dependabot-npm_and_yarn 0.111.44 → 0.111.45

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4f1afc4b8119e803c5eeebb2176790803ee7fa3912dd6729a0fd9eb1abf3c8ee
4
- data.tar.gz: bae5b852bfdf91cf83d5122e609663464954b3fe9e3fb0f4d67214ff601a8e59
3
+ metadata.gz: c07c0d9819ca1f8106b41058bb4a46d47a02e6fc5ff7a7e7028877caef364e8d
4
+ data.tar.gz: d93eff16c0399e76e5fadc3739a49746a341d3667d1faf9371a5fcd26fe9f7fe
5
5
  SHA512:
6
- metadata.gz: 9eab706b632d9b171fa8964e2e3a62e16123b8755ee4001a978d255e65e0c505f9ff93ac83501011bc7749582a94e260eafc0336e5bb61a5db4f06b3002eda0b
7
- data.tar.gz: f4f3e6add1f9fbb6a4d929d8731404a21bcca798acd377497a73ed4dd49957aa86adbadca26fc7aac5ce7a51b16b959e8c8b18cf5b0c617d254728c3456e0b92
6
+ metadata.gz: 262383d6c06d9c2a315ffb951ef8b0e3ff1226501a8071a06690c29178e2063b8fb6f914a3a59c807b524fe0869a68c28c46b6fa0dc5f2fb5f46aa3d65599c64
7
+ data.tar.gz: acff76ff8f9e49035d20f0ab0908d8864ae569929f60dd6a79ff2436723c3aaa688c29fb2314376db346f79b92ed31ca62f71ebc6c326d826aa0c6c8c1ce9d42
@@ -136,9 +136,13 @@ module Dependabot
136
136
  }
137
137
 
138
138
  if details["bundled"]
139
- dependency_args[:subdependency_metadata] = {
140
- npm_bundled: details["bundled"]
141
- }
139
+ dependency_args[:subdependency_metadata] =
140
+ [{ npm_bundled: details["bundled"] }]
141
+ end
142
+
143
+ if details["dev"]
144
+ dependency_args[:subdependency_metadata] =
145
+ [{ production: !details["dev"] }]
142
146
  end
143
147
 
144
148
  dependency_set << Dependency.new(dependency_args)
@@ -233,7 +233,9 @@ module Dependabot
233
233
  # removed from the bundled set of dependencies and moved top level
234
234
  # resulting in a bunch of package duplication which is pretty confusing.
235
235
  def bundled_dependency?
236
- dependency.subdependency_metadata&.fetch(:npm_bundled, false) || false
236
+ dependency.subdependency_metadata&.
237
+ any? { |h| h.fetch(:npm_bundled, false) } ||
238
+ false
237
239
  end
238
240
  end
239
241
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.111.44
4
+ version: 0.111.45
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.111.44
19
+ version: 0.111.45
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.111.44
26
+ version: 0.111.45
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement