dependabot-npm_and_yarn 0.165.0 → 0.168.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 72343b83ecbf281b5a608ca0df2f35bc1b736fb541344c67f62a838fe542b3d0
-  data.tar.gz: 8e3aa3b511e7a77da4d0a601bcff9e041dd39701932fb678402fe8959ee3807f
+  metadata.gz: cff8d106196ca7d6d8f795e0bf96afac10aa3782272962ca263773dfb1799d32
+  data.tar.gz: 512ee4c4149488ec3ce35c74aa22d6fc09b74b3007762b3504705297a32b3413
 SHA512:
-  metadata.gz: a57741ced7be9f50a8b64d548a4145e06bb014b6affb5ab9183d5c3b2e4559cb935baf69cf173e44410993a9bf523395b7ab0cbb83bceba4b06aebdc5ebf196c
-  data.tar.gz: 27ce59a58db7ad7de83027d54a3545531a11d20f444490801a7a93d617a2ecb29fbdae06a6bc2ccf70e5271cebaa6739455be0591076b754ef811ef1f3023b0c
+  metadata.gz: 7ee3befc4fdada63886760871d189a3b1ab35fee140978dd8328d950fd443d39aea09ff51d6bdc66f1d29ab648df83b7094934be0570590b14e7e7cb7d2d9020
+  data.tar.gz: dfb3f939e279bcfdc2b9218a10002a6f3a29dfcc09caea0ec46f277d53c9226587126fe5d5935c4bfff213432236adba265af6caa0098e05c50f6405afb94932

data/helpers/lib/yarn/updater.js

@@ -104,16 +104,19 @@ async function updateDependencyFiles(directory, dependencies) {
   const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
   let updateRunResults = { "yarn.lock": readFile("yarn.lock") };
-
+  let requiredVersions = [];
   for (let dep of dependencies) {
     for (let reqs of dep.requirements) {
+      if (requiredVersions.indexOf(reqs.requirement) > -1) {
+          continue;
+      }
       updateRunResults = Object.assign(
         updateRunResults,
         await updateDependencyFile(directory, dep.name, dep.version, reqs)
       );
+      requiredVersions.push(reqs.requirement);
     }
   }
-
   return updateRunResults;
 }
 

data/helpers/package-lock.json

@@ -7,7 +7,7 @@
       "name": "@dependabot/helper",
       "dependencies": {
         "@dependabot/yarn-lib": "^1.21.1",
-        "@npmcli/arborist": "^3.0.0",
+        "@npmcli/arborist": "^4.0.5",
         "detect-indent": "^6.1.0",
         "npm": "6.14.14",
         "semver": "^7.3.4"
@@ -1562,20 +1562,20 @@
       }
     },
     "node_modules/@npmcli/arborist": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-3.0.0.tgz",
-      "integrity": "sha512-zAmy3LwjQ81HKYA8Z4Uao8Re+ydiad2sDKI+PKe2loqDXnFolm69LIGmHp8+7BPWX1CAJCs1/XRNTLdXmuMZZw==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-4.0.5.tgz",
+      "integrity": "sha512-WR2cqxzjsvmHJ9sKCdqBYG/qeiAXB9ev1iq1W2Rry7LxeJ7eDtTr4mOWe/TBvp6xFzevGecQc2YEWwExTuLZLg==",
       "dependencies": {
-        "@isaacs/string-locale-compare": "^1.0.1",
+        "@isaacs/string-locale-compare": "^1.1.0",
         "@npmcli/installed-package-contents": "^1.0.7",
-        "@npmcli/map-workspaces": "^1.0.2",
+        "@npmcli/map-workspaces": "^2.0.0",
         "@npmcli/metavuln-calculator": "^2.0.0",
         "@npmcli/move-file": "^1.1.0",
         "@npmcli/name-from-folder": "^1.0.1",
-        "@npmcli/node-gyp": "^1.0.1",
+        "@npmcli/node-gyp": "^1.0.3",
         "@npmcli/package-json": "^1.0.1",
         "@npmcli/run-script": "^2.0.0",
-        "bin-links": "^2.2.1",
+        "bin-links": "^2.3.0",
         "cacache": "^15.0.3",
         "common-ancestor-path": "^1.0.1",
         "json-parse-even-better-errors": "^2.3.1",
@@ -1586,7 +1586,7 @@
         "npm-package-arg": "^8.1.5",
         "npm-pick-manifest": "^6.1.0",
         "npm-registry-fetch": "^11.0.0",
-        "pacote": "^12.0.0",
+        "pacote": "^12.0.2",
         "parse-conflict-json": "^1.1.1",
         "proc-log": "^1.0.0",
         "promise-all-reject-late": "^1.0.0",
@@ -1679,9 +1679,9 @@
       }
     },
     "node_modules/@npmcli/map-workspaces": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-1.0.3.tgz",
-      "integrity": "sha512-SdlRlOoQw4WKD4vtb/n5gUkobEABYBEOo8fRE4L8CtBkyWDSvIrReTfKvQ/Jc/LQqDaaZ5iv1iMSQzKCUr1n1A==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-2.0.0.tgz",
+      "integrity": "sha512-QBJfpCY1NOAkkW3lFfru9VTdqvMB2TN0/vrevl5xBCv5Fi0XDVcA6rqqSau4Ysi4Iw3fBzyXV7hzyTBDfadf7g==",
       "dependencies": {
         "@npmcli/name-from-folder": "^1.0.1",
         "glob": "^7.1.6",
@@ -1689,7 +1689,7 @@
         "read-package-json-fast": "^2.0.1"
       },
       "engines": {
-        "node": ">=10"
+        "node": "^12.13.0 || ^14.15.0 || >=16"
       }
     },
     "node_modules/@npmcli/metavuln-calculator": {
@@ -2400,12 +2400,12 @@
       }
     },
     "node_modules/bin-links": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/bin-links/-/bin-links-2.2.1.tgz",
-      "integrity": "sha512-wFzVTqavpgCCYAh8SVBdnZdiQMxTkGR+T3b14CNpBXIBe2neJWaMGAZ55XWWHELJJ89dscuq0VCBqcVaIOgCMg==",
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/bin-links/-/bin-links-2.3.0.tgz",
+      "integrity": "sha512-JzrOLHLwX2zMqKdyYZjkDgQGT+kHDkIhv2/IK2lJ00qLxV4TmFoHi8drDBb6H5Zrz1YfgHkai4e2MGPqnoUhqA==",
       "dependencies": {
         "cmd-shim": "^4.0.1",
-        "mkdirp": "^1.0.3",
+        "mkdirp-infer-owner": "^2.0.0",
         "npm-normalize-package-bin": "^1.0.0",
         "read-cmd-shim": "^2.0.0",
         "rimraf": "^3.0.0",
@@ -2415,17 +2415,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/bin-links/node_modules/mkdirp": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
-      "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==",
-      "bin": {
-        "mkdirp": "bin/cmd.js"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/bl": {
       "version": "1.2.3",
       "resolved": "https://registry.npmjs.org/bl/-/bl-1.2.3.tgz",
@@ -4455,11 +4444,14 @@
       }
     },
     "node_modules/ignore-walk": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-3.0.4.tgz",
-      "integrity": "sha512-PY6Ii8o1jMRA1z4F2hRkH/xN59ox43DavKvD3oDpfurRlOJyAHpifIwpbdv1n4jt4ov0jSpw3kQ4GhJnpBL6WQ==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-4.0.1.tgz",
+      "integrity": "sha512-rzDQLaW4jQbh2YrOFlJdCtX8qgJTehFRYiUB2r1osqTeDzV/3+Jh8fz1oAPzUThf3iku8Ds4IDqawI5d8mUiQw==",
       "dependencies": {
         "minimatch": "^3.0.4"
+      },
+      "engines": {
+        "node": ">=10"
       }
     },
     "node_modules/import-fresh": {
@@ -7963,12 +7955,12 @@
       }
     },
     "node_modules/npm-packlist": {
-      "version": "2.2.2",
-      "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-2.2.2.tgz",
-      "integrity": "sha512-Jt01acDvJRhJGthnUJVF/w6gumWOZxO7IkpY/lsX9//zqQgnF7OJaxgQXcerd4uQOLu7W5bkb4mChL9mdfm+Zg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-3.0.0.tgz",
+      "integrity": "sha512-L/cbzmutAwII5glUcf2DBRNY/d0TFd4e/FnaZigJV6JD85RHZXJFGwCndjMWiiViiWSsWt3tiOLpI3ByTnIdFQ==",
       "dependencies": {
         "glob": "^7.1.6",
-        "ignore-walk": "^3.0.3",
+        "ignore-walk": "^4.0.1",
         "npm-bundled": "^1.1.1",
         "npm-normalize-package-bin": "^1.0.1"
       },
@@ -12192,9 +12184,9 @@
       }
     },
     "node_modules/pacote": {
-      "version": "12.0.0",
-      "resolved": "https://registry.npmjs.org/pacote/-/pacote-12.0.0.tgz",
-      "integrity": "sha512-5DnYqZU0w7GIskuc5yXii1kKpQS2fsaxCaI0FXRsMULXB06lXnZpRdV7JC1TTcQN5uy62h4VWS4WMPYGWu3MYg==",
+      "version": "12.0.2",
+      "resolved": "https://registry.npmjs.org/pacote/-/pacote-12.0.2.tgz",
+      "integrity": "sha512-Ar3mhjcxhMzk+OVZ8pbnXdb0l8+pimvlsqBGRNkble2NVgyqOGE3yrCGi/lAYq7E7NRDMz89R1Wx5HIMCGgeYg==",
       "dependencies": {
         "@npmcli/git": "^2.1.0",
         "@npmcli/installed-package-contents": "^1.0.6",
@@ -12207,7 +12199,7 @@
         "minipass": "^3.1.3",
         "mkdirp": "^1.0.3",
         "npm-package-arg": "^8.0.1",
-        "npm-packlist": "^2.1.4",
+        "npm-packlist": "^3.0.0",
         "npm-pick-manifest": "^6.0.0",
         "npm-registry-fetch": "^11.0.0",
         "promise-retry": "^2.0.1",
@@ -15317,20 +15309,20 @@
       }
     },
     "@npmcli/arborist": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-3.0.0.tgz",
-      "integrity": "sha512-zAmy3LwjQ81HKYA8Z4Uao8Re+ydiad2sDKI+PKe2loqDXnFolm69LIGmHp8+7BPWX1CAJCs1/XRNTLdXmuMZZw==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-4.0.5.tgz",
+      "integrity": "sha512-WR2cqxzjsvmHJ9sKCdqBYG/qeiAXB9ev1iq1W2Rry7LxeJ7eDtTr4mOWe/TBvp6xFzevGecQc2YEWwExTuLZLg==",
       "requires": {
-        "@isaacs/string-locale-compare": "^1.0.1",
+        "@isaacs/string-locale-compare": "^1.1.0",
         "@npmcli/installed-package-contents": "^1.0.7",
-        "@npmcli/map-workspaces": "^1.0.2",
+        "@npmcli/map-workspaces": "^2.0.0",
         "@npmcli/metavuln-calculator": "^2.0.0",
         "@npmcli/move-file": "^1.1.0",
         "@npmcli/name-from-folder": "^1.0.1",
-        "@npmcli/node-gyp": "^1.0.1",
+        "@npmcli/node-gyp": "^1.0.3",
         "@npmcli/package-json": "^1.0.1",
         "@npmcli/run-script": "^2.0.0",
-        "bin-links": "^2.2.1",
+        "bin-links": "^2.3.0",
         "cacache": "^15.0.3",
         "common-ancestor-path": "^1.0.1",
         "json-parse-even-better-errors": "^2.3.1",
@@ -15341,7 +15333,7 @@
         "npm-package-arg": "^8.1.5",
         "npm-pick-manifest": "^6.1.0",
         "npm-registry-fetch": "^11.0.0",
-        "pacote": "^12.0.0",
+        "pacote": "^12.0.2",
         "parse-conflict-json": "^1.1.1",
         "proc-log": "^1.0.0",
         "promise-all-reject-late": "^1.0.0",
@@ -15411,9 +15403,9 @@
       }
     },
     "@npmcli/map-workspaces": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-1.0.3.tgz",
-      "integrity": "sha512-SdlRlOoQw4WKD4vtb/n5gUkobEABYBEOo8fRE4L8CtBkyWDSvIrReTfKvQ/Jc/LQqDaaZ5iv1iMSQzKCUr1n1A==",
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/@npmcli/map-workspaces/-/map-workspaces-2.0.0.tgz",
+      "integrity": "sha512-QBJfpCY1NOAkkW3lFfru9VTdqvMB2TN0/vrevl5xBCv5Fi0XDVcA6rqqSau4Ysi4Iw3fBzyXV7hzyTBDfadf7g==",
       "requires": {
         "@npmcli/name-from-folder": "^1.0.1",
         "glob": "^7.1.6",
@@ -16001,23 +15993,16 @@
       "integrity": "sha512-vyL2OymJxmarO8gxMr0mhChsO9QGwhynfuu4+MHTAW6czfq9humCB7rKpUjDd9YUiDPU4mzpyupFSvOClAwbmQ=="
     },
     "bin-links": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/bin-links/-/bin-links-2.2.1.tgz",
-      "integrity": "sha512-wFzVTqavpgCCYAh8SVBdnZdiQMxTkGR+T3b14CNpBXIBe2neJWaMGAZ55XWWHELJJ89dscuq0VCBqcVaIOgCMg==",
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/bin-links/-/bin-links-2.3.0.tgz",
+      "integrity": "sha512-JzrOLHLwX2zMqKdyYZjkDgQGT+kHDkIhv2/IK2lJ00qLxV4TmFoHi8drDBb6H5Zrz1YfgHkai4e2MGPqnoUhqA==",
       "requires": {
         "cmd-shim": "^4.0.1",
-        "mkdirp": "^1.0.3",
+        "mkdirp-infer-owner": "^2.0.0",
         "npm-normalize-package-bin": "^1.0.0",
         "read-cmd-shim": "^2.0.0",
         "rimraf": "^3.0.0",
         "write-file-atomic": "^3.0.3"
-      },
-      "dependencies": {
-        "mkdirp": {
-          "version": "1.0.4",
-          "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
-          "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw=="
-        }
       }
     },
     "bl": {
@@ -17605,9 +17590,9 @@
       "dev": true
     },
     "ignore-walk": {
-      "version": "3.0.4",
-      "resolved": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-3.0.4.tgz",
-      "integrity": "sha512-PY6Ii8o1jMRA1z4F2hRkH/xN59ox43DavKvD3oDpfurRlOJyAHpifIwpbdv1n4jt4ov0jSpw3kQ4GhJnpBL6WQ==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-4.0.1.tgz",
+      "integrity": "sha512-rzDQLaW4jQbh2YrOFlJdCtX8qgJTehFRYiUB2r1osqTeDzV/3+Jh8fz1oAPzUThf3iku8Ds4IDqawI5d8mUiQw==",
       "requires": {
         "minimatch": "^3.0.4"
       }
@@ -23160,12 +23145,12 @@
       }
     },
     "npm-packlist": {
-      "version": "2.2.2",
-      "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-2.2.2.tgz",
-      "integrity": "sha512-Jt01acDvJRhJGthnUJVF/w6gumWOZxO7IkpY/lsX9//zqQgnF7OJaxgQXcerd4uQOLu7W5bkb4mChL9mdfm+Zg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-3.0.0.tgz",
+      "integrity": "sha512-L/cbzmutAwII5glUcf2DBRNY/d0TFd4e/FnaZigJV6JD85RHZXJFGwCndjMWiiViiWSsWt3tiOLpI3ByTnIdFQ==",
       "requires": {
         "glob": "^7.1.6",
-        "ignore-walk": "^3.0.3",
+        "ignore-walk": "^4.0.1",
         "npm-bundled": "^1.1.1",
         "npm-normalize-package-bin": "^1.0.1"
       }
@@ -23388,9 +23373,9 @@
       "dev": true
     },
     "pacote": {
-      "version": "12.0.0",
-      "resolved": "https://registry.npmjs.org/pacote/-/pacote-12.0.0.tgz",
-      "integrity": "sha512-5DnYqZU0w7GIskuc5yXii1kKpQS2fsaxCaI0FXRsMULXB06lXnZpRdV7JC1TTcQN5uy62h4VWS4WMPYGWu3MYg==",
+      "version": "12.0.2",
+      "resolved": "https://registry.npmjs.org/pacote/-/pacote-12.0.2.tgz",
+      "integrity": "sha512-Ar3mhjcxhMzk+OVZ8pbnXdb0l8+pimvlsqBGRNkble2NVgyqOGE3yrCGi/lAYq7E7NRDMz89R1Wx5HIMCGgeYg==",
       "requires": {
         "@npmcli/git": "^2.1.0",
         "@npmcli/installed-package-contents": "^1.0.6",
@@ -23403,7 +23388,7 @@
         "minipass": "^3.1.3",
         "mkdirp": "^1.0.3",
         "npm-package-arg": "^8.0.1",
-        "npm-packlist": "^2.1.4",
+        "npm-packlist": "^3.0.0",
         "npm-pick-manifest": "^6.0.0",
         "npm-registry-fetch": "^11.0.0",
         "promise-retry": "^2.0.1",

data/helpers/package.json

@@ -10,7 +10,7 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^3.0.0",
+    "@npmcli/arborist": "^4.0.5",
     "detect-indent": "^6.1.0",
     "npm": "6.14.14",
     "semver": "^7.3.4"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.165.0
+  version: 0.168.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-08 00:00:00.000000000 Z
+date: 2021-11-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.165.0
+        version: 0.168.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.165.0
+        version: 0.168.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement