dependabot-npm_and_yarn 0.252.0 → 0.254.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package-lock.json +364 -310
  3. data/helpers/package.json +6 -6
  4. data/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json +32 -6
  5. data/helpers/test/yarn/fixtures/conflicting-dependency-parser/nested/yarn.lock +26 -15
  6. data/lib/dependabot/npm_and_yarn/file_parser.rb +1 -1
  7. data/lib/dependabot/npm_and_yarn/sub_dependency_files_filterer.rb +1 -1
  8. metadata +15 -29
data/helpers/package.json CHANGED
@@ -10,20 +10,20 @@
10
10
  "postinstall": "patch-package"
11
11
  },
12
12
  "dependencies": {
13
- "@dependabot/yarn-lib": "^1.22.19",
14
- "@npmcli/arborist": "^7.3.1",
13
+ "@dependabot/yarn-lib": "^1.22.22",
14
+ "@npmcli/arborist": "^7.4.2",
15
15
  "detect-indent": "^6.1.0",
16
- "nock": "^13.5.1",
16
+ "nock": "^13.5.4",
17
17
  "npm": "6.14.18",
18
18
  "@pnpm/lockfile-file": "^8.1.6",
19
19
  "@pnpm/dependency-path": "^2.1.1",
20
- "semver": "^7.4.0",
20
+ "semver": "^7.6.0",
21
21
  "patch-package": "^8.0.0"
22
22
  },
23
23
  "devDependencies": {
24
- "eslint": "^8.56.0",
24
+ "eslint": "^9.1.1",
25
25
  "eslint-config-prettier": "^9.1.0",
26
26
  "jest": "^29.7.0",
27
- "prettier": "^3.2.4"
27
+ "prettier": "^3.2.5"
28
28
  }
29
29
  }
data/helpers/test/npm6/fixtures/conflicting-dependency-parser/deeply-nested/package-lock.json CHANGED
@@ -173,13 +173,21 @@
173
173
  }
174
174
  },
175
175
  "es5-ext": {
176
- "version": "0.10.53",
177
- "resolved": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.53.tgz",
178
- "integrity": "sha512-Xs2Stw6NiNHWypzRTY1MtaG/uJlwCk8kH81920ma8mvN8Xq1gsfhZvpkImLQArw8AHnv8MT2I45J3c0R8slE+Q==",
176
+ "version": "0.10.63",
177
+ "resolved": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.63.tgz",
178
+ "integrity": "sha512-hUCZd2Byj/mNKjfP9jXrdVZ62B8KuA/VoK7X8nUh5qT+AxDmcbvZz041oDVZdbIN1qW6XY9VDNwzkvKnZvK2TQ==",
179
179
  "requires": {
180
- "es6-iterator": "~2.0.3",
181
- "es6-symbol": "~3.1.3",
182
- "next-tick": "~1.0.0"
180
+ "es6-iterator": "^2.0.3",
181
+ "es6-symbol": "^3.1.3",
182
+ "esniff": "^2.0.1",
183
+ "next-tick": "^1.1.0"
184
+ },
185
+ "dependencies": {
186
+ "next-tick": {
187
+ "version": "1.1.0",
188
+ "resolved": "https://registry.npmjs.org/next-tick/-/next-tick-1.1.0.tgz",
189
+ "integrity": "sha512-CXdUiJembsNjuToQvxayPZF9Vqht7hewsvy2sOWafLvi2awflj9mOC6bHIg50orX8IJvWKY9wYQ/zB2kogPslQ=="
190
+ }
183
191
  }
184
192
  },
185
193
  "es6-iterator": {
@@ -212,6 +220,24 @@
212
220
  "es6-symbol": "^3.1.1"
213
221
  }
214
222
  },
223
+ "esniff": {
224
+ "version": "2.0.1",
225
+ "resolved": "https://registry.npmjs.org/esniff/-/esniff-2.0.1.tgz",
226
+ "integrity": "sha512-kTUIGKQ/mDPFoJ0oVfcmyJn4iBDRptjNVIzwIFR7tqWXdVI9xfA2RMwY/gbSpJG3lkdWNEjLap/NqVHZiJsdfg==",
227
+ "requires": {
228
+ "d": "^1.0.1",
229
+ "es5-ext": "^0.10.62",
230
+ "event-emitter": "^0.3.5",
231
+ "type": "^2.7.2"
232
+ },
233
+ "dependencies": {
234
+ "type": {
235
+ "version": "2.7.2",
236
+ "resolved": "https://registry.npmjs.org/type/-/type-2.7.2.tgz",
237
+ "integrity": "sha512-dzlvlNlt6AXU7EBSfpAscydQ7gXB+pPGsPnfJnZpiNJBDj7IaJzQlBZYGdEi4R9HmPdBv2XmWJ6YUtoTa7lmCw=="
238
+ }
239
+ }
240
+ },
215
241
  "event-emitter": {
216
242
  "version": "0.3.5",
217
243
  "resolved": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz",
data/helpers/test/yarn/fixtures/conflicting-dependency-parser/nested/yarn.lock CHANGED
@@ -48,16 +48,17 @@ d@1, d@^1.0.1:
48
48
  es5-ext "^0.10.50"
49
49
  type "^1.0.1"
50
50
 
51
- es5-ext@^0.10.35, es5-ext@^0.10.45, es5-ext@^0.10.46, es5-ext@^0.10.50, es5-ext@~0.10.14, es5-ext@~0.10.2, es5-ext@~0.10.46:
52
- version "0.10.53"
53
- resolved "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.53.tgz#93c5a3acfdbef275220ad72644ad02ee18368de1"
54
- integrity sha512-Xs2Stw6NiNHWypzRTY1MtaG/uJlwCk8kH81920ma8mvN8Xq1gsfhZvpkImLQArw8AHnv8MT2I45J3c0R8slE+Q==
51
+ es5-ext@^0.10.35, es5-ext@^0.10.45, es5-ext@^0.10.46, es5-ext@^0.10.50, es5-ext@^0.10.62, es5-ext@~0.10.14, es5-ext@~0.10.2, es5-ext@~0.10.46:
52
+ version "0.10.63"
53
+ resolved "https://registry.yarnpkg.com/es5-ext/-/es5-ext-0.10.63.tgz#9c222a63b6a332ac80b1e373b426af723b895bd6"
54
+ integrity sha512-hUCZd2Byj/mNKjfP9jXrdVZ62B8KuA/VoK7X8nUh5qT+AxDmcbvZz041oDVZdbIN1qW6XY9VDNwzkvKnZvK2TQ==
55
55
  dependencies:
56
- es6-iterator "~2.0.3"
57
- es6-symbol "~3.1.3"
58
- next-tick "~1.0.0"
56
+ es6-iterator "^2.0.3"
57
+ es6-symbol "^3.1.3"
58
+ esniff "^2.0.1"
59
+ next-tick "^1.1.0"
59
60
 
60
- es6-iterator@^2.0.3, es6-iterator@~2.0.3:
61
+ es6-iterator@^2.0.3:
61
62
  version "2.0.3"
62
63
  resolved "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz#a7de889141a05a94b0854403b2d0a0fbfa98f3b7"
63
64
  integrity sha1-p96IkUGgWpSwhUQDstCg+/qY87c=
@@ -66,7 +67,7 @@ es6-iterator@^2.0.3, es6-iterator@~2.0.3:
66
67
  es5-ext "^0.10.35"
67
68
  es6-symbol "^3.1.1"
68
69
 
69
- es6-symbol@^3.1.1, es6-symbol@~3.1.3:
70
+ es6-symbol@^3.1.1, es6-symbol@^3.1.3:
70
71
  version "3.1.3"
71
72
  resolved "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.3.tgz#bad5d3c1bcdac28269f4cb331e431c78ac705d18"
72
73
  integrity sha512-NJ6Yn3FuDinBaBRWl/q5X/s4koRHBrgKAu+yGI6JCBeiu3qrcbJhwT2GeR/EXVfylRk8dpQVJoLEFhK+Mu31NA==
@@ -84,6 +85,16 @@ es6-weak-map@^2.0.2:
84
85
  es6-iterator "^2.0.3"
85
86
  es6-symbol "^3.1.1"
86
87
 
88
+ esniff@^2.0.1:
89
+ version "2.0.1"
90
+ resolved "https://registry.yarnpkg.com/esniff/-/esniff-2.0.1.tgz#a4d4b43a5c71c7ec51c51098c1d8a29081f9b308"
91
+ integrity sha512-kTUIGKQ/mDPFoJ0oVfcmyJn4iBDRptjNVIzwIFR7tqWXdVI9xfA2RMwY/gbSpJG3lkdWNEjLap/NqVHZiJsdfg==
92
+ dependencies:
93
+ d "^1.0.1"
94
+ es5-ext "^0.10.62"
95
+ event-emitter "^0.3.5"
96
+ type "^2.7.2"
97
+
87
98
  event-emitter@^0.3.5:
88
99
  version "0.3.5"
89
100
  resolved "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz#df8c69eef1647923c7157b9ce83840610b02cc39"
@@ -135,16 +146,11 @@ memoizee@^0.4.14:
135
146
  next-tick "1"
136
147
  timers-ext "^0.1.5"
137
148
 
138
- next-tick@1:
149
+ next-tick@1, next-tick@^1.1.0:
139
150
  version "1.1.0"
140
151
  resolved "https://registry.npmjs.org/next-tick/-/next-tick-1.1.0.tgz#1836ee30ad56d67ef281b22bd199f709449b35eb"
141
152
  integrity sha512-CXdUiJembsNjuToQvxayPZF9Vqht7hewsvy2sOWafLvi2awflj9mOC6bHIg50orX8IJvWKY9wYQ/zB2kogPslQ==
142
153
 
143
- next-tick@~1.0.0:
144
- version "1.0.0"
145
- resolved "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz#ca86d1fe8828169b0120208e3dc8424b9db8342c"
146
- integrity sha1-yobR/ogoFpsBICCOPchCS524NCw=
147
-
148
154
  objnest@^5.0.6:
149
155
  version "5.0.10"
150
156
  resolved "https://registry.npmjs.org/objnest/-/objnest-5.0.10.tgz#90e43b11870502fcb445e97fcf402499f5f75c75"
@@ -170,3 +176,8 @@ type@^2.0.0:
170
176
  version "2.1.0"
171
177
  resolved "https://registry.npmjs.org/type/-/type-2.1.0.tgz#9bdc22c648cf8cf86dd23d32336a41cfb6475e3f"
172
178
  integrity sha512-G9absDWvhAWCV2gmF1zKud3OyC61nZDwWvBL2DApaVFogI07CprggiQAOOjvp2NRjYWFzPyu7vwtDrQFq8jeSA==
179
+
180
+ type@^2.7.2:
181
+ version "2.7.2"
182
+ resolved "https://registry.yarnpkg.com/type/-/type-2.7.2.tgz#2376a15a3a28b1efa0f5350dcf72d24df6ef98d0"
183
+ integrity sha512-dzlvlNlt6AXU7EBSfpAscydQ7gXB+pPGsPnfJnZpiNJBDj7IaJzQlBZYGdEi4R9HmPdBv2XmWJ6YUtoTa7lmCw==
data/lib/dependabot/npm_and_yarn/file_parser.rb CHANGED
@@ -291,7 +291,7 @@ module Dependabot
291
291
  semver_version_for(lockfile_details&.fetch("version", ""))
292
292
  end
293
293
 
294
- sig { params(version: String).returns(T.nilable(T.any(String, Integer, Gem::Version))) }
294
+ sig { params(version: T.nilable(String)).returns(T.nilable(T.any(String, Integer, Gem::Version))) }
295
295
  def semver_version_for(version)
296
296
  version_class.semver_for(version)
297
297
  end
data/lib/dependabot/npm_and_yarn/sub_dependency_files_filterer.rb CHANGED
@@ -1,4 +1,4 @@
1
- # typed: strict
1
+ # typed: strong
2
2
  # frozen_string_literal: true
3
3
 
4
4
  require "dependabot/utils"
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.252.0
4
+ version: 0.254.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-04-11 00:00:00.000000000 Z
11
+ date: 2024-04-24 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.252.0
19
+ version: 0.254.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.252.0
26
+ version: 0.254.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - "~>"
32
32
  - !ruby/object:Gem::Version
33
- version: 1.8.0
33
+ version: 1.9.2
34
34
  type: :development
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - "~>"
39
39
  - !ruby/object:Gem::Version
40
- version: 1.8.0
40
+ version: 1.9.2
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: gpgme
43
43
  requirement: !ruby/object:Gem::Requirement
@@ -114,70 +114,56 @@ dependencies:
114
114
  requirements:
115
115
  - - "~>"
116
116
  - !ruby/object:Gem::Version
117
- version: 1.58.0
117
+ version: 1.63.2
118
118
  type: :development
119
119
  prerelease: false
120
120
  version_requirements: !ruby/object:Gem::Requirement
121
121
  requirements:
122
122
  - - "~>"
123
123
  - !ruby/object:Gem::Version
124
- version: 1.58.0
124
+ version: 1.63.2
125
125
  - !ruby/object:Gem::Dependency
126
126
  name: rubocop-performance
127
127
  requirement: !ruby/object:Gem::Requirement
128
128
  requirements:
129
129
  - - "~>"
130
130
  - !ruby/object:Gem::Version
131
- version: 1.19.0
131
+ version: 1.21.0
132
132
  type: :development
133
133
  prerelease: false
134
134
  version_requirements: !ruby/object:Gem::Requirement
135
135
  requirements:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
- version: 1.19.0
138
+ version: 1.21.0
139
139
  - !ruby/object:Gem::Dependency
140
140
  name: rubocop-rspec
141
141
  requirement: !ruby/object:Gem::Requirement
142
142
  requirements:
143
143
  - - "~>"
144
144
  - !ruby/object:Gem::Version
145
- version: 2.27.1
145
+ version: 2.29.1
146
146
  type: :development
147
147
  prerelease: false
148
148
  version_requirements: !ruby/object:Gem::Requirement
149
149
  requirements:
150
150
  - - "~>"
151
151
  - !ruby/object:Gem::Version
152
- version: 2.27.1
152
+ version: 2.29.1
153
153
  - !ruby/object:Gem::Dependency
154
154
  name: rubocop-sorbet
155
155
  requirement: !ruby/object:Gem::Requirement
156
156
  requirements:
157
157
  - - "~>"
158
158
  - !ruby/object:Gem::Version
159
- version: 0.7.3
160
- type: :development
161
- prerelease: false
162
- version_requirements: !ruby/object:Gem::Requirement
163
- requirements:
164
- - - "~>"
165
- - !ruby/object:Gem::Version
166
- version: 0.7.3
167
- - !ruby/object:Gem::Dependency
168
- name: stackprof
169
- requirement: !ruby/object:Gem::Requirement
170
- requirements:
171
- - - "~>"
172
- - !ruby/object:Gem::Version
173
- version: 0.2.16
159
+ version: 0.8.1
174
160
  type: :development
175
161
  prerelease: false
176
162
  version_requirements: !ruby/object:Gem::Requirement
177
163
  requirements:
178
164
  - - "~>"
179
165
  - !ruby/object:Gem::Version
180
- version: 0.2.16
166
+ version: 0.8.1
181
167
  - !ruby/object:Gem::Dependency
182
168
  name: turbo_tests
183
169
  requirement: !ruby/object:Gem::Requirement
@@ -338,7 +324,7 @@ licenses:
338
324
  - Nonstandard
339
325
  metadata:
340
326
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
341
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.252.0
327
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.254.0
342
328
  post_install_message:
343
329
  rdoc_options: []
344
330
  require_paths: