excon_defaults
+                  **SharedHelpers.excon_defaults(headers: registry_auth_headers)
                 ).status
               end
 
@@ -271,9 +269,8 @@ module Dependabot
             begin
               Excon.get(
                 dependency_url + "/latest",
-                headers: registry_auth_headers,
                 idempotent: true,
-                **SharedHelpers.excon_defaults
+                **SharedHelpers.excon_defaults(headers: registry_auth_headers)
               ).status < 400
             rescue Excon::Error::Timeout, Excon::Error::Socket
               # Give the benefit of the doubt if the registry is playing up
@@ -307,9 +304,8 @@ module Dependabot
         def fetch_npm_response
           response = Excon.get(
             dependency_url,
-            headers: registry_auth_headers,
             idempotent: true,
-            **SharedHelpers.excon_defaults
+            **SharedHelpers.excon_defaults(headers: registry_auth_headers)
           )
 
           return response unless response.status == 500

data/lib/dependabot/npm_and_yarn/update_checker/registry_finder.rb

@@ -45,9 +45,10 @@ module Dependabot
               response = Excon.get(
                 "https://#{details['registry'].gsub(%r{/+$}, '')}/"\
                 "#{escaped_dependency_name}",
-                headers: auth_header_for(details["token"]),
                 idempotent: true,
-                **SharedHelpers.excon_defaults
+                **SharedHelpers.excon_defaults(
+                  headers: auth_header_for(details["token"])
+                )
               )
               response.status < 400 && JSON.parse(response.body)
             rescue Excon::Error::Timeout,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.119.6
+  version: 0.120.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-21 00:00:00.000000000 Z
+date: 2020-10-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.6
+        version: 0.120.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.6
+        version: 0.120.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.90.0
+        version: 0.91.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.90.0
+        version: 0.91.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement