dependabot-npm_and_yarn 0.181.0 → 0.182.2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package-lock.json +7 -7
  3. data/helpers/package.json +1 -1
  4. data/lib/dependabot/npm_and_yarn/package_name.rb +21 -0
  5. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e4080d59b1325a57af813ef30f178d15039a37cc16f2d361ed82f7cfd1efe8de
4
- data.tar.gz: 063d07b0a7013eb3cac8f352fc951a40fd4851e94811bfd03bdf155d32c468af
3
+ metadata.gz: 001ada02cbd50a731acb844700a39bcd1eb80a0d53103abc47543b712937932a
4
+ data.tar.gz: bed21bb1916744f8ffa24ebe99544a0f7ec274db48da06462f10940756cf7502
5
5
  SHA512:
6
- metadata.gz: 01eb7d3b8fad2fbfe7fe06d2d85054b45c36a822ead04bd8d486ef76394fbe6140c78394c928ce5915587169753ff20856bc751fdbb03419bbb66228fc0689b0
7
- data.tar.gz: 31f21c85ef99fce22bd3e6b80c6f41f9eafba6f810fb59ad2fb4f4fa94204b94064e3dbf3c72f365b3ad608e3792436c9c4cd5ebc9f9f7e291ab03dea29c39c3
6
+ metadata.gz: ea5e0531f00a374455150cd85faf3fd83e7abdcf9df2f97263de26231760bd19d8314d81599ad0c6fad6951ab28d748658795b7457b385dd863e809bf7cd4ab2
7
+ data.tar.gz: 15b28f538b0853ceba70321e8d7c7aef9d624f9938f2557326c9fdeb2fd13bdfdcf27ca509ae06fce8db5b472db186faaf36e912a5d6874249a2eabb7db315bc
data/helpers/package-lock.json CHANGED
@@ -7,7 +7,7 @@
7
7
  "name": "@dependabot/helper",
8
8
  "dependencies": {
9
9
  "@dependabot/yarn-lib": "^1.21.1",
10
- "@npmcli/arborist": "^5.0.6",
10
+ "@npmcli/arborist": "^5.1.0",
11
11
  "detect-indent": "^6.1.0",
12
12
  "npm": "6.14.16",
13
13
  "semver": "^7.3.7"
@@ -1545,9 +1545,9 @@
1545
1545
  }
1546
1546
  },
1547
1547
  "node_modules/@npmcli/arborist": {
1548
- "version": "5.0.6",
1549
- "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.0.6.tgz",
1550
- "integrity": "sha512-byBsiOgwEHb0zeEEYTkyyRiHIkvD/EoNpfUy71mrrMcBMWkaaVJoJHvJHu46MVPgz8WUdqJMwl8HhrHauY/TPg==",
1548
+ "version": "5.1.0",
1549
+ "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.1.0.tgz",
1550
+ "integrity": "sha512-MMutHkOmGyLJTBGXeeZ7khANmjlJtuqHScDATXaxChHMLF6MhAlw2Cca4TXlbeJuq0X1s7wm6ODa/vnBS3DVAw==",
1551
1551
  "dependencies": {
1552
1552
  "@isaacs/string-locale-compare": "^1.1.0",
1553
1553
  "@npmcli/installed-package-contents": "^1.0.7",
@@ -15403,9 +15403,9 @@
15403
15403
  }
15404
15404
  },
15405
15405
  "@npmcli/arborist": {
15406
- "version": "5.0.6",
15407
- "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.0.6.tgz",
15408
- "integrity": "sha512-byBsiOgwEHb0zeEEYTkyyRiHIkvD/EoNpfUy71mrrMcBMWkaaVJoJHvJHu46MVPgz8WUdqJMwl8HhrHauY/TPg==",
15406
+ "version": "5.1.0",
15407
+ "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.1.0.tgz",
15408
+ "integrity": "sha512-MMutHkOmGyLJTBGXeeZ7khANmjlJtuqHScDATXaxChHMLF6MhAlw2Cca4TXlbeJuq0X1s7wm6ODa/vnBS3DVAw==",
15409
15409
  "requires": {
15410
15410
  "@isaacs/string-locale-compare": "^1.1.0",
15411
15411
  "@npmcli/installed-package-contents": "^1.0.7",
data/helpers/package.json CHANGED
@@ -10,7 +10,7 @@
10
10
  },
11
11
  "dependencies": {
12
12
  "@dependabot/yarn-lib": "^1.21.1",
13
- "@npmcli/arborist": "^5.0.6",
13
+ "@npmcli/arborist": "^5.1.0",
14
14
  "detect-indent": "^6.1.0",
15
15
  "npm": "6.14.16",
16
16
  "semver": "^7.3.7"
data/lib/dependabot/npm_and_yarn/package_name.rb CHANGED
@@ -11,6 +11,13 @@ module Dependabot
11
11
  (?<name>[a-z0-9\-~][a-z0-9\-._~]*) # capture package name
12
12
  \z # end of string
13
13
  }xi.freeze # multi-line/case-insensitive
14
+ TYPES_PACKAGE_NAME_REGEX = %r{
15
+ \A # beginning of string
16
+ @#{DEFINITELY_TYPED_SCOPE}\/ # starts with @types/
17
+ ((?<scope>.+)__)? # capture scope
18
+ (?<name>.+) # capture name
19
+ \z # end of string
20
+ }xi.freeze # multi-line/case-insensitive
14
21
 
15
22
  class InvalidPackageName < StandardError; end
16
23
 
@@ -38,6 +45,20 @@ module Dependabot
38
45
  to_s.eql?(other.to_s)
39
46
  end
40
47
 
48
+ def library_name
49
+ return self unless types_package?
50
+
51
+ @library_name ||=
52
+ begin
53
+ match = TYPES_PACKAGE_NAME_REGEX.match(to_s)
54
+ if match[:scope]
55
+ self.class.new("@#{match[:scope]}/#{match[:name]}")
56
+ else
57
+ self.class.new(match[:name].to_s)
58
+ end
59
+ end
60
+ end
61
+
41
62
  def types_package_name
42
63
  return self if types_package?
43
64
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.181.0
4
+ version: 0.182.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-04-19 00:00:00.000000000 Z
11
+ date: 2022-04-25 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.181.0
19
+ version: 0.182.2
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.181.0
26
+ version: 0.182.2
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debase
29
29
  requirement: !ruby/object:Gem::Requirement