dependabot-npm_and_yarn 0.138.4 → 0.139.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b13d4d5f6b29ef4497a1d330abf7ee64aa53137d9761a46fd20e8dcc7791888e
-  data.tar.gz: 7c1a339ffa26c32d0886f6f80040318f4488d0a7f076ae79cdce61c12060bf43
+  metadata.gz: eabd22fcac559867a2a6d34c12aa1848af63959ef6d4411fdf89e59f9c41981e
+  data.tar.gz: 2f08446cd9d680f68a294f190f9af6da0c4d8f77a0795773476b9c0394dc61d0
 SHA512:
-  metadata.gz: 2e9a967c8cdc6d331db41c5c9c55ca5971e637f6d43eca4b24e4a06cccdf68482fe775ff7b3b0fb7d14f7876e081e0882ed51dc51b6a1c79a2df1727624ab804
-  data.tar.gz: 6427da1a6428ec7cf6d4c86666eaf0bed2df611e30225d4788fa072b61b4c7ff36481e5a329882625d9cbbd45684294cdc00e334161a7880cd52514161dba668
+  metadata.gz: d6055a4e2e2e2103ba482e51095c3121421788ebd1b4f6c773fd8e9a6a5980e1226bb60c8c89544e17ccc521039af5a8e2aa0171420af60149b3e5ad4da740a7
+  data.tar.gz: a840182a9a61aa19ed526fab7da8a91347941d2c091918291454c499829ec043dc102e22804fa669cee66f499011068f4a935fc242a3c97a5df5b47113c41d26

data/helpers/package-lock.json

@@ -9,14 +9,14 @@
         "@dependabot/yarn-lib": "^1.21.1",
         "@npmcli/arborist": "^2.2.9",
         "detect-indent": "^6.0.0",
-        "npm": "6.14.11",
+        "npm": "6.14.12",
         "semver": "^7.3.4"
       },
       "bin": {
         "helper": "run.js"
       },
       "devDependencies": {
-        "eslint": "^7.22.0",
+        "eslint": "^7.23.0",
         "eslint-config-prettier": "^8.1.0",
         "jest": "^26.6.3",
         "prettier": "^2.2.1",
@@ -3456,9 +3456,9 @@
       }
     },
     "node_modules/eslint": {
-      "version": "7.22.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
-      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
+      "version": "7.23.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.23.0.tgz",
+      "integrity": "sha512-kqvNVbdkjzpFy0XOszNwjkKzZ+6TcwCQ/h+ozlcIWwaimBBuhlQ4nN6kbiM2L+OjDcznkTJxzYfRFH92sx4a0Q==",
       "dev": true,
       "dependencies": {
         "@babel/code-frame": "7.12.11",
@@ -8069,9 +8069,9 @@
       }
     },
     "node_modules/npm": {
-      "version": "6.14.11",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.11.tgz",
-      "integrity": "sha512-1Zh7LjuIoEhIyjkBflSSGzfjuPQwDlghNloppjruOH5bmj9midT9qcNT0tRUZRR04shU9ekrxNy9+UTBrqeBpQ==",
+      "version": "6.14.12",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.12.tgz",
+      "integrity": "sha512-La0TNNm1TLYaSeOyit+p3xGTRYYRsHae6/RG69MVXurZsWna9jccPP7FOi/u7V9WdiCV5OOojrfMD+WstO5MZQ==",
       "bundleDependencies": [
         "abbrev",
         "ansicolors",
@@ -12441,7 +12441,7 @@
       }
     },
     "node_modules/npm/node_modules/y18n": {
-      "version": "4.0.0",
+      "version": "4.0.1",
       "inBundle": true,
       "license": "ISC"
     },
@@ -18891,9 +18891,9 @@
       }
     },
     "eslint": {
-      "version": "7.22.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
-      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
+      "version": "7.23.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.23.0.tgz",
+      "integrity": "sha512-kqvNVbdkjzpFy0XOszNwjkKzZ+6TcwCQ/h+ozlcIWwaimBBuhlQ4nN6kbiM2L+OjDcznkTJxzYfRFH92sx4a0Q==",
       "dev": true,
       "requires": {
         "@babel/code-frame": "7.12.11",
@@ -22425,9 +22425,9 @@
       }
     },
     "npm": {
-      "version": "6.14.11",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.11.tgz",
-      "integrity": "sha512-1Zh7LjuIoEhIyjkBflSSGzfjuPQwDlghNloppjruOH5bmj9midT9qcNT0tRUZRR04shU9ekrxNy9+UTBrqeBpQ==",
+      "version": "6.14.12",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-6.14.12.tgz",
+      "integrity": "sha512-La0TNNm1TLYaSeOyit+p3xGTRYYRsHae6/RG69MVXurZsWna9jccPP7FOi/u7V9WdiCV5OOojrfMD+WstO5MZQ==",
       "requires": {
         "abbrev": "~1.1.1",
         "ansicolors": "~0.3.2",
@@ -25419,7 +25419,7 @@
           "bundled": true
         },
         "y18n": {
-          "version": "4.0.0",
+          "version": "4.0.1",
           "bundled": true
         },
         "yallist": {

data/helpers/package.json

@@ -12,11 +12,11 @@
     "@dependabot/yarn-lib": "^1.21.1",
     "@npmcli/arborist": "^2.2.9",
     "detect-indent": "^6.0.0",
-    "npm": "6.14.11",
+    "npm": "6.14.12",
     "semver": "^7.3.4"
   },
   "devDependencies": {
-    "eslint": "^7.22.0",
+    "eslint": "^7.23.0",
     "eslint-config-prettier": "^8.1.0",
     "jest": "^26.6.3",
     "prettier": "^2.2.1",

data/lib/dependabot/npm_and_yarn/dependency_files_filterer.rb

@@ -16,12 +16,10 @@ module Dependabot
 
       def files_requiring_update
         @files_requiring_update ||=
-          begin
-            dependency_files.select do |file|
-              package_files_requiring_update.include?(file) ||
-                package_required_lockfile?(file) ||
-                workspaces_lockfile?(file)
-            end
+          dependency_files.select do |file|
+            package_files_requiring_update.include?(file) ||
+              package_required_lockfile?(file) ||
+              workspaces_lockfile?(file)
           end
       end
 

data/lib/dependabot/npm_and_yarn/file_updater.rb

@@ -60,18 +60,16 @@ module Dependabot
 
       def filtered_dependency_files
         @filtered_dependency_files ||=
-          begin
-            if dependencies.select(&:top_level?).any?
-              DependencyFilesFilterer.new(
-                dependency_files: dependency_files,
-                updated_dependencies: dependencies
-              ).files_requiring_update
-            else
-              SubDependencyFilesFilterer.new(
-                dependency_files: dependency_files,
-                updated_dependencies: dependencies
-              ).files_requiring_update
-            end
+          if dependencies.select(&:top_level?).any?
+            DependencyFilesFilterer.new(
+              dependency_files: dependency_files,
+              updated_dependencies: dependencies
+            ).files_requiring_update
+          else
+            SubDependencyFilesFilterer.new(
+              dependency_files: dependency_files,
+              updated_dependencies: dependencies
+            ).files_requiring_update
           end
       end
 

data/lib/dependabot/npm_and_yarn/sub_dependency_files_filterer.rb

@@ -18,15 +18,13 @@ module Dependabot
 
       def files_requiring_update
         @files_requiring_update ||=
-          begin
-            lockfiles.select do |lockfile|
-              lockfile_dependencies(lockfile).any? do |sub_dep|
-                updated_dependencies.any? do |updated_dep|
-                  next false unless sub_dep.name == updated_dep.name
+          lockfiles.select do |lockfile|
+            lockfile_dependencies(lockfile).any? do |sub_dep|
+              updated_dependencies.any? do |updated_dep|
+                next false unless sub_dep.name == updated_dep.name
 
-                  version_class.new(updated_dep.version) >
-                    version_class.new(sub_dep.version)
-                end
+                version_class.new(updated_dep.version) >
+                  version_class.new(sub_dep.version)
               end
             end
           end

data/lib/dependabot/npm_and_yarn/update_checker.rb

@@ -165,17 +165,13 @@ module Dependabot
 
       def latest_version_for_git_dependency
         @latest_version_for_git_dependency ||=
-          begin
-            # If there's been a release that includes the current pinned ref
-            # or that the current branch is behind, we switch to that release.
-            if git_branch_or_ref_in_latest_release?
-              latest_released_version
-            elsif version_class.correct?(dependency.version)
-              latest_git_version_details[:version] &&
-                version_class.new(latest_git_version_details[:version])
-            else
-              latest_git_version_details[:sha]
-            end
+          if git_branch_or_ref_in_latest_release?
+            latest_released_version
+          elsif version_class.correct?(dependency.version)
+            latest_git_version_details[:version] &&
+              version_class.new(latest_git_version_details[:version])
+          else
+            latest_git_version_details[:sha]
           end
       end
 

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -75,12 +75,10 @@ module Dependabot
         end
 
         def possible_previous_versions_with_details
-          @possible_previous_versions_with_details ||= begin
-            npm_details.fetch("versions", {}).
-              transform_keys { |k| version_class.new(k) }.
-              reject { |v, _| v.prerelease? && !related_to_current_pre?(v) }.
-              sort_by(&:first).reverse
-          end
+          @possible_previous_versions_with_details ||= npm_details.fetch("versions", {}).
+                                                       transform_keys { |k| version_class.new(k) }.
+                                                       reject { |v, _| v.prerelease? && !related_to_current_pre?(v) }.
+                                                       sort_by(&:first).reverse
         end
 
         def possible_versions_with_details(filter_ignored: true)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.138.4
+  version: 0.139.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-25 00:00:00.000000000 Z
+date: 2021-03-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.4
+        version: 0.139.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.4
+        version: 0.139.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement