dependabot-npm_and_yarn 0.142.1 → 0.143.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8a3126f475618eeeb6318ee79ec1be7f81bb3723e656619e6a8bf0aea79189d7
-  data.tar.gz: 0a40cc600496d775974f288d1565190a12fe94d8f6c5b7189ba5b21580039a9a
+  metadata.gz: 7d816558a71e65a586c42d450da095836365a126e7b09d72c09a2fad7ea85bbd
+  data.tar.gz: 3af33ca87ef0d6f8d15552b4a2b41b793beda8af15045b2d2f4de17a6b49c67a
 SHA512:
-  metadata.gz: 07fdd2f5d7427d75b7d774a05f04ff12a895720bf4a42682739014a1fffdaf9a50ee567d0082b9def91a21269ddbdcfe19a8ea8419ca90c110e871607821a3d8
-  data.tar.gz: 44c58d03e1c7fc0f453efbe12a014c908db6139bd45b4dc0b773a2d974616b8725532a8464331395e26880fb5aa23a4704c37e5d0000321bc1e464f94a687911
+  metadata.gz: c1f39bd7b906fbf6d8231ce6e40becb84a405fd111a4f78dd80dc99d071963adc5e72942e86c207fd0637eda0edf64b6efdeb18aacd92acc67d880ac7c42504b
+  data.tar.gz: a4e11524bb70bd2ef629f3ff98ea6db13159b16d5e6a110cf97139afcf07e650d66c4051471d17b8cd883d754cf4ae22cbdfe17f0f25d8f1050cc79f4a77249c

data/lib/dependabot/npm_and_yarn/requirement.rb

@@ -45,9 +45,9 @@ module Dependabot
       end
 
       def initialize(*requirements)
-        requirements = requirements.flatten.flat_map do |req_string|
-          convert_js_constraint_to_ruby_constraint(req_string)
-        end
+        requirements = requirements.flatten.
+                       flat_map { |req_string| req_string.split(",").map(&:strip) }.
+                       flat_map { |req_string| convert_js_constraint_to_ruby_constraint(req_string) }
 
         super(requirements)
       end

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -106,7 +106,7 @@ module Dependabot
 
         def filter_ignored_versions(versions_array)
           filtered = versions_array.reject do |v, _|
-            ignore_reqs.any? { |r| r.satisfied_by?(v) }
+            ignore_requirements.any? { |r| r.satisfied_by?(v) }
           end
 
           raise AllVersionsIgnored if @raise_on_ignored && filtered.empty? && versions_array.any?
@@ -201,7 +201,7 @@ module Dependabot
           return false if related_to_current_pre?(ver) ^ ver.prerelease?
           return false if current_version_greater_than?(ver)
           return false if current_requirement_greater_than?(ver)
-          return false if ignore_reqs.any? { |r| r.satisfied_by?(ver) }
+          return false if ignore_requirements.any? { |r| r.satisfied_by?(ver) }
           return false if yanked?(ver)
 
           true
@@ -388,8 +388,8 @@ module Dependabot
           )
         end
 
-        def ignore_reqs
-          ignored_versions.map { |req| requirement_class.new(req.split(",")) }
+        def ignore_requirements
+          ignored_versions.flat_map { |req| requirement_class.requirements_array(req) }
         end
 
         def version_class

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.142.1
+  version: 0.143.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-04-16 00:00:00.000000000 Z
+date: 2021-04-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.142.1
+        version: 0.143.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.142.1
+        version: 0.143.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.12.0
+        version: 1.13.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.12.0
+        version: 1.13.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement