dependabot-npm_and_yarn 0.250.0 → 0.252.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9720ff3635c00dcd1ea68e9f898b8e5a716f0379f19ffd345605df678f0626a2
-  data.tar.gz: a5a3aaa35195696fc1016dae1d6eefb374a8a4e017a3278f17162a337fe00551
+  metadata.gz: e0ff6c62e39f63003756cfcfe4d82fc03e9a0abe3ea0d52a38bfac6f2fa31eb6
+  data.tar.gz: 649164d06d81d932b8dccdb4c34b47ba84c7643646eb9a9e91c69dad2bef0a02
 SHA512:
-  metadata.gz: 2accb24fcb1bcb4032641a3ff5dd8b8dcb817f1727f380dc686fa0e4f95221ad4c1c271a33b1709e70aa355ec2f4f1348e9e5c501369be49e0620ce56d1f72b9
-  data.tar.gz: 7e1dfeb34efcf438d6dab402fa678eca690f9631df8efbbf1cc0efdab8e95bbacff814fe714bcf614dafaf0281cbc32d97b67d0187744994991ae70de57b1d89
+  metadata.gz: dfb6b077b8432491384c7911253273b5e25058dbf9fb422965112352db0a9156140c44adb54c0a6cfcd448c8a1c813b742d258cffcfe56618875d222ce69e194
+  data.tar.gz: 1279b961fb72bb77c4f9cd9e38ec49b8900e5dd54d166856cec735fbdc844b01393edfbce0d1792277289127bcd0ea85aceeec23a965870753169a33b9d10ac3

data/lib/dependabot/npm_and_yarn/file_updater/yarn_lockfile_updater.rb

@@ -372,8 +372,9 @@ module Dependabot
         end
 
         def sanitize_yarnrc_content(content)
-          # Replace all "${...}" and ${...} occurrences with empty strings
-          content.gsub(/\"\$\{.*?\}\"/, '""').gsub(/\$\{.*?\}/, '""')
+          # Replace all "${...}" and ${...} occurrences with dummy strings. We use
+          # dummy strings instead of empty strings to prevent issues with npmAlwaysAuth
+          content.gsub(/"\$\{.*?}"/, '"DUMMYCREDS"').gsub(/\$\{.*?}/, '"DUMMYCREDS"')
         end
 
         def clean_npmrc_in_path(yarn_lock)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.250.0
+  version: 0.252.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-04-02 00:00:00.000000000 Z
+date: 2024-04-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.250.0
+        version: 0.252.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.250.0
+        version: 0.252.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -338,7 +338,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.250.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.252.0
 post_install_message: 
 rdoc_options: []
 require_paths: