dependabot-npm_and_yarn 0.131.3 → 0.132.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/helpers/lib/npm6/updater.js +1 -0
- data/helpers/lib/npm7/index.js +5 -0
- data/helpers/lib/npm7/peer-dependency-checker.js +77 -0
- data/helpers/test/npm7/conflicting-dependency-parser.test.js +67 -0
- data/helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json +1291 -0
- data/helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package.json +14 -0
- data/helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package-lock.json +411 -0
- data/helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package.json +14 -0
- data/helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package-lock.json +64 -0
- data/helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package.json +14 -0
- data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package-lock.json +290 -0
- data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package.json +23 -0
- data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package-lock.json +965 -0
- data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package.json +10 -0
- data/helpers/test/npm7/helpers.js +21 -0
- data/helpers/test/npm7/peer-dependency-checker.test.js +107 -0
- data/helpers/yarn.lock +1198 -1232
- data/lib/dependabot/npm_and_yarn/dependency_files_filterer.rb +3 -3
- data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb +252 -53
- data/lib/dependabot/npm_and_yarn/update_checker/subdependency_version_resolver.rb +1 -2
- data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb +1 -2
- metadata +18 -3
@@ -113,11 +113,10 @@ module Dependabot
|
|
113
113
|
SharedHelpers.with_git_configured(credentials: credentials) do
|
114
114
|
Dir.chdir(path) do
|
115
115
|
npm_version = Dependabot::NpmAndYarn::Helpers.npm_version(lockfile_content)
|
116
|
-
Dependabot.logger.info(npm_version)
|
117
116
|
|
118
117
|
SharedHelpers.run_helper_subprocess(
|
119
118
|
command: NativeHelpers.helper_path,
|
120
|
-
function: "
|
119
|
+
function: "#{npm_version}:updateSubdependency",
|
121
120
|
args: [Dir.pwd, lockfile_name, [dependency.to_h]]
|
122
121
|
)
|
123
122
|
end
|
@@ -420,11 +420,10 @@ module Dependabot
|
|
420
420
|
f.name == [path, "package-lock.json"].join("/").sub(%r{\A.?\/}, "")
|
421
421
|
end
|
422
422
|
npm_version = Dependabot::NpmAndYarn::Helpers.npm_version(package_lock&.content)
|
423
|
-
Dependabot.logger.info(npm_version)
|
424
423
|
|
425
424
|
SharedHelpers.run_helper_subprocess(
|
426
425
|
command: NativeHelpers.helper_path,
|
427
|
-
function: "
|
426
|
+
function: "#{npm_version}:checkPeerDependencies",
|
428
427
|
args: [
|
429
428
|
Dir.pwd,
|
430
429
|
dependency.name,
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-npm_and_yarn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.132.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.132.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.132.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: byebug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -183,6 +183,8 @@ files:
|
|
183
183
|
- helpers/lib/npm6/remove-dependencies-from-lockfile.js
|
184
184
|
- helpers/lib/npm6/subdependency-updater.js
|
185
185
|
- helpers/lib/npm6/updater.js
|
186
|
+
- helpers/lib/npm7/index.js
|
187
|
+
- helpers/lib/npm7/peer-dependency-checker.js
|
186
188
|
- helpers/lib/yarn/conflicting-dependency-parser.js
|
187
189
|
- helpers/lib/yarn/fix-duplicates.js
|
188
190
|
- helpers/lib/yarn/helpers.js
|
@@ -206,6 +208,19 @@ files:
|
|
206
208
|
- helpers/test/npm6/fixtures/updater/updated/package-lock.json
|
207
209
|
- helpers/test/npm6/helpers.js
|
208
210
|
- helpers/test/npm6/updater.test.js
|
211
|
+
- helpers/test/npm7/conflicting-dependency-parser.test.js
|
212
|
+
- helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json
|
213
|
+
- helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package.json
|
214
|
+
- helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package-lock.json
|
215
|
+
- helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package.json
|
216
|
+
- helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package-lock.json
|
217
|
+
- helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package.json
|
218
|
+
- helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package-lock.json
|
219
|
+
- helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package.json
|
220
|
+
- helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package-lock.json
|
221
|
+
- helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package.json
|
222
|
+
- helpers/test/npm7/helpers.js
|
223
|
+
- helpers/test/npm7/peer-dependency-checker.test.js
|
209
224
|
- helpers/test/yarn/conflicting-dependency-parser.test.js
|
210
225
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/package.json
|
211
226
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/yarn.lock
|