dependabot-npm_and_yarn 0.290.0 → 0.291.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package-lock.json +114 -134
  3. data/helpers/package.json +3 -3
  4. data/lib/dependabot/npm_and_yarn/file_fetcher.rb +4 -1
  5. data/lib/dependabot/npm_and_yarn/package_manager.rb +9 -5
  6. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a8a094096ac6049e60970f2435585ab4cde21182030752133351f3b211f83d2b
4
- data.tar.gz: 78e3e5f474091fa12526c005a4309a65d71420cbfd64d6a835cae7a1d387f031
3
+ metadata.gz: 02635cf238f21d329717cb8590e2c779109f30e53edb5a18d0af02c2eb1b7b52
4
+ data.tar.gz: 05a8982b1c132c4560dbde94a72575a7ba62d9e9b1b3e6524d2cbcb2042f3eae
5
5
  SHA512:
6
- metadata.gz: a264a72f6140fae85f8f5d03519381060c44093838cf8828130d30b8489bfe334790106fcf874d2805d62edfe295d2cc7963118e768806da61d879df5ff9863d
7
- data.tar.gz: 82d5056fa18f3f7592a0471e4ce29d9feebb68108f5793f7e07b7603d63f6bba1294912ad1b56ba8bbfbc3e676ad74adfbda3d5a8446533e63463f88988569d8
6
+ metadata.gz: 69d8f7352749ea26e0aeee9ca63943fc6d46eccf927ec217fd9d5b072b60a405b5b7a4515c120e8e05145870ac1c0bc196c27ad38d4733c15e693af40d0055fa
7
+ data.tar.gz: e5f8ad4e72213b0620785369b37c6cbf4d2200eea2a2ec521df6f6240694527216da0450af39cb86b7d9650d4d04649d5fc3bb4136163574ae29f2a3dc6db539
data/helpers/package-lock.json CHANGED
@@ -12,7 +12,7 @@
12
12
  "@pnpm/dependency-path": "^5.1.1",
13
13
  "@pnpm/lockfile-file": "^9.1.2",
14
14
  "detect-indent": "^6.1.0",
15
- "nock": "^13.5.5",
15
+ "nock": "^13.5.6",
16
16
  "npm": "6.14.18",
17
17
  "patch-package": "^8.0.0",
18
18
  "semver": "^7.6.3"
@@ -21,10 +21,10 @@
21
21
  "helper": "run.js"
22
22
  },
23
23
  "devDependencies": {
24
- "eslint": "^9.14.0",
24
+ "eslint": "^9.16.0",
25
25
  "eslint-config-prettier": "^9.1.0",
26
26
  "jest": "^29.7.0",
27
- "prettier": "^3.3.3"
27
+ "prettier": "^3.4.2"
28
28
  }
29
29
  },
30
30
  "node_modules/@aashutoshrathi/word-wrap": {
@@ -732,12 +732,12 @@
732
732
  }
733
733
  },
734
734
  "node_modules/@eslint/config-array": {
735
- "version": "0.18.0",
736
- "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz",
737
- "integrity": "sha512-fTxvnS1sRMu3+JjXwJG0j/i4RT9u4qJ+lqS/yCGap4lH4zZGzQ7tu+xZqQmcMZq5OBZDL4QRxQzRjkWcGt8IVw==",
735
+ "version": "0.19.1",
736
+ "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.1.tgz",
737
+ "integrity": "sha512-fo6Mtm5mWyKjA/Chy1BYTdn5mGJoDNjC7C64ug20ADsRDGrA85bN3uK3MaKbeRkRuuIEAR5N33Jr1pbm411/PA==",
738
738
  "dev": true,
739
739
  "dependencies": {
740
- "@eslint/object-schema": "^2.1.4",
740
+ "@eslint/object-schema": "^2.1.5",
741
741
  "debug": "^4.3.1",
742
742
  "minimatch": "^3.1.2"
743
743
  },
@@ -746,9 +746,9 @@
746
746
  }
747
747
  },
748
748
  "node_modules/@eslint/config-array/node_modules/debug": {
749
- "version": "4.3.7",
750
- "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
751
- "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
749
+ "version": "4.4.0",
750
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
751
+ "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
752
752
  "dev": true,
753
753
  "dependencies": {
754
754
  "ms": "^2.1.3"
@@ -763,18 +763,21 @@
763
763
  }
764
764
  },
765
765
  "node_modules/@eslint/core": {
766
- "version": "0.7.0",
767
- "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz",
768
- "integrity": "sha512-xp5Jirz5DyPYlPiKat8jaq0EmYvDXKKpzTbxXMpT9eqlRJkRKIz9AGMdlvYjih+im+QlhWrpvVjl8IPC/lHlUw==",
766
+ "version": "0.9.1",
767
+ "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.1.tgz",
768
+ "integrity": "sha512-GuUdqkyyzQI5RMIWkHhvTWLCyLo1jNK3vzkSyaExH5kHPDHcuL2VOpHjmMY+y3+NC69qAKToBqldTBgYeLSr9Q==",
769
769
  "dev": true,
770
+ "dependencies": {
771
+ "@types/json-schema": "^7.0.15"
772
+ },
770
773
  "engines": {
771
774
  "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
772
775
  }
773
776
  },
774
777
  "node_modules/@eslint/eslintrc": {
775
- "version": "3.1.0",
776
- "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.1.0.tgz",
777
- "integrity": "sha512-4Bfj15dVJdoy3RfZmmo86RK1Fwzn6SstsvK9JS+BaVKqC6QQQQyXekNaC+g+LKNgkQ+2VhGAzm6hO40AhMR3zQ==",
778
+ "version": "3.2.0",
779
+ "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.2.0.tgz",
780
+ "integrity": "sha512-grOjVNN8P3hjJn/eIETF1wwd12DdnwFDoyceUJLYYdkpbwq3nLi+4fqrTAONx7XDALqlL220wC/RHSC/QTI/0w==",
778
781
  "dev": true,
779
782
  "dependencies": {
780
783
  "ajv": "^6.12.4",
@@ -801,12 +804,12 @@
801
804
  "dev": true
802
805
  },
803
806
  "node_modules/@eslint/eslintrc/node_modules/debug": {
804
- "version": "4.3.5",
805
- "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz",
806
- "integrity": "sha512-pt0bNEmneDIvdL1Xsd9oDQ/wrQRkXDT4AUWlNZNPKvW5x/jyO9VFXkJUP07vQ2upmw5PlaITaPKc31jK13V+jg==",
807
+ "version": "4.4.0",
808
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
809
+ "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
807
810
  "dev": true,
808
811
  "dependencies": {
809
- "ms": "2.1.2"
812
+ "ms": "^2.1.3"
810
813
  },
811
814
  "engines": {
812
815
  "node": ">=6.0"
@@ -829,34 +832,28 @@
829
832
  "js-yaml": "bin/js-yaml.js"
830
833
  }
831
834
  },
832
- "node_modules/@eslint/eslintrc/node_modules/ms": {
833
- "version": "2.1.2",
834
- "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
835
- "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
836
- "dev": true
837
- },
838
835
  "node_modules/@eslint/js": {
839
- "version": "9.14.0",
840
- "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.14.0.tgz",
841
- "integrity": "sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==",
836
+ "version": "9.16.0",
837
+ "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.16.0.tgz",
838
+ "integrity": "sha512-tw2HxzQkrbeuvyj1tG2Yqq+0H9wGoI2IMk4EOsQeX+vmd75FtJAzf+gTA69WF+baUKRYQ3x2kbLE08js5OsTVg==",
842
839
  "dev": true,
843
840
  "engines": {
844
841
  "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
845
842
  }
846
843
  },
847
844
  "node_modules/@eslint/object-schema": {
848
- "version": "2.1.4",
849
- "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz",
850
- "integrity": "sha512-BsWiH1yFGjXXS2yvrf5LyuoSIIbPrGUWob917o+BTKuZ7qJdxX8aJLRxs1fS9n6r7vESrq1OUqb68dANcFXuQQ==",
845
+ "version": "2.1.5",
846
+ "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.5.tgz",
847
+ "integrity": "sha512-o0bhxnL89h5Bae5T318nFoFzGy+YE5i/gGkoPAgkmTVdRKTiv3p8JHevPiPaMwoloKfEiiaHlawCqaZMqRm+XQ==",
851
848
  "dev": true,
852
849
  "engines": {
853
850
  "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
854
851
  }
855
852
  },
856
853
  "node_modules/@eslint/plugin-kit": {
857
- "version": "0.2.0",
858
- "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.0.tgz",
859
- "integrity": "sha512-vH9PiIMMwvhCx31Af3HiGzsVNULDbyVkHXwlemn/B0TFj/00ho3y55efXrUZTfQipxoHC5u4xq6zblww1zm1Ig==",
854
+ "version": "0.2.4",
855
+ "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.4.tgz",
856
+ "integrity": "sha512-zSkKow6H5Kdm0ZUQUB2kV5JIXqoG0+uH5YADhaEHswm664N9Db8dXSi0nMJpacpMf+MyyglF1vnZohpEg5yUtg==",
860
857
  "dev": true,
861
858
  "dependencies": {
862
859
  "levn": "^0.4.1"
@@ -914,9 +911,9 @@
914
911
  }
915
912
  },
916
913
  "node_modules/@humanwhocodes/retry": {
917
- "version": "0.4.0",
918
- "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.0.tgz",
919
- "integrity": "sha512-xnRgu9DxZbkWak/te3fcytNyp8MTbuiZIaueg2rgEvBuN55n04nwLYLU9TX/VVlusc9L2ZNXi99nUFNkHXtr5g==",
914
+ "version": "0.4.1",
915
+ "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.1.tgz",
916
+ "integrity": "sha512-c7hNEllBlenFTHBky65mhq8WD2kbN9Q6gk0bTk8lSBvc554jpXSkST1iePudpt7+A/AQvuHs9EMqjHDXMY1lrA==",
920
917
  "dev": true,
921
918
  "engines": {
922
919
  "node": ">=18.18"
@@ -4286,9 +4283,9 @@
4286
4283
  }
4287
4284
  },
4288
4285
  "node_modules/cross-spawn": {
4289
- "version": "7.0.3",
4290
- "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
4291
- "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
4286
+ "version": "7.0.6",
4287
+ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
4288
+ "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
4292
4289
  "dependencies": {
4293
4290
  "path-key": "^3.1.0",
4294
4291
  "shebang-command": "^2.0.0",
@@ -4592,26 +4589,26 @@
4592
4589
  }
4593
4590
  },
4594
4591
  "node_modules/eslint": {
4595
- "version": "9.14.0",
4596
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.14.0.tgz",
4597
- "integrity": "sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==",
4592
+ "version": "9.16.0",
4593
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.16.0.tgz",
4594
+ "integrity": "sha512-whp8mSQI4C8VXd+fLgSM0lh3UlmcFtVwUQjyKCFfsp+2ItAIYhlq/hqGahGqHE6cv9unM41VlqKk2VtKYR2TaA==",
4598
4595
  "dev": true,
4599
4596
  "dependencies": {
4600
4597
  "@eslint-community/eslint-utils": "^4.2.0",
4601
4598
  "@eslint-community/regexpp": "^4.12.1",
4602
- "@eslint/config-array": "^0.18.0",
4603
- "@eslint/core": "^0.7.0",
4604
- "@eslint/eslintrc": "^3.1.0",
4605
- "@eslint/js": "9.14.0",
4606
- "@eslint/plugin-kit": "^0.2.0",
4599
+ "@eslint/config-array": "^0.19.0",
4600
+ "@eslint/core": "^0.9.0",
4601
+ "@eslint/eslintrc": "^3.2.0",
4602
+ "@eslint/js": "9.16.0",
4603
+ "@eslint/plugin-kit": "^0.2.3",
4607
4604
  "@humanfs/node": "^0.16.6",
4608
4605
  "@humanwhocodes/module-importer": "^1.0.1",
4609
- "@humanwhocodes/retry": "^0.4.0",
4606
+ "@humanwhocodes/retry": "^0.4.1",
4610
4607
  "@types/estree": "^1.0.6",
4611
4608
  "@types/json-schema": "^7.0.15",
4612
4609
  "ajv": "^6.12.4",
4613
4610
  "chalk": "^4.0.0",
4614
- "cross-spawn": "^7.0.2",
4611
+ "cross-spawn": "^7.0.5",
4615
4612
  "debug": "^4.3.2",
4616
4613
  "escape-string-regexp": "^4.0.0",
4617
4614
  "eslint-scope": "^8.2.0",
@@ -4630,8 +4627,7 @@
4630
4627
  "lodash.merge": "^4.6.2",
4631
4628
  "minimatch": "^3.1.2",
4632
4629
  "natural-compare": "^1.4.0",
4633
- "optionator": "^0.9.3",
4634
- "text-table": "^0.2.0"
4630
+ "optionator": "^0.9.3"
4635
4631
  },
4636
4632
  "bin": {
4637
4633
  "eslint": "bin/eslint.js"
@@ -5755,9 +5751,9 @@
5755
5751
  }
5756
5752
  },
5757
5753
  "node_modules/ignore": {
5758
- "version": "5.3.1",
5759
- "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.1.tgz",
5760
- "integrity": "sha512-5Fytz/IraMjqpwfd34ke28PTVMjZjJG2MPn5t7OE4eUCUNf8BAa7b5WUS9/Qvr6mwOQS7Mk6vdsMno5he+T8Xw==",
5754
+ "version": "5.3.2",
5755
+ "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
5756
+ "integrity": "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==",
5761
5757
  "dev": true,
5762
5758
  "engines": {
5763
5759
  "node": ">= 4"
@@ -9007,9 +9003,9 @@
9007
9003
  "integrity": "sha512-EZSPZB70jiVsivaBLYDCyntd5eH8NTSMOn3rB+HxwdmKThGELLdYv8qVIMWvZEFy9w8ZZpW9h9OB32l1rGtj7g=="
9008
9004
  },
9009
9005
  "node_modules/nock": {
9010
- "version": "13.5.5",
9011
- "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.5.tgz",
9012
- "integrity": "sha512-XKYnqUrCwXC8DGG1xX4YH5yNIrlh9c065uaMZZHUoeUUINTOyt+x/G+ezYk0Ft6ExSREVIs+qBJDK503viTfFA==",
9006
+ "version": "13.5.6",
9007
+ "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.6.tgz",
9008
+ "integrity": "sha512-o2zOYiCpzRqSzPj0Zt/dQ/DqZeYoaQ7TUonc/xUPjCGl9WeHpNbxgVvOquXYAaJzI0M9BXV3HTzG0p8IUAbBTQ==",
9013
9009
  "dependencies": {
9014
9010
  "debug": "^4.1.0",
9015
9011
  "json-stringify-safe": "^5.0.1",
@@ -14557,9 +14553,9 @@
14557
14553
  }
14558
14554
  },
14559
14555
  "node_modules/prettier": {
14560
- "version": "3.3.3",
14561
- "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.3.3.tgz",
14562
- "integrity": "sha512-i2tDNA0O5IrMO757lfrdQZCc2jPNDVntV0m/+4whiDfWaTKfMNgR7Qz0NAeGz/nRqF4m5/6CLzbP4/liHt12Ew==",
14556
+ "version": "3.4.2",
14557
+ "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.4.2.tgz",
14558
+ "integrity": "sha512-e9MewbtFo+Fevyuxn/4rrcDAaq0IYxPGLvObpQjiZBMAzB9IGmzlnG9RZy3FFas+eBMu2vA0CszMeduow5dIuQ==",
14563
14559
  "dev": true,
14564
14560
  "bin": {
14565
14561
  "prettier": "bin/prettier.cjs"
@@ -15729,12 +15725,6 @@
15729
15725
  "node": ">=8"
15730
15726
  }
15731
15727
  },
15732
- "node_modules/text-table": {
15733
- "version": "0.2.0",
15734
- "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
15735
- "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=",
15736
- "dev": true
15737
- },
15738
15728
  "node_modules/thenify": {
15739
15729
  "version": "3.3.1",
15740
15730
  "resolved": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz",
@@ -16895,20 +16885,20 @@
16895
16885
  "dev": true
16896
16886
  },
16897
16887
  "@eslint/config-array": {
16898
- "version": "0.18.0",
16899
- "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz",
16900
- "integrity": "sha512-fTxvnS1sRMu3+JjXwJG0j/i4RT9u4qJ+lqS/yCGap4lH4zZGzQ7tu+xZqQmcMZq5OBZDL4QRxQzRjkWcGt8IVw==",
16888
+ "version": "0.19.1",
16889
+ "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.1.tgz",
16890
+ "integrity": "sha512-fo6Mtm5mWyKjA/Chy1BYTdn5mGJoDNjC7C64ug20ADsRDGrA85bN3uK3MaKbeRkRuuIEAR5N33Jr1pbm411/PA==",
16901
16891
  "dev": true,
16902
16892
  "requires": {
16903
- "@eslint/object-schema": "^2.1.4",
16893
+ "@eslint/object-schema": "^2.1.5",
16904
16894
  "debug": "^4.3.1",
16905
16895
  "minimatch": "^3.1.2"
16906
16896
  },
16907
16897
  "dependencies": {
16908
16898
  "debug": {
16909
- "version": "4.3.7",
16910
- "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.7.tgz",
16911
- "integrity": "sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==",
16899
+ "version": "4.4.0",
16900
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
16901
+ "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
16912
16902
  "dev": true,
16913
16903
  "requires": {
16914
16904
  "ms": "^2.1.3"
@@ -16917,15 +16907,18 @@
16917
16907
  }
16918
16908
  },
16919
16909
  "@eslint/core": {
16920
- "version": "0.7.0",
16921
- "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz",
16922
- "integrity": "sha512-xp5Jirz5DyPYlPiKat8jaq0EmYvDXKKpzTbxXMpT9eqlRJkRKIz9AGMdlvYjih+im+QlhWrpvVjl8IPC/lHlUw==",
16923
- "dev": true
16910
+ "version": "0.9.1",
16911
+ "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.9.1.tgz",
16912
+ "integrity": "sha512-GuUdqkyyzQI5RMIWkHhvTWLCyLo1jNK3vzkSyaExH5kHPDHcuL2VOpHjmMY+y3+NC69qAKToBqldTBgYeLSr9Q==",
16913
+ "dev": true,
16914
+ "requires": {
16915
+ "@types/json-schema": "^7.0.15"
16916
+ }
16924
16917
  },
16925
16918
  "@eslint/eslintrc": {
16926
- "version": "3.1.0",
16927
- "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.1.0.tgz",
16928
- "integrity": "sha512-4Bfj15dVJdoy3RfZmmo86RK1Fwzn6SstsvK9JS+BaVKqC6QQQQyXekNaC+g+LKNgkQ+2VhGAzm6hO40AhMR3zQ==",
16919
+ "version": "3.2.0",
16920
+ "resolved": "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.2.0.tgz",
16921
+ "integrity": "sha512-grOjVNN8P3hjJn/eIETF1wwd12DdnwFDoyceUJLYYdkpbwq3nLi+4fqrTAONx7XDALqlL220wC/RHSC/QTI/0w==",
16929
16922
  "dev": true,
16930
16923
  "requires": {
16931
16924
  "ajv": "^6.12.4",
@@ -16946,12 +16939,12 @@
16946
16939
  "dev": true
16947
16940
  },
16948
16941
  "debug": {
16949
- "version": "4.3.5",
16950
- "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.5.tgz",
16951
- "integrity": "sha512-pt0bNEmneDIvdL1Xsd9oDQ/wrQRkXDT4AUWlNZNPKvW5x/jyO9VFXkJUP07vQ2upmw5PlaITaPKc31jK13V+jg==",
16942
+ "version": "4.4.0",
16943
+ "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.0.tgz",
16944
+ "integrity": "sha512-6WTZ/IxCY/T6BALoZHaE4ctp9xm+Z5kY/pzYaCHRFeyVhojxlrm+46y68HA6hr0TcwEssoxNiDEUJQjfPZ/RYA==",
16952
16945
  "dev": true,
16953
16946
  "requires": {
16954
- "ms": "2.1.2"
16947
+ "ms": "^2.1.3"
16955
16948
  }
16956
16949
  },
16957
16950
  "js-yaml": {
@@ -16962,31 +16955,25 @@
16962
16955
  "requires": {
16963
16956
  "argparse": "^2.0.1"
16964
16957
  }
16965
- },
16966
- "ms": {
16967
- "version": "2.1.2",
16968
- "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
16969
- "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
16970
- "dev": true
16971
16958
  }
16972
16959
  }
16973
16960
  },
16974
16961
  "@eslint/js": {
16975
- "version": "9.14.0",
16976
- "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.14.0.tgz",
16977
- "integrity": "sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==",
16962
+ "version": "9.16.0",
16963
+ "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.16.0.tgz",
16964
+ "integrity": "sha512-tw2HxzQkrbeuvyj1tG2Yqq+0H9wGoI2IMk4EOsQeX+vmd75FtJAzf+gTA69WF+baUKRYQ3x2kbLE08js5OsTVg==",
16978
16965
  "dev": true
16979
16966
  },
16980
16967
  "@eslint/object-schema": {
16981
- "version": "2.1.4",
16982
- "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz",
16983
- "integrity": "sha512-BsWiH1yFGjXXS2yvrf5LyuoSIIbPrGUWob917o+BTKuZ7qJdxX8aJLRxs1fS9n6r7vESrq1OUqb68dANcFXuQQ==",
16968
+ "version": "2.1.5",
16969
+ "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.5.tgz",
16970
+ "integrity": "sha512-o0bhxnL89h5Bae5T318nFoFzGy+YE5i/gGkoPAgkmTVdRKTiv3p8JHevPiPaMwoloKfEiiaHlawCqaZMqRm+XQ==",
16984
16971
  "dev": true
16985
16972
  },
16986
16973
  "@eslint/plugin-kit": {
16987
- "version": "0.2.0",
16988
- "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.0.tgz",
16989
- "integrity": "sha512-vH9PiIMMwvhCx31Af3HiGzsVNULDbyVkHXwlemn/B0TFj/00ho3y55efXrUZTfQipxoHC5u4xq6zblww1zm1Ig==",
16974
+ "version": "0.2.4",
16975
+ "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.4.tgz",
16976
+ "integrity": "sha512-zSkKow6H5Kdm0ZUQUB2kV5JIXqoG0+uH5YADhaEHswm664N9Db8dXSi0nMJpacpMf+MyyglF1vnZohpEg5yUtg==",
16990
16977
  "dev": true,
16991
16978
  "requires": {
16992
16979
  "levn": "^0.4.1"
@@ -17023,9 +17010,9 @@
17023
17010
  "dev": true
17024
17011
  },
17025
17012
  "@humanwhocodes/retry": {
17026
- "version": "0.4.0",
17027
- "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.0.tgz",
17028
- "integrity": "sha512-xnRgu9DxZbkWak/te3fcytNyp8MTbuiZIaueg2rgEvBuN55n04nwLYLU9TX/VVlusc9L2ZNXi99nUFNkHXtr5g==",
17013
+ "version": "0.4.1",
17014
+ "resolved": "https://registry.npmjs.org/@humanwhocodes/retry/-/retry-0.4.1.tgz",
17015
+ "integrity": "sha512-c7hNEllBlenFTHBky65mhq8WD2kbN9Q6gk0bTk8lSBvc554jpXSkST1iePudpt7+A/AQvuHs9EMqjHDXMY1lrA==",
17029
17016
  "dev": true
17030
17017
  },
17031
17018
  "@isaacs/cliui": {
@@ -19545,9 +19532,9 @@
19545
19532
  }
19546
19533
  },
19547
19534
  "cross-spawn": {
19548
- "version": "7.0.3",
19549
- "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz",
19550
- "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==",
19535
+ "version": "7.0.6",
19536
+ "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz",
19537
+ "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==",
19551
19538
  "requires": {
19552
19539
  "path-key": "^3.1.0",
19553
19540
  "shebang-command": "^2.0.0",
@@ -19780,26 +19767,26 @@
19780
19767
  "integrity": "sha1-G2HAViGQqN/2rjuyzwIAyhMLhtQ="
19781
19768
  },
19782
19769
  "eslint": {
19783
- "version": "9.14.0",
19784
- "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.14.0.tgz",
19785
- "integrity": "sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==",
19770
+ "version": "9.16.0",
19771
+ "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.16.0.tgz",
19772
+ "integrity": "sha512-whp8mSQI4C8VXd+fLgSM0lh3UlmcFtVwUQjyKCFfsp+2ItAIYhlq/hqGahGqHE6cv9unM41VlqKk2VtKYR2TaA==",
19786
19773
  "dev": true,
19787
19774
  "requires": {
19788
19775
  "@eslint-community/eslint-utils": "^4.2.0",
19789
19776
  "@eslint-community/regexpp": "^4.12.1",
19790
- "@eslint/config-array": "^0.18.0",
19791
- "@eslint/core": "^0.7.0",
19792
- "@eslint/eslintrc": "^3.1.0",
19793
- "@eslint/js": "9.14.0",
19794
- "@eslint/plugin-kit": "^0.2.0",
19777
+ "@eslint/config-array": "^0.19.0",
19778
+ "@eslint/core": "^0.9.0",
19779
+ "@eslint/eslintrc": "^3.2.0",
19780
+ "@eslint/js": "9.16.0",
19781
+ "@eslint/plugin-kit": "^0.2.3",
19795
19782
  "@humanfs/node": "^0.16.6",
19796
19783
  "@humanwhocodes/module-importer": "^1.0.1",
19797
- "@humanwhocodes/retry": "^0.4.0",
19784
+ "@humanwhocodes/retry": "^0.4.1",
19798
19785
  "@types/estree": "^1.0.6",
19799
19786
  "@types/json-schema": "^7.0.15",
19800
19787
  "ajv": "^6.12.4",
19801
19788
  "chalk": "^4.0.0",
19802
- "cross-spawn": "^7.0.2",
19789
+ "cross-spawn": "^7.0.5",
19803
19790
  "debug": "^4.3.2",
19804
19791
  "escape-string-regexp": "^4.0.0",
19805
19792
  "eslint-scope": "^8.2.0",
@@ -19818,8 +19805,7 @@
19818
19805
  "lodash.merge": "^4.6.2",
19819
19806
  "minimatch": "^3.1.2",
19820
19807
  "natural-compare": "^1.4.0",
19821
- "optionator": "^0.9.3",
19822
- "text-table": "^0.2.0"
19808
+ "optionator": "^0.9.3"
19823
19809
  },
19824
19810
  "dependencies": {
19825
19811
  "ansi-styles": {
@@ -20629,9 +20615,9 @@
20629
20615
  }
20630
20616
  },
20631
20617
  "ignore": {
20632
- "version": "5.3.1",
20633
- "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.1.tgz",
20634
- "integrity": "sha512-5Fytz/IraMjqpwfd34ke28PTVMjZjJG2MPn5t7OE4eUCUNf8BAa7b5WUS9/Qvr6mwOQS7Mk6vdsMno5he+T8Xw==",
20618
+ "version": "5.3.2",
20619
+ "resolved": "https://registry.npmjs.org/ignore/-/ignore-5.3.2.tgz",
20620
+ "integrity": "sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==",
20635
20621
  "dev": true
20636
20622
  },
20637
20623
  "ignore-walk": {
@@ -23068,9 +23054,9 @@
23068
23054
  "integrity": "sha512-EZSPZB70jiVsivaBLYDCyntd5eH8NTSMOn3rB+HxwdmKThGELLdYv8qVIMWvZEFy9w8ZZpW9h9OB32l1rGtj7g=="
23069
23055
  },
23070
23056
  "nock": {
23071
- "version": "13.5.5",
23072
- "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.5.tgz",
23073
- "integrity": "sha512-XKYnqUrCwXC8DGG1xX4YH5yNIrlh9c065uaMZZHUoeUUINTOyt+x/G+ezYk0Ft6ExSREVIs+qBJDK503viTfFA==",
23057
+ "version": "13.5.6",
23058
+ "resolved": "https://registry.npmjs.org/nock/-/nock-13.5.6.tgz",
23059
+ "integrity": "sha512-o2zOYiCpzRqSzPj0Zt/dQ/DqZeYoaQ7TUonc/xUPjCGl9WeHpNbxgVvOquXYAaJzI0M9BXV3HTzG0p8IUAbBTQ==",
23074
23060
  "requires": {
23075
23061
  "debug": "^4.1.0",
23076
23062
  "json-stringify-safe": "^5.0.1",
@@ -27170,9 +27156,9 @@
27170
27156
  "integrity": "sha1-gV7R9uvGWSb4ZbMQwHE7yzMVzks="
27171
27157
  },
27172
27158
  "prettier": {
27173
- "version": "3.3.3",
27174
- "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.3.3.tgz",
27175
- "integrity": "sha512-i2tDNA0O5IrMO757lfrdQZCc2jPNDVntV0m/+4whiDfWaTKfMNgR7Qz0NAeGz/nRqF4m5/6CLzbP4/liHt12Ew==",
27159
+ "version": "3.4.2",
27160
+ "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.4.2.tgz",
27161
+ "integrity": "sha512-e9MewbtFo+Fevyuxn/4rrcDAaq0IYxPGLvObpQjiZBMAzB9IGmzlnG9RZy3FFas+eBMu2vA0CszMeduow5dIuQ==",
27176
27162
  "dev": true
27177
27163
  },
27178
27164
  "pretty-format": {
@@ -28069,12 +28055,6 @@
28069
28055
  "minimatch": "^3.0.4"
28070
28056
  }
28071
28057
  },
28072
- "text-table": {
28073
- "version": "0.2.0",
28074
- "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
28075
- "integrity": "sha1-f17oI66AUgfACvLfSoTsP8+lcLQ=",
28076
- "dev": true
28077
- },
28078
28058
  "thenify": {
28079
28059
  "version": "3.3.1",
28080
28060
  "resolved": "https://registry.npmjs.org/thenify/-/thenify-3.3.1.tgz",
data/helpers/package.json CHANGED
@@ -13,7 +13,7 @@
13
13
  "@dependabot/yarn-lib": "^1.22.22",
14
14
  "@npmcli/arborist": "^8.0.0",
15
15
  "detect-indent": "^6.1.0",
16
- "nock": "^13.5.5",
16
+ "nock": "^13.5.6",
17
17
  "npm": "6.14.18",
18
18
  "@pnpm/lockfile-file": "^9.1.2",
19
19
  "@pnpm/dependency-path": "^5.1.1",
@@ -21,9 +21,9 @@
21
21
  "patch-package": "^8.0.0"
22
22
  },
23
23
  "devDependencies": {
24
- "eslint": "^9.14.0",
24
+ "eslint": "^9.16.0",
25
25
  "eslint-config-prettier": "^9.1.0",
26
26
  "jest": "^29.7.0",
27
- "prettier": "^3.3.3"
27
+ "prettier": "^3.4.2"
28
28
  }
29
29
  }
data/lib/dependabot/npm_and_yarn/file_fetcher.rb CHANGED
@@ -614,7 +614,10 @@ module Dependabot
614
614
 
615
615
  sig { returns(T.untyped) }
616
616
  def parsed_package_json
617
- JSON.parse(T.must(package_json.content))
617
+ parsed = JSON.parse(T.must(package_json.content))
618
+ raise Dependabot::DependencyFileNotParseable, package_json.path unless parsed.is_a?(Hash)
619
+
620
+ parsed
618
621
  rescue JSON::ParserError
619
622
  raise Dependabot::DependencyFileNotParseable, package_json.path
620
623
  end
data/lib/dependabot/npm_and_yarn/package_manager.rb CHANGED
@@ -62,14 +62,13 @@ module Dependabot
62
62
 
63
63
  # Keep versions in ascending order
64
64
  SUPPORTED_VERSIONS = T.let([
65
- Version.new(NPM_V6),
66
65
  Version.new(NPM_V7),
67
66
  Version.new(NPM_V8),
68
67
  Version.new(NPM_V9),
69
68
  Version.new(NPM_V10)
70
69
  ].freeze, T::Array[Dependabot::Version])
71
70
 
72
- DEPRECATED_VERSIONS = T.let([].freeze, T::Array[Dependabot::Version])
71
+ DEPRECATED_VERSIONS = T.let([Version.new(NPM_V6)].freeze, T::Array[Dependabot::Version])
73
72
 
74
73
  sig do
75
74
  params(
@@ -89,12 +88,17 @@ module Dependabot
89
88
 
90
89
  sig { override.returns(T::Boolean) }
91
90
  def deprecated?
92
- false
91
+ return false if unsupported?
92
+ return false unless Dependabot::Experiments.enabled?(:npm_v6_deprecation_warning)
93
+
94
+ deprecated_versions.include?(version)
93
95
  end
94
96
 
95
97
  sig { override.returns(T::Boolean) }
96
98
  def unsupported?
97
- false
99
+ return false unless Dependabot::Experiments.enabled?(:npm_v6_unsupported_error)
100
+
101
+ supported_versions.all? { |supported| supported > version }
98
102
  end
99
103
  end
100
104
 
@@ -509,7 +513,7 @@ module Dependabot
509
513
  return unless name == PNPMPackageManager::NAME
510
514
  return unless Version.new(version) < Version.new("7")
511
515
 
512
- raise ToolVersionNotSupported.new(PNPMPackageManager::NAME.upcase, version, "7.*, 8.*")
516
+ raise ToolVersionNotSupported.new(PNPMPackageManager::NAME.upcase, version, "7.*, 8.*, 9.*")
513
517
  end
514
518
 
515
519
  sig { params(name: String, version: T.nilable(String)).void }
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.290.0
4
+ version: 0.291.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-12-12 00:00:00.000000000 Z
11
+ date: 2024-12-19 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.290.0
19
+ version: 0.291.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.290.0
26
+ version: 0.291.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -347,7 +347,7 @@ licenses:
347
347
  - MIT
348
348
  metadata:
349
349
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
350
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.290.0
350
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.291.0
351
351
  post_install_message:
352
352
  rdoc_options: []
353
353
  require_paths: