dependabot-npm_and_yarn 0.138.3 → 0.139.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3101f28c1d5bfaee6905bc1d4fb31769a857e0826ecdfa98f7f85e5ae4c7b077
-  data.tar.gz: 19370d6fac771c0ec056ded1174765534e6d12eebf694cc176743e1fd72b38bc
+  metadata.gz: 3c34935888655fe6a89e342a80d6e0a65c588bf8034940c33698f3529f990027
+  data.tar.gz: 0773260e327ae3aad9a99832130ab3e2b761b193541df15ca472dfc43a5fbb5d
 SHA512:
-  metadata.gz: 7c7ec35706381e9b4509b36c7203a0ca872d0cb03f7ed4853e84b1952fe8abfa35f1b9784b6859e591123ce8423f1bba409985402eadf69f613e4e518a8076ff
-  data.tar.gz: c6291f5a7fcd6e519849f918ef58f77f87acfd74a5feeb3c5abdfb7d159bd9c43212e7096a4e5f114e5092101a01894b047a596a3d7b6f6020fab76ab003e651
+  metadata.gz: 3f0312e183844468b2e6752f50d89312aee5dab83ca0787d447e234912a6f2cdb3bf1b09338aee38a3ea8ca8e92c8ffc907672fece2f41271ab87f30825de9cb
+  data.tar.gz: fd9793c0f4563e0fd56d1104a5f7e350e60cf3ec87a3f30e22b0837da0cbeb5e23148495047c1a6872331f6dc9a6a6276d69113fdbb7b134d449dbf376e37496

data/helpers/build

@@ -20,4 +20,4 @@ cp -r \
   "$install_dir"
 
 cd "$install_dir"
-npm ci
+npm ci --no-audit --fetch-timeout=600000 --fetch-retries=5

data/helpers/package-lock.json

@@ -9,14 +9,14 @@
         "@dependabot/yarn-lib": "^1.21.1",
         "@npmcli/arborist": "^2.2.9",
         "detect-indent": "^6.0.0",
-        "npm": "6.14.11",
+        "npm": "6.14.12",
         "semver": "^7.3.4"
       },
       "bin": {
         "helper": "run.js"
       },
       "devDependencies": {
-        "eslint": "^7.22.0",
+        "eslint": "^7.23.0",
         "eslint-config-prettier": "^8.1.0",
         "jest": "^26.6.3",
         "prettier": "^2.2.1",
@@ -3456,9 +3456,9 @@
       }
     },
     "node_modules/eslint": {
-      "version": "7.22.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
-      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
+      "version": "7.23.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.23.0.tgz",
+      "integrity": "sha512-kqvNVbdkjzpFy0XOszNwjkKzZ+6TcwCQ/h+ozlcIWwaimBBuhlQ4nN6kbiM2L+OjDcznkTJxzYfRFH92sx4a0Q==",
       "dev": true,
       "dependencies": {
         "@babel/code-frame": "7.12.11",
@@ -8069,9 +8069,9 @@
       }
     },
     "node_modules/npm": {
-      "version": "6.14.11",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.11.tgz",
-      "integrity": "sha512-1Zh7LjuIoEhIyjkBflSSGzfjuPQwDlghNloppjruOH5bmj9midT9qcNT0tRUZRR04shU9ekrxNy9+UTBrqeBpQ==",
+      "version": "6.14.12",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.12.tgz",
+      "integrity": "sha512-La0TNNm1TLYaSeOyit+p3xGTRYYRsHae6/RG69MVXurZsWna9jccPP7FOi/u7V9WdiCV5OOojrfMD+WstO5MZQ==",
       "bundleDependencies": [
         "abbrev",
         "ansicolors",
@@ -12441,7 +12441,7 @@
       }
     },
     "node_modules/npm/node_modules/y18n": {
-      "version": "4.0.0",
+      "version": "4.0.1",
       "inBundle": true,
       "license": "ISC"
     },
@@ -18891,9 +18891,9 @@
       }
     },
     "eslint": {
-      "version": "7.22.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
-      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
+      "version": "7.23.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.23.0.tgz",
+      "integrity": "sha512-kqvNVbdkjzpFy0XOszNwjkKzZ+6TcwCQ/h+ozlcIWwaimBBuhlQ4nN6kbiM2L+OjDcznkTJxzYfRFH92sx4a0Q==",
       "dev": true,
       "requires": {
         "@babel/code-frame": "7.12.11",
@@ -22425,9 +22425,9 @@
       }
     },
     "npm": {
-      "version": "6.14.11",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.11.tgz",
-      "integrity": "sha512-1Zh7LjuIoEhIyjkBflSSGzfjuPQwDlghNloppjruOH5bmj9midT9qcNT0tRUZRR04shU9ekrxNy9+UTBrqeBpQ==",
+      "version": "6.14.12",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.12.tgz",
+      "integrity": "sha512-La0TNNm1TLYaSeOyit+p3xGTRYYRsHae6/RG69MVXurZsWna9jccPP7FOi/u7V9WdiCV5OOojrfMD+WstO5MZQ==",
       "requires": {
         "abbrev": "~1.1.1",
         "ansicolors": "~0.3.2",
@@ -25419,7 +25419,7 @@
           "bundled": true
         },
         "y18n": {
-          "version": "4.0.0",
+          "version": "4.0.1",
           "bundled": true
         },
         "yallist": {

data/helpers/package.json

@@ -12,11 +12,11 @@
     "@dependabot/yarn-lib": "^1.21.1",
     "@npmcli/arborist": "^2.2.9",
     "detect-indent": "^6.0.0",
-    "npm": "6.14.11",
+    "npm": "6.14.12",
     "semver": "^7.3.4"
   },
   "devDependencies": {
-    "eslint": "^7.22.0",
+    "eslint": "^7.23.0",
     "eslint-config-prettier": "^8.1.0",
     "jest": "^26.6.3",
     "prettier": "^2.2.1",

data/lib/dependabot/npm_and_yarn/dependency_files_filterer.rb

@@ -16,12 +16,10 @@ module Dependabot
 
       def files_requiring_update
         @files_requiring_update ||=
-          begin
-            dependency_files.select do |file|
-              package_files_requiring_update.include?(file) ||
-                package_required_lockfile?(file) ||
-                workspaces_lockfile?(file)
-            end
+          dependency_files.select do |file|
+            package_files_requiring_update.include?(file) ||
+              package_required_lockfile?(file) ||
+              workspaces_lockfile?(file)
           end
       end
 

data/lib/dependabot/npm_and_yarn/file_updater.rb

@@ -60,18 +60,16 @@ module Dependabot
 
       def filtered_dependency_files
         @filtered_dependency_files ||=
-          begin
-            if dependencies.select(&:top_level?).any?
-              DependencyFilesFilterer.new(
-                dependency_files: dependency_files,
-                updated_dependencies: dependencies
-              ).files_requiring_update
-            else
-              SubDependencyFilesFilterer.new(
-                dependency_files: dependency_files,
-                updated_dependencies: dependencies
-              ).files_requiring_update
-            end
+          if dependencies.select(&:top_level?).any?
+            DependencyFilesFilterer.new(
+              dependency_files: dependency_files,
+              updated_dependencies: dependencies
+            ).files_requiring_update
+          else
+            SubDependencyFilesFilterer.new(
+              dependency_files: dependency_files,
+              updated_dependencies: dependencies
+            ).files_requiring_update
           end
       end
 

data/lib/dependabot/npm_and_yarn/sub_dependency_files_filterer.rb

@@ -18,15 +18,13 @@ module Dependabot
 
       def files_requiring_update
         @files_requiring_update ||=
-          begin
-            lockfiles.select do |lockfile|
-              lockfile_dependencies(lockfile).any? do |sub_dep|
-                updated_dependencies.any? do |updated_dep|
-                  next false unless sub_dep.name == updated_dep.name
+          lockfiles.select do |lockfile|
+            lockfile_dependencies(lockfile).any? do |sub_dep|
+              updated_dependencies.any? do |updated_dep|
+                next false unless sub_dep.name == updated_dep.name
 
-                  version_class.new(updated_dep.version) >
-                    version_class.new(sub_dep.version)
-                end
+                version_class.new(updated_dep.version) >
+                  version_class.new(sub_dep.version)
               end
             end
           end

data/lib/dependabot/npm_and_yarn/update_checker.rb

@@ -165,17 +165,13 @@ module Dependabot
 
       def latest_version_for_git_dependency
         @latest_version_for_git_dependency ||=
-          begin
-            # If there's been a release that includes the current pinned ref
-            # or that the current branch is behind, we switch to that release.
-            if git_branch_or_ref_in_latest_release?
-              latest_released_version
-            elsif version_class.correct?(dependency.version)
-              latest_git_version_details[:version] &&
-                version_class.new(latest_git_version_details[:version])
-            else
-              latest_git_version_details[:sha]
-            end
+          if git_branch_or_ref_in_latest_release?
+            latest_released_version
+          elsif version_class.correct?(dependency.version)
+            latest_git_version_details[:version] &&
+              version_class.new(latest_git_version_details[:version])
+          else
+            latest_git_version_details[:sha]
           end
       end
 

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -75,12 +75,10 @@ module Dependabot
         end
 
         def possible_previous_versions_with_details
-          @possible_previous_versions_with_details ||= begin
-            npm_details.fetch("versions", {}).
-              transform_keys { |k| version_class.new(k) }.
-              reject { |v, _| v.prerelease? && !related_to_current_pre?(v) }.
-              sort_by(&:first).reverse
-          end
+          @possible_previous_versions_with_details ||= npm_details.fetch("versions", {}).
+                                                       transform_keys { |k| version_class.new(k) }.
+                                                       reject { |v, _| v.prerelease? && !related_to_current_pre?(v) }.
+                                                       sort_by(&:first).reverse
         end
 
         def possible_versions_with_details(filter_ignored: true)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.138.3
+  version: 0.139.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-24 00:00:00.000000000 Z
+date: 2021-03-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.3
+        version: 0.139.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.3
+        version: 0.139.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement