dependabot-npm_and_yarn 0.102.0 → 0.102.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package.json +1 -1
  3. data/helpers/yarn.lock +4 -4
  4. data/lib/dependabot/npm_and_yarn/update_checker.rb +1 -0
  5. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e065249385d5d40fa7a235a1f3eae13f38cc1e3f4da10599f195b4701cdc5421
4
- data.tar.gz: 8e02e117d6956a77d0ee4af6f7468ea40638d3a4889cd82d84e5b2151b57b003
3
+ metadata.gz: 8333cae6b07821e307a7c84324a9c119e4fed936de9a48ac3720ee5522c1b8c2
4
+ data.tar.gz: bb727480945231f4f0a9046f06977e73791f35f4f85f3e87ab4d942a8e3335bf
5
5
  SHA512:
6
- metadata.gz: 7d4c25c44cc1b8e03508f635a9c74cc91930191214f42782786110b2fabc832a1c8199381eddb5832898783c770e31c31c6b210498de24a079f0c6f4b95708ee
7
- data.tar.gz: 6e9205e22f72554828eb6c86d9ac9020c0189caed145f19abf7be4f434c6052d8512b4acab5daa247f9a2f56b06f81c4ccd8324e0688bc24d5b1ec79731cbaff
6
+ metadata.gz: c3b7aab6b05cca32e83d55709bd2a7a0f4edde2194e72a18ef2abf283dbad44a55e9fdb1e300835734f6097b295b370ca7bf9795e5a7f80e5fa92bc478845f31
7
+ data.tar.gz: f3f3744b96fc88d7be20b0d03acaa6988b5ec1fc0fd2bf0029d35abd462658f08db42307bf489e6429343b6772a3b12380523b32ae0ca4068abb653b9c6f9846
data/helpers/package.json CHANGED
@@ -18,6 +18,6 @@
18
18
  "eslint-plugin-prettier": "^3.0.1",
19
19
  "jest": "^24.7.1",
20
20
  "nock": "^10.0.6",
21
- "prettier": "^1.16.4"
21
+ "prettier": "^1.17.0"
22
22
  }
23
23
  }
data/helpers/yarn.lock CHANGED
@@ -4823,10 +4823,10 @@ prettier-linter-helpers@^1.0.0:
4823
4823
  dependencies:
4824
4824
  fast-diff "^1.1.2"
4825
4825
 
4826
- prettier@^1.16.4:
4827
- version "1.16.4"
4828
- resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.16.4.tgz#73e37e73e018ad2db9c76742e2647e21790c9717"
4829
- integrity sha512-ZzWuos7TI5CKUeQAtFd6Zhm2s6EpAD/ZLApIhsF9pRvRtM1RFo61dM/4MSRUA0SuLugA/zgrZD8m0BaY46Og7g==
4826
+ prettier@^1.17.0:
4827
+ version "1.17.0"
4828
+ resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.17.0.tgz#53b303676eed22cc14a9f0cec09b477b3026c008"
4829
+ integrity sha512-sXe5lSt2WQlCbydGETgfm1YBShgOX4HxQkFPvbxkcwgDvGDeqVau8h+12+lmSVlP3rHPz0oavfddSZg/q+Szjw==
4830
4830
 
4831
4831
  pretty-format@^24.7.0:
4832
4832
  version "24.7.0"
data/lib/dependabot/npm_and_yarn/update_checker.rb CHANGED
@@ -38,6 +38,7 @@ module Dependabot
38
38
 
39
39
  def lowest_resolvable_security_fix_version
40
40
  raise "Dependency not vulnerable!" unless vulnerable?
41
+ return latest_resolvable_version unless dependency.top_level?
41
42
 
42
43
  # TODO: Might want to check resolvability here?
43
44
  latest_version_finder.lowest_security_fix_version
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.102.0
4
+ version: 0.102.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.102.0
19
+ version: 0.102.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.102.0
26
+ version: 0.102.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement