dependabot-npm_and_yarn 0.113.26 → 0.113.27

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package.json +3 -3
  3. data/helpers/yarn.lock +12 -12
  4. data/lib/dependabot/npm_and_yarn/file_fetcher.rb +2 -1
  5. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f95d498b67f9cfc2e6d83c34f7b7d3708db29067309f2417e76bb592ffc74fa7
4
- data.tar.gz: a618e5f037dacaa2e2ad2a4e76f819249374aa39575671a12872258fc1e84382
3
+ metadata.gz: d59b5ff854db7965ca1116fe675c4abb01bcb59f6241404259f4fb93f0327e3c
4
+ data.tar.gz: 6aedfc0a5da2056e1713d51a6555abb31f0fca85ee03deb8155ca8ef2b02c63e
5
5
  SHA512:
6
- metadata.gz: fc7cd91cc769bb3aeed1a3ec9b0b9e002d179fdd2d97a596844c0abc03b461bb199e223e8d6f9ab9e814014ac92409a3df373825bf8381459926d4250ef76032
7
- data.tar.gz: 460936bd901523dcf81229aa72ff4149b2954b0c2fd78610ead53250c538c5ba11a190857af6ecfffe9bf267860d56c8a23c8cff7d91d97ebac48a577398dfab
6
+ metadata.gz: 22dd601e28eec48d021b2b74f8b816e732690a7432a24261705b24ba3443e058d4c6f338f0a8bafdcbb99eac84dbe1a85b68288c983830b6dbfb39b124d7fc05
7
+ data.tar.gz: eee8ce6326303f4cd22474298df82ce28885789ce9215ba68d1ba110ab5d8c8dda2ace932c52bba45a42f58979ef02844c1c86ff60c4e605eb3e1987af0b8ef5
data/helpers/package.json CHANGED
@@ -9,13 +9,13 @@
9
9
  "test": "jest"
10
10
  },
11
11
  "dependencies": {
12
- "@dependabot/yarn-lib": "^1.19.2",
12
+ "@dependabot/yarn-lib": "^1.21.0",
13
13
  "detect-indent": "^6.0.0",
14
- "npm": "6.13.1",
14
+ "npm": "6.13.2",
15
15
  "semver": "^6.3.0"
16
16
  },
17
17
  "devDependencies": {
18
- "eslint": "^6.7.1",
18
+ "eslint": "^6.7.2",
19
19
  "eslint-plugin-prettier": "^3.1.1",
20
20
  "jest": "^24.9.0",
21
21
  "nock": "^11.7.0",
data/helpers/yarn.lock CHANGED
@@ -139,10 +139,10 @@
139
139
  exec-sh "^0.3.2"
140
140
  minimist "^1.2.0"
141
141
 
142
- "@dependabot/yarn-lib@^1.19.2":
143
- version "1.19.2"
144
- resolved "https://registry.yarnpkg.com/@dependabot/yarn-lib/-/yarn-lib-1.19.2.tgz#a5dd68ea617c5ed639289306965374f73599258f"
145
- integrity sha512-+vjIcGNnNQkeRiidUgJgmT1Cnaee9Ishw0yM4jRChdKGLjZQvtsnYDqeC0UDD1plgi/G+ex2F/zes5Wo/kzQfg==
142
+ "@dependabot/yarn-lib@^1.21.0":
143
+ version "1.21.0"
144
+ resolved "https://registry.yarnpkg.com/@dependabot/yarn-lib/-/yarn-lib-1.21.0.tgz#791c515c1a70b208cdf51dddbf76dde507bb2c34"
145
+ integrity sha512-Zy+sy95XN7iYLLB0oNPofZ0PEfbrZbpKpiQAKWRJ+19af9QRYKzM2xBHuNT8CZ/egFznQSR0OZGWUNpkd6FFeA==
146
146
  dependencies:
147
147
  "@zkochan/cmd-shim" "^3.1.0"
148
148
  babel-runtime "^6.26.0"
@@ -1682,10 +1682,10 @@ eslint-visitor-keys@^1.1.0:
1682
1682
  resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-1.1.0.tgz#e2a82cea84ff246ad6fb57f9bde5b46621459ec2"
1683
1683
  integrity sha512-8y9YjtM1JBJU/A9Kc+SbaOV4y29sSWckBwMHa+FGtVj5gN/sbnKDf6xJUl+8g7FAij9LVaP8C24DUiH/f/2Z9A==
1684
1684
 
1685
- eslint@^6.7.1:
1686
- version "6.7.1"
1687
- resolved "https://registry.yarnpkg.com/eslint/-/eslint-6.7.1.tgz#269ccccec3ef60ab32358a44d147ac209154b919"
1688
- integrity sha512-UWzBS79pNcsDSxgxbdjkmzn/B6BhsXMfUaOHnNwyE8nD+Q6pyT96ow2MccVayUTV4yMid4qLhMiQaywctRkBLA==
1685
+ eslint@^6.7.2:
1686
+ version "6.7.2"
1687
+ resolved "https://registry.yarnpkg.com/eslint/-/eslint-6.7.2.tgz#c17707ca4ad7b2d8af986a33feba71e18a9fecd1"
1688
+ integrity sha512-qMlSWJaCSxDFr8fBPvJM9kJwbazrhNcBU3+DszDW1OlEwKBBRWsJc7NJFelvwQpanHCR14cOLD41x8Eqvo3Nng==
1689
1689
  dependencies:
1690
1690
  "@babel/code-frame" "^7.0.0"
1691
1691
  ajv "^6.10.0"
@@ -4349,10 +4349,10 @@ npm-user-validate@~1.0.0:
4349
4349
  resolved "https://registry.yarnpkg.com/npm-user-validate/-/npm-user-validate-1.0.0.tgz#8ceca0f5cea04d4e93519ef72d0557a75122e951"
4350
4350
  integrity sha1-jOyg9c6gTU6TUZ73LQVXp1Ei6VE=
4351
4351
 
4352
- npm@6.13.1:
4353
- version "6.13.1"
4354
- resolved "https://registry.yarnpkg.com/npm/-/npm-6.13.1.tgz#6a2658392b70aa1266ddfe256ef21d0de2f4d8dc"
4355
- integrity sha512-2awiDZ9JuV/UoF4oXGhekCURC2X+eLLRz9/e58AGrPDlpzyn7e4oCaZmkzyEaisxM7jSoFKNnZhzB4xbmbM0Yw==
4352
+ npm@6.13.2:
4353
+ version "6.13.2"
4354
+ resolved "https://registry.yarnpkg.com/npm/-/npm-6.13.2.tgz#fb3b9500fcc5394a2727848e2a45cd6d245eaad4"
4355
+ integrity sha512-TG7AFkKpjBNJh8OVJYcGaAbW0PZxEkjew51Lc6TRdhQpNjSSEnAOEpidApqEuciB7cs09C8mxbo8NbuPs4QDzg==
4356
4356
  dependencies:
4357
4357
  JSONStream "^1.3.5"
4358
4358
  abbrev "~1.1.1"
data/lib/dependabot/npm_and_yarn/file_fetcher.rb CHANGED
@@ -138,7 +138,8 @@ module Dependabot
138
138
  file = fetch_file_from_host(filename, fetch_submodules: true)
139
139
  package_json_files << file
140
140
  rescue Dependabot::DependencyFileNotFound
141
- unfetchable_deps << [name, path]
141
+ # Unfetchable tarballs should not be re-fetched as a package
142
+ unfetchable_deps << [name, path] unless path.end_with?(".tgz")
142
143
  end
143
144
  end
144
145
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.113.26
4
+ version: 0.113.27
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-11-29 00:00:00.000000000 Z
11
+ date: 2019-12-09 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.113.26
19
+ version: 0.113.27
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.113.26
26
+ version: 0.113.27
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement