dependabot-npm_and_yarn 0.125.6 → 0.125.7
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/helpers/package.json +3 -3
- data/helpers/yarn.lock +65 -65
- data/lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb +3 -3
- data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb +1 -1
- data/lib/dependabot/npm_and_yarn/update_checker.rb +1 -1
- data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb +1 -1
- metadata +8 -8
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: e88189590eb01dfeb8fad3851dc497eceafc3b46e81fcf39579f2f547b33a053
|
4
|
+
data.tar.gz: c609ca903390320ef312ad88737d403f1adfb558ccc48a1de2494cf65a8c6e8a
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: ba52aa70e4ce22621245958937751ceeb7b981864a5d0120713bfd5c626ef440aa379bf21074fe9e472306f7627c5bc499d91a83eb61e536709d40b5b15a8883
|
7
|
+
data.tar.gz: 39d1ec4278a78e1e2e0fde846fb3b7ab7c67b96aa9fdcee322f874aef0eb2e689c0b941b8e47580db403a1ebb1e7ef2b4d5d6c6af209884e053546ec39683626
|
data/helpers/package.json
CHANGED
@@ -10,7 +10,7 @@
|
|
10
10
|
},
|
11
11
|
"dependencies": {
|
12
12
|
"@dependabot/yarn-lib": "^1.21.1",
|
13
|
-
"@npmcli/arborist": "^1.0.
|
13
|
+
"@npmcli/arborist": "^1.0.13",
|
14
14
|
"detect-indent": "^6.0.0",
|
15
15
|
"npm": "6.14.9",
|
16
16
|
"semver": "^7.3.2"
|
@@ -18,8 +18,8 @@
|
|
18
18
|
"devDependencies": {
|
19
19
|
"eslint": "^7.14.0",
|
20
20
|
"eslint-plugin-prettier": "^3.1.4",
|
21
|
-
"jest": "^26.6.
|
22
|
-
"prettier": "^2.1
|
21
|
+
"jest": "^26.6.3",
|
22
|
+
"prettier": "^2.2.1",
|
23
23
|
"rimraf": "^3.0.2"
|
24
24
|
}
|
25
25
|
}
|
data/helpers/yarn.lock
CHANGED
@@ -384,10 +384,10 @@
|
|
384
384
|
jest-util "^26.6.2"
|
385
385
|
slash "^3.0.0"
|
386
386
|
|
387
|
-
"@jest/core@^26.6.
|
388
|
-
version "26.6.
|
389
|
-
resolved "https://registry.yarnpkg.com/@jest/core/-/core-26.6.
|
390
|
-
integrity sha512-
|
387
|
+
"@jest/core@^26.6.3":
|
388
|
+
version "26.6.3"
|
389
|
+
resolved "https://registry.yarnpkg.com/@jest/core/-/core-26.6.3.tgz#7639fcb3833d748a4656ada54bde193051e45fad"
|
390
|
+
integrity sha512-xvV1kKbhfUqFVuZ8Cyo+JPpipAHHAV3kcDBftiduK8EICXmTFddryy3P7NfZt8Pv37rA9nEJBKCCkglCPt/Xjw==
|
391
391
|
dependencies:
|
392
392
|
"@jest/console" "^26.6.2"
|
393
393
|
"@jest/reporters" "^26.6.2"
|
@@ -400,14 +400,14 @@
|
|
400
400
|
exit "^0.1.2"
|
401
401
|
graceful-fs "^4.2.4"
|
402
402
|
jest-changed-files "^26.6.2"
|
403
|
-
jest-config "^26.6.
|
403
|
+
jest-config "^26.6.3"
|
404
404
|
jest-haste-map "^26.6.2"
|
405
405
|
jest-message-util "^26.6.2"
|
406
406
|
jest-regex-util "^26.0.0"
|
407
407
|
jest-resolve "^26.6.2"
|
408
|
-
jest-resolve-dependencies "^26.6.
|
409
|
-
jest-runner "^26.6.
|
410
|
-
jest-runtime "^26.6.
|
408
|
+
jest-resolve-dependencies "^26.6.3"
|
409
|
+
jest-runner "^26.6.3"
|
410
|
+
jest-runtime "^26.6.3"
|
411
411
|
jest-snapshot "^26.6.2"
|
412
412
|
jest-util "^26.6.2"
|
413
413
|
jest-validate "^26.6.2"
|
@@ -500,16 +500,16 @@
|
|
500
500
|
"@types/istanbul-lib-coverage" "^2.0.0"
|
501
501
|
collect-v8-coverage "^1.0.0"
|
502
502
|
|
503
|
-
"@jest/test-sequencer@^26.6.
|
504
|
-
version "26.6.
|
505
|
-
resolved "https://registry.yarnpkg.com/@jest/test-sequencer/-/test-sequencer-26.6.
|
506
|
-
integrity sha512-
|
503
|
+
"@jest/test-sequencer@^26.6.3":
|
504
|
+
version "26.6.3"
|
505
|
+
resolved "https://registry.yarnpkg.com/@jest/test-sequencer/-/test-sequencer-26.6.3.tgz#98e8a45100863886d074205e8ffdc5a7eb582b17"
|
506
|
+
integrity sha512-YHlVIjP5nfEyjlrSr8t/YdNfU/1XEt7c5b4OxcXCjyRhjzLYu/rO69/WHPuYcbCWkz8kAeZVZp2N2+IOLLEPGw==
|
507
507
|
dependencies:
|
508
508
|
"@jest/test-result" "^26.6.2"
|
509
509
|
graceful-fs "^4.2.4"
|
510
510
|
jest-haste-map "^26.6.2"
|
511
|
-
jest-runner "^26.6.
|
512
|
-
jest-runtime "^26.6.
|
511
|
+
jest-runner "^26.6.3"
|
512
|
+
jest-runtime "^26.6.3"
|
513
513
|
|
514
514
|
"@jest/transform@^26.6.2":
|
515
515
|
version "26.6.2"
|
@@ -543,10 +543,10 @@
|
|
543
543
|
"@types/yargs" "^15.0.0"
|
544
544
|
chalk "^4.0.0"
|
545
545
|
|
546
|
-
"@npmcli/arborist@^1.0.
|
547
|
-
version "1.0.
|
548
|
-
resolved "https://registry.yarnpkg.com/@npmcli/arborist/-/arborist-1.0.
|
549
|
-
integrity sha512-
|
546
|
+
"@npmcli/arborist@^1.0.13":
|
547
|
+
version "1.0.13"
|
548
|
+
resolved "https://registry.yarnpkg.com/@npmcli/arborist/-/arborist-1.0.13.tgz#f3d2b761213b8a476e84acb58808a0044ae441e7"
|
549
|
+
integrity sha512-AtNV/iuDFiwdPf2RqnTbq3cd3dRL6H5Vv3Ve+78SShfXF0dOFJrDsaVOFbmAqDKvemBny0cI8GBu+ncjkAffBw==
|
550
550
|
dependencies:
|
551
551
|
"@npmcli/installed-package-contents" "^1.0.5"
|
552
552
|
"@npmcli/map-workspaces" "^1.0.1"
|
@@ -1083,10 +1083,10 @@ aws4@^1.8.0:
|
|
1083
1083
|
resolved "https://registry.npmjs.org/aws4/-/aws4-1.10.1.tgz#e1e82e4f3e999e2cfd61b161280d16a111f86428"
|
1084
1084
|
integrity sha512-zg7Hz2k5lI8kb7U32998pRRFin7zJlkfezGJjUc2heaD4Pw2wObakCDVzkKztTm/Ln7eiVvYsjqak0Ed4LkMDA==
|
1085
1085
|
|
1086
|
-
babel-jest@^26.6.
|
1087
|
-
version "26.6.
|
1088
|
-
resolved "https://registry.yarnpkg.com/babel-jest/-/babel-jest-26.6.
|
1089
|
-
integrity sha512-
|
1086
|
+
babel-jest@^26.6.3:
|
1087
|
+
version "26.6.3"
|
1088
|
+
resolved "https://registry.yarnpkg.com/babel-jest/-/babel-jest-26.6.3.tgz#d87d25cb0037577a0c89f82e5755c5d293c01056"
|
1089
|
+
integrity sha512-pl4Q+GAVOHwvjrck6jKjvmGhnO3jHX/xuB9d27f+EJZ/6k+6nMuPjorrYp7s++bKKdANwzElBWnLWaObvTnaZA==
|
1090
1090
|
dependencies:
|
1091
1091
|
"@jest/transform" "^26.6.2"
|
1092
1092
|
"@jest/types" "^26.6.2"
|
@@ -3674,12 +3674,12 @@ jest-changed-files@^26.6.2:
|
|
3674
3674
|
execa "^4.0.0"
|
3675
3675
|
throat "^5.0.0"
|
3676
3676
|
|
3677
|
-
jest-cli@^26.6.
|
3678
|
-
version "26.6.
|
3679
|
-
resolved "https://registry.yarnpkg.com/jest-cli/-/jest-cli-26.6.
|
3680
|
-
integrity sha512-
|
3677
|
+
jest-cli@^26.6.3:
|
3678
|
+
version "26.6.3"
|
3679
|
+
resolved "https://registry.yarnpkg.com/jest-cli/-/jest-cli-26.6.3.tgz#43117cfef24bc4cd691a174a8796a532e135e92a"
|
3680
|
+
integrity sha512-GF9noBSa9t08pSyl3CY4frMrqp+aQXFGFkf5hEPbh/pIUFYWMK6ZLTfbmadxJVcJrdRoChlWQsA2VkJcDFK8hg==
|
3681
3681
|
dependencies:
|
3682
|
-
"@jest/core" "^26.6.
|
3682
|
+
"@jest/core" "^26.6.3"
|
3683
3683
|
"@jest/test-result" "^26.6.2"
|
3684
3684
|
"@jest/types" "^26.6.2"
|
3685
3685
|
chalk "^4.0.0"
|
@@ -3687,21 +3687,21 @@ jest-cli@^26.6.2:
|
|
3687
3687
|
graceful-fs "^4.2.4"
|
3688
3688
|
import-local "^3.0.2"
|
3689
3689
|
is-ci "^2.0.0"
|
3690
|
-
jest-config "^26.6.
|
3690
|
+
jest-config "^26.6.3"
|
3691
3691
|
jest-util "^26.6.2"
|
3692
3692
|
jest-validate "^26.6.2"
|
3693
3693
|
prompts "^2.0.1"
|
3694
3694
|
yargs "^15.4.1"
|
3695
3695
|
|
3696
|
-
jest-config@^26.6.
|
3697
|
-
version "26.6.
|
3698
|
-
resolved "https://registry.yarnpkg.com/jest-config/-/jest-config-26.6.
|
3699
|
-
integrity sha512-
|
3696
|
+
jest-config@^26.6.3:
|
3697
|
+
version "26.6.3"
|
3698
|
+
resolved "https://registry.yarnpkg.com/jest-config/-/jest-config-26.6.3.tgz#64f41444eef9eb03dc51d5c53b75c8c71f645349"
|
3699
|
+
integrity sha512-t5qdIj/bCj2j7NFVHb2nFB4aUdfucDn3JRKgrZnplb8nieAirAzRSHP8uDEd+qV6ygzg9Pz4YG7UTJf94LPSyg==
|
3700
3700
|
dependencies:
|
3701
3701
|
"@babel/core" "^7.1.0"
|
3702
|
-
"@jest/test-sequencer" "^26.6.
|
3702
|
+
"@jest/test-sequencer" "^26.6.3"
|
3703
3703
|
"@jest/types" "^26.6.2"
|
3704
|
-
babel-jest "^26.6.
|
3704
|
+
babel-jest "^26.6.3"
|
3705
3705
|
chalk "^4.0.0"
|
3706
3706
|
deepmerge "^4.2.2"
|
3707
3707
|
glob "^7.1.1"
|
@@ -3709,7 +3709,7 @@ jest-config@^26.6.2:
|
|
3709
3709
|
jest-environment-jsdom "^26.6.2"
|
3710
3710
|
jest-environment-node "^26.6.2"
|
3711
3711
|
jest-get-type "^26.3.0"
|
3712
|
-
jest-jasmine2 "^26.6.
|
3712
|
+
jest-jasmine2 "^26.6.3"
|
3713
3713
|
jest-regex-util "^26.0.0"
|
3714
3714
|
jest-resolve "^26.6.2"
|
3715
3715
|
jest-util "^26.6.2"
|
@@ -3796,10 +3796,10 @@ jest-haste-map@^26.6.2:
|
|
3796
3796
|
optionalDependencies:
|
3797
3797
|
fsevents "^2.1.2"
|
3798
3798
|
|
3799
|
-
jest-jasmine2@^26.6.
|
3800
|
-
version "26.6.
|
3801
|
-
resolved "https://registry.yarnpkg.com/jest-jasmine2/-/jest-jasmine2-26.6.
|
3802
|
-
integrity sha512-
|
3799
|
+
jest-jasmine2@^26.6.3:
|
3800
|
+
version "26.6.3"
|
3801
|
+
resolved "https://registry.yarnpkg.com/jest-jasmine2/-/jest-jasmine2-26.6.3.tgz#adc3cf915deacb5212c93b9f3547cd12958f2edd"
|
3802
|
+
integrity sha512-kPKUrQtc8aYwBV7CqBg5pu+tmYXlvFlSFYn18ev4gPFtrRzB15N2gW/Roew3187q2w2eHuu0MU9TJz6w0/nPEg==
|
3803
3803
|
dependencies:
|
3804
3804
|
"@babel/traverse" "^7.1.0"
|
3805
3805
|
"@jest/environment" "^26.6.2"
|
@@ -3814,7 +3814,7 @@ jest-jasmine2@^26.6.2:
|
|
3814
3814
|
jest-each "^26.6.2"
|
3815
3815
|
jest-matcher-utils "^26.6.2"
|
3816
3816
|
jest-message-util "^26.6.2"
|
3817
|
-
jest-runtime "^26.6.
|
3817
|
+
jest-runtime "^26.6.3"
|
3818
3818
|
jest-snapshot "^26.6.2"
|
3819
3819
|
jest-util "^26.6.2"
|
3820
3820
|
pretty-format "^26.6.2"
|
@@ -3871,10 +3871,10 @@ jest-regex-util@^26.0.0:
|
|
3871
3871
|
resolved "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-26.0.0.tgz#d25e7184b36e39fd466c3bc41be0971e821fee28"
|
3872
3872
|
integrity sha512-Gv3ZIs/nA48/Zvjrl34bf+oD76JHiGDUxNOVgUjh3j890sblXryjY4rss71fPtD/njchl6PSE2hIhvyWa1eT0A==
|
3873
3873
|
|
3874
|
-
jest-resolve-dependencies@^26.6.
|
3875
|
-
version "26.6.
|
3876
|
-
resolved "https://registry.yarnpkg.com/jest-resolve-dependencies/-/jest-resolve-dependencies-26.6.
|
3877
|
-
integrity sha512-
|
3874
|
+
jest-resolve-dependencies@^26.6.3:
|
3875
|
+
version "26.6.3"
|
3876
|
+
resolved "https://registry.yarnpkg.com/jest-resolve-dependencies/-/jest-resolve-dependencies-26.6.3.tgz#6680859ee5d22ee5dcd961fe4871f59f4c784fb6"
|
3877
|
+
integrity sha512-pVwUjJkxbhe4RY8QEWzN3vns2kqyuldKpxlxJlzEYfKSvY6/bMvxoFrYYzUO1Gx28yKWN37qyV7rIoIp2h8fTg==
|
3878
3878
|
dependencies:
|
3879
3879
|
"@jest/types" "^26.6.2"
|
3880
3880
|
jest-regex-util "^26.0.0"
|
@@ -3894,10 +3894,10 @@ jest-resolve@^26.6.2:
|
|
3894
3894
|
resolve "^1.18.1"
|
3895
3895
|
slash "^3.0.0"
|
3896
3896
|
|
3897
|
-
jest-runner@^26.6.
|
3898
|
-
version "26.6.
|
3899
|
-
resolved "https://registry.yarnpkg.com/jest-runner/-/jest-runner-26.6.
|
3900
|
-
integrity sha512-
|
3897
|
+
jest-runner@^26.6.3:
|
3898
|
+
version "26.6.3"
|
3899
|
+
resolved "https://registry.yarnpkg.com/jest-runner/-/jest-runner-26.6.3.tgz#2d1fed3d46e10f233fd1dbd3bfaa3fe8924be159"
|
3900
|
+
integrity sha512-atgKpRHnaA2OvByG/HpGA4g6CSPS/1LK0jK3gATJAoptC1ojltpmVlYC3TYgdmGp+GLuhzpH30Gvs36szSL2JQ==
|
3901
3901
|
dependencies:
|
3902
3902
|
"@jest/console" "^26.6.2"
|
3903
3903
|
"@jest/environment" "^26.6.2"
|
@@ -3908,22 +3908,22 @@ jest-runner@^26.6.2:
|
|
3908
3908
|
emittery "^0.7.1"
|
3909
3909
|
exit "^0.1.2"
|
3910
3910
|
graceful-fs "^4.2.4"
|
3911
|
-
jest-config "^26.6.
|
3911
|
+
jest-config "^26.6.3"
|
3912
3912
|
jest-docblock "^26.0.0"
|
3913
3913
|
jest-haste-map "^26.6.2"
|
3914
3914
|
jest-leak-detector "^26.6.2"
|
3915
3915
|
jest-message-util "^26.6.2"
|
3916
3916
|
jest-resolve "^26.6.2"
|
3917
|
-
jest-runtime "^26.6.
|
3917
|
+
jest-runtime "^26.6.3"
|
3918
3918
|
jest-util "^26.6.2"
|
3919
3919
|
jest-worker "^26.6.2"
|
3920
3920
|
source-map-support "^0.5.6"
|
3921
3921
|
throat "^5.0.0"
|
3922
3922
|
|
3923
|
-
jest-runtime@^26.6.
|
3924
|
-
version "26.6.
|
3925
|
-
resolved "https://registry.yarnpkg.com/jest-runtime/-/jest-runtime-26.6.
|
3926
|
-
integrity sha512-
|
3923
|
+
jest-runtime@^26.6.3:
|
3924
|
+
version "26.6.3"
|
3925
|
+
resolved "https://registry.yarnpkg.com/jest-runtime/-/jest-runtime-26.6.3.tgz#4f64efbcfac398331b74b4b3c82d27d401b8fa2b"
|
3926
|
+
integrity sha512-lrzyR3N8sacTAMeonbqpnSka1dHNux2uk0qqDXVkMv2c/A3wYnvQ4EXuI013Y6+gSKSCxdaczvf4HF0mVXHRdw==
|
3927
3927
|
dependencies:
|
3928
3928
|
"@jest/console" "^26.6.2"
|
3929
3929
|
"@jest/environment" "^26.6.2"
|
@@ -3940,7 +3940,7 @@ jest-runtime@^26.6.2:
|
|
3940
3940
|
exit "^0.1.2"
|
3941
3941
|
glob "^7.1.3"
|
3942
3942
|
graceful-fs "^4.2.4"
|
3943
|
-
jest-config "^26.6.
|
3943
|
+
jest-config "^26.6.3"
|
3944
3944
|
jest-haste-map "^26.6.2"
|
3945
3945
|
jest-message-util "^26.6.2"
|
3946
3946
|
jest-mock "^26.6.2"
|
@@ -4029,14 +4029,14 @@ jest-worker@^26.6.2:
|
|
4029
4029
|
merge-stream "^2.0.0"
|
4030
4030
|
supports-color "^7.0.0"
|
4031
4031
|
|
4032
|
-
jest@^26.6.
|
4033
|
-
version "26.6.
|
4034
|
-
resolved "https://registry.yarnpkg.com/jest/-/jest-26.6.
|
4035
|
-
integrity sha512-
|
4032
|
+
jest@^26.6.3:
|
4033
|
+
version "26.6.3"
|
4034
|
+
resolved "https://registry.yarnpkg.com/jest/-/jest-26.6.3.tgz#40e8fdbe48f00dfa1f0ce8121ca74b88ac9148ef"
|
4035
|
+
integrity sha512-lGS5PXGAzR4RF7V5+XObhqz2KZIDUA1yD0DG6pBVmy10eh0ZIXQImRuzocsI/N2XZ1GrLFwTS27In2i2jlpq1Q==
|
4036
4036
|
dependencies:
|
4037
|
-
"@jest/core" "^26.6.
|
4037
|
+
"@jest/core" "^26.6.3"
|
4038
4038
|
import-local "^3.0.2"
|
4039
|
-
jest-cli "^26.6.
|
4039
|
+
jest-cli "^26.6.3"
|
4040
4040
|
|
4041
4041
|
"js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0:
|
4042
4042
|
version "4.0.0"
|
@@ -5868,10 +5868,10 @@ prettier-linter-helpers@^1.0.0:
|
|
5868
5868
|
dependencies:
|
5869
5869
|
fast-diff "^1.1.2"
|
5870
5870
|
|
5871
|
-
prettier@^2.1
|
5872
|
-
version "2.1
|
5873
|
-
resolved "https://registry.
|
5874
|
-
integrity sha512-
|
5871
|
+
prettier@^2.2.1:
|
5872
|
+
version "2.2.1"
|
5873
|
+
resolved "https://registry.yarnpkg.com/prettier/-/prettier-2.2.1.tgz#795a1a78dd52f073da0cd42b21f9c91381923ff5"
|
5874
|
+
integrity sha512-PqyhM2yCjg/oKkFPtTGUojv7gnZAoG80ttl45O6x2Ug/rMJw4wcc9k6aaf2hibP7BGVCCM33gZoGjyvt9mm16Q==
|
5875
5875
|
|
5876
5876
|
pretty-format@^26.6.2:
|
5877
5877
|
version "26.6.2"
|
@@ -73,7 +73,7 @@ module Dependabot
|
|
73
73
|
next unless semver_version_for(details["version"])
|
74
74
|
next if alias_package?(req)
|
75
75
|
|
76
|
-
#
|
76
|
+
# NOTE: The DependencySet will de-dupe our dependencies, so they
|
77
77
|
# end up unique by name. That's not a perfect representation of
|
78
78
|
# the nested nature of JS resolution, but it makes everything work
|
79
79
|
# comparably to other flat-resolution strategies
|
@@ -92,7 +92,7 @@ module Dependabot
|
|
92
92
|
def package_lock_dependencies
|
93
93
|
dependency_set = Dependabot::NpmAndYarn::FileParser::DependencySet.new
|
94
94
|
|
95
|
-
#
|
95
|
+
# NOTE: The DependencySet will de-dupe our dependencies, so they
|
96
96
|
# end up unique by name. That's not a perfect representation of
|
97
97
|
# the nested nature of JS resolution, but it makes everything work
|
98
98
|
# comparably to other flat-resolution strategies
|
@@ -108,7 +108,7 @@ module Dependabot
|
|
108
108
|
def shrinkwrap_dependencies
|
109
109
|
dependency_set = Dependabot::NpmAndYarn::FileParser::DependencySet.new
|
110
110
|
|
111
|
-
#
|
111
|
+
# NOTE: The DependencySet will de-dupe our dependencies, so they
|
112
112
|
# end up unique by name. That's not a perfect representation of
|
113
113
|
# the nested nature of JS resolution, but it makes everything work
|
114
114
|
# comparably to other flat-resolution strategies
|
@@ -286,7 +286,7 @@ module Dependabot
|
|
286
286
|
lockfile)
|
287
287
|
lockfile_dir = Pathname.new(lockfile.name).dirname
|
288
288
|
modules_path = lockfile_dir.join("node_modules")
|
289
|
-
#
|
289
|
+
# NOTE: don't include the dependency names to prevent opening
|
290
290
|
# multiple issues for each dependency that fails because we unique
|
291
291
|
# issues on the error message (issue detail) on the backend
|
292
292
|
#
|
@@ -43,7 +43,7 @@ module Dependabot
|
|
43
43
|
|
44
44
|
def lowest_resolvable_security_fix_version
|
45
45
|
raise "Dependency not vulnerable!" unless vulnerable?
|
46
|
-
#
|
46
|
+
# NOTE: we currently don't resolve transitive/sub-dependencies as
|
47
47
|
# npm/yarn don't provide any control over updating to a specific
|
48
48
|
# sub-dependency
|
49
49
|
return latest_resolvable_version unless dependency.top_level?
|
@@ -361,7 +361,7 @@ module Dependabot
|
|
361
361
|
idempotent: true,
|
362
362
|
**SharedHelpers.excon_defaults
|
363
363
|
)
|
364
|
-
#
|
364
|
+
# NOTE: returns 429 when the login page is rate limited
|
365
365
|
return web_response.body.include?("Forgot password?") ||
|
366
366
|
web_response.status == 429
|
367
367
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-npm_and_yarn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.125.
|
4
|
+
version: 0.125.7
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-11-
|
11
|
+
date: 2020-11-30 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.125.
|
19
|
+
version: 0.125.7
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.125.
|
26
|
+
version: 0.125.7
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: byebug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -100,28 +100,28 @@ dependencies:
|
|
100
100
|
requirements:
|
101
101
|
- - "~>"
|
102
102
|
- !ruby/object:Gem::Version
|
103
|
-
version:
|
103
|
+
version: 1.4.2
|
104
104
|
type: :development
|
105
105
|
prerelease: false
|
106
106
|
version_requirements: !ruby/object:Gem::Requirement
|
107
107
|
requirements:
|
108
108
|
- - "~>"
|
109
109
|
- !ruby/object:Gem::Version
|
110
|
-
version:
|
110
|
+
version: 1.4.2
|
111
111
|
- !ruby/object:Gem::Dependency
|
112
112
|
name: simplecov
|
113
113
|
requirement: !ruby/object:Gem::Requirement
|
114
114
|
requirements:
|
115
115
|
- - "~>"
|
116
116
|
- !ruby/object:Gem::Version
|
117
|
-
version: 0.
|
117
|
+
version: 0.20.0
|
118
118
|
type: :development
|
119
119
|
prerelease: false
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
121
121
|
requirements:
|
122
122
|
- - "~>"
|
123
123
|
- !ruby/object:Gem::Version
|
124
|
-
version: 0.
|
124
|
+
version: 0.20.0
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
126
|
name: simplecov-console
|
127
127
|
requirement: !ruby/object:Gem::Requirement
|