dependabot-npm_and_yarn 0.322.0 → 0.322.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5696d15f208114a1f4afe849864fd02e55b43b635ba5712ae75d0028d753c780
-  data.tar.gz: 3e3e0bca818a95047184b22c4ca282757cba9cf2e7c233cc7299bb737169c587
+  metadata.gz: 488fd289f115af8e630da43e7f3bbfac216b7d3df3cfb0c9a15977c6f962fc54
+  data.tar.gz: 0ee19ced17a63790ee72987906b440808511235ab7de80edbd4c5c507b203cee
 SHA512:
-  metadata.gz: 771b5ce91963efee5347d1810af25099e029d0176e8add5848078bfcf4f2b6c2d028f12dda1734e576025e849223909b204047c969d10114108aa2160c459955
-  data.tar.gz: 7ea48759951bca676405704fd02070e55ebee6816fdb5ca624155bb950373e7ca0fbc8aa357ed29f931a013ab6f7e153751d7f94c03269b0ac4264fb8dbdc949
+  metadata.gz: f795b738773716b8c8fec85843ef1e45da6f8d6639dade1ab2fa74c3c9934dceb06aba23af11073f92a17716feec07da5f78f4d808452c639d968ab6c50f3ec0
+  data.tar.gz: f1351e33bccd4850928dbaa03c268b6bef43090d77046c86e4676ddc3d1cfd4bb86abc26dcbfc87c6a5e6bc44f0874b097607c55126867d94bb154a3f73f5b5e

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -74,15 +74,8 @@ module Dependabot
           override.params(language_version: T.nilable(T.any(String, Dependabot::Version)))
                   .returns(T.nilable(Dependabot::Version))
         end
-        def latest_version_with_no_unlock(language_version: nil) # rubocop:disable Lint/UnusedMethodArgument
-          with_custom_registry_rescue do
-            return unless valid_npm_details?
-            return version_from_dist_tags&.version if specified_dist_tag_requirement?
-
-            releases = possible_releases
-            in_range_versions = filter_out_of_range_versions(releases)
-            in_range_versions.find { |r| !yanked_version?(r.version) }&.version
-          end
+        def latest_version_with_no_unlock(language_version: nil)
+          fetch_latest_version_with_no_unlock(language_version: language_version)
         end
 
         sig do
@@ -102,12 +95,13 @@ module Dependabot
           with_custom_registry_rescue do
             return unless valid_npm_details?
 
-            tag_release = version_from_dist_tags
+            tag_release = version_from_dist_tags(cooldown: true)
             return tag_release.version if tag_release
 
             return if specified_dist_tag_requirement?
 
-            possible_releases.find { |r| !yanked_version?(r.version) }&.version
+            filtered_releases = filter_by_cooldown(possible_releases)
+            filtered_releases.find { |r| !yanked_version?(r.version) }&.version
           end
         end
 
@@ -119,11 +113,11 @@ module Dependabot
         def fetch_latest_version_with_no_unlock(language_version: nil) # rubocop:disable Lint/UnusedMethodArgument
           with_custom_registry_rescue do
             return unless valid_npm_details?
-            return version_from_dist_tags&.version if specified_dist_tag_requirement?
+            return version_from_dist_tags(cooldown: true)&.version if specified_dist_tag_requirement?
 
-            releases = possible_releases
+            filtered_releases = filter_by_cooldown(possible_releases)
 
-            in_range_versions = filter_out_of_range_versions(releases)
+            in_range_versions = filter_out_of_range_versions(filtered_releases)
             in_range_versions.find { |r| !yanked_version?(r.version) }&.version
           end
         end
@@ -278,8 +272,11 @@ module Dependabot
           !!package_details&.releases&.any?
         end
 
-        sig { returns(T.nilable(Dependabot::Package::PackageRelease)) }
-        def version_from_dist_tags # rubocop:disable Metrics/PerceivedComplexity
+        sig do
+          params(cooldown: T::Boolean)
+            .returns(T.nilable(Dependabot::Package::PackageRelease))
+        end
+        def version_from_dist_tags(cooldown: false) # rubocop:disable Metrics/PerceivedComplexity
           dist_tags = package_details&.dist_tags
           return nil unless dist_tags
 
@@ -290,7 +287,7 @@ module Dependabot
           # For cooldown filtering, use filtered releases
           releases = available_versions
 
-          releases = filter_by_cooldown(releases) if releases
+          releases = filter_by_cooldown(releases) if cooldown && releases
 
           if dist_tag_req
             release = find_dist_tag_release(dist_tag_req, releases)
@@ -303,7 +300,9 @@ module Dependabot
 
           if wants_latest_dist_tag?(latest_version)
             # Find the release object for this version, even if deprecated
-            return possible_previous_releases.find { |r| r.version == latest_version }
+            releases = possible_previous_releases
+            releases = filter_by_cooldown(releases) if cooldown
+            return releases.find { |r| r.version == latest_version }
           end
 
           nil

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.322.0
+  version: 0.322.2
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.322.0
+        version: 0.322.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.322.0
+        version: 0.322.2
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -356,7 +356,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.322.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.322.2
 rdoc_options: []
 require_paths:
 - lib