dependabot-npm_and_yarn 0.180.0 → 0.180.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0b573607a9a1e0d1dc4b26fac852a8be73d86d83265beb999e9172ff6153e158
-  data.tar.gz: e80a3e36249068d8356a436a12a5684a754ee968394ad314502eb9fc38e7ff9a
+  metadata.gz: f594dd39851f07b3f69937b6cf9348a4c847d622a2c471434ff75a675af6a2ac
+  data.tar.gz: 278613dabfc92b77579d12ced0fd207381d065e0c4fb05183f4c8591a0f8044c
 SHA512:
-  metadata.gz: ec12c9d30028a3e89389471c17302c14fd10af7e49bd44d1f28f2a9360a648e77450d9211e10fd9bd0febe6f17cfe3268bd23ec7682d4e16596f1dd994d02e44
-  data.tar.gz: 3d45cfd273fd14404a139e3fb4c55cc34cb89b77ee3d5e86106b0a6cdfa1a97eb2eacd21279e37ff7b49d4520b04ec4bb3633adcc13c024db0b775a20941dfe2
+  metadata.gz: 50a062f919e5a1cd5f64af8e34ef50a6896c73a976f16f92c816038602416f9fa0ff5a9309c7f5fa9077fc04d9f708f5c59692cf5749cda6e3060444a861b9c7
+  data.tar.gz: 7d763a39ce252fccba60d96f171e4d2b5c746090d9bcb36951f272f018662385597206fe86223e3f7cc96d6e1af8ac42b3a79b89c043bf782168d52e9a98d8e7

data/helpers/package-lock.json

@@ -19,7 +19,7 @@
         "eslint": "^8.7.0",
         "eslint-config-prettier": "^8.3.0",
         "jest": "^27.4.7",
-        "prettier": "^2.5.1",
+        "prettier": "^2.6.0",
         "rimraf": "^3.0.2"
       }
     },
@@ -12451,15 +12451,18 @@
       }
     },
     "node_modules/prettier": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.5.1.tgz",
-      "integrity": "sha512-vBZcPRUR5MZJwoyi3ZoyQlc1rXeEck8KgeC9AwwOn+exuxLxq5toTRDTSaVrXHxelDMHy9zlicw8u66yxoSUFg==",
+      "version": "2.6.0",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.6.0.tgz",
+      "integrity": "sha512-m2FgJibYrBGGgQXNzfd0PuDGShJgRavjUoRCw1mZERIWVSXF0iLzLm+aOqTAbLnC3n6JzUhAA8uZnFVghHJ86A==",
       "dev": true,
       "bin": {
         "prettier": "bin-prettier.js"
       },
       "engines": {
         "node": ">=10.13.0"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
       }
     },
     "node_modules/pretty-format": {
@@ -23571,9 +23574,9 @@
       "integrity": "sha1-gV7R9uvGWSb4ZbMQwHE7yzMVzks="
     },
     "prettier": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.5.1.tgz",
-      "integrity": "sha512-vBZcPRUR5MZJwoyi3ZoyQlc1rXeEck8KgeC9AwwOn+exuxLxq5toTRDTSaVrXHxelDMHy9zlicw8u66yxoSUFg==",
+      "version": "2.6.0",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.6.0.tgz",
+      "integrity": "sha512-m2FgJibYrBGGgQXNzfd0PuDGShJgRavjUoRCw1mZERIWVSXF0iLzLm+aOqTAbLnC3n6JzUhAA8uZnFVghHJ86A==",
       "dev": true
     },
     "pretty-format": {

data/helpers/package.json

@@ -19,7 +19,7 @@
     "eslint": "^8.7.0",
     "eslint-config-prettier": "^8.3.0",
     "jest": "^27.4.7",
-    "prettier": "^2.5.1",
+    "prettier": "^2.6.0",
     "rimraf": "^3.0.2"
   }
 }

data/helpers/run.js

@@ -1,5 +1,7 @@
 #!/usr/bin/env node
 
+const process = require('process');
+
 function output(obj) {
   process.stdout.write(JSON.stringify(obj));
 }

data/lib/dependabot/npm_and_yarn/file_fetcher.rb

@@ -123,7 +123,7 @@ module Dependabot
           filename = path
           # NPM/Yarn support loading path dependencies from tarballs:
           # https://docs.npmjs.com/cli/pack.html
-          filename = File.join(filename, "package.json") unless filename.end_with?(".tgz", ".tar")
+          filename = File.join(filename, "package.json") unless filename.end_with?(".tgz", ".tar", ".tar.gz")
           cleaned_name = Pathname.new(filename).cleanpath.to_path
           next if fetched_files.map(&:name).include?(cleaned_name)
 
@@ -132,7 +132,7 @@ module Dependabot
             package_json_files << file
           rescue Dependabot::DependencyFileNotFound
             # Unfetchable tarballs should not be re-fetched as a package
-            unfetchable_deps << [name, path] unless path.end_with?(".tgz", ".tar")
+            unfetchable_deps << [name, path] unless path.end_with?(".tgz", ".tar", ".tar.gz")
           end
         end
 

data/lib/dependabot/npm_and_yarn/metadata_finder.rb

@@ -122,20 +122,6 @@ module Dependabot
       end
 
       def get_directory(details)
-        source_from_url = Source.from_url(get_url(details))
-        # Special case Gatsby, which specifies directories in URLs.
-        # This can be removed once this PR is merged:
-        # https://github.com/gatsbyjs/gatsby/pull/11145
-        if source_from_url.repo == "gatsbyjs/gatsby" &&
-           get_url(details).match?(%r{tree\/master\/.})
-          return get_url(details).split("tree/master/").last.split("#").first
-        end
-
-        # Special case DefinitelyTyped, which has predictable URLs.
-        # This can be removed once this PR is merged:
-        # https://github.com/Microsoft/types-publisher/pull/578
-        return dependency.name.gsub(/^@/, "") if source_from_url.repo == "DefinitelyTyped/DefinitelyTyped"
-
         # Only return a directory if it is explicitly specified
         return unless details.is_a?(Hash)
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.180.0
+  version: 0.180.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-18 00:00:00.000000000 Z
+date: 2022-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.180.0
+        version: 0.180.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.180.0
+        version: 0.180.3
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.23.0
+        version: 1.26.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.23.0
+        version: 1.26.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement