dependabot-npm_and_yarn 0.105.4 → 0.105.5

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d05fbc6659ef7ad778ea2762d864ecc01e705adf9a3f64d8c4455f31c9a5c370
4
- data.tar.gz: 50aaff4e0f76c943ff3f701ce1b8198a5cca117dd40c3fc8122ca33510d82b85
3
+ metadata.gz: 4be2139736af69e5d35bca5a091299aefa56d15508f5a6a2d3b1906cd68cad13
4
+ data.tar.gz: 4d98f356ce40492bcd641831001c41c79e0c3169ff4be7b125dd6f6349a47168
5
5
  SHA512:
6
- metadata.gz: 8a37a5365fe53549cdb1bd50a23f054ec0b741ed8cc33f8026555eb0bed18341a590a590c3d9a522869dfa86bda6362265a9cd5ee268e0a95a7324bc8e7d86d9
7
- data.tar.gz: b0e88ec060c3f3ff3881ebeb58cacf091b51b705a57f384e4c7d5fe15696d270b434fd2eeff5e64261e533500ca0027c6097b42cc9418f6762b874a918b523a2
6
+ metadata.gz: 47939752a2e9c4c6875664eeaad265ca814bd932368dbc31023b327da3fe84d177c90430edfe1545854ad4f21a1c1eefd5f0132691d7321a46ecaa57c37f002e
7
+ data.tar.gz: 5a54307a910a7450dde9cc3538f3c4890a93f0a1712abb1f9a09d383b5fd1a52c96143872907b97853ea12814b0d1e8c64ec19faa8a75ad95daabf3a1d1c6b04
@@ -64,8 +64,18 @@ module Dependabot
64
64
  end
65
65
 
66
66
  def updated_requirements(dependency)
67
- new_requirements(dependency).
68
- reject { |r| dependency.previous_requirements.include?(r) }
67
+ updated_requirement_pairs =
68
+ dependency.requirements.zip(dependency.previous_requirements).
69
+ reject do |new_req, old_req|
70
+ next true if new_req == old_req
71
+ next false unless old_req[:source].nil?
72
+
73
+ new_req[:requirement] == old_req[:requirement]
74
+ end
75
+
76
+ updated_requirement_pairs.
77
+ map(&:first).
78
+ select { |r| r[:file] == package_json.name }
69
79
  end
70
80
 
71
81
  def update_package_json_declaration(package_json_content:, new_req:,
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.105.4
4
+ version: 0.105.5
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.105.4
19
+ version: 0.105.5
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.105.4
26
+ version: 0.105.5
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement