dependabot-npm_and_yarn 0.243.0 → 0.245.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 5136c94eccfada329b600d35705b57551bed840c1bbb04779effc85df1d4d3c3
4
- data.tar.gz: 28383dc7b14da54c591fb1ed21e0b5dc76048e24e8fedd023fc8cb50a437e510
3
+ metadata.gz: '08ca440632dcb31fd069029c93a25b992b9ebb03b082bf82871d802438c76e26'
4
+ data.tar.gz: bff2c5aa5a3de69d5f9e3dddb15e108bbb9e6e56c414ee920be390fae74e88e2
5
5
  SHA512:
6
- metadata.gz: 25073d44320091a2564534dd91d85e123828ca630cdfe242cf78bb4235d366092778a05f099933e446a87c70b57f5e0758d787953aef018a586c185d643d6f25
7
- data.tar.gz: 346a45d049cc536c8d1de94209790d0e2459e168471e4de08e493c6434b4eff60e4e8179174c690b8e86ec2ba12af66d93a66ab55d74e8e1f0422c648b762ae5
6
+ metadata.gz: 1c0fe93b09e1f6a991ab67961ab6447380b4062941b439ba4191baea11840754ee3ecd797690f3c463133fd2c2aba61312d97af9c7e3064e1cd03bcf40fa52d4
7
+ data.tar.gz: 849d54d8c0e7056f608f457b0f4f63e9146aff22605f16bb88a08ca1833c58f185bc3dfa2e62fe0ee86e3a923521787c7932152b39f6aa7b5e6e606fca07c6eb
@@ -22,7 +22,11 @@ module Dependabot
22
22
  function: "yarn:parseLockfile",
23
23
  args: [Dir.pwd]
24
24
  )
25
- rescue SharedHelpers::HelperSubprocessFailed
25
+ rescue SharedHelpers::HelperSubprocessFailed => e
26
+ raise Dependabot::OutOfDisk, e.message if e.message.end_with?("No space left on device")
27
+ raise Dependabot::OutOfDisk, e.message if e.message.end_with?("Out of diskspace")
28
+ raise Dependabot::OutOfMemory, e.message if e.message.end_with?("MemoryError")
29
+
26
30
  raise Dependabot::DependencyFileNotParseable, @dependency_file.path
27
31
  end
28
32
  end
@@ -45,12 +45,13 @@ module Dependabot
45
45
 
46
46
  attr_reader :resolved_url, :credentials
47
47
 
48
+ # rubocop:disable Metrics/PerceivedComplexity
48
49
  def url_for_relevant_cred
49
50
  resolved_url_host = URI(resolved_url).host
50
51
 
51
52
  credential_matching_url =
52
53
  credentials
53
- .select { |cred| cred["type"] == "npm_registry" }
54
+ .select { |cred| cred["type"] == "npm_registry" && cred["registry"] }
54
55
  .sort_by { |cred| cred["registry"].length }
55
56
  .find do |details|
56
57
  next true if resolved_url_host == details["registry"]
@@ -70,6 +71,7 @@ module Dependabot
70
71
  reg = credential_matching_url["registry"]
71
72
  resolved_url.gsub(/#{Regexp.quote(reg)}.*/, "") + reg
72
73
  end
74
+ # rubocop:enable Metrics/PerceivedComplexity
73
75
  end
74
76
  end
75
77
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.243.0
4
+ version: 0.245.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-02-13 00:00:00.000000000 Z
11
+ date: 2024-02-22 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.243.0
19
+ version: 0.245.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.243.0
26
+ version: 0.245.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -324,7 +324,7 @@ licenses:
324
324
  - Nonstandard
325
325
  metadata:
326
326
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
327
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.243.0
327
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.245.0
328
328
  post_install_message:
329
329
  rdoc_options: []
330
330
  require_paths: