dependabot-npm_and_yarn 0.189.0 → 0.191.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 4eb3662e89f982d144ebf3e38cb01ca906e118bc7ce30560d2f6e0a232ee78f9
|
4
|
+
data.tar.gz: db2e8228c13906e995d9ca33cf47bc2ab51460ec86e7bc1c9abcb355b7cff028
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 0d28c930cfc67555520a4583b5e23db882af3a015c3e1df2b23c626744c8f0a73c2d9c65d7a3b6af4f01be239f8539cd27db05fd32f11ae41d3fdc3528292145
|
7
|
+
data.tar.gz: 1a584c124824f2f6a4a69384ecf984f471ee547d845301dbcfe3f79d5257c223a7d871ee83b04f6a263d23274e472bbe8a6ed7f7c68b64206cffb554d250d7f2
|
@@ -10,7 +10,7 @@
|
|
10
10
|
"left-pad": {
|
11
11
|
"version": "1.1.3",
|
12
12
|
"resolved": "https://registry.npmjs.org/left-pad/-/left-pad-1.1.3.tgz",
|
13
|
-
"integrity": "
|
13
|
+
"integrity": "sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw=="
|
14
14
|
}
|
15
15
|
}
|
16
16
|
}
|
@@ -9,4 +9,4 @@ is-positive@^3.1.0:
|
|
9
9
|
left-pad@^1.1.3:
|
10
10
|
version "1.1.3"
|
11
11
|
resolved "https://registry.yarnpkg.com/left-pad/-/left-pad-1.1.3.tgz#612f61c033f3a9e08e939f1caebeea41b6f3199a"
|
12
|
-
integrity
|
12
|
+
integrity sha512-m3z9QHpSXmd2H8Z5jnSXbGONPty4dFQfH1QpGgivzrEzICgsi50j9S+aGc77EaLoHpbw0BzP5+k1pp2UajTRuw==
|
@@ -3,7 +3,9 @@
|
|
3
3
|
require "json"
|
4
4
|
require "dependabot/file_fetchers"
|
5
5
|
require "dependabot/file_fetchers/base"
|
6
|
+
require "dependabot/npm_and_yarn/helpers"
|
6
7
|
require "dependabot/npm_and_yarn/file_parser"
|
8
|
+
require "dependabot/npm_and_yarn/file_parser/lockfile_parser"
|
7
9
|
|
8
10
|
module Dependabot
|
9
11
|
module NpmAndYarn
|
@@ -43,10 +45,25 @@ module Dependabot
|
|
43
45
|
fetched_files += workspace_package_jsons
|
44
46
|
fetched_files += lerna_packages
|
45
47
|
fetched_files += path_dependencies(fetched_files)
|
48
|
+
instrument_package_manager_version
|
46
49
|
|
47
50
|
fetched_files.uniq
|
48
51
|
end
|
49
52
|
|
53
|
+
def instrument_package_manager_version
|
54
|
+
package_managers = {}
|
55
|
+
|
56
|
+
package_managers["npm"] = Helpers.npm_version_numeric(package_lock.content) if package_lock
|
57
|
+
package_managers["yarn"] = 1 if yarn_lock
|
58
|
+
package_managers["shrinkwrap"] = 1 if shrinkwrap
|
59
|
+
|
60
|
+
Dependabot.instrument(
|
61
|
+
Notifications::FILE_PARSER_PACKAGE_MANAGER_VERSION_PARSED,
|
62
|
+
ecosystem: "npm",
|
63
|
+
package_managers: package_managers
|
64
|
+
)
|
65
|
+
end
|
66
|
+
|
50
67
|
def package_json
|
51
68
|
@package_json ||= fetch_file_from_host("package.json")
|
52
69
|
end
|
@@ -4,12 +4,16 @@ module Dependabot
|
|
4
4
|
module NpmAndYarn
|
5
5
|
module Helpers
|
6
6
|
def self.npm_version(lockfile_content)
|
7
|
-
|
8
|
-
|
7
|
+
"npm#{npm_version_numeric(lockfile_content)}"
|
8
|
+
end
|
9
|
+
|
10
|
+
def self.npm_version_numeric(lockfile_content)
|
11
|
+
return 8 unless lockfile_content
|
12
|
+
return 8 if JSON.parse(lockfile_content)["lockfileVersion"] >= 2
|
9
13
|
|
10
|
-
|
14
|
+
6
|
11
15
|
rescue JSON::ParserError
|
12
|
-
|
16
|
+
6
|
13
17
|
end
|
14
18
|
end
|
15
19
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-npm_and_yarn
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.191.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-06-07 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.191.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.191.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debase
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|