dependabot-npm_and_yarn 0.254.0 → 0.255.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/helpers/lib/pnpm/lockfile-parser.js +4 -0
- data/helpers/package-lock.json +960 -220
- data/helpers/package.json +2 -2
- data/helpers/test/pnpm/fixtures/parser/empty_version/pnpm-lock.yaml +72 -0
- data/helpers/test/pnpm/fixtures/parser/no_lockfile_change/pnpm-lock.yaml +2744 -0
- data/helpers/test/pnpm/fixtures/parser/only_dev_dependencies/pnpm-lock.yaml +16 -0
- data/helpers/test/pnpm/fixtures/parser/peer_disambiguation/pnpm-lock.yaml +855 -0
- data/helpers/test/pnpm/lockfile-parser.test.js +62 -0
- data/helpers/test/yarn/fixtures/updater/illegal_character/package.json +8 -0
- data/helpers/test/yarn/fixtures/updater/illegal_character/yarn.lock +14 -0
- data/helpers/test/yarn/updater.test.js +29 -0
- data/lib/dependabot/npm_and_yarn/file_updater/npmrc_builder.rb +138 -60
- data/lib/dependabot/npm_and_yarn/file_updater/yarn_lockfile_updater.rb +5 -0
- data/lib/dependabot/npm_and_yarn/package_name.rb +15 -12
- data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb +13 -1
- metadata +27 -6
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-npm_and_yarn
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.255.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2024-
|
|
11
|
+
date: 2024-05-03 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dependabot-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.
|
|
19
|
+
version: 0.255.0
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.
|
|
26
|
+
version: 0.255.0
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: debug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -164,6 +164,20 @@ dependencies:
|
|
|
164
164
|
- - "~>"
|
|
165
165
|
- !ruby/object:Gem::Version
|
|
166
166
|
version: 0.8.1
|
|
167
|
+
- !ruby/object:Gem::Dependency
|
|
168
|
+
name: simplecov
|
|
169
|
+
requirement: !ruby/object:Gem::Requirement
|
|
170
|
+
requirements:
|
|
171
|
+
- - "~>"
|
|
172
|
+
- !ruby/object:Gem::Version
|
|
173
|
+
version: 0.22.0
|
|
174
|
+
type: :development
|
|
175
|
+
prerelease: false
|
|
176
|
+
version_requirements: !ruby/object:Gem::Requirement
|
|
177
|
+
requirements:
|
|
178
|
+
- - "~>"
|
|
179
|
+
- !ruby/object:Gem::Version
|
|
180
|
+
version: 0.22.0
|
|
167
181
|
- !ruby/object:Gem::Dependency
|
|
168
182
|
name: turbo_tests
|
|
169
183
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -268,6 +282,11 @@ files:
|
|
|
268
282
|
- helpers/test/npm6/fixtures/updater/updated/package-lock.json
|
|
269
283
|
- helpers/test/npm6/helpers.js
|
|
270
284
|
- helpers/test/npm6/updater.test.js
|
|
285
|
+
- helpers/test/pnpm/fixtures/parser/empty_version/pnpm-lock.yaml
|
|
286
|
+
- helpers/test/pnpm/fixtures/parser/no_lockfile_change/pnpm-lock.yaml
|
|
287
|
+
- helpers/test/pnpm/fixtures/parser/only_dev_dependencies/pnpm-lock.yaml
|
|
288
|
+
- helpers/test/pnpm/fixtures/parser/peer_disambiguation/pnpm-lock.yaml
|
|
289
|
+
- helpers/test/pnpm/lockfile-parser.test.js
|
|
271
290
|
- helpers/test/yarn/conflicting-dependency-parser.test.js
|
|
272
291
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/package.json
|
|
273
292
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/yarn.lock
|
|
@@ -277,6 +296,8 @@ files:
|
|
|
277
296
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/nested/yarn.lock
|
|
278
297
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/simple/package.json
|
|
279
298
|
- helpers/test/yarn/fixtures/conflicting-dependency-parser/simple/yarn.lock
|
|
299
|
+
- helpers/test/yarn/fixtures/updater/illegal_character/package.json
|
|
300
|
+
- helpers/test/yarn/fixtures/updater/illegal_character/yarn.lock
|
|
280
301
|
- helpers/test/yarn/fixtures/updater/original/package.json
|
|
281
302
|
- helpers/test/yarn/fixtures/updater/original/yarn.lock
|
|
282
303
|
- helpers/test/yarn/fixtures/updater/updated/yarn.lock
|
|
@@ -324,7 +345,7 @@ licenses:
|
|
|
324
345
|
- Nonstandard
|
|
325
346
|
metadata:
|
|
326
347
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
327
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
348
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.255.0
|
|
328
349
|
post_install_message:
|
|
329
350
|
rdoc_options: []
|
|
330
351
|
require_paths:
|
|
@@ -340,7 +361,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
340
361
|
- !ruby/object:Gem::Version
|
|
341
362
|
version: 3.1.0
|
|
342
363
|
requirements: []
|
|
343
|
-
rubygems_version: 3.
|
|
364
|
+
rubygems_version: 3.5.9
|
|
344
365
|
signing_key:
|
|
345
366
|
specification_version: 4
|
|
346
367
|
summary: Provides Dependabot support for Javascript (npm and yarn)
|