dependabot-npm_and_yarn 0.169.1 → 0.169.5

data/helpers/package.json

@@ -10,16 +10,16 @@
   },
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
-    "@npmcli/arborist": "^4.0.5",
+    "@npmcli/arborist": "^4.1.1",
     "detect-indent": "^6.1.0",
     "npm": "6.14.14",
     "semver": "^7.3.4"
   },
   "devDependencies": {
-    "eslint": "^8.3.0",
+    "eslint": "^8.4.1",
     "eslint-config-prettier": "^8.3.0",
-    "jest": "^27.2.5",
-    "prettier": "^2.4.1",
+    "jest": "^27.4.3",
+    "prettier": "^2.5.1",
     "rimraf": "^3.0.2"
   }
 }

data/lib/dependabot/npm_and_yarn/file_fetcher.rb

@@ -288,14 +288,16 @@ module Dependabot
           if workspace_object.is_a?(Hash)
             workspace_object.values_at("packages", "nohoist").flatten.compact
           elsif workspace_object.is_a?(Array) then workspace_object
-          else [] # Invalid lerna.json, which must not be in use
+          else
+            [] # Invalid lerna.json, which must not be in use
           end
 
         paths_array.flat_map do |path|
           # The packages/!(not-this-package) syntax is unique to Yarn
           if path.include?("*") || path.include?("!(")
             expanded_paths(path)
-          else path
+          else
+            path
           end
         end
       end

data/lib/dependabot/npm_and_yarn/file_parser.rb

@@ -270,7 +270,8 @@ module Dependabot
                    split("#").first
                elsif prefix.include?("bitbucket") then "bitbucket.org"
                elsif prefix.include?("gitlab") then "gitlab.com"
-               else "github.com"
+               else
+                 "github.com"
                end
 
         {
@@ -296,7 +297,8 @@ module Dependabot
             # Sonatype Nexus / Artifactory JFrog format
             resolved_url.split("/#{name}/-/#{name.split('/').last}").first
           elsif (cred_url = url_for_relevant_cred(resolved_url)) then cred_url
-          else resolved_url.split("/")[0..2].join("/")
+          else
+            resolved_url.split("/")[0..2].join("/")
           end
 
         { type: "registry", url: url }

data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb

@@ -750,7 +750,8 @@ module Dependabot
             trimmed_url = url.gsub(/(\d+\.)*tgz$/, "")
             incorrect_url = if url.start_with?("https")
                               trimmed_url.gsub(/^https:/, "http:")
-                            else trimmed_url.gsub(/^http:/, "https:")
+                            else
+                              trimmed_url.gsub(/^http:/, "https:")
                             end
             updated_lockfile_content = updated_lockfile_content.gsub(
               /#{Regexp.quote(incorrect_url)}(?=(\d+\.)*tgz")/,

data/lib/dependabot/npm_and_yarn/file_updater/npmrc_builder.rb

@@ -25,7 +25,8 @@ module Dependabot
           initial_content =
             if npmrc_file then complete_npmrc_from_credentials
             elsif yarnrc_file then build_npmrc_from_yarnrc
-            else build_npmrc_content_from_lockfile
+            else
+              build_npmrc_content_from_lockfile
             end
 
           return initial_content || "" unless registry_credentials.any?

data/lib/dependabot/npm_and_yarn/file_updater/package_json_preparer.rb

@@ -42,7 +42,8 @@ module Dependabot
               workspace_object.values_at("packages", "nohoist").
                 flatten.compact
             elsif workspace_object.is_a?(Array) then workspace_object
-            else raise "Unexpected workspace object"
+            else
+              raise "Unexpected workspace object"
             end
 
           paths_array.each { |path| path.gsub!(%r{^\./}, "") }

data/lib/dependabot/npm_and_yarn/file_updater/yarn_lockfile_updater.rb

@@ -336,7 +336,8 @@ module Dependabot
               workspace_object.values_at("packages", "nohoist").
                 flatten.compact
             elsif workspace_object.is_a?(Array) then workspace_object
-            else raise "Unexpected workspace object"
+            else
+              raise "Unexpected workspace object"
             end
 
           paths_array.each { |path| path.gsub!(%r{^\./}, "") }

data/lib/dependabot/npm_and_yarn/metadata_finder.rb

@@ -197,7 +197,8 @@ module Dependabot
       def dependency_url
         registry_url =
           if new_source.nil? then "https://registry.npmjs.org"
-          else new_source.fetch(:url)
+          else
+            new_source.fetch(:url)
           end
 
         # NPM registries expect slashes to be escaped
@@ -213,7 +214,8 @@ module Dependabot
 
       def dependency_registry
         if new_source.nil? then "registry.npmjs.org"
-        else new_source.fetch(:url).gsub("https://", "").gsub("http://", "")
+        else
+          new_source.fetch(:url).gsub("https://", "").gsub("http://", "")
         end
       end
 

data/lib/dependabot/npm_and_yarn/requirement.rb

@@ -68,7 +68,8 @@ module Dependabot
         elsif req_string.start_with?("^") then convert_caret_req(req_string)
         elsif req_string.include?(" - ") then convert_hyphen_req(req_string)
         elsif req_string.match?(/[<>]/) then req_string
-        else ruby_range(req_string)
+        else
+          ruby_range(req_string)
         end
       end
 
@@ -122,7 +123,8 @@ module Dependabot
           if i < first_non_zero_index then part
           elsif i == first_non_zero_index then (part.to_i + 1).to_s
           elsif i > first_non_zero_index && i == 2 then "0.a"
-          else 0
+          else
+            0
           end
         end.join(".")
 

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -62,7 +62,8 @@ module Dependabot
           secure_versions =
             if specified_dist_tag_requirement?
               [version_from_dist_tags].compact
-            else possible_versions(filter_ignored: false)
+            else
+              possible_versions(filter_ignored: false)
             end
 
           secure_versions = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(secure_versions,

data/lib/dependabot/npm_and_yarn/update_checker/requirements_updater.rb

@@ -178,7 +178,8 @@ module Dependabot
               version_to_be_permitted.segments[index]
             elsif index == index_to_update
               version_to_be_permitted.segments[index] + 1
-            else 0
+            else
+              0
             end
           end.join(".")
         end

data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb

@@ -262,7 +262,8 @@ module Dependabot
                 e.message.scan(YARN_PEER_DEP_ERROR_REGEX) do
                   errors << Regexp.last_match.named_captures
                 end
-              else raise
+              else
+                raise
               end
               errors
             end.compact

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.169.1
+  version: 0.169.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-29 00:00:00.000000000 Z
+date: 2021-12-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.1
+        version: 0.169.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.1
+        version: 0.169.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.23.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.23.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -284,7 +284,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.2.22
+rubygems_version: 3.2.32
 signing_key: 
 specification_version: 4
 summary: JS support for dependabot