dependabot-npm_and_yarn 0.145.1 → 0.146.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e7d0aafbb6fae7585f3bd9f4eb62c0989b118fcfd4f6ec06fbc6f4f87f54f0ea
-  data.tar.gz: 516961c899f3521f626971722584c64417415979448431a27a28a5ee46b7713a
+  metadata.gz: 6e577f699ee610fb357b6bcda59195313cfb6cfe2a339bf04448636d3d4cf6b2
+  data.tar.gz: e810fdc5ce518662cf46129cce306fac8b857adf44f5885e7487f2c7e72a2758
 SHA512:
-  metadata.gz: e3e3a506a72f15c52d79510a3f02d1587995d66c9844f45bfe9be176d0fc3874b3b43df34f41bb934c22d1c7d1292e583d11a24855aa33e45dd76c6772fdee36
-  data.tar.gz: b13f743bb41048e5de0fac69a8d3a98670543d92b3f0b48d79914c7bd364da26ac64bd8accdb3e6e4bd5fffe40a430ec2cdd71c687ca98365ca7ab9a1fa74507
+  metadata.gz: be64ba0c90f6c2378727a2401b09dc085bc5d7b8e0f61f2501011178663be91052a803e033dc5e1f5826ee821b697deb5e0d22e4ab09d1e7a0249ea392b3b218
+  data.tar.gz: 23baa1a4e442c4ca41b0b078d9b0aafd648cb7daba3c3f69806dc50617e3185523ee391543a9ec95cfd1d36a308c54b5e55e852fa920afc3a4bab91b8c856043

data/helpers/package-lock.json

@@ -7,7 +7,7 @@
       "name": "@dependabot/helper",
       "dependencies": {
         "@dependabot/yarn-lib": "^1.21.1",
-        "@npmcli/arborist": "^2.4.1",
+        "@npmcli/arborist": "^2.4.2",
         "detect-indent": "^6.0.0",
         "npm": "6.14.13",
         "semver": "^7.3.4"
@@ -1425,9 +1425,9 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.1.tgz",
-      "integrity": "sha512-LivXfK+LjtvzFjnwK6E41Pkw1C8+MYrgdXinzqpDc8MDYp7gMT0nvGvnpQd47OV2GhLRyBkbUSEcLk6P1d1s0g==",
+      "version": "2.4.2",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.2.tgz",
+      "integrity": "sha512-QrsMrRWzO1D2EmPQheyPz1yRnnmln6vPe4SujV4cRF0v9qIAQbD8M0dMH6K3y+w/2X3t7vg5lx20LHXsbcu7lw==",
       "dependencies": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",
@@ -17257,9 +17257,9 @@
       }
     },
     "@npmcli/arborist": {
-      "version": "2.4.1",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.1.tgz",
-      "integrity": "sha512-LivXfK+LjtvzFjnwK6E41Pkw1C8+MYrgdXinzqpDc8MDYp7gMT0nvGvnpQd47OV2GhLRyBkbUSEcLk6P1d1s0g==",
+      "version": "2.4.2",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.4.2.tgz",
+      "integrity": "sha512-QrsMrRWzO1D2EmPQheyPz1yRnnmln6vPe4SujV4cRF0v9qIAQbD8M0dMH6K3y+w/2X3t7vg5lx20LHXsbcu7lw==",
       "requires": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",

data/helpers/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^2.4.1",
+    "@npmcli/arborist": "^2.4.2",
     "detect-indent": "^6.0.0",
     "npm": "6.14.13",
     "semver": "^7.3.4"

data/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json

@@ -418,9 +418,9 @@
       "integrity": "sha512-+lP4/6lKUBfQjZ2pdxThZvLUAafmZb8OAxFb8XXtiQmS35INgr85hdOGoEs124ez1FCnZJt6jau/T+alh58QFQ=="
     },
     "lodash": {
-      "version": "4.17.20",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.20.tgz",
-      "integrity": "sha512-PlhdFcillOINfeV7Ni6oF1TAEayyZBoZ8bcshTHqOYJYlrqzRK5hagpagky5o4HfCzzd1TRkXPMFq6cKk9rGmA=="
+      "version": "4.17.21",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
+      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
     },
     "lru-queue": {
       "version": "0.1.0",

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -109,7 +109,9 @@ module Dependabot
             ignore_requirements.any? { |r| r.satisfied_by?(v) }
           end
 
-          raise AllVersionsIgnored if @raise_on_ignored && filtered.empty? && versions_array.any?
+          if @raise_on_ignored && filter_lower_versions(filtered).empty? && filter_lower_versions(versions_array).any?
+            raise AllVersionsIgnored
+          end
 
           filtered
         end
@@ -137,7 +139,7 @@ module Dependabot
 
         def filter_lower_versions(versions_array)
           versions_array.
-            select { |version| version > version_class.new(dependency.version) }
+            select { |version, _| version > version_class.new(dependency.version) }
         end
 
         def version_from_dist_tags

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.145.1
+  version: 0.146.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-06 00:00:00.000000000 Z
+date: 2021-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.145.1
+        version: 0.146.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.145.1
+        version: 0.146.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement