dependabot-npm_and_yarn 0.156.0 → 0.156.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 789a47601bf91f2d9539ccca9f4c74d975c0f9bbd32ad5a68d0f7331c452743f
-  data.tar.gz: fc4b3640d5abba87a4475d7529b12e840b43050527cfbc97da09003142beba34
+  metadata.gz: 613b3a3cc5dfb849f33a6dc55eb2b8026a9cda9d919e8c47ea8187ffd5c5b8f3
+  data.tar.gz: 2600a8328e086f4b16004c8cec5e1b1cc80afd09096c6d4036fc3624e77c1fc8
 SHA512:
-  metadata.gz: 5281e62ba49d37689dde0287195120d79a54228beaa1a087eb34184e1f4e97d50c10616844d889f0e028ec20b2c2af6fb82744bfb944f8b71cc36ed214cd46f6
-  data.tar.gz: 64823bd14b3eba36357aada10a01f56883d9c7eb5d923bd8d56c2164d048c14ac9d4d9fb78a4b1871ab9e0468aa5cd09e08fe64d1cbc8d605d96ee3231388a34
+  metadata.gz: ee7785dcb881ab70a7798f86f59d014797f6c6728011dc51e23620e7dac33cc6f2e3cbe4381a2c3e8ecf5241bb383ffeec3f0ea61b95ca1af7d8e127f6572f8d
+  data.tar.gz: e2bafaeeb8022a14872f2ab1927e97c825f6dfc8addf83b1adffbbdeb31cfccbd021336abee70bda87f3504f4d6e9a434208e6187e8f33322f442c7339ea21c6

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -281,12 +281,14 @@ module Dependabot
                    Excon::Error::Timeout,
                    Excon::Error::Socket,
                    RegistryError => e
-              return if git_dependency?
-
-              retry_count ||= 0
-              retry_count += 1
-              raise_npm_details_error(e) if retry_count > 2
-              sleep(rand(3.0..10.0)) && retry
+              if git_dependency?
+                nil
+              else
+                retry_count ||= 0
+                retry_count += 1
+                raise_npm_details_error(e) if retry_count > 2
+                sleep(rand(3.0..10.0)) && retry
+              end
             end
         end
 

data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb

@@ -163,9 +163,11 @@ module Dependabot
             # latest version. This often happens if you don't have lockfiles and
             # have requirements update strategy set to bump_versions, where an
             # update might go from ^1.1.1 to ^1.1.2 (both resolve to 1.1.2).
-            return if updated_version.to_s == latest_previous_version
-
-            latest_previous_version
+            if updated_version.to_s == latest_previous_version
+              nil
+            else
+              latest_previous_version
+            end
           end
         end
         # rubocop:enable Metrics/PerceivedComplexity

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.156.0
+  version: 0.156.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-23 00:00:00.000000000 Z
+date: 2021-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.156.0
+        version: 0.156.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.156.0
+        version: 0.156.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement