dependabot-npm_and_yarn 0.236.0 → 0.238.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (24) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/lib/pnpm/lockfile-parser.js +1 -0
  3. data/helpers/package-lock.json +314 -1019
  4. data/helpers/package.json +5 -5
  5. data/lib/dependabot/npm_and_yarn/file_fetcher.rb +25 -10
  6. data/lib/dependabot/npm_and_yarn/file_parser/json_lock.rb +1 -1
  7. data/lib/dependabot/npm_and_yarn/file_parser/lockfile_parser.rb +1 -1
  8. data/lib/dependabot/npm_and_yarn/file_parser/pnpm_lock.rb +1 -1
  9. data/lib/dependabot/npm_and_yarn/file_parser/yarn_lock.rb +1 -1
  10. data/lib/dependabot/npm_and_yarn/file_parser.rb +29 -62
  11. data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb +15 -21
  12. data/lib/dependabot/npm_and_yarn/file_updater/npmrc_builder.rb +45 -28
  13. data/lib/dependabot/npm_and_yarn/file_updater/package_json_preparer.rb +6 -8
  14. data/lib/dependabot/npm_and_yarn/file_updater/package_json_updater.rb +1 -1
  15. data/lib/dependabot/npm_and_yarn/file_updater/pnpm_lockfile_updater.rb +22 -8
  16. data/lib/dependabot/npm_and_yarn/file_updater/yarn_lockfile_updater.rb +6 -5
  17. data/lib/dependabot/npm_and_yarn/helpers.rb +51 -16
  18. data/lib/dependabot/npm_and_yarn/package_manager.rb +4 -4
  19. data/lib/dependabot/npm_and_yarn/registry_parser.rb +75 -0
  20. data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb +15 -8
  21. data/lib/dependabot/npm_and_yarn/update_checker/registry_finder.rb +100 -69
  22. data/lib/dependabot/npm_and_yarn/update_checker/vulnerability_auditor.rb +1 -10
  23. data/lib/dependabot/npm_and_yarn/update_checker.rb +1 -2
  24. metadata +22 -7
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bafddbe8b9f7271bfe627a801e033b06e68322bdc779ec03201219695fadc3d3
4
- data.tar.gz: 00d80f7d9354519ecffa4eb204ded84b97a504c99dc730f9dcd26b06ed1fbf3a
3
+ metadata.gz: e2c0db164e5243272120c361db0a1225b2e972b42646f2c0a9b472bbab1b786f
4
+ data.tar.gz: 9333c5f3367afae8b6838fd8e538f194b49a47b28fd4d9426fd298e729c935ac
5
5
  SHA512:
6
- metadata.gz: 4f4ae8c26775b215b5cafc160cd21997a1dd7cf42281108e6648eab93817c3b804948fdcc3e51906d9167aa84cf0f09aaa8085348bc2ef5db3e3a659057fd61f
7
- data.tar.gz: 965c3fab89f25c9117cbfba819fa80db7c3ffb1c72ef0f1f6a24ff9708465a68f43d9574804a9a6abf81040b46db51fa7a83870e3544892a71a9a9f418971507
6
+ metadata.gz: dfda845d386da030ff4264f4a2640fa51719e14884b898b0f46239416ce13a2f53d78662231a5ca094cc53c448d46b47a26faf9c5d7b1b2cb003c1b30c915059
7
+ data.tar.gz: 6edce2ecfd1ff4fd52f2944956869730f31e2d6754ef9dbf8f29a6723f187a8e4f245cb563faf908151a84d62dfcf443b9e74ff1e861e33c44b67ece804aba28
data/helpers/lib/pnpm/lockfile-parser.js CHANGED
@@ -68,6 +68,7 @@ function nameVerDevFromPkgSnapshot(depPath, pkgSnapshot, projectSnapshots) {
68
68
  return {
69
69
  name: name,
70
70
  version: version,
71
+ resolved: pkgSnapshot.resolution.tarball,
71
72
  dev: pkgSnapshot.dev,
72
73
  specifiers: specifiers,
73
74
  aliased: aliased