dependabot-npm_and_yarn 0.180.3 → 0.181.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/helpers/package-lock.json +1330 -1215
- data/helpers/package.json +6 -6
- data/lib/dependabot/npm_and_yarn/package_name.rb +63 -0
- metadata +35 -6
data/helpers/package.json
CHANGED
@@ -10,16 +10,16 @@
|
|
10
10
|
},
|
11
11
|
"dependencies": {
|
12
12
|
"@dependabot/yarn-lib": "^1.21.1",
|
13
|
-
"@npmcli/arborist": "^5.0.
|
13
|
+
"@npmcli/arborist": "^5.0.6",
|
14
14
|
"detect-indent": "^6.1.0",
|
15
15
|
"npm": "6.14.16",
|
16
|
-
"semver": "^7.3.
|
16
|
+
"semver": "^7.3.7"
|
17
17
|
},
|
18
18
|
"devDependencies": {
|
19
|
-
"eslint": "^8.
|
20
|
-
"eslint-config-prettier": "^8.
|
21
|
-
"jest": "^27.
|
22
|
-
"prettier": "^2.6.
|
19
|
+
"eslint": "^8.13.0",
|
20
|
+
"eslint-config-prettier": "^8.5.0",
|
21
|
+
"jest": "^27.5.1",
|
22
|
+
"prettier": "^2.6.2",
|
23
23
|
"rimraf": "^3.0.2"
|
24
24
|
}
|
25
25
|
}
|
@@ -0,0 +1,63 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
|
3
|
+
module Dependabot
|
4
|
+
module NpmAndYarn
|
5
|
+
class PackageName
|
6
|
+
DEFINITELY_TYPED_SCOPE = /types/i.freeze
|
7
|
+
PACKAGE_NAME_REGEX = %r{
|
8
|
+
\A # beginning of string
|
9
|
+
(?=.{1,214}\z) # enforce length (1 - 214)
|
10
|
+
(@(?<scope>[a-z0-9\-~][a-z0-9\-\._~]*)\/)? # capture 'scope' if present
|
11
|
+
(?<name>[a-z0-9\-~][a-z0-9\-._~]*) # capture package name
|
12
|
+
\z # end of string
|
13
|
+
}xi.freeze # multi-line/case-insensitive
|
14
|
+
|
15
|
+
class InvalidPackageName < StandardError; end
|
16
|
+
|
17
|
+
def initialize(string)
|
18
|
+
match = PACKAGE_NAME_REGEX.match(string.to_s)
|
19
|
+
raise InvalidPackageName unless match
|
20
|
+
|
21
|
+
@scope = match[:scope]
|
22
|
+
@name = match[:name]
|
23
|
+
end
|
24
|
+
|
25
|
+
def to_s
|
26
|
+
if scoped?
|
27
|
+
"@#{@scope}/#{@name}"
|
28
|
+
else
|
29
|
+
@name.to_s
|
30
|
+
end
|
31
|
+
end
|
32
|
+
|
33
|
+
def <=>(other)
|
34
|
+
to_s.casecmp(other.to_s)
|
35
|
+
end
|
36
|
+
|
37
|
+
def eql?(other)
|
38
|
+
to_s.eql?(other.to_s)
|
39
|
+
end
|
40
|
+
|
41
|
+
def types_package_name
|
42
|
+
return self if types_package?
|
43
|
+
|
44
|
+
@types_package_name ||=
|
45
|
+
if scoped?
|
46
|
+
self.class.new("@types/#{@scope}__#{@name}")
|
47
|
+
else
|
48
|
+
self.class.new("@types/#{@name}")
|
49
|
+
end
|
50
|
+
end
|
51
|
+
|
52
|
+
private
|
53
|
+
|
54
|
+
def scoped?
|
55
|
+
!@scope.nil?
|
56
|
+
end
|
57
|
+
|
58
|
+
def types_package?
|
59
|
+
DEFINITELY_TYPED_SCOPE.match?(@scope)
|
60
|
+
end
|
61
|
+
end
|
62
|
+
end
|
63
|
+
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-npm_and_yarn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.181.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-04-
|
11
|
+
date: 2022-04-19 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,28 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.181.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.181.0
|
27
|
+
- !ruby/object:Gem::Dependency
|
28
|
+
name: debase
|
29
|
+
requirement: !ruby/object:Gem::Requirement
|
30
|
+
requirements:
|
31
|
+
- - "~>"
|
32
|
+
- !ruby/object:Gem::Version
|
33
|
+
version: 0.2.4.1
|
34
|
+
type: :development
|
35
|
+
prerelease: false
|
36
|
+
version_requirements: !ruby/object:Gem::Requirement
|
37
|
+
requirements:
|
38
|
+
- - "~>"
|
39
|
+
- !ruby/object:Gem::Version
|
40
|
+
version: 0.2.4.1
|
27
41
|
- !ruby/object:Gem::Dependency
|
28
42
|
name: debug
|
29
43
|
requirement: !ruby/object:Gem::Requirement
|
@@ -100,14 +114,28 @@ dependencies:
|
|
100
114
|
requirements:
|
101
115
|
- - "~>"
|
102
116
|
- !ruby/object:Gem::Version
|
103
|
-
version: 1.
|
117
|
+
version: 1.27.0
|
118
|
+
type: :development
|
119
|
+
prerelease: false
|
120
|
+
version_requirements: !ruby/object:Gem::Requirement
|
121
|
+
requirements:
|
122
|
+
- - "~>"
|
123
|
+
- !ruby/object:Gem::Version
|
124
|
+
version: 1.27.0
|
125
|
+
- !ruby/object:Gem::Dependency
|
126
|
+
name: ruby-debug-ide
|
127
|
+
requirement: !ruby/object:Gem::Requirement
|
128
|
+
requirements:
|
129
|
+
- - "~>"
|
130
|
+
- !ruby/object:Gem::Version
|
131
|
+
version: 0.7.3
|
104
132
|
type: :development
|
105
133
|
prerelease: false
|
106
134
|
version_requirements: !ruby/object:Gem::Requirement
|
107
135
|
requirements:
|
108
136
|
- - "~>"
|
109
137
|
- !ruby/object:Gem::Version
|
110
|
-
version:
|
138
|
+
version: 0.7.3
|
111
139
|
- !ruby/object:Gem::Dependency
|
112
140
|
name: simplecov
|
113
141
|
requirement: !ruby/object:Gem::Requirement
|
@@ -253,6 +281,7 @@ files:
|
|
253
281
|
- lib/dependabot/npm_and_yarn/helpers.rb
|
254
282
|
- lib/dependabot/npm_and_yarn/metadata_finder.rb
|
255
283
|
- lib/dependabot/npm_and_yarn/native_helpers.rb
|
284
|
+
- lib/dependabot/npm_and_yarn/package_name.rb
|
256
285
|
- lib/dependabot/npm_and_yarn/requirement.rb
|
257
286
|
- lib/dependabot/npm_and_yarn/sub_dependency_files_filterer.rb
|
258
287
|
- lib/dependabot/npm_and_yarn/update_checker.rb
|