dependabot-npm_and_yarn 0.107.26 → 0.107.27

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e4abd2d4a61091e7a7ae9b281e9f43ea8a775b14d590ee4b89823ddaa0905cba
-  data.tar.gz: 15435b4735fe23762c7a9add97191e2a67dc6ab120609ee3cef82d5e0e5f3b5f
+  metadata.gz: 85826e9a4d1f98c35f49861c9d488714aa5a4e2e8edb026de72adea9bed4b3cf
+  data.tar.gz: 575880a02774b327ce37b37b027b09ff896663a63b664172c2d961062fb7371c
 SHA512:
-  metadata.gz: f6e45424258ff032e91d56ac1af120521a4f3b35d81468144ee85aa52facc22e4632ae962d07406f95db2209250e295b01771c33e6f8e7e1804c1939bb5389b3
-  data.tar.gz: 226847aeae5117078921ad33933573d28a75e1234e7319a49a9230f075dd0bd3bcfcd557c4505a92d48c9750901fd31c39a528c7d72ca1161d451f63968de7f3
+  metadata.gz: b158bc0d2b804f952ff535edd62781407f119dd598fdff5df5e474fc7d15f2c4c3b45ed48d7d4344d98722bdc995443e375b8a86350fba083f67ffe610a52cdd
+  data.tar.gz: f626bd7d3d3e88966210f37fddfc514041efa9335f6628c5534bb1c4ee76462827ec262451f43e8087570b7fde9fb340264e9b95a0caab5eabe4fa96c02e5d6b

data/lib/dependabot/npm_and_yarn/file_fetcher.rb

@@ -178,7 +178,7 @@ module Dependabot
         end
 
         dependency_objects.flat_map(&:to_a).
-          select { |_, v| v.start_with?(*path_dep_starts) }.
+          select { |_, v| v.is_a?(String) && v.start_with?(*path_dep_starts) }.
           map do |name, path|
             path = path.sub(/^file:/, "").sub(/^link:/, "")
             path = File.join(current_dir, path) unless current_dir.nil?

data/lib/dependabot/npm_and_yarn/file_parser.rb

@@ -68,6 +68,8 @@ module Dependabot
           DEPENDENCY_TYPES.each do |type|
             deps = JSON.parse(file.content)[type] || {}
             deps.each do |name, requirement|
+              next unless requirement.is_a?(String)
+
               requirement = "*" if requirement == ""
               dep = build_dependency(
                 file: file, type: type, name: name, requirement: requirement

data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb

@@ -403,10 +403,8 @@ module Dependabot
         def lock_git_deps(content)
           return content if git_dependencies_to_lock.empty?
 
-          types = NpmAndYarn::FileParser::DEPENDENCY_TYPES
-
           json = JSON.parse(content)
-          types.each do |type|
+          NpmAndYarn::FileParser::DEPENDENCY_TYPES.each do |type|
             json.fetch(type, {}).each do |nm, _|
               updated_version = git_dependencies_to_lock.dig(nm, :version)
               next unless updated_version
@@ -460,6 +458,7 @@ module Dependabot
           package_files.each do |file|
             NpmAndYarn::FileParser::DEPENDENCY_TYPES.each do |t|
               JSON.parse(file.content).fetch(t, {}).each do |_, requirement|
+                next unless requirement.is_a?(String)
                 next unless requirement.start_with?("git+ssh:")
 
                 req = requirement.split("#").first

data/lib/dependabot/npm_and_yarn/file_updater/package_json_preparer.rb

@@ -72,6 +72,7 @@ module Dependabot
 
           NpmAndYarn::FileParser::DEPENDENCY_TYPES.each do |t|
             JSON.parse(package_json_content).fetch(t, {}).each do |_, req|
+              next unless req.is_a?(String)
               next unless req.start_with?("git+ssh:")
 
               req = req.split("#").first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.107.26
+  version: 0.107.27
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-05-29 00:00:00.000000000 Z
+date: 2019-05-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.107.26
+        version: 0.107.27
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.107.26
+        version: 0.107.27
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement