dependabot-npm_and_yarn 0.297.0 → 0.297.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 2307a97eb41a67224a30ed8eae6fae297da6e8e6a0e539e6921fced9ff3e0cba
|
|
4
|
+
data.tar.gz: 63e3a04e1369f918bc6102ba34630f05008c9e0ba42ad790b7a7f330e3a43ca7
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f6ec9590ca30562db1384bca1656edba5f32b21c477a5f92470a10bce8fee8e95d1d4e31bea26c205ff0df63ea6d13c23a4e00aa9c56646990941614f999ffc0
|
|
7
|
+
data.tar.gz: 895ca647a7cc9d4f5d7a2c9f7378a0db9bc60666bd484662453f441144ee81c2c4c5424192f3ece40e80e7d263e8b14343928dd5fca5dafa79632ed0f1269dc3
|
|
@@ -26,37 +26,6 @@ module Dependabot
|
|
|
26
26
|
end
|
|
27
27
|
|
|
28
28
|
def dependencies
|
|
29
|
-
if Dependabot::Experiments.enabled?(:enable_fix_for_pnpm_no_change_error)
|
|
30
|
-
return dependencies_with_prioritization
|
|
31
|
-
end
|
|
32
|
-
|
|
33
|
-
dependency_set = Dependabot::FileParsers::Base::DependencySet.new
|
|
34
|
-
|
|
35
|
-
parsed.each do |details|
|
|
36
|
-
next if details["aliased"]
|
|
37
|
-
|
|
38
|
-
name = details["name"]
|
|
39
|
-
version = details["version"]
|
|
40
|
-
|
|
41
|
-
dependency_args = {
|
|
42
|
-
name: name,
|
|
43
|
-
version: version,
|
|
44
|
-
package_manager: "npm_and_yarn",
|
|
45
|
-
requirements: []
|
|
46
|
-
}
|
|
47
|
-
|
|
48
|
-
if details["dev"]
|
|
49
|
-
dependency_args[:subdependency_metadata] =
|
|
50
|
-
[{ production: !details["dev"] }]
|
|
51
|
-
end
|
|
52
|
-
|
|
53
|
-
dependency_set << Dependency.new(**dependency_args)
|
|
54
|
-
end
|
|
55
|
-
|
|
56
|
-
dependency_set
|
|
57
|
-
end
|
|
58
|
-
|
|
59
|
-
def dependencies_with_prioritization
|
|
60
29
|
dependency_set = Dependabot::FileParsers::Base::DependencySet.new
|
|
61
30
|
|
|
62
31
|
# Separate dependencies into two categories: with specifiers and without specifiers.
|
|
@@ -127,17 +127,10 @@ module Dependabot
|
|
|
127
127
|
"#{d.name}@#{d.version}"
|
|
128
128
|
end.join(" ")
|
|
129
129
|
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
)
|
|
135
|
-
else
|
|
136
|
-
Helpers.run_pnpm_command(
|
|
137
|
-
"install #{dependency_updates} --lockfile-only --ignore-workspace-root-check",
|
|
138
|
-
fingerprint: "install <dependency_updates> --lockfile-only --ignore-workspace-root-check"
|
|
139
|
-
)
|
|
140
|
-
end
|
|
130
|
+
Helpers.run_pnpm_command(
|
|
131
|
+
"update #{dependency_updates} --lockfile-only --no-save -r",
|
|
132
|
+
fingerprint: "update <dependency_updates> --lockfile-only --no-save -r"
|
|
133
|
+
)
|
|
141
134
|
end
|
|
142
135
|
|
|
143
136
|
def run_pnpm_install
|
|
@@ -62,7 +62,7 @@ module Dependabot
|
|
|
62
62
|
end
|
|
63
63
|
|
|
64
64
|
if updated_files.none?
|
|
65
|
-
if
|
|
65
|
+
if original_pnpm_locks.any?
|
|
66
66
|
raise_tool_not_supported_for_pnpm_if_transitive
|
|
67
67
|
raise_miss_configured_tooling_if_pnpm_subdirectory
|
|
68
68
|
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-npm_and_yarn
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.297.
|
|
4
|
+
version: 0.297.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2025-02-
|
|
11
|
+
date: 2025-02-19 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dependabot-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.297.
|
|
19
|
+
version: 0.297.2
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.297.
|
|
26
|
+
version: 0.297.2
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: debug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -356,7 +356,7 @@ licenses:
|
|
|
356
356
|
- MIT
|
|
357
357
|
metadata:
|
|
358
358
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
359
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.297.
|
|
359
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.297.2
|
|
360
360
|
post_install_message:
|
|
361
361
|
rdoc_options: []
|
|
362
362
|
require_paths:
|