dependabot-npm_and_yarn 0.192.1 → 0.194.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package-lock.json +26 -26
  3. data/helpers/package.json +2 -2
  4. data/lib/dependabot/npm_and_yarn/package_name.rb +21 -12
  5. metadata +8 -8
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9e4e7528f402410ad33c8df39f69fd750982894b9dd1f5d55eb9a114e1257769
4
- data.tar.gz: 4809a6fb9ada871b7ab4dd6ee17ad54f125a9135a0532bc9ab939f0c532d4645
3
+ metadata.gz: c0a04b2bdbf45e9bca7febc2052b4534d01c00a8bf3d7d893afb87ac2b5960b7
4
+ data.tar.gz: 8d6aa071258257451c443b771bd212fe6ee38ef02b776a1f603574f6049c3bf7
5
5
  SHA512:
6
- metadata.gz: 4aab0c151c26c41b6b4b5645d64bfb951e4533419136475c70f5f36b3bf1aef16ec02fe2fbaf911c91f8e63c65daec6f8061a85c863a09af944425ad8bdd6807
7
- data.tar.gz: 9dbd17d3efd5f27689fa6ef5f8d6c78c558f32a7a3330f286e88176a2d78e8695f07c0cd3d34e92013c679e6d5ea2d9c0e8a9e7d20380ae11fbf439cd1939128
6
+ metadata.gz: 5ee4014411ebfb7856f621cef550996122f20df078a94536dbc58ef3876604d8a95cb80646f5689c675e5ac3287e8a67bc81e5a0a86b974a58f539236f7016d9
7
+ data.tar.gz: fcf294442c74aec5c286f3f2ea5cf0c39f30193623325b621f93fb133df84a9654b032190c07dcc2dae5be5d6d5582f26209709f40443b2a28950192d3e3e0e2
data/helpers/package-lock.json CHANGED
@@ -16,10 +16,10 @@
16
16
  "helper": "run.js"
17
17
  },
18
18
  "devDependencies": {
19
- "eslint": "^8.15.0",
19
+ "eslint": "^8.18.0",
20
20
  "eslint-config-prettier": "^8.5.0",
21
21
  "jest": "^28.1.0",
22
- "prettier": "^2.6.2",
22
+ "prettier": "^2.7.1",
23
23
  "rimraf": "^3.0.2"
24
24
  }
25
25
  },
@@ -652,15 +652,15 @@
652
652
  }
653
653
  },
654
654
  "node_modules/@eslint/eslintrc": {
655
- "version": "1.2.3",
656
- "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.2.3.tgz",
657
- "integrity": "sha512-uGo44hIwoLGNyduRpjdEpovcbMdd+Nv7amtmJxnKmI8xj6yd5LncmSwDa5NgX/41lIFJtkjD6YdVfgEzPfJ5UA==",
655
+ "version": "1.3.0",
656
+ "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.3.0.tgz",
657
+ "integrity": "sha512-UWW0TMTmk2d7hLcWD1/e2g5HDM/HQ3csaLSqXCfqwh4uNDuNqlaKWXmEsL4Cs41Z0KnILNvwbHAah3C2yt06kw==",
658
658
  "dev": true,
659
659
  "dependencies": {
660
660
  "ajv": "^6.12.4",
661
661
  "debug": "^4.3.2",
662
662
  "espree": "^9.3.2",
663
- "globals": "^13.9.0",
663
+ "globals": "^13.15.0",
664
664
  "ignore": "^5.2.0",
665
665
  "import-fresh": "^3.2.1",
666
666
  "js-yaml": "^4.1.0",
@@ -3356,12 +3356,12 @@
3356
3356
  }
3357
3357
  },
3358
3358
  "node_modules/eslint": {
3359
- "version": "8.15.0",
3360
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.15.0.tgz",
3361
- "integrity": "sha512-GG5USZ1jhCu8HJkzGgeK8/+RGnHaNYZGrGDzUtigK3BsGESW/rs2az23XqE0WVwDxy1VRvvjSSGu5nB0Bu+6SA==",
3359
+ "version": "8.18.0",
3360
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.18.0.tgz",
3361
+ "integrity": "sha512-As1EfFMVk7Xc6/CvhssHUjsAQSkpfXvUGMFC3ce8JDe6WvqCgRrLOBQbVpsBFr1X1V+RACOadnzVvcUS5ni2bA==",
3362
3362
  "dev": true,
3363
3363
  "dependencies": {
3364
- "@eslint/eslintrc": "^1.2.3",
3364
+ "@eslint/eslintrc": "^1.3.0",
3365
3365
  "@humanwhocodes/config-array": "^0.9.2",
3366
3366
  "ajv": "^6.10.0",
3367
3367
  "chalk": "^4.0.0",
@@ -3379,7 +3379,7 @@
3379
3379
  "file-entry-cache": "^6.0.1",
3380
3380
  "functional-red-black-tree": "^1.0.1",
3381
3381
  "glob-parent": "^6.0.1",
3382
- "globals": "^13.6.0",
3382
+ "globals": "^13.15.0",
3383
3383
  "ignore": "^5.2.0",
3384
3384
  "import-fresh": "^3.0.0",
3385
3385
  "imurmurhash": "^0.1.4",
@@ -12167,9 +12167,9 @@
12167
12167
  }
12168
12168
  },
12169
12169
  "node_modules/prettier": {
12170
- "version": "2.6.2",
12171
- "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.6.2.tgz",
12172
- "integrity": "sha512-PkUpF+qoXTqhOeWL9fu7As8LXsIUZ1WYaJiY/a7McAQzxjk82OF0tibkFXVCDImZtWxbvojFjerkiLb0/q8mew==",
12170
+ "version": "2.7.1",
12171
+ "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.7.1.tgz",
12172
+ "integrity": "sha512-ujppO+MkdPqoVINuDFDRLClm7D78qbDt0/NR+wp5FqEZOoTNAjPHWj17QRhu7geIHJfcNhRk1XVQmF8Bp3ye+g==",
12173
12173
  "dev": true,
12174
12174
  "bin": {
12175
12175
  "prettier": "bin-prettier.js"
@@ -14222,15 +14222,15 @@
14222
14222
  }
14223
14223
  },
14224
14224
  "@eslint/eslintrc": {
14225
- "version": "1.2.3",
14226
- "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.2.3.tgz",
14227
- "integrity": "sha512-uGo44hIwoLGNyduRpjdEpovcbMdd+Nv7amtmJxnKmI8xj6yd5LncmSwDa5NgX/41lIFJtkjD6YdVfgEzPfJ5UA==",
14225
+ "version": "1.3.0",
14226
+ "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-1.3.0.tgz",
14227
+ "integrity": "sha512-UWW0TMTmk2d7hLcWD1/e2g5HDM/HQ3csaLSqXCfqwh4uNDuNqlaKWXmEsL4Cs41Z0KnILNvwbHAah3C2yt06kw==",
14228
14228
  "dev": true,
14229
14229
  "requires": {
14230
14230
  "ajv": "^6.12.4",
14231
14231
  "debug": "^4.3.2",
14232
14232
  "espree": "^9.3.2",
14233
- "globals": "^13.9.0",
14233
+ "globals": "^13.15.0",
14234
14234
  "ignore": "^5.2.0",
14235
14235
  "import-fresh": "^3.2.1",
14236
14236
  "js-yaml": "^4.1.0",
@@ -16350,12 +16350,12 @@
16350
16350
  "integrity": "sha1-G2HAViGQqN/2rjuyzwIAyhMLhtQ="
16351
16351
  },
16352
16352
  "eslint": {
16353
- "version": "8.15.0",
16354
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.15.0.tgz",
16355
- "integrity": "sha512-GG5USZ1jhCu8HJkzGgeK8/+RGnHaNYZGrGDzUtigK3BsGESW/rs2az23XqE0WVwDxy1VRvvjSSGu5nB0Bu+6SA==",
16353
+ "version": "8.18.0",
16354
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-8.18.0.tgz",
16355
+ "integrity": "sha512-As1EfFMVk7Xc6/CvhssHUjsAQSkpfXvUGMFC3ce8JDe6WvqCgRrLOBQbVpsBFr1X1V+RACOadnzVvcUS5ni2bA==",
16356
16356
  "dev": true,
16357
16357
  "requires": {
16358
- "@eslint/eslintrc": "^1.2.3",
16358
+ "@eslint/eslintrc": "^1.3.0",
16359
16359
  "@humanwhocodes/config-array": "^0.9.2",
16360
16360
  "ajv": "^6.10.0",
16361
16361
  "chalk": "^4.0.0",
@@ -16373,7 +16373,7 @@
16373
16373
  "file-entry-cache": "^6.0.1",
16374
16374
  "functional-red-black-tree": "^1.0.1",
16375
16375
  "glob-parent": "^6.0.1",
16376
- "globals": "^13.6.0",
16376
+ "globals": "^13.15.0",
16377
16377
  "ignore": "^5.2.0",
16378
16378
  "import-fresh": "^3.0.0",
16379
16379
  "imurmurhash": "^0.1.4",
@@ -22908,9 +22908,9 @@
22908
22908
  "integrity": "sha1-gV7R9uvGWSb4ZbMQwHE7yzMVzks="
22909
22909
  },
22910
22910
  "prettier": {
22911
- "version": "2.6.2",
22912
- "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.6.2.tgz",
22913
- "integrity": "sha512-PkUpF+qoXTqhOeWL9fu7As8LXsIUZ1WYaJiY/a7McAQzxjk82OF0tibkFXVCDImZtWxbvojFjerkiLb0/q8mew==",
22911
+ "version": "2.7.1",
22912
+ "resolved": "https://registry.npmjs.org/prettier/-/prettier-2.7.1.tgz",
22913
+ "integrity": "sha512-ujppO+MkdPqoVINuDFDRLClm7D78qbDt0/NR+wp5FqEZOoTNAjPHWj17QRhu7geIHJfcNhRk1XVQmF8Bp3ye+g==",
22914
22914
  "dev": true
22915
22915
  },
22916
22916
  "pretty-format": {
data/helpers/package.json CHANGED
@@ -16,10 +16,10 @@
16
16
  "semver": "^7.3.7"
17
17
  },
18
18
  "devDependencies": {
19
- "eslint": "^8.15.0",
19
+ "eslint": "^8.18.0",
20
20
  "eslint-config-prettier": "^8.5.0",
21
21
  "jest": "^28.1.0",
22
- "prettier": "^2.6.2",
22
+ "prettier": "^2.7.1",
23
23
  "rimraf": "^3.0.2"
24
24
  }
25
25
  }
data/lib/dependabot/npm_and_yarn/package_name.rb CHANGED
@@ -3,21 +3,30 @@
3
3
  module Dependabot
4
4
  module NpmAndYarn
5
5
  class PackageName
6
+ # NPM package naming rules are defined by the following projects:
7
+ # - https://github.com/npm/npm-user-validate
8
+ # - https://github.com/npm/validate-npm-package-name
6
9
  PACKAGE_NAME_REGEX = %r{
7
- \A # beginning of string
8
- (?=.{1,214}\z) # enforce length (1 - 214)
9
- (@(?<scope>[a-z0-9\-~][a-z0-9\-\._~]*)\/)? # capture 'scope' if present
10
- (?<name>[a-z0-9\-~][a-z0-9\-._~]*) # capture package name
11
- \z # end of string
12
- }xi.freeze # multi-line/case-insensitive
10
+ \A # beginning of string
11
+ (?=.{1,214}\z) # enforce length (1 - 214)
12
+ (@(?<scope> # capture 'scope' if present
13
+ (?=[^\.]) # reject leading dot
14
+ [a-z0-9\-\_\.\!\~\*\'\(\)]+ # URL-safe characters
15
+ )\/)?
16
+ (?<name> # capture package name
17
+ (?=[^\.\_]) # reject leading dot or underscore
18
+ [a-z0-9\-\_\.\!\~\*\'\(\)]+ # URL-safe characters
19
+ )
20
+ \z # end of string
21
+ }xi.freeze # multi-line/case-insensitive
13
22
 
14
23
  TYPES_PACKAGE_NAME_REGEX = %r{
15
- \A # beginning of string
16
- @types\/ # starts with @types/
17
- ((?<scope>.+)__)? # capture scope
18
- (?<name>.+) # capture name
19
- \z # end of string
20
- }xi.freeze # multi-line/case-insensitive
24
+ \A # beginning of string
25
+ @types\/ # starts with @types/
26
+ ((?<scope>.+)__)? # capture scope
27
+ (?<name>.+) # capture name
28
+ \z # end of string
29
+ }xi.freeze # multi-line/case-insensitive
21
30
 
22
31
  class InvalidPackageName < StandardError; end
23
32
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.192.1
4
+ version: 0.194.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-06-14 00:00:00.000000000 Z
11
+ date: 2022-06-20 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.192.1
19
+ version: 0.194.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.192.1
26
+ version: 0.194.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debase
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -44,14 +44,14 @@ dependencies:
44
44
  requirements:
45
45
  - - '='
46
46
  - !ruby/object:Gem::Version
47
- version: 0.10.14
47
+ version: 0.10.16
48
48
  type: :development
49
49
  prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
52
  - - '='
53
53
  - !ruby/object:Gem::Version
54
- version: 0.10.14
54
+ version: 0.10.16
55
55
  - !ruby/object:Gem::Dependency
56
56
  name: debug
57
57
  requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
128
128
  requirements:
129
129
  - - "~>"
130
130
  - !ruby/object:Gem::Version
131
- version: 1.29.1
131
+ version: 1.30.1
132
132
  type: :development
133
133
  prerelease: false
134
134
  version_requirements: !ruby/object:Gem::Requirement
135
135
  requirements:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
- version: 1.29.1
138
+ version: 1.30.1
139
139
  - !ruby/object:Gem::Dependency
140
140
  name: ruby-debug-ide
141
141
  requirement: !ruby/object:Gem::Requirement