dependabot-npm_and_yarn 0.254.0 → 0.256.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (18) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/lib/pnpm/lockfile-parser.js +4 -0
  3. data/helpers/package-lock.json +1420 -1133
  4. data/helpers/package.json +4 -4
  5. data/helpers/test/pnpm/fixtures/parser/empty_version/pnpm-lock.yaml +72 -0
  6. data/helpers/test/pnpm/fixtures/parser/no_lockfile_change/pnpm-lock.yaml +2744 -0
  7. data/helpers/test/pnpm/fixtures/parser/only_dev_dependencies/pnpm-lock.yaml +16 -0
  8. data/helpers/test/pnpm/fixtures/parser/peer_disambiguation/pnpm-lock.yaml +855 -0
  9. data/helpers/test/pnpm/lockfile-parser.test.js +62 -0
  10. data/helpers/test/yarn/fixtures/updater/illegal_character/package.json +8 -0
  11. data/helpers/test/yarn/fixtures/updater/illegal_character/yarn.lock +14 -0
  12. data/helpers/test/yarn/updater.test.js +29 -0
  13. data/lib/dependabot/npm_and_yarn/file_updater/npmrc_builder.rb +138 -60
  14. data/lib/dependabot/npm_and_yarn/file_updater/yarn_lockfile_updater.rb +5 -0
  15. data/lib/dependabot/npm_and_yarn/helpers.rb +3 -1
  16. data/lib/dependabot/npm_and_yarn/package_name.rb +15 -12
  17. data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb +13 -1
  18. metadata +27 -6
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.254.0
4
+ version: 0.256.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-04-24 00:00:00.000000000 Z
11
+ date: 2024-05-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.254.0
19
+ version: 0.256.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.254.0
26
+ version: 0.256.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -164,6 +164,20 @@ dependencies:
164
164
  - - "~>"
165
165
  - !ruby/object:Gem::Version
166
166
  version: 0.8.1
167
+ - !ruby/object:Gem::Dependency
168
+ name: simplecov
169
+ requirement: !ruby/object:Gem::Requirement
170
+ requirements:
171
+ - - "~>"
172
+ - !ruby/object:Gem::Version
173
+ version: 0.22.0
174
+ type: :development
175
+ prerelease: false
176
+ version_requirements: !ruby/object:Gem::Requirement
177
+ requirements:
178
+ - - "~>"
179
+ - !ruby/object:Gem::Version
180
+ version: 0.22.0
167
181
  - !ruby/object:Gem::Dependency
168
182
  name: turbo_tests
169
183
  requirement: !ruby/object:Gem::Requirement
@@ -268,6 +282,11 @@ files:
268
282
  - helpers/test/npm6/fixtures/updater/updated/package-lock.json
269
283
  - helpers/test/npm6/helpers.js
270
284
  - helpers/test/npm6/updater.test.js
285
+ - helpers/test/pnpm/fixtures/parser/empty_version/pnpm-lock.yaml
286
+ - helpers/test/pnpm/fixtures/parser/no_lockfile_change/pnpm-lock.yaml
287
+ - helpers/test/pnpm/fixtures/parser/only_dev_dependencies/pnpm-lock.yaml
288
+ - helpers/test/pnpm/fixtures/parser/peer_disambiguation/pnpm-lock.yaml
289
+ - helpers/test/pnpm/lockfile-parser.test.js
271
290
  - helpers/test/yarn/conflicting-dependency-parser.test.js
272
291
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/package.json
273
292
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/deeply-nested/yarn.lock
@@ -277,6 +296,8 @@ files:
277
296
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/nested/yarn.lock
278
297
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/simple/package.json
279
298
  - helpers/test/yarn/fixtures/conflicting-dependency-parser/simple/yarn.lock
299
+ - helpers/test/yarn/fixtures/updater/illegal_character/package.json
300
+ - helpers/test/yarn/fixtures/updater/illegal_character/yarn.lock
280
301
  - helpers/test/yarn/fixtures/updater/original/package.json
281
302
  - helpers/test/yarn/fixtures/updater/original/yarn.lock
282
303
  - helpers/test/yarn/fixtures/updater/updated/yarn.lock
@@ -324,7 +345,7 @@ licenses:
324
345
  - Nonstandard
325
346
  metadata:
326
347
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
327
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.254.0
348
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.256.0
328
349
  post_install_message:
329
350
  rdoc_options: []
330
351
  require_paths:
@@ -340,7 +361,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
340
361
  - !ruby/object:Gem::Version
341
362
  version: 3.1.0
342
363
  requirements: []
343
- rubygems_version: 3.3.26
364
+ rubygems_version: 3.5.9
344
365
  signing_key:
345
366
  specification_version: 4
346
367
  summary: Provides Dependabot support for Javascript (npm and yarn)