dependabot-npm_and_yarn 0.131.3 → 0.132.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (23) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/lib/npm6/updater.js +1 -0
  3. data/helpers/lib/npm7/index.js +5 -0
  4. data/helpers/lib/npm7/peer-dependency-checker.js +77 -0
  5. data/helpers/test/npm7/conflicting-dependency-parser.test.js +67 -0
  6. data/helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json +1291 -0
  7. data/helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package.json +14 -0
  8. data/helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package-lock.json +411 -0
  9. data/helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package.json +14 -0
  10. data/helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package-lock.json +64 -0
  11. data/helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package.json +14 -0
  12. data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package-lock.json +290 -0
  13. data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package.json +23 -0
  14. data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package-lock.json +965 -0
  15. data/helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package.json +10 -0
  16. data/helpers/test/npm7/helpers.js +21 -0
  17. data/helpers/test/npm7/peer-dependency-checker.test.js +107 -0
  18. data/helpers/yarn.lock +1198 -1232
  19. data/lib/dependabot/npm_and_yarn/dependency_files_filterer.rb +3 -3
  20. data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb +252 -53
  21. data/lib/dependabot/npm_and_yarn/update_checker/subdependency_version_resolver.rb +1 -2
  22. data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb +1 -2
  23. metadata +18 -3
@@ -113,11 +113,10 @@ module Dependabot
113
113
  SharedHelpers.with_git_configured(credentials: credentials) do
114
114
  Dir.chdir(path) do
115
115
  npm_version = Dependabot::NpmAndYarn::Helpers.npm_version(lockfile_content)
116
- Dependabot.logger.info(npm_version)
117
116
 
118
117
  SharedHelpers.run_helper_subprocess(
119
118
  command: NativeHelpers.helper_path,
120
- function: "npm6:updateSubdependency",
119
+ function: "#{npm_version}:updateSubdependency",
121
120
  args: [Dir.pwd, lockfile_name, [dependency.to_h]]
122
121
  )
123
122
  end
@@ -420,11 +420,10 @@ module Dependabot
420
420
  f.name == [path, "package-lock.json"].join("/").sub(%r{\A.?\/}, "")
421
421
  end
422
422
  npm_version = Dependabot::NpmAndYarn::Helpers.npm_version(package_lock&.content)
423
- Dependabot.logger.info(npm_version)
424
423
 
425
424
  SharedHelpers.run_helper_subprocess(
426
425
  command: NativeHelpers.helper_path,
427
- function: "npm6:checkPeerDependencies",
426
+ function: "#{npm_version}:checkPeerDependencies",
428
427
  args: [
429
428
  Dir.pwd,
430
429
  dependency.name,
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.131.3
4
+ version: 0.132.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.131.3
19
+ version: 0.132.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.131.3
26
+ version: 0.132.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -183,6 +183,8 @@ files:
183
183
  - helpers/lib/npm6/remove-dependencies-from-lockfile.js
184
184
  - helpers/lib/npm6/subdependency-updater.js
185
185
  - helpers/lib/npm6/updater.js
186
+ - helpers/lib/npm7/index.js
187
+ - helpers/lib/npm7/peer-dependency-checker.js
186
188
  - helpers/lib/yarn/conflicting-dependency-parser.js
187
189
  - helpers/lib/yarn/fix-duplicates.js
188
190
  - helpers/lib/yarn/helpers.js
@@ -206,6 +208,19 @@ files:
206
208
  - helpers/test/npm6/fixtures/updater/updated/package-lock.json
207
209
  - helpers/test/npm6/helpers.js
208
210
  - helpers/test/npm6/updater.test.js
211
+ - helpers/test/npm7/conflicting-dependency-parser.test.js
212
+ - helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json
213
+ - helpers/test/npm7/fixtures/conflicting-dependency-parser/deeply-nested/package.json
214
+ - helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package-lock.json
215
+ - helpers/test/npm7/fixtures/conflicting-dependency-parser/nested/package.json
216
+ - helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package-lock.json
217
+ - helpers/test/npm7/fixtures/conflicting-dependency-parser/simple/package.json
218
+ - helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package-lock.json
219
+ - helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency/package.json
220
+ - helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package-lock.json
221
+ - helpers/test/npm7/fixtures/peer-dependency-checker/peer_dependency_multiple/package.json
222
+ - helpers/test/npm7/helpers.js
223
+ - helpers/test/npm7/peer-dependency-checker.test.js
209
224
  - helpers/test/yarn/conflicting-dependency-parser.test.js
210
225
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/package.json
211
226
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/yarn.lock