dependabot-npm_and_yarn 0.220.0 → 0.221.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package-lock.json +103 -85
  3. data/helpers/package.json +1 -1
  4. data/lib/dependabot/npm_and_yarn/file_fetcher.rb +2 -3
  5. data/lib/dependabot/npm_and_yarn/file_parser.rb +1 -1
  6. data/lib/dependabot/npm_and_yarn/file_updater.rb +8 -7
  7. metadata +7 -35
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 93ebaa6a616eb04bbb5d2f78a3b2692470f4e68696940b34639b4334510a8445
4
- data.tar.gz: 22631320d6472316705e1358a5ed897ef548ce524a8115299da6e16a7da90a40
3
+ metadata.gz: 7e5c7c9dddbce26c14fb4085256324df19b26bc63c4dd8b78f1457f3d518a6ed
4
+ data.tar.gz: d7e6cc580f57b8d073eb5df4c8d5b477d5c6d331b9441efa07928fda6e2df3bb
5
5
  SHA512:
6
- metadata.gz: 44a2c05125bbe649041869978fda8642b991d81f08a40186230926273485ccbad3a0fbe45bf6afabfab3ba5fa14421f56971af685e7e6d297769f797a0301a38
7
- data.tar.gz: b0919b5a83202711ec5c6b6ccc005cb6d4de8d64e2ef5ab24d6298ffe4fc7b6f1852c7fd5da0d74edf3f640755a210eec1f6eb0a1a024e3845e2ffca52f675f5
6
+ metadata.gz: faf0f5096717839eb4cc575baa416a0965ce4a330153cc3f51c3c296ac48d3b2d26124de324a5c75de0107b2a686736c555ece2f6a3c145c0d8d88d820a7334a
7
+ data.tar.gz: a1fba258b6f4b3394e9177564496621daa729aef814e3b51f88dc8e401eadeece1b3aa58a7ebb7c0c7e4161b99042008174df7cfa71777085ec8d41f8cb98881
data/helpers/package-lock.json CHANGED
@@ -9,7 +9,7 @@
9
9
  "@dependabot/yarn-lib": "^1.22.19",
10
10
  "@npmcli/arborist": "^6.2.7",
11
11
  "@pnpm/dependency-path": "^2.1.1",
12
- "@pnpm/lockfile-file": "^8.0.2",
12
+ "@pnpm/lockfile-file": "^8.1.1",
13
13
  "detect-indent": "^6.1.0",
14
14
  "nock": "^13.3.0",
15
15
  "npm": "6.14.18",
@@ -2142,9 +2142,9 @@
2142
2142
  }
2143
2143
  },
2144
2144
  "node_modules/@pnpm/constants": {
2145
- "version": "7.0.0",
2146
- "resolved": "https://registry.npmjs.org/@pnpm/constants/-/constants-7.0.0.tgz",
2147
- "integrity": "sha512-YA2EO2+uKrDWhtEhsbLdArJwQBr1n5VpCJzz+cLLQ98gbSKCOHAR8qwbn1wChcZitTVAr0HVyxO146nL/wujXg==",
2145
+ "version": "7.1.1",
2146
+ "resolved": "https://registry.npmjs.org/@pnpm/constants/-/constants-7.1.1.tgz",
2147
+ "integrity": "sha512-31pZqMtjwV+Vaq7MaPrT1EoDFSYwye3dp6BiHIGRJmVThCQwySRKM7hCvqqI94epNkqFAAYoWrNynWoRYosGdw==",
2148
2148
  "engines": {
2149
2149
  "node": ">=16.14"
2150
2150
  },
@@ -2167,14 +2167,14 @@
2167
2167
  }
2168
2168
  },
2169
2169
  "node_modules/@pnpm/dependency-path": {
2170
- "version": "2.1.1",
2171
- "resolved": "https://registry.npmjs.org/@pnpm/dependency-path/-/dependency-path-2.1.1.tgz",
2172
- "integrity": "sha512-nm0uVPyzxEW+pY1XZARgXdnPZ034UO9ISKOKCkAIBySCu5RVIU1IhO31u/rikJojXmSRvh5Wr8WImZP2jCgypw==",
2170
+ "version": "2.1.2",
2171
+ "resolved": "https://registry.npmjs.org/@pnpm/dependency-path/-/dependency-path-2.1.2.tgz",
2172
+ "integrity": "sha512-BXEMdGHZG2y8z7hZAVn+r0z+IdszFZbVPpAp3xyDH3gDN30A4HCVhhCUUf0mthqQZsT131jK4HW82EUwEiW01A==",
2173
2173
  "dependencies": {
2174
2174
  "@pnpm/crypto.base32-hash": "2.0.0",
2175
- "@pnpm/types": "9.0.0",
2175
+ "@pnpm/types": "9.1.0",
2176
2176
  "encode-registry": "^3.0.0",
2177
- "semver": "^7.4.0"
2177
+ "semver": "^7.5.0"
2178
2178
  },
2179
2179
  "engines": {
2180
2180
  "node": ">=16.14"
@@ -2184,11 +2184,11 @@
2184
2184
  }
2185
2185
  },
2186
2186
  "node_modules/@pnpm/error": {
2187
- "version": "5.0.0",
2188
- "resolved": "https://registry.npmjs.org/@pnpm/error/-/error-5.0.0.tgz",
2189
- "integrity": "sha512-8Bezq6YSSorPyaiQIr3lWF7hTIuatBTPWVCO7rbgJAGw4pq6t3DmLoN2K3EznVHMBIaqEBmkfB1lkKvXaJIVbw==",
2187
+ "version": "5.0.2",
2188
+ "resolved": "https://registry.npmjs.org/@pnpm/error/-/error-5.0.2.tgz",
2189
+ "integrity": "sha512-0TEm+tWNYm+9uh6DSKyRbv8pv/6b4NL0PastLvMxIoqZbBZ5Zj1cYi332R9xsSUi31ZOsu2wpgn/bC7DA9hrjg==",
2190
2190
  "dependencies": {
2191
- "@pnpm/constants": "7.0.0"
2191
+ "@pnpm/constants": "7.1.1"
2192
2192
  },
2193
2193
  "engines": {
2194
2194
  "node": ">=16.14"
@@ -2248,27 +2248,27 @@
2248
2248
  }
2249
2249
  },
2250
2250
  "node_modules/@pnpm/lockfile-file": {
2251
- "version": "8.0.2",
2252
- "resolved": "https://registry.npmjs.org/@pnpm/lockfile-file/-/lockfile-file-8.0.2.tgz",
2253
- "integrity": "sha512-V4PA48Q/ZqTu5PkSLX7/H8nCS8gmKUICIDFQRRxpoHF8iv54s01chd9uGwuj1ifO8NQPID0R0zh613/oKSL32A==",
2251
+ "version": "8.1.1",
2252
+ "resolved": "https://registry.npmjs.org/@pnpm/lockfile-file/-/lockfile-file-8.1.1.tgz",
2253
+ "integrity": "sha512-voot73D3aQ9Mcegco+m+yvr3WqM3IHhUMQWCO2ggm6JNfwnQ6rSXzCytomM4W29Nh/Y1A6HemxtS/K7nImu/TA==",
2254
2254
  "dependencies": {
2255
- "@pnpm/constants": "7.0.0",
2256
- "@pnpm/dependency-path": "2.1.1",
2257
- "@pnpm/error": "5.0.0",
2255
+ "@pnpm/constants": "7.1.1",
2256
+ "@pnpm/dependency-path": "2.1.2",
2257
+ "@pnpm/error": "5.0.2",
2258
2258
  "@pnpm/git-utils": "1.0.0",
2259
- "@pnpm/lockfile-types": "5.0.0",
2260
- "@pnpm/merge-lockfile-changes": "5.0.1",
2261
- "@pnpm/types": "9.0.0",
2259
+ "@pnpm/lockfile-types": "5.1.0",
2260
+ "@pnpm/merge-lockfile-changes": "5.0.2",
2261
+ "@pnpm/types": "9.1.0",
2262
2262
  "@pnpm/util.lex-comparator": "1.0.0",
2263
2263
  "@zkochan/rimraf": "^2.1.2",
2264
2264
  "comver-to-semver": "^1.0.0",
2265
2265
  "js-yaml": "npm:@zkochan/js-yaml@0.0.6",
2266
2266
  "normalize-path": "^3.0.0",
2267
2267
  "ramda": "npm:@pnpm/ramda@0.28.1",
2268
- "semver": "^7.4.0",
2268
+ "semver": "^7.5.1",
2269
2269
  "sort-keys": "^4.2.0",
2270
2270
  "strip-bom": "^4.0.0",
2271
- "write-file-atomic": "^5.0.0"
2271
+ "write-file-atomic": "^5.0.1"
2272
2272
  },
2273
2273
  "engines": {
2274
2274
  "node": ">=16.14"
@@ -2328,11 +2328,11 @@
2328
2328
  }
2329
2329
  },
2330
2330
  "node_modules/@pnpm/lockfile-types": {
2331
- "version": "5.0.0",
2332
- "resolved": "https://registry.npmjs.org/@pnpm/lockfile-types/-/lockfile-types-5.0.0.tgz",
2333
- "integrity": "sha512-2M82hciNNIczVtWmQF3eSXPFVWvGWBvq+vssBkSIP0tZW/izYyvkUf2NN8ktNrB/w0jDCVEzujC6RXiRR9b1bg==",
2331
+ "version": "5.1.0",
2332
+ "resolved": "https://registry.npmjs.org/@pnpm/lockfile-types/-/lockfile-types-5.1.0.tgz",
2333
+ "integrity": "sha512-14eYp9iOdJ7SyOIVXomXhbVnc14DEhzMLS3eKqxYxi9LkANUfxx1/pwRiRY/lTiP9RFS+OkIcTm2QiLsmNEctw==",
2334
2334
  "dependencies": {
2335
- "@pnpm/types": "9.0.0"
2335
+ "@pnpm/types": "9.1.0"
2336
2336
  },
2337
2337
  "engines": {
2338
2338
  "node": ">=16.14"
@@ -2355,14 +2355,14 @@
2355
2355
  }
2356
2356
  },
2357
2357
  "node_modules/@pnpm/merge-lockfile-changes": {
2358
- "version": "5.0.1",
2359
- "resolved": "https://registry.npmjs.org/@pnpm/merge-lockfile-changes/-/merge-lockfile-changes-5.0.1.tgz",
2360
- "integrity": "sha512-qYu/S2PT+FA1CuBStqdit1ywO35lMkw4gb6jTTSo4PNTcsAycrmiXQ8Q/LzXM7hW/zhz1S4Xs2DwnCvUbe59Ww==",
2358
+ "version": "5.0.2",
2359
+ "resolved": "https://registry.npmjs.org/@pnpm/merge-lockfile-changes/-/merge-lockfile-changes-5.0.2.tgz",
2360
+ "integrity": "sha512-cswnzLUxumc1MzZp7ZxEiyV9LvEne4h2AtvSwtjdx8BU/+vbj/kjvBueqPw1t+QJl/lual9Kmem0hQaL8v57wQ==",
2361
2361
  "dependencies": {
2362
- "@pnpm/lockfile-types": "5.0.0",
2362
+ "@pnpm/lockfile-types": "5.1.0",
2363
2363
  "comver-to-semver": "^1.0.0",
2364
2364
  "ramda": "npm:@pnpm/ramda@0.28.1",
2365
- "semver": "^7.4.0"
2365
+ "semver": "^7.5.0"
2366
2366
  },
2367
2367
  "engines": {
2368
2368
  "node": ">=16.14"
@@ -2372,9 +2372,9 @@
2372
2372
  }
2373
2373
  },
2374
2374
  "node_modules/@pnpm/types": {
2375
- "version": "9.0.0",
2376
- "resolved": "https://registry.npmjs.org/@pnpm/types/-/types-9.0.0.tgz",
2377
- "integrity": "sha512-+nNqpNvqb1u3WW/cHDo7tGjqJBWWe4GAHEdELrz4QMQwGAtG/1GF6NMc0cewdwgU2k67CI3JHGu4quZJnMEUJg==",
2375
+ "version": "9.1.0",
2376
+ "resolved": "https://registry.npmjs.org/@pnpm/types/-/types-9.1.0.tgz",
2377
+ "integrity": "sha512-MMPDMLOY17bfNhLhR9Qmq6/2keoocnR5DWXZfZDC4dKXugrMsE1jB6RnuU8swJIo4zyCsMT/iVSAtl/XK+9Z+A==",
2378
2378
  "engines": {
2379
2379
  "node": ">=16.14"
2380
2380
  },
@@ -14228,9 +14228,9 @@
14228
14228
  "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
14229
14229
  },
14230
14230
  "node_modules/semver": {
14231
- "version": "7.4.0",
14232
- "resolved": "https://registry.npmjs.org/semver/-/semver-7.4.0.tgz",
14233
- "integrity": "sha512-RgOxM8Mw+7Zus0+zcLEUn8+JfoLpj/huFTItQy2hsM4khuC1HYRDp0cU482Ewn/Fcy6bCjufD8vAj7voC66KQw==",
14231
+ "version": "7.5.2",
14232
+ "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.2.tgz",
14233
+ "integrity": "sha512-SoftuTROv/cRjCze/scjGyiDtcUyxw1rgYQSZY7XTmtR5hX+dm76iDbTH8TkLPHCQmlbQVSSbNZCPM2hb0knnQ==",
14234
14234
  "dependencies": {
14235
14235
  "lru-cache": "^6.0.0"
14236
14236
  },
@@ -15294,17 +15294,28 @@
15294
15294
  "integrity": "sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8="
15295
15295
  },
15296
15296
  "node_modules/write-file-atomic": {
15297
- "version": "5.0.0",
15298
- "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-5.0.0.tgz",
15299
- "integrity": "sha512-R7NYMnHSlV42K54lwY9lvW6MnSm1HSJqZL3xiSgi9E7//FYaI74r2G0rd+/X6VAMkHEdzxQaU5HUOXWUz5kA/w==",
15297
+ "version": "5.0.1",
15298
+ "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-5.0.1.tgz",
15299
+ "integrity": "sha512-+QU2zd6OTD8XWIJCbffaiQeH9U73qIqafo1x6V1snCWYGJf6cVE0cDR4D8xRzcEnfI21IFrUPzPGtcPf8AC+Rw==",
15300
15300
  "dependencies": {
15301
15301
  "imurmurhash": "^0.1.4",
15302
- "signal-exit": "^3.0.7"
15302
+ "signal-exit": "^4.0.1"
15303
15303
  },
15304
15304
  "engines": {
15305
15305
  "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
15306
15306
  }
15307
15307
  },
15308
+ "node_modules/write-file-atomic/node_modules/signal-exit": {
15309
+ "version": "4.0.2",
15310
+ "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.0.2.tgz",
15311
+ "integrity": "sha512-MY2/qGx4enyjprQnFaZsHib3Yadh3IXyV2C321GY0pjGfVBu4un0uDJkwgdxqO+Rdx8JMT8IfJIRwbYVz3Ob3Q==",
15312
+ "engines": {
15313
+ "node": ">=14"
15314
+ },
15315
+ "funding": {
15316
+ "url": "https://github.com/sponsors/isaacs"
15317
+ }
15318
+ },
15308
15319
  "node_modules/xtend": {
15309
15320
  "version": "4.0.2",
15310
15321
  "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
@@ -17008,9 +17019,9 @@
17008
17019
  }
17009
17020
  },
17010
17021
  "@pnpm/constants": {
17011
- "version": "7.0.0",
17012
- "resolved": "https://registry.npmjs.org/@pnpm/constants/-/constants-7.0.0.tgz",
17013
- "integrity": "sha512-YA2EO2+uKrDWhtEhsbLdArJwQBr1n5VpCJzz+cLLQ98gbSKCOHAR8qwbn1wChcZitTVAr0HVyxO146nL/wujXg=="
17022
+ "version": "7.1.1",
17023
+ "resolved": "https://registry.npmjs.org/@pnpm/constants/-/constants-7.1.1.tgz",
17024
+ "integrity": "sha512-31pZqMtjwV+Vaq7MaPrT1EoDFSYwye3dp6BiHIGRJmVThCQwySRKM7hCvqqI94epNkqFAAYoWrNynWoRYosGdw=="
17014
17025
  },
17015
17026
  "@pnpm/crypto.base32-hash": {
17016
17027
  "version": "2.0.0",
@@ -17021,22 +17032,22 @@
17021
17032
  }
17022
17033
  },
17023
17034
  "@pnpm/dependency-path": {
17024
- "version": "2.1.1",
17025
- "resolved": "https://registry.npmjs.org/@pnpm/dependency-path/-/dependency-path-2.1.1.tgz",
17026
- "integrity": "sha512-nm0uVPyzxEW+pY1XZARgXdnPZ034UO9ISKOKCkAIBySCu5RVIU1IhO31u/rikJojXmSRvh5Wr8WImZP2jCgypw==",
17035
+ "version": "2.1.2",
17036
+ "resolved": "https://registry.npmjs.org/@pnpm/dependency-path/-/dependency-path-2.1.2.tgz",
17037
+ "integrity": "sha512-BXEMdGHZG2y8z7hZAVn+r0z+IdszFZbVPpAp3xyDH3gDN30A4HCVhhCUUf0mthqQZsT131jK4HW82EUwEiW01A==",
17027
17038
  "requires": {
17028
17039
  "@pnpm/crypto.base32-hash": "2.0.0",
17029
- "@pnpm/types": "9.0.0",
17040
+ "@pnpm/types": "9.1.0",
17030
17041
  "encode-registry": "^3.0.0",
17031
- "semver": "^7.4.0"
17042
+ "semver": "^7.5.0"
17032
17043
  }
17033
17044
  },
17034
17045
  "@pnpm/error": {
17035
- "version": "5.0.0",
17036
- "resolved": "https://registry.npmjs.org/@pnpm/error/-/error-5.0.0.tgz",
17037
- "integrity": "sha512-8Bezq6YSSorPyaiQIr3lWF7hTIuatBTPWVCO7rbgJAGw4pq6t3DmLoN2K3EznVHMBIaqEBmkfB1lkKvXaJIVbw==",
17046
+ "version": "5.0.2",
17047
+ "resolved": "https://registry.npmjs.org/@pnpm/error/-/error-5.0.2.tgz",
17048
+ "integrity": "sha512-0TEm+tWNYm+9uh6DSKyRbv8pv/6b4NL0PastLvMxIoqZbBZ5Zj1cYi332R9xsSUi31ZOsu2wpgn/bC7DA9hrjg==",
17038
17049
  "requires": {
17039
- "@pnpm/constants": "7.0.0"
17050
+ "@pnpm/constants": "7.1.1"
17040
17051
  }
17041
17052
  },
17042
17053
  "@pnpm/git-utils": {
@@ -17078,27 +17089,27 @@
17078
17089
  }
17079
17090
  },
17080
17091
  "@pnpm/lockfile-file": {
17081
- "version": "8.0.2",
17082
- "resolved": "https://registry.npmjs.org/@pnpm/lockfile-file/-/lockfile-file-8.0.2.tgz",
17083
- "integrity": "sha512-V4PA48Q/ZqTu5PkSLX7/H8nCS8gmKUICIDFQRRxpoHF8iv54s01chd9uGwuj1ifO8NQPID0R0zh613/oKSL32A==",
17092
+ "version": "8.1.1",
17093
+ "resolved": "https://registry.npmjs.org/@pnpm/lockfile-file/-/lockfile-file-8.1.1.tgz",
17094
+ "integrity": "sha512-voot73D3aQ9Mcegco+m+yvr3WqM3IHhUMQWCO2ggm6JNfwnQ6rSXzCytomM4W29Nh/Y1A6HemxtS/K7nImu/TA==",
17084
17095
  "requires": {
17085
- "@pnpm/constants": "7.0.0",
17086
- "@pnpm/dependency-path": "2.1.1",
17087
- "@pnpm/error": "5.0.0",
17096
+ "@pnpm/constants": "7.1.1",
17097
+ "@pnpm/dependency-path": "2.1.2",
17098
+ "@pnpm/error": "5.0.2",
17088
17099
  "@pnpm/git-utils": "1.0.0",
17089
- "@pnpm/lockfile-types": "5.0.0",
17090
- "@pnpm/merge-lockfile-changes": "5.0.1",
17091
- "@pnpm/types": "9.0.0",
17100
+ "@pnpm/lockfile-types": "5.1.0",
17101
+ "@pnpm/merge-lockfile-changes": "5.0.2",
17102
+ "@pnpm/types": "9.1.0",
17092
17103
  "@pnpm/util.lex-comparator": "1.0.0",
17093
17104
  "@zkochan/rimraf": "^2.1.2",
17094
17105
  "comver-to-semver": "^1.0.0",
17095
17106
  "js-yaml": "npm:@zkochan/js-yaml@0.0.6",
17096
17107
  "normalize-path": "^3.0.0",
17097
17108
  "ramda": "npm:@pnpm/ramda@0.28.1",
17098
- "semver": "^7.4.0",
17109
+ "semver": "^7.5.1",
17099
17110
  "sort-keys": "^4.2.0",
17100
17111
  "strip-bom": "^4.0.0",
17101
- "write-file-atomic": "^5.0.0"
17112
+ "write-file-atomic": "^5.0.1"
17102
17113
  },
17103
17114
  "dependencies": {
17104
17115
  "argparse": {
@@ -17135,11 +17146,11 @@
17135
17146
  }
17136
17147
  },
17137
17148
  "@pnpm/lockfile-types": {
17138
- "version": "5.0.0",
17139
- "resolved": "https://registry.npmjs.org/@pnpm/lockfile-types/-/lockfile-types-5.0.0.tgz",
17140
- "integrity": "sha512-2M82hciNNIczVtWmQF3eSXPFVWvGWBvq+vssBkSIP0tZW/izYyvkUf2NN8ktNrB/w0jDCVEzujC6RXiRR9b1bg==",
17149
+ "version": "5.1.0",
17150
+ "resolved": "https://registry.npmjs.org/@pnpm/lockfile-types/-/lockfile-types-5.1.0.tgz",
17151
+ "integrity": "sha512-14eYp9iOdJ7SyOIVXomXhbVnc14DEhzMLS3eKqxYxi9LkANUfxx1/pwRiRY/lTiP9RFS+OkIcTm2QiLsmNEctw==",
17141
17152
  "requires": {
17142
- "@pnpm/types": "9.0.0"
17153
+ "@pnpm/types": "9.1.0"
17143
17154
  }
17144
17155
  },
17145
17156
  "@pnpm/logger": {
@@ -17153,20 +17164,20 @@
17153
17164
  }
17154
17165
  },
17155
17166
  "@pnpm/merge-lockfile-changes": {
17156
- "version": "5.0.1",
17157
- "resolved": "https://registry.npmjs.org/@pnpm/merge-lockfile-changes/-/merge-lockfile-changes-5.0.1.tgz",
17158
- "integrity": "sha512-qYu/S2PT+FA1CuBStqdit1ywO35lMkw4gb6jTTSo4PNTcsAycrmiXQ8Q/LzXM7hW/zhz1S4Xs2DwnCvUbe59Ww==",
17167
+ "version": "5.0.2",
17168
+ "resolved": "https://registry.npmjs.org/@pnpm/merge-lockfile-changes/-/merge-lockfile-changes-5.0.2.tgz",
17169
+ "integrity": "sha512-cswnzLUxumc1MzZp7ZxEiyV9LvEne4h2AtvSwtjdx8BU/+vbj/kjvBueqPw1t+QJl/lual9Kmem0hQaL8v57wQ==",
17159
17170
  "requires": {
17160
- "@pnpm/lockfile-types": "5.0.0",
17171
+ "@pnpm/lockfile-types": "5.1.0",
17161
17172
  "comver-to-semver": "^1.0.0",
17162
17173
  "ramda": "npm:@pnpm/ramda@0.28.1",
17163
- "semver": "^7.4.0"
17174
+ "semver": "^7.5.0"
17164
17175
  }
17165
17176
  },
17166
17177
  "@pnpm/types": {
17167
- "version": "9.0.0",
17168
- "resolved": "https://registry.npmjs.org/@pnpm/types/-/types-9.0.0.tgz",
17169
- "integrity": "sha512-+nNqpNvqb1u3WW/cHDo7tGjqJBWWe4GAHEdELrz4QMQwGAtG/1GF6NMc0cewdwgU2k67CI3JHGu4quZJnMEUJg=="
17178
+ "version": "9.1.0",
17179
+ "resolved": "https://registry.npmjs.org/@pnpm/types/-/types-9.1.0.tgz",
17180
+ "integrity": "sha512-MMPDMLOY17bfNhLhR9Qmq6/2keoocnR5DWXZfZDC4dKXugrMsE1jB6RnuU8swJIo4zyCsMT/iVSAtl/XK+9Z+A=="
17170
17181
  },
17171
17182
  "@pnpm/util.lex-comparator": {
17172
17183
  "version": "1.0.0",
@@ -26058,9 +26069,9 @@
26058
26069
  "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg=="
26059
26070
  },
26060
26071
  "semver": {
26061
- "version": "7.4.0",
26062
- "resolved": "https://registry.npmjs.org/semver/-/semver-7.4.0.tgz",
26063
- "integrity": "sha512-RgOxM8Mw+7Zus0+zcLEUn8+JfoLpj/huFTItQy2hsM4khuC1HYRDp0cU482Ewn/Fcy6bCjufD8vAj7voC66KQw==",
26072
+ "version": "7.5.2",
26073
+ "resolved": "https://registry.npmjs.org/semver/-/semver-7.5.2.tgz",
26074
+ "integrity": "sha512-SoftuTROv/cRjCze/scjGyiDtcUyxw1rgYQSZY7XTmtR5hX+dm76iDbTH8TkLPHCQmlbQVSSbNZCPM2hb0knnQ==",
26064
26075
  "requires": {
26065
26076
  "lru-cache": "^6.0.0"
26066
26077
  },
@@ -26895,12 +26906,19 @@
26895
26906
  "integrity": "sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8="
26896
26907
  },
26897
26908
  "write-file-atomic": {
26898
- "version": "5.0.0",
26899
- "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-5.0.0.tgz",
26900
- "integrity": "sha512-R7NYMnHSlV42K54lwY9lvW6MnSm1HSJqZL3xiSgi9E7//FYaI74r2G0rd+/X6VAMkHEdzxQaU5HUOXWUz5kA/w==",
26909
+ "version": "5.0.1",
26910
+ "resolved": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-5.0.1.tgz",
26911
+ "integrity": "sha512-+QU2zd6OTD8XWIJCbffaiQeH9U73qIqafo1x6V1snCWYGJf6cVE0cDR4D8xRzcEnfI21IFrUPzPGtcPf8AC+Rw==",
26901
26912
  "requires": {
26902
26913
  "imurmurhash": "^0.1.4",
26903
- "signal-exit": "^3.0.7"
26914
+ "signal-exit": "^4.0.1"
26915
+ },
26916
+ "dependencies": {
26917
+ "signal-exit": {
26918
+ "version": "4.0.2",
26919
+ "resolved": "https://registry.npmjs.org/signal-exit/-/signal-exit-4.0.2.tgz",
26920
+ "integrity": "sha512-MY2/qGx4enyjprQnFaZsHib3Yadh3IXyV2C321GY0pjGfVBu4un0uDJkwgdxqO+Rdx8JMT8IfJIRwbYVz3Ob3Q=="
26921
+ }
26904
26922
  }
26905
26923
  },
26906
26924
  "xtend": {
data/helpers/package.json CHANGED
@@ -14,7 +14,7 @@
14
14
  "detect-indent": "^6.1.0",
15
15
  "nock": "^13.3.0",
16
16
  "npm": "6.14.18",
17
- "@pnpm/lockfile-file": "^8.0.2",
17
+ "@pnpm/lockfile-file": "^8.1.1",
18
18
  "@pnpm/dependency-path": "^2.1.1",
19
19
  "semver": "^7.4.0"
20
20
  },
data/lib/dependabot/npm_and_yarn/file_fetcher.rb CHANGED
@@ -52,7 +52,7 @@ module Dependabot
52
52
  end
53
53
  end
54
54
 
55
- def package_manager_version
55
+ def ecosystem_versions
56
56
  package_managers = {}
57
57
 
58
58
  package_managers["npm"] = Helpers.npm_version_numeric(package_lock.content) if package_lock
@@ -62,7 +62,6 @@ module Dependabot
62
62
  package_managers["unknown"] = 1 if package_managers.empty?
63
63
 
64
64
  {
65
- ecosystem: "npm",
66
65
  package_managers: package_managers
67
66
  }
68
67
  end
@@ -74,7 +73,7 @@ module Dependabot
74
73
  fetched_files << package_json
75
74
  fetched_files += npm_files
76
75
  fetched_files += yarn_files
77
- fetched_files += pnpm_files if Experiments.enabled?(:pnpm_updates)
76
+ fetched_files += pnpm_files
78
77
  fetched_files += lerna_files
79
78
  fetched_files += workspace_package_jsons
80
79
  fetched_files += path_dependencies(fetched_files)
data/lib/dependabot/npm_and_yarn/file_parser.rb CHANGED
@@ -303,7 +303,7 @@ module Dependabot
303
303
  else
304
304
  URI("https://#{details['registry']}")
305
305
  end
306
- resolved_url_host == uri.host
306
+ resolved_url_host == uri.host && resolved_url.include?(details["registry"])
307
307
  end
308
308
 
309
309
  return unless credential_matching_url
data/lib/dependabot/npm_and_yarn/file_updater.rb CHANGED
@@ -3,6 +3,7 @@
3
3
  require "dependabot/file_updaters"
4
4
  require "dependabot/file_updaters/base"
5
5
  require "dependabot/file_updaters/vendor_updater"
6
+ require "dependabot/file_updaters/artifact_updater"
6
7
  require "dependabot/npm_and_yarn/dependency_files_filterer"
7
8
  require "dependabot/npm_and_yarn/sub_dependency_files_filterer"
8
9
 
@@ -63,11 +64,11 @@ module Dependabot
63
64
 
64
65
  def vendor_updated_files(updated_files)
65
66
  base_dir = updated_files.first.directory
66
- pnp_updater.updated_vendor_cache_files(base_directory: base_dir).each do |file|
67
- updated_files << file if file.name == ".pnp.cjs" || file.name == ".pnp.data.json"
67
+ pnp_updater.updated_files(base_directory: base_dir, only_paths: [".pnp.cjs", ".pnp.data.json"]).each do |file|
68
+ updated_files << file
68
69
  end
69
70
  vendor_updater.updated_vendor_cache_files(base_directory: base_dir).each { |file| updated_files << file }
70
- install_state_updater.updated_vendor_cache_files(base_directory: base_dir).each do |file|
71
+ install_state_updater.updated_files(base_directory: base_dir).each do |file|
71
72
  updated_files << file
72
73
  end
73
74
 
@@ -95,16 +96,16 @@ module Dependabot
95
96
  end
96
97
 
97
98
  def install_state_updater
98
- Dependabot::FileUpdaters::VendorUpdater.new(
99
+ Dependabot::FileUpdaters::ArtifactUpdater.new(
99
100
  repo_contents_path: repo_contents_path,
100
- vendor_dir: install_state_path
101
+ target_directory: install_state_path
101
102
  )
102
103
  end
103
104
 
104
105
  def pnp_updater
105
- Dependabot::FileUpdaters::VendorUpdater.new(
106
+ Dependabot::FileUpdaters::ArtifactUpdater.new(
106
107
  repo_contents_path: repo_contents_path,
107
- vendor_dir: "./"
108
+ target_directory: "./"
108
109
  )
109
110
  end
110
111
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.220.0
4
+ version: 0.221.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-06-12 00:00:00.000000000 Z
11
+ date: 2023-07-13 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.220.0
19
+ version: 0.221.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.220.0
26
+ version: 0.221.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - "~>"
32
32
  - !ruby/object:Gem::Version
33
- version: 1.7.1
33
+ version: 1.8.0
34
34
  type: :development
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - "~>"
39
39
  - !ruby/object:Gem::Version
40
- version: 1.7.1
40
+ version: 1.8.0
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: gpgme
43
43
  requirement: !ruby/object:Gem::Requirement
@@ -136,34 +136,6 @@ dependencies:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
138
  version: 1.17.1
139
- - !ruby/object:Gem::Dependency
140
- name: simplecov
141
- requirement: !ruby/object:Gem::Requirement
142
- requirements:
143
- - - "~>"
144
- - !ruby/object:Gem::Version
145
- version: 0.22.0
146
- type: :development
147
- prerelease: false
148
- version_requirements: !ruby/object:Gem::Requirement
149
- requirements:
150
- - - "~>"
151
- - !ruby/object:Gem::Version
152
- version: 0.22.0
153
- - !ruby/object:Gem::Dependency
154
- name: simplecov-console
155
- requirement: !ruby/object:Gem::Requirement
156
- requirements:
157
- - - "~>"
158
- - !ruby/object:Gem::Version
159
- version: 0.9.1
160
- type: :development
161
- prerelease: false
162
- version_requirements: !ruby/object:Gem::Requirement
163
- requirements:
164
- - - "~>"
165
- - !ruby/object:Gem::Version
166
- version: 0.9.1
167
139
  - !ruby/object:Gem::Dependency
168
140
  name: stackprof
169
141
  requirement: !ruby/object:Gem::Requirement
@@ -308,7 +280,7 @@ licenses:
308
280
  - Nonstandard
309
281
  metadata:
310
282
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
311
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.220.0
283
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
312
284
  post_install_message:
313
285
  rdoc_options: []
314
286
  require_paths: