dependabot-npm_and_yarn 0.296.3 → 0.297.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 56f7eddcbd18308f0a86bac274e0df81afa396afa8f605f2c9a637d811f3b4ca
-  data.tar.gz: 2c5c93c19f6e5ec444e84c9074cbf4e442df58bb17304b5a7971ee8483d6237c
+  metadata.gz: 3862fc25d8f44cc776d39560672c0ff2762a21aaef35b0a2087f32f18222f13a
+  data.tar.gz: c88b7b6c38d6a5dd123360c54390f782af91b72eedbab7475fdad5b1a07c8afd
 SHA512:
-  metadata.gz: 5a9f09604b9daa2cdc42b6977d89873be5ca321e91b001dc583ca7428710c577eb6f64649ddb2bf74f3973d6f5d142e58ac9ccbaae6f5a0d02c02534e212c7e9
-  data.tar.gz: d56564a4f06e2f6dc8410bfc10c160d266859f0227d48348dd69d950440d0cc542967cb3c3c5dc45f552e61b5682f76e66d9206d4b2ab617217ea09a4fa1f9cd
+  metadata.gz: 44c09dffc1a392ba6c8ab10df7c3242043ca66878821fef5ca4ca6e4ffd4f17b7f220586d9fc68e4aaca97b93edcd4a740211ad31f9dfc55e8983593f4761a4f
+  data.tar.gz: dbfb94d2ea4d1a9afb23054ac0b997b8a5a1741286c0077d8425236ed87a86bf3916fc7f038e91d19217d344348df8c822b4a1593040b528fd1c3a13c04bc9e8

data/lib/dependabot/npm_and_yarn/file_parser/pnpm_lock.rb

@@ -26,37 +26,6 @@ module Dependabot
         end
 
         def dependencies
-          if Dependabot::Experiments.enabled?(:enable_fix_for_pnpm_no_change_error)
-            return dependencies_with_prioritization
-          end
-
-          dependency_set = Dependabot::FileParsers::Base::DependencySet.new
-
-          parsed.each do |details|
-            next if details["aliased"]
-
-            name = details["name"]
-            version = details["version"]
-
-            dependency_args = {
-              name: name,
-              version: version,
-              package_manager: "npm_and_yarn",
-              requirements: []
-            }
-
-            if details["dev"]
-              dependency_args[:subdependency_metadata] =
-                [{ production: !details["dev"] }]
-            end
-
-            dependency_set << Dependency.new(**dependency_args)
-          end
-
-          dependency_set
-        end
-
-        def dependencies_with_prioritization
           dependency_set = Dependabot::FileParsers::Base::DependencySet.new
 
           # Separate dependencies into two categories: with specifiers and without specifiers.

data/lib/dependabot/npm_and_yarn/file_updater/pnpm_lockfile_updater.rb

@@ -127,17 +127,10 @@ module Dependabot
             "#{d.name}@#{d.version}"
           end.join(" ")
 
-          if Dependabot::Experiments.enabled?(:enable_fix_for_pnpm_no_change_error)
-            Helpers.run_pnpm_command(
-              "update #{dependency_updates}  --lockfile-only --no-save -r",
-              fingerprint: "update <dependency_updates>  --lockfile-only --no-save -r"
-            )
-          else
-            Helpers.run_pnpm_command(
-              "install #{dependency_updates} --lockfile-only --ignore-workspace-root-check",
-              fingerprint: "install <dependency_updates> --lockfile-only --ignore-workspace-root-check"
-            )
-          end
+          Helpers.run_pnpm_command(
+            "update #{dependency_updates}  --lockfile-only --no-save -r",
+            fingerprint: "update <dependency_updates>  --lockfile-only --no-save -r"
+          )
         end
 
         def run_pnpm_install

data/lib/dependabot/npm_and_yarn/file_updater.rb

@@ -62,7 +62,7 @@ module Dependabot
                          end
 
         if updated_files.none?
-          if Dependabot::Experiments.enabled?(:enable_fix_for_pnpm_no_change_error) && original_pnpm_locks.any?
+          if original_pnpm_locks.any?
             raise_tool_not_supported_for_pnpm_if_transitive
             raise_miss_configured_tooling_if_pnpm_subdirectory
           end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.296.3
+  version: 0.297.1
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-02-12 00:00:00.000000000 Z
+date: 2025-02-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.296.3
+        version: 0.297.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.296.3
+        version: 0.297.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -356,7 +356,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.296.3
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.297.1
 post_install_message:
 rdoc_options: []
 require_paths: