dependabot-npm_and_yarn 0.155.1 → 0.156.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f7639a036ad4a55b8e94615c69d63760a0e5a7a635e1a8004c13c755e76439d4
-  data.tar.gz: 9877cf96f17b95e1f8e635ae430b645e9e814b7c4a7418aabef571671f928b28
+  metadata.gz: bb9bbe4ccb8fba3e15699052badb789278aaa805a994700bae0c4bc61a7f4014
+  data.tar.gz: 7a3a8d3c819b904958860dfcf49496b640041641c5917f91bec2091f7fe6d5d9
 SHA512:
-  metadata.gz: d92a14c3f2422c86f25eb4d2eed4a865ede0abd3a81731470afca51621694b7958bd2c971d9f774e070834c270229764f05933c81ff4750b8fb5ef730458769b
-  data.tar.gz: 98b136c9c4b14395461d9b8d5ba595d01737e3701f234ab0bd64a81d6e45e5230bf08f9c1dd3c01bb61994f42e6118b2d5cd45e31a625e2d01912fb395a3d9bd
+  metadata.gz: d0aa887e6431b3b9f0fe506dff4f36005145a1b44bf19e43b774bb8619510ed6d2dd4274bf8f176696d503eb058ab476d47debe9fdabe4ba66ba82784f39bc1e
+  data.tar.gz: f3544d0a093cd11738b8115fdb708713205a59df2bafcf8edb1db71d9f0e43b1525d3b8d9ea6217fd71df4cdc31d50854d490050d6b596b928933dca5c8688da

data/helpers/package-lock.json

@@ -7,7 +7,7 @@
       "name": "@dependabot/helper",
       "dependencies": {
         "@dependabot/yarn-lib": "^1.21.1",
-        "@npmcli/arborist": "^2.6.3",
+        "@npmcli/arborist": "^2.6.4",
         "detect-indent": "^6.1.0",
         "npm": "6.14.13",
         "semver": "^7.3.4"
@@ -19,7 +19,7 @@
         "eslint": "^7.29.0",
         "eslint-config-prettier": "^8.3.0",
         "jest": "^27.0.5",
-        "prettier": "^2.3.1",
+        "prettier": "^2.3.2",
         "rimraf": "^3.0.2"
       }
     },
@@ -1518,9 +1518,9 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "2.6.3",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.6.3.tgz",
-      "integrity": "sha512-R8U2dZ8+jeE7go+qNU4Mt6aiXyBu3mM75iRIugNCA4P0OWlsLOpuDPPhsaRcOVbtXheOGZXrqe36qP1g+M68KQ==",
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.6.4.tgz",
+      "integrity": "sha512-A/pDQ/VZpdxaqsQS5XOWrhrPuC+ER7HLq+4ZkEmnO2yo/USFCWEsiUPYKhfY+sWXK3pgKjN7B7CEFmAnSoAt3g==",
       "dependencies": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",
@@ -1528,6 +1528,7 @@
         "@npmcli/move-file": "^1.1.0",
         "@npmcli/name-from-folder": "^1.0.1",
         "@npmcli/node-gyp": "^1.0.1",
+        "@npmcli/package-json": "^1.0.1",
         "@npmcli/run-script": "^1.8.2",
         "bin-links": "^2.2.1",
         "cacache": "^15.0.3",
@@ -1715,6 +1716,14 @@
       "resolved": "https://registry.npmjs.org/@npmcli/node-gyp/-/node-gyp-1.0.2.tgz",
       "integrity": "sha512-yrJUe6reVMpktcvagumoqD9r08fH1iRo01gn1u0zoCApa9lnZGEigVKUd2hzsCId4gdtkZZIVscLhNxMECKgRg=="
     },
+    "node_modules/@npmcli/package-json": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@npmcli/package-json/-/package-json-1.0.1.tgz",
+      "integrity": "sha512-y6jnu76E9C23osz8gEMBayZmaZ69vFOIk8vR1FJL/wbEJ54+9aVG9rLTjQKSXfgYZEr50nw1txBBFfBZZe+bYg==",
+      "dependencies": {
+        "json-parse-even-better-errors": "^2.3.1"
+      }
+    },
     "node_modules/@npmcli/promise-spawn": {
       "version": "1.3.2",
       "resolved": "https://registry.npmjs.org/@npmcli/promise-spawn/-/promise-spawn-1.3.2.tgz",
@@ -12607,9 +12616,9 @@
       }
     },
     "node_modules/prettier": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.3.1.tgz",
-      "integrity": "sha512-p+vNbgpLjif/+D+DwAZAbndtRrR0md0MwfmOVN9N+2RgyACMT+7tfaRnT+WDPkqnuVwleyuBIG2XBxKDme3hPA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.3.2.tgz",
+      "integrity": "sha512-lnJzDfJ66zkMy58OL5/NY5zp70S7Nz6KqcKkXYzn2tMVrNxvbqaBpg7H3qHaLxCJ5lNMsGuM8+ohS7cZrthdLQ==",
       "dev": true,
       "bin": {
         "prettier": "bin-prettier.js"
@@ -15587,9 +15596,9 @@
       }
     },
     "@npmcli/arborist": {
-      "version": "2.6.3",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.6.3.tgz",
-      "integrity": "sha512-R8U2dZ8+jeE7go+qNU4Mt6aiXyBu3mM75iRIugNCA4P0OWlsLOpuDPPhsaRcOVbtXheOGZXrqe36qP1g+M68KQ==",
+      "version": "2.6.4",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-2.6.4.tgz",
+      "integrity": "sha512-A/pDQ/VZpdxaqsQS5XOWrhrPuC+ER7HLq+4ZkEmnO2yo/USFCWEsiUPYKhfY+sWXK3pgKjN7B7CEFmAnSoAt3g==",
       "requires": {
         "@npmcli/installed-package-contents": "^1.0.7",
         "@npmcli/map-workspaces": "^1.0.2",
@@ -15597,6 +15606,7 @@
         "@npmcli/move-file": "^1.1.0",
         "@npmcli/name-from-folder": "^1.0.1",
         "@npmcli/node-gyp": "^1.0.1",
+        "@npmcli/package-json": "^1.0.1",
         "@npmcli/run-script": "^1.8.2",
         "bin-links": "^2.2.1",
         "cacache": "^15.0.3",
@@ -15751,6 +15761,14 @@
       "resolved": "https://registry.npmjs.org/@npmcli/node-gyp/-/node-gyp-1.0.2.tgz",
       "integrity": "sha512-yrJUe6reVMpktcvagumoqD9r08fH1iRo01gn1u0zoCApa9lnZGEigVKUd2hzsCId4gdtkZZIVscLhNxMECKgRg=="
     },
+    "@npmcli/package-json": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@npmcli/package-json/-/package-json-1.0.1.tgz",
+      "integrity": "sha512-y6jnu76E9C23osz8gEMBayZmaZ69vFOIk8vR1FJL/wbEJ54+9aVG9rLTjQKSXfgYZEr50nw1txBBFfBZZe+bYg==",
+      "requires": {
+        "json-parse-even-better-errors": "^2.3.1"
+      }
+    },
     "@npmcli/promise-spawn": {
       "version": "1.3.2",
       "resolved": "https://registry.npmjs.org/@npmcli/promise-spawn/-/promise-spawn-1.3.2.tgz",
@@ -23842,9 +23860,9 @@
       "integrity": "sha1-gV7R9uvGWSb4ZbMQwHE7yzMVzks="
     },
     "prettier": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.3.1.tgz",
-      "integrity": "sha512-p+vNbgpLjif/+D+DwAZAbndtRrR0md0MwfmOVN9N+2RgyACMT+7tfaRnT+WDPkqnuVwleyuBIG2XBxKDme3hPA==",
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.3.2.tgz",
+      "integrity": "sha512-lnJzDfJ66zkMy58OL5/NY5zp70S7Nz6KqcKkXYzn2tMVrNxvbqaBpg7H3qHaLxCJ5lNMsGuM8+ohS7cZrthdLQ==",
       "dev": true
     },
     "pretty-format": {

data/helpers/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^2.6.3",
+    "@npmcli/arborist": "^2.6.4",
     "detect-indent": "^6.1.0",
     "npm": "6.14.13",
     "semver": "^7.3.4"
@@ -19,7 +19,7 @@
     "eslint": "^7.29.0",
     "eslint-config-prettier": "^8.3.0",
     "jest": "^27.0.5",
-    "prettier": "^2.3.1",
+    "prettier": "^2.3.2",
     "rimraf": "^3.0.2"
   }
 }

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -281,12 +281,14 @@ module Dependabot
                    Excon::Error::Timeout,
                    Excon::Error::Socket,
                    RegistryError => e
-              return if git_dependency?
-
-              retry_count ||= 0
-              retry_count += 1
-              raise_npm_details_error(e) if retry_count > 2
-              sleep(rand(3.0..10.0)) && retry
+              if git_dependency?
+                nil
+              else
+                retry_count ||= 0
+                retry_count += 1
+                raise_npm_details_error(e) if retry_count > 2
+                sleep(rand(3.0..10.0)) && retry
+              end
             end
         end
 

data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb

@@ -163,9 +163,11 @@ module Dependabot
             # latest version. This often happens if you don't have lockfiles and
             # have requirements update strategy set to bump_versions, where an
             # update might go from ^1.1.1 to ^1.1.2 (both resolve to 1.1.2).
-            return if updated_version.to_s == latest_previous_version
-
-            latest_previous_version
+            if updated_version.to_s == latest_previous_version
+              nil
+            else
+              latest_previous_version
+            end
           end
         end
         # rubocop:enable Metrics/PerceivedComplexity

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.155.1
+  version: 0.156.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-23 00:00:00.000000000 Z
+date: 2021-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.1
+        version: 0.156.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.1
+        version: 0.156.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement