dependabot-npm_and_yarn 0.137.2 → 0.138.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e5b125b887980d8e4da69c602cfcf3ab56a550e728b7da4a5542161612a1d37f
-  data.tar.gz: 2d68cb9ae6d88f26bd6a97325c976d29f3068741e6721c4fbd59be47319b4839
+  metadata.gz: b13d4d5f6b29ef4497a1d330abf7ee64aa53137d9761a46fd20e8dcc7791888e
+  data.tar.gz: 7c1a339ffa26c32d0886f6f80040318f4488d0a7f076ae79cdce61c12060bf43
 SHA512:
-  metadata.gz: 6e334f84deb116e7d8ff0daccd8e29b3cb630a041b32f889833a48a8499b4d8efd47492f4a540f1d4bbd0f18636448e28da892ae1ef4e3fedddd5dbe8d26a6a1
-  data.tar.gz: 446a0e6a822b1707eff5f9cec7f49fc776c2f2297c7ec5af7ad07da33e34a296887f6468033ded1a98620e4a7cb94ec316f5f8a89468ee876a57a6dd07e0dfa1
+  metadata.gz: 2e9a967c8cdc6d331db41c5c9c55ca5971e637f6d43eca4b24e4a06cccdf68482fe775ff7b3b0fb7d14f7876e081e0882ed51dc51b6a1c79a2df1727624ab804
+  data.tar.gz: 6427da1a6428ec7cf6d4c86666eaf0bed2df611e30225d4788fa072b61b4c7ff36481e5a329882625d9cbbd45684294cdc00e334161a7880cd52514161dba668

data/helpers/build

@@ -20,4 +20,4 @@ cp -r \
   "$install_dir"
 
 cd "$install_dir"
-npm ci
+npm ci --no-audit --fetch-timeout=600000 --fetch-retries=5

data/helpers/package-lock.json

@@ -7,7 +7,7 @@
       "name": "@dependabot/helper",
       "dependencies": {
         "@dependabot/yarn-lib": "^1.21.1",
-        "@npmcli/arborist": "^2.2.6",
+        "@npmcli/arborist": "^2.2.9",
         "detect-indent": "^6.0.0",
         "npm": "6.14.11",
         "semver": "^7.3.4"
@@ -16,7 +16,7 @@
         "helper": "run.js"
       },
       "devDependencies": {
-        "eslint": "^7.20.0",
+        "eslint": "^7.22.0",
         "eslint-config-prettier": "^8.1.0",
         "jest": "^26.6.3",
         "prettier": "^2.2.1",
@@ -1425,9 +1425,9 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "2.2.6",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.2.6.tgz",
-      "integrity": "sha512-dLWPjMeUTrlIJG+f4j3cOMZ24vJ1GQmZm7QixXeOnx3XCo7reWqzjDZfQvPE21FPUuz25EGoRw+MSHzc7OlxAA==",
+      "version": "2.2.9",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.2.9.tgz",
+      "integrity": "sha512-ddC/CCAEHh28XYtgSAOudchdphNXcgErdYxwsEiykc2YbRA9Z+4XjI0BdBdXvv22DvkpO7zotUSxlVTcJmdURw==",
       "dependencies": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",
@@ -1452,7 +1452,7 @@
         "promise-call-limit": "^1.0.1",
         "read-package-json-fast": "^2.0.2",
         "readdir-scoped-modules": "^1.1.0",
-        "semver": "^7.3.4",
+        "semver": "^7.3.5",
         "tar": "^6.1.0",
         "treeverse": "^1.0.4",
         "walk-up-path": "^1.0.0"
@@ -3185,6 +3185,7 @@
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz",
       "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==",
+      "dev": true,
       "engines": {
         "node": ">=8"
       }
@@ -3455,9 +3456,9 @@
       }
     },
     "node_modules/eslint": {
-      "version": "7.21.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.21.0.tgz",
-      "integrity": "sha512-W2aJbXpMNofUp0ztQaF40fveSsJBjlSCSWpy//gzfTvwC+USs/nceBrKmlJOiM8r1bLwP2EuYkCqArn/6QTIgg==",
+      "version": "7.22.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
+      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
       "dev": true,
       "dependencies": {
         "@babel/code-frame": "7.12.11",
@@ -3477,7 +3478,7 @@
         "file-entry-cache": "^6.0.1",
         "functional-red-black-tree": "^1.0.1",
         "glob-parent": "^5.0.0",
-        "globals": "^12.1.0",
+        "globals": "^13.6.0",
         "ignore": "^4.0.6",
         "import-fresh": "^3.0.0",
         "imurmurhash": "^0.1.4",
@@ -3485,7 +3486,7 @@
         "js-yaml": "^3.13.1",
         "json-stable-stringify-without-jsonify": "^1.0.1",
         "levn": "^0.4.1",
-        "lodash": "^4.17.20",
+        "lodash": "^4.17.21",
         "minimatch": "^3.0.4",
         "natural-compare": "^1.4.0",
         "optionator": "^0.9.1",
@@ -3632,6 +3633,21 @@
         }
       }
     },
+    "node_modules/eslint/node_modules/globals": {
+      "version": "13.7.0",
+      "resolved": "https://registry.npmjs.org/globals/-/globals-13.7.0.tgz",
+      "integrity": "sha512-Aipsz6ZKRxa/xQkZhNg0qIWXT6x6rD46f6x/PCnBomlttdIyAPak4YD9jTmKpZ72uROSMU87qJtcgpgHaVchiA==",
+      "dev": true,
+      "dependencies": {
+        "type-fest": "^0.20.2"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/eslint/node_modules/has-flag": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
@@ -3671,6 +3687,18 @@
         "node": ">=8"
       }
     },
+    "node_modules/eslint/node_modules/type-fest": {
+      "version": "0.20.2",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
+      "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==",
+      "dev": true,
+      "engines": {
+        "node": ">=10"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/espree": {
       "version": "7.3.1",
       "resolved": "https://registry.npmjs.org/espree/-/espree-7.3.1.tgz",
@@ -7995,6 +8023,7 @@
       "version": "2.5.0",
       "resolved": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz",
       "integrity": "sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==",
+      "dev": true,
       "dependencies": {
         "hosted-git-info": "^2.1.4",
         "resolve": "^1.10.0",
@@ -8005,12 +8034,14 @@
     "node_modules/normalize-package-data/node_modules/hosted-git-info": {
       "version": "2.8.8",
       "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.8.tgz",
-      "integrity": "sha512-f/wzC2QaWBs7t9IYqB4T3sR1xviIViXJRJTWBlx2Gf3g0Xi5vI7Yy4koXQ1c9OYDGHN9sBy1DQ2AB8fqZBWhUg=="
+      "integrity": "sha512-f/wzC2QaWBs7t9IYqB4T3sR1xviIViXJRJTWBlx2Gf3g0Xi5vI7Yy4koXQ1c9OYDGHN9sBy1DQ2AB8fqZBWhUg==",
+      "dev": true
     },
     "node_modules/normalize-package-data/node_modules/semver": {
       "version": "5.7.1",
       "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz",
       "integrity": "sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==",
+      "dev": true,
       "bin": {
         "semver": "bin/semver"
       }
@@ -8164,7 +8195,239 @@
         "validate-npm-package-name",
         "which",
         "worker-farm",
-        "write-file-atomic"
+        "write-file-atomic",
+        "agent-base",
+        "agentkeepalive",
+        "ansi-align",
+        "ansi-regex",
+        "ansi-styles",
+        "are-we-there-yet",
+        "asap",
+        "asn1",
+        "assert-plus",
+        "asynckit",
+        "aws-sign2",
+        "aws4",
+        "balanced-match",
+        "bcrypt-pbkdf",
+        "boxen",
+        "brace-expansion",
+        "buffer-from",
+        "builtins",
+        "byline",
+        "camelcase",
+        "capture-stack-trace",
+        "caseless",
+        "chalk",
+        "cidr-regex",
+        "cli-boxes",
+        "cliui",
+        "clone",
+        "code-point-at",
+        "color-convert",
+        "color-name",
+        "colors",
+        "combined-stream",
+        "concat-map",
+        "concat-stream",
+        "configstore",
+        "console-control-strings",
+        "copy-concurrently",
+        "core-util-is",
+        "create-error-class",
+        "cross-spawn",
+        "crypto-random-string",
+        "cyclist",
+        "dashdash",
+        "debug",
+        "decamelize",
+        "decode-uri-component",
+        "deep-extend",
+        "defaults",
+        "define-properties",
+        "delayed-stream",
+        "delegates",
+        "dot-prop",
+        "dotenv",
+        "duplexer3",
+        "duplexify",
+        "ecc-jsbn",
+        "emoji-regex",
+        "encoding",
+        "end-of-stream",
+        "env-paths",
+        "err-code",
+        "errno",
+        "es-abstract",
+        "es-to-primitive",
+        "es6-promise",
+        "es6-promisify",
+        "escape-string-regexp",
+        "execa",
+        "extend",
+        "extsprintf",
+        "fast-json-stable-stringify",
+        "flush-write-stream",
+        "forever-agent",
+        "form-data",
+        "from2",
+        "fs-minipass",
+        "fs.realpath",
+        "function-bind",
+        "gauge",
+        "genfun",
+        "get-caller-file",
+        "get-stream",
+        "getpass",
+        "global-dirs",
+        "got",
+        "har-schema",
+        "har-validator",
+        "has",
+        "has-flag",
+        "has-symbols",
+        "http-cache-semantics",
+        "http-proxy-agent",
+        "http-signature",
+        "https-proxy-agent",
+        "humanize-ms",
+        "iconv-lite",
+        "ignore-walk",
+        "import-lazy",
+        "ip",
+        "ip-regex",
+        "is-callable",
+        "is-ci",
+        "is-date-object",
+        "is-fullwidth-code-point",
+        "is-installed-globally",
+        "is-npm",
+        "is-obj",
+        "is-path-inside",
+        "is-redirect",
+        "is-regex",
+        "is-retry-allowed",
+        "is-stream",
+        "is-symbol",
+        "is-typedarray",
+        "isarray",
+        "isexe",
+        "isstream",
+        "jsbn",
+        "json-schema",
+        "json-stringify-safe",
+        "jsonparse",
+        "jsprim",
+        "latest-version",
+        "libnpmconfig",
+        "libnpmpublish",
+        "lodash._createset",
+        "lodash._root",
+        "lowercase-keys",
+        "make-dir",
+        "make-fetch-happen",
+        "mime-db",
+        "mime-types",
+        "minimatch",
+        "minimist",
+        "minizlib",
+        "ms",
+        "mute-stream",
+        "node-fetch-npm",
+        "npm-bundled",
+        "npm-logical-tree",
+        "npm-normalize-package-bin",
+        "npm-run-path",
+        "number-is-nan",
+        "oauth-sign",
+        "object-assign",
+        "object-keys",
+        "object.getownpropertydescriptors",
+        "os-homedir",
+        "os-tmpdir",
+        "p-finally",
+        "package-json",
+        "parallel-transform",
+        "path-exists",
+        "path-is-absolute",
+        "path-key",
+        "path-parse",
+        "performance-now",
+        "pify",
+        "prepend-http",
+        "process-nextick-args",
+        "promise-retry",
+        "promzard",
+        "proto-list",
+        "protoduck",
+        "prr",
+        "pseudomap",
+        "psl",
+        "pump",
+        "pumpify",
+        "punycode",
+        "qs",
+        "rc",
+        "registry-auth-token",
+        "registry-url",
+        "require-directory",
+        "require-main-filename",
+        "resolve-from",
+        "run-queue",
+        "safer-buffer",
+        "semver-diff",
+        "set-blocking",
+        "shebang-command",
+        "shebang-regex",
+        "signal-exit",
+        "smart-buffer",
+        "socks",
+        "socks-proxy-agent",
+        "spdx-correct",
+        "spdx-exceptions",
+        "spdx-expression-parse",
+        "spdx-license-ids",
+        "split-on-first",
+        "sshpk",
+        "stream-each",
+        "stream-iterate",
+        "stream-shift",
+        "strict-uri-encode",
+        "string_decoder",
+        "string-width",
+        "strip-ansi",
+        "strip-eof",
+        "strip-json-comments",
+        "supports-color",
+        "term-size",
+        "through",
+        "through2",
+        "timed-out",
+        "tough-cookie",
+        "tunnel-agent",
+        "tweetnacl",
+        "typedarray",
+        "unique-slug",
+        "unique-string",
+        "unzip-response",
+        "uri-js",
+        "url-parse-lax",
+        "util-deprecate",
+        "util-extend",
+        "util-promisify",
+        "verror",
+        "wcwidth",
+        "which-module",
+        "wide-align",
+        "widest-line",
+        "wrap-ansi",
+        "wrappy",
+        "xdg-basedir",
+        "xtend",
+        "y18n",
+        "yallist",
+        "yargs",
+        "yargs-parser"
       ],
       "dependencies": {
         "abbrev": "~1.1.1",
@@ -14120,9 +14383,9 @@
       }
     },
     "node_modules/semver": {
-      "version": "7.3.4",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.4.tgz",
-      "integrity": "sha512-tCfb2WLjqFAtXn4KEdxIhalnRtoKFN7nAwj0B3ZXCbQloV2tq5eDbcTmT68JJD3nRJq24/XgxtQKFIpQdtvmVw==",
+      "version": "7.3.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz",
+      "integrity": "sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==",
       "dependencies": {
         "lru-cache": "^6.0.0"
       },
@@ -15103,7 +15366,8 @@
     "node_modules/text-table": {
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
-      "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ="
+      "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=",
+      "dev": true
     },
     "node_modules/thenify": {
       "version": "3.3.1",
@@ -16976,9 +17240,9 @@
       }
     },
     "@npmcli/arborist": {
-      "version": "2.2.6",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.2.6.tgz",
-      "integrity": "sha512-dLWPjMeUTrlIJG+f4j3cOMZ24vJ1GQmZm7QixXeOnx3XCo7reWqzjDZfQvPE21FPUuz25EGoRw+MSHzc7OlxAA==",
+      "version": "2.2.9",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.2.9.tgz",
+      "integrity": "sha512-ddC/CCAEHh28XYtgSAOudchdphNXcgErdYxwsEiykc2YbRA9Z+4XjI0BdBdXvv22DvkpO7zotUSxlVTcJmdURw==",
       "requires": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",
@@ -17003,7 +17267,7 @@
         "promise-call-limit": "^1.0.1",
         "read-package-json-fast": "^2.0.2",
         "readdir-scoped-modules": "^1.1.0",
-        "semver": "^7.3.4",
+        "semver": "^7.3.5",
         "tar": "^6.1.0",
         "treeverse": "^1.0.4",
         "walk-up-path": "^1.0.0"
@@ -18409,7 +18673,8 @@
     "detect-newline": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/detect-newline/-/detect-newline-3.1.0.tgz",
-      "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA=="
+      "integrity": "sha512-TLz+x/vEXm/Y7P7wn1EJFNLxYpUD4TgMosxY6fAVJUnJMbupHBOncxyWUG9OpTaH9EBD7uFI5LfEgmMOc54DsA==",
+      "dev": true
     },
     "dezalgo": {
       "version": "1.0.3",
@@ -18626,9 +18891,9 @@
       }
     },
     "eslint": {
-      "version": "7.21.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.21.0.tgz",
-      "integrity": "sha512-W2aJbXpMNofUp0ztQaF40fveSsJBjlSCSWpy//gzfTvwC+USs/nceBrKmlJOiM8r1bLwP2EuYkCqArn/6QTIgg==",
+      "version": "7.22.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
+      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
       "dev": true,
       "requires": {
         "@babel/code-frame": "7.12.11",
@@ -18648,7 +18913,7 @@
         "file-entry-cache": "^6.0.1",
         "functional-red-black-tree": "^1.0.1",
         "glob-parent": "^5.0.0",
-        "globals": "^12.1.0",
+        "globals": "^13.6.0",
         "ignore": "^4.0.6",
         "import-fresh": "^3.0.0",
         "imurmurhash": "^0.1.4",
@@ -18656,7 +18921,7 @@
         "js-yaml": "^3.13.1",
         "json-stable-stringify-without-jsonify": "^1.0.1",
         "levn": "^0.4.1",
-        "lodash": "^4.17.20",
+        "lodash": "^4.17.21",
         "minimatch": "^3.0.4",
         "natural-compare": "^1.4.0",
         "optionator": "^0.9.1",
@@ -18713,6 +18978,15 @@
             "ms": "2.1.2"
           }
         },
+        "globals": {
+          "version": "13.7.0",
+          "resolved": "https://registry.npmjs.org/globals/-/globals-13.7.0.tgz",
+          "integrity": "sha512-Aipsz6ZKRxa/xQkZhNg0qIWXT6x6rD46f6x/PCnBomlttdIyAPak4YD9jTmKpZ72uROSMU87qJtcgpgHaVchiA==",
+          "dev": true,
+          "requires": {
+            "type-fest": "^0.20.2"
+          }
+        },
         "has-flag": {
           "version": "4.0.0",
           "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
@@ -18742,6 +19016,12 @@
           "requires": {
             "has-flag": "^4.0.0"
           }
+        },
+        "type-fest": {
+          "version": "0.20.2",
+          "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz",
+          "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==",
+          "dev": true
         }
       }
     },
@@ -22106,6 +22386,7 @@
       "version": "2.5.0",
       "resolved": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz",
       "integrity": "sha512-/5CMN3T0R4XTj4DcGaexo+roZSdSFW/0AOOTROrjxzCG1wrWXEsGbRKevjlIL+ZDE4sZlJr5ED4YW0yqmkK+eA==",
+      "dev": true,
       "requires": {
         "hosted-git-info": "^2.1.4",
         "resolve": "^1.10.0",
@@ -22116,12 +22397,14 @@
         "hosted-git-info": {
           "version": "2.8.8",
           "resolved": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.8.tgz",
-          "integrity": "sha512-f/wzC2QaWBs7t9IYqB4T3sR1xviIViXJRJTWBlx2Gf3g0Xi5vI7Yy4koXQ1c9OYDGHN9sBy1DQ2AB8fqZBWhUg=="
+          "integrity": "sha512-f/wzC2QaWBs7t9IYqB4T3sR1xviIViXJRJTWBlx2Gf3g0Xi5vI7Yy4koXQ1c9OYDGHN9sBy1DQ2AB8fqZBWhUg==",
+          "dev": true
         },
         "semver": {
           "version": "5.7.1",
           "resolved": "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz",
-          "integrity": "sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ=="
+          "integrity": "sha512-sauaDf/PZdVgrLTNYHRtpXa1iRiKcaebiKQ1BJdpQlWH2lCvexQdX55snPFyK7QzpudqbCI0qXFfOasHdyNDGQ==",
+          "dev": true
         }
       }
     },
@@ -26711,9 +26994,9 @@
       }
     },
     "semver": {
-      "version": "7.3.4",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.4.tgz",
-      "integrity": "sha512-tCfb2WLjqFAtXn4KEdxIhalnRtoKFN7nAwj0B3ZXCbQloV2tq5eDbcTmT68JJD3nRJq24/XgxtQKFIpQdtvmVw==",
+      "version": "7.3.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.3.5.tgz",
+      "integrity": "sha512-PoeGJYh8HK4BTO/a9Tf6ZG3veo/A7ZVsYrSA6J8ny9nb3B1VrpkuN+z9OE5wfE5p6H4LchYZsegiQgbJD94ZFQ==",
       "requires": {
         "lru-cache": "^6.0.0"
       }
@@ -27490,7 +27773,8 @@
     "text-table": {
       "version": "0.2.0",
       "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
-      "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ="
+      "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=",
+      "dev": true
     },
     "thenify": {
       "version": "3.3.1",

data/helpers/package.json

@@ -10,13 +10,13 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^2.2.6",
+    "@npmcli/arborist": "^2.2.9",
     "detect-indent": "^6.0.0",
     "npm": "6.14.11",
     "semver": "^7.3.4"
   },
   "devDependencies": {
-    "eslint": "^7.20.0",
+    "eslint": "^7.22.0",
     "eslint-config-prettier": "^8.1.0",
     "jest": "^26.6.3",
     "prettier": "^2.2.1",

data/lib/dependabot/npm_and_yarn/file_updater/npmrc_builder.rb

@@ -169,7 +169,7 @@ module Dependabot
             end
 
           scopes = affected_urls.map do |url|
-            url.split(/\%40|@/)[1]&.split(%r{\%2F|/})&.first
+            url.split(/\%40|@/)[1]&.split(%r{\%2[fF]|/})&.first
           end
 
           # Registry used for unscoped packages

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.137.2
+  version: 0.138.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-16 00:00:00.000000000 Z
+date: 2021-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.2
+        version: 0.138.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.137.2
+        version: 0.138.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement