dependabot-npm_and_yarn 0.221.0 → 0.223.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7e5c7c9dddbce26c14fb4085256324df19b26bc63c4dd8b78f1457f3d518a6ed
-  data.tar.gz: d7e6cc580f57b8d073eb5df4c8d5b477d5c6d331b9441efa07928fda6e2df3bb
+  metadata.gz: ff55947e0bd3994dacabd209bd8bc2808883174d0f1a64698ac7e1e13323d040
+  data.tar.gz: 5109ec4834694edd1e0d6d47e7399a957493e1fb2b2b49ede9ebb9edce6fcc9e
 SHA512:
-  metadata.gz: faf0f5096717839eb4cc575baa416a0965ce4a330153cc3f51c3c296ac48d3b2d26124de324a5c75de0107b2a686736c555ece2f6a3c145c0d8d88d820a7334a
-  data.tar.gz: a1fba258b6f4b3394e9177564496621daa729aef814e3b51f88dc8e401eadeece1b3aa58a7ebb7c0c7e4161b99042008174df7cfa71777085ec8d41f8cb98881
+  metadata.gz: e2f094bd80d6d64ffe95c09db9eb3baf1ad17768234f899a01d37cd824b6e5cf4ea56f821f03eda9614a44bfeb5c3b0afe1eaeb2448783c7ca35d9263e1a8318
+  data.tar.gz: dded8305ae9227f108d3e444d87273e2b3fa7be748422828bbd80edc9620b860de29f8a89f2525bae639812b2515442c134e3d710d915d21cff8c5828f915a96

data/lib/dependabot/npm_and_yarn/requirement.rb

@@ -14,7 +14,7 @@ module Dependabot
       quoted = OPS.keys.map { |k| Regexp.quote(k) }.join("|")
       version_pattern = "v?#{NpmAndYarn::Version::VERSION_PATTERN}"
 
-      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*"
+      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*".freeze
       PATTERN = /\A#{PATTERN_RAW}\z/
 
       def self.parse(obj)

data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb

@@ -79,11 +79,12 @@ module Dependabot
           /x
 
         def initialize(dependency:, credentials:, dependency_files:,
-                       latest_allowable_version:, latest_version_finder:, repo_contents_path:)
+                       latest_allowable_version:, latest_version_finder:, repo_contents_path:, dependency_group: nil)
           @dependency               = dependency
           @credentials              = credentials
           @dependency_files         = dependency_files
           @latest_allowable_version = latest_allowable_version
+          @dependency_group = dependency_group
 
           @latest_version_finder = {}
           @latest_version_finder[dependency] = latest_version_finder
@@ -153,7 +154,7 @@ module Dependabot
         private
 
         attr_reader :dependency, :credentials, :dependency_files,
-                    :latest_allowable_version, :repo_contents_path
+                    :latest_allowable_version, :repo_contents_path, :dependency_group
 
         def latest_version_finder(dep)
           @latest_version_finder[dep] ||=
@@ -399,6 +400,17 @@ module Dependabot
                 dep[:requiring_dep_name] == dependency.name
             end
 
+          unless dependency_group.nil?
+            # Ignore unmet peer dependencies that are in the dependency group because
+            # the update is also updating those dependencies.
+            relevant_unmet_peer_dependencies.reject! do |dep|
+              dependency_group.dependencies.any? do |group_dep|
+                dep[:requirement_name] == group_dep.name ||
+                  dep[:requiring_dep_name] == group_dep.name
+              end
+            end
+          end
+
           return [] if relevant_unmet_peer_dependencies.empty?
 
           # Prune out any pre-existing warnings

data/lib/dependabot/npm_and_yarn/update_checker.rb

@@ -330,7 +330,8 @@ module Dependabot
             dependency_files: dependency_files,
             latest_allowable_version: latest_version,
             latest_version_finder: latest_version_finder,
-            repo_contents_path: repo_contents_path
+            repo_contents_path: repo_contents_path,
+            dependency_group: dependency_group
           )
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.221.0
+  version: 0.223.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-13 00:00:00.000000000 Z
+date: 2023-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.223.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.223.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -280,7 +280,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.223.0
 post_install_message: 
 rdoc_options: []
 require_paths: