dependabot-npm_and_yarn 0.221.0 → 0.222.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7e5c7c9dddbce26c14fb4085256324df19b26bc63c4dd8b78f1457f3d518a6ed
-  data.tar.gz: d7e6cc580f57b8d073eb5df4c8d5b477d5c6d331b9441efa07928fda6e2df3bb
+  metadata.gz: d1445fe945c303db512eeb95b3d9a2c4803f15586befa6f57fd2892d14744435
+  data.tar.gz: 5735e7e87c60b2238d7e3acad792c353f6e84e3f8f3f225b677ab2264a75ea8e
 SHA512:
-  metadata.gz: faf0f5096717839eb4cc575baa416a0965ce4a330153cc3f51c3c296ac48d3b2d26124de324a5c75de0107b2a686736c555ece2f6a3c145c0d8d88d820a7334a
-  data.tar.gz: a1fba258b6f4b3394e9177564496621daa729aef814e3b51f88dc8e401eadeece1b3aa58a7ebb7c0c7e4161b99042008174df7cfa71777085ec8d41f8cb98881
+  metadata.gz: 14e58a580cd32a529c1c772c594029c69901227805d8f0245a3e2817d191a56dcf3b31fec75e1fe923acea70858f9c54843f9bdd47a7681d6ef90ae6ad52a9bd
+  data.tar.gz: a4082f1796d39a3139b7be11055e8d7f787f34e3470c18552812d88246934d668419f1137b7665ba7c2c3052d58cc48682351b2b8e3c79fcbf989e53a0441bde

data/lib/dependabot/npm_and_yarn/requirement.rb

@@ -14,7 +14,7 @@ module Dependabot
       quoted = OPS.keys.map { |k| Regexp.quote(k) }.join("|")
       version_pattern = "v?#{NpmAndYarn::Version::VERSION_PATTERN}"
 
-      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*"
+      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*".freeze
       PATTERN = /\A#{PATTERN_RAW}\z/
 
       def self.parse(obj)

data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb

@@ -79,11 +79,12 @@ module Dependabot
           /x
 
         def initialize(dependency:, credentials:, dependency_files:,
-                       latest_allowable_version:, latest_version_finder:, repo_contents_path:)
+                       latest_allowable_version:, latest_version_finder:, repo_contents_path:, dependency_group: nil)
           @dependency               = dependency
           @credentials              = credentials
           @dependency_files         = dependency_files
           @latest_allowable_version = latest_allowable_version
+          @dependency_group = dependency_group
 
           @latest_version_finder = {}
           @latest_version_finder[dependency] = latest_version_finder
@@ -153,7 +154,7 @@ module Dependabot
         private
 
         attr_reader :dependency, :credentials, :dependency_files,
-                    :latest_allowable_version, :repo_contents_path
+                    :latest_allowable_version, :repo_contents_path, :dependency_group
 
         def latest_version_finder(dep)
           @latest_version_finder[dep] ||=
@@ -399,6 +400,17 @@ module Dependabot
                 dep[:requiring_dep_name] == dependency.name
             end
 
+          unless dependency_group.nil?
+            # Ignore unmet peer dependencies that are in the dependency group because
+            # the update is also updating those dependencies.
+            relevant_unmet_peer_dependencies.reject! do |dep|
+              dependency_group.dependencies.any? do |group_dep|
+                dep[:requirement_name] == group_dep.name ||
+                  dep[:requiring_dep_name] == group_dep.name
+              end
+            end
+          end
+
           return [] if relevant_unmet_peer_dependencies.empty?
 
           # Prune out any pre-existing warnings

data/lib/dependabot/npm_and_yarn/update_checker.rb

@@ -330,7 +330,8 @@ module Dependabot
             dependency_files: dependency_files,
             latest_allowable_version: latest_version,
             latest_version_finder: latest_version_finder,
-            repo_contents_path: repo_contents_path
+            repo_contents_path: repo_contents_path,
+            dependency_group: dependency_group
           )
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.221.0
+  version: 0.222.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-13 00:00:00.000000000 Z
+date: 2023-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.222.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.222.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -280,7 +280,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.222.0
 post_install_message: 
 rdoc_options: []
 require_paths: