dependabot-npm_and_yarn 0.145.0 → 0.146.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4cb526452102feab2f17dbf2b30e0242e1b33ffca527a6156c24a58d65921140
-  data.tar.gz: 831fd63731a8b1bd2e7488da726c3ff18057d4486b6ccace710201ca2f49b98f
+  metadata.gz: 05b919ec4c22439443fdfeaf388837e3b549e55750f00dee6417d2c2c2f5c9aa
+  data.tar.gz: a2681785863d7cdab2a9d02aa75f36852505845668256bc4d7bff979b1e9c5f8
 SHA512:
-  metadata.gz: 58976bcdec00a9729ca507061a9623dcbb85e5e77be6f69e1abf58572e927f4e12a97a0ad754377cb2b4b72a92dab4a58c37af888d5f81b9a6eeca9b2bdc7920
-  data.tar.gz: 2722b1fc16249ad3cfb14e61ada07b4a4b8481fac53f2f1f970cb80cca1c99cdc92158db136fa7681c9e25a852b877ba4a610ca46819e9a8e680889592b1cd6f
+  metadata.gz: 16c3f459770bc46845199f25d52a30b7b5c3061d62af56813e8d66f7cac4c771bc0c95cd69e5fd0cc909fabf9c09b13028affddab1914b50a8d45706a3f92d71
+  data.tar.gz: e4888767b0a0bc0f58942b05ae0cfaeb1d60fc9394b4e63cc6306bd95833253a781fceac15fbfadecd91ed5ee65d85f1d85f97fecff43d010703c3c507f685c8

data/helpers/package-lock.json

@@ -7,7 +7,7 @@
       "name": "@dependabot/helper",
       "dependencies": {
         "@dependabot/yarn-lib": "^1.21.1",
-        "@npmcli/arborist": "^2.4.1",
+        "@npmcli/arborist": "^2.4.2",
         "detect-indent": "^6.0.0",
         "npm": "6.14.13",
         "semver": "^7.3.4"
@@ -1425,9 +1425,9 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.1.tgz",
-      "integrity": "sha512-LivXfK+LjtvzFjnwK6E41Pkw1C8+MYrgdXinzqpDc8MDYp7gMT0nvGvnpQd47OV2GhLRyBkbUSEcLk6P1d1s0g==",
+      "version": "2.4.2",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.2.tgz",
+      "integrity": "sha512-QrsMrRWzO1D2EmPQheyPz1yRnnmln6vPe4SujV4cRF0v9qIAQbD8M0dMH6K3y+w/2X3t7vg5lx20LHXsbcu7lw==",
       "dependencies": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",
@@ -17257,9 +17257,9 @@
       }
     },
     "@npmcli/arborist": {
-      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.1.tgz",
-      "integrity": "sha512-LivXfK+LjtvzFjnwK6E41Pkw1C8+MYrgdXinzqpDc8MDYp7gMT0nvGvnpQd47OV2GhLRyBkbUSEcLk6P1d1s0g==",
+      "version": "2.4.2",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.2.tgz",
+      "integrity": "sha512-QrsMrRWzO1D2EmPQheyPz1yRnnmln6vPe4SujV4cRF0v9qIAQbD8M0dMH6K3y+w/2X3t7vg5lx20LHXsbcu7lw==",
       "requires": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",

data/helpers/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^2.4.1",
+    "@npmcli/arborist": "^2.4.2",
     "detect-indent": "^6.0.0",
     "npm": "6.14.13",
     "semver": "^7.3.4"

data/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json

@@ -418,9 +418,9 @@
       "integrity": "sha512-+lP4/6lKUBfQjZ2pdxThZvLUAafmZb8OAxFb8XXtiQmS35INgr85hdOGoEs124ez1FCnZJt6jau/T+alh58QFQ=="
     },
     "lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
-      "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lru-queue": {
       "version": "0.1.0",

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -109,7 +109,9 @@ module Dependabot
             ignore_requirements.any? { |r| r.satisfied_by?(v) }
           end
 
-          raise AllVersionsIgnored if @raise_on_ignored && filtered.empty? && versions_array.any?
+          if @raise_on_ignored && filter_lower_versions(filtered).empty? && filter_lower_versions(versions_array).any?
+            raise AllVersionsIgnored
+          end
 
           filtered
         end
@@ -137,7 +139,7 @@ module Dependabot
 
         def filter_lower_versions(versions_array)
           versions_array.
-            select { |version| version > version_class.new(dependency.version) }
+            select { |version, _| version > version_class.new(dependency.version) }
         end
 
         def version_from_dist_tags

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.145.0
+  version: 0.146.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-05 00:00:00.000000000 Z
+date: 2021-05-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.145.0
+        version: 0.146.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.145.0
+        version: 0.146.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement