dependabot-npm_and_yarn 0.117.3 → 0.117.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 151b8c789e96284a990b281139fe040cec43bf774ddedf20681602e6e83b6516
-  data.tar.gz: aae4c8b5a735d73e6916e7fdab0673617ad9d9faaa156078dff27f1c81c8f863
+  metadata.gz: '096bcf1e064de66241e6903ecdc843165a51caecb442954ec24b3964aa928532'
+  data.tar.gz: b7fae157fe771e44db29e78b615326b16453862970aca6b68e2e6252f4fc11d8
 SHA512:
-  metadata.gz: 4dfd96ecb7b2cf7ad599dbf84a2ef65042e4ba2d1fef21ddad1aca463dd6c01949ed32c541a1a598bdbcd3e5c00e0c4f24ec5e70cd64fdd9aa71a9188c183b31
-  data.tar.gz: d2cbfa645a5dac4287988efdf877d2fa8a07ebec69a954e1f6db3cda78b27884dec509804606a404817e16f83223b536e6d5989bc538a232a334ae250927198c
+  metadata.gz: 520c2fdc23652fb9c28ed0f429eac71c67bb7dec2a4a75dbaeff780527575a0d2f2f4217671f75446bc106453582e057b347093373de3f789bbb348c8bc74e32
+  data.tar.gz: b1404953cae660ff58eb9a54faa21b46d34640af341b406a04a50cf9667c7302bfb6ff08d027a80cba65b0eaed6dc9cf5d236e4cf0ad0ed631040a4a3fc90f8a

data/helpers/lib/npm/helpers.js

@@ -21,5 +21,5 @@ function muteStderr() {
 
 module.exports = {
   runAsync,
-  muteStderr
+  muteStderr,
 };

data/helpers/lib/npm/index.js

@@ -5,5 +5,5 @@ const subdependencyUpdater = require("./subdependency-updater");
 module.exports = {
   update: updater.updateDependencyFiles,
   updateSubdependency: subdependencyUpdater.updateDependencyFile,
-  checkPeerDependencies: peerDependencyChecker.checkPeerDependencies
+  checkPeerDependencies: peerDependencyChecker.checkPeerDependencies,
 };

data/helpers/lib/npm/peer-dependency-checker.js

@@ -15,7 +15,7 @@ const installer = require("npm/lib/install");
 const { muteStderr, runAsync } = require("./helpers.js");
 
 function installArgsWithVersion(depName, desiredVersion, reqs) {
-  const source = (reqs.find(req => req.source) || {}).source;
+  const source = (reqs.find((req) => req.source) || {}).source;
 
   if (source && source.type === "git") {
     return [`${depName}@${source.url}#${desiredVersion}`];
@@ -48,8 +48,8 @@ async function checkPeerDependencies(
       audit: false,
       "prefer-offline": true,
       "ignore-scripts": true,
-      save: false
-    }
+      save: false,
+    },
   ]);
 
   const dryRun = true;
@@ -75,18 +75,20 @@ async function checkPeerDependencies(
   // Returns dep name and version for npm install, example: ["react-dom@15.6.2"]
   // - given react and react-dom in top level deps
   const otherDeps = (topLevelDependencies || [])
-    .filter(dep => dep.name !== depName && dep.version)
-    .map(dep => installArgsWithVersion(dep.name, dep.version, dep.requirements))
+    .filter((dep) => dep.name !== depName && dep.version)
+    .map((dep) =>
+      installArgsWithVersion(dep.name, dep.version, dep.requirements)
+    )
     .reduce((acc, dep) => acc.concat(dep), []);
 
   args = args.concat(otherDeps);
 
   const initialInstaller = new installer.Installer(directory, dryRun, args, {
-    packageLockOnly: true
+    packageLockOnly: true,
   });
 
   // Skip printing the success message
-  initialInstaller.printInstalled = cb => cb();
+  initialInstaller.printInstalled = (cb) => cb();
 
   // There are some hard-to-prevent bits of output.
   // This is horrible, but works.
@@ -98,8 +100,8 @@ async function checkPeerDependencies(
   }
 
   const peerDependencyWarnings = initialInstaller.idealTree.warnings
-    .filter(warning => warning.code === "EPEERINVALID")
-    .map(warning => warning.message);
+    .filter((warning) => warning.code === "EPEERINVALID")
+    .map((warning) => warning.message);
 
   if (peerDependencyWarnings.length) {
     throw new Error(peerDependencyWarnings.join("\n"));

data/helpers/lib/npm/subdependency-updater.js

@@ -8,7 +8,7 @@ const removeDependenciesFromLockfile = require("./remove-dependencies-from-lockf
 const { muteStderr, runAsync } = require("./helpers.js");
 
 async function updateDependencyFile(directory, lockfileName, dependencies) {
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
 
   const lockfile = readFile(lockfileName);
@@ -18,7 +18,7 @@ async function updateDependencyFile(directory, lockfileName, dependencies) {
   // npm find the latest resolvable version and fix the lockfile
   const updatedLockfileObject = removeDependenciesFromLockfile(
     lockfileObject,
-    dependencies.map(dep => dep.name)
+    dependencies.map((dep) => dep.name)
   );
   fs.writeFileSync(
     path.join(directory, lockfileName),
@@ -41,24 +41,24 @@ async function updateDependencyFile(directory, lockfileName, dependencies) {
       force: true,
       audit: false,
       "prefer-offline": true,
-      "ignore-scripts": true
-    }
+      "ignore-scripts": true,
+    },
   ]);
 
   const dryRun = true;
   const initialInstaller = new installer.Installer(directory, dryRun, [], {
-    packageLockOnly: true
+    packageLockOnly: true,
   });
 
   // A bug in npm means the initial install will remove any git dependencies
   // from the lockfile. A subsequent install with no arguments fixes this.
   const cleanupInstaller = new installer.Installer(directory, dryRun, [], {
-    packageLockOnly: true
+    packageLockOnly: true,
   });
 
   // Skip printing the success message
-  initialInstaller.printInstalled = cb => cb();
-  cleanupInstaller.printInstalled = cb => cb();
+  initialInstaller.printInstalled = (cb) => cb();
+  cleanupInstaller.printInstalled = (cb) => cb();
 
   // There are some hard-to-prevent bits of output.
   // This is horrible, but works.

data/helpers/lib/npm/updater.js

@@ -22,7 +22,7 @@ const detectIndent = require("detect-indent");
 const { muteStderr, runAsync } = require("./helpers.js");
 
 async function updateDependencyFiles(directory, lockfileName, dependencies) {
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
 
   // `force: true` ignores checks for platform (os, cpu) and engines
@@ -41,14 +41,14 @@ async function updateDependencyFiles(directory, lockfileName, dependencies) {
       force: true,
       audit: false,
       "prefer-offline": true,
-      "ignore-scripts": true
-    }
+      "ignore-scripts": true,
+    },
   ]);
   const manifest = JSON.parse(readFile("package.json"));
 
   const dryRun = true;
   const flattenedDependencies = flattenAllDependencies(manifest);
-  const args = dependencies.map(dependency => {
+  const args = dependencies.map((dependency) => {
     const existingVersionRequirement = flattenedDependencies[dependency.name];
     return installArgs(
       dependency.name,
@@ -58,18 +58,18 @@ async function updateDependencyFiles(directory, lockfileName, dependencies) {
     );
   });
   const initialInstaller = new installer.Installer(directory, dryRun, args, {
-    packageLockOnly: true
+    packageLockOnly: true,
   });
 
   // A bug in npm means the initial install will remove any git dependencies
   // from the lockfile. A subsequent install with no arguments fixes this.
   const cleanupInstaller = new installer.Installer(directory, dryRun, [], {
-    packageLockOnly: true
+    packageLockOnly: true,
   });
 
   // Skip printing the success message
-  initialInstaller.printInstalled = cb => cb();
-  cleanupInstaller.printInstalled = cb => cb();
+  initialInstaller.printInstalled = (cb) => cb();
+  cleanupInstaller.printInstalled = (cb) => cb();
 
   // There are some hard-to-prevent bits of output.
   // This is horrible, but works.
@@ -119,7 +119,7 @@ function installArgs(
   requirements,
   existingVersionRequirement
 ) {
-  const source = (requirements.find(req => req.source) || {}).source;
+  const source = (requirements.find((req) => req.source) || {}).source;
 
   if (source && source.type === "git") {
     if (!existingVersionRequirement) {

data/helpers/lib/yarn/fix-duplicates.js

@@ -55,11 +55,11 @@ module.exports = (data, updatedDependencyName) => {
     .filter(([name]) => packagesToDedupe.includes(name))
     .forEach(([name, packages]) => {
       // Reverse sort, so we'll find the maximum satisfying version first
-      const versions = packages.map(p => p.pkg.version).sort(semver.rcompare);
-      const ranges = packages.map(p => p.requestedVersion);
+      const versions = packages.map((p) => p.pkg.version).sort(semver.rcompare);
+      const ranges = packages.map((p) => p.requestedVersion);
 
       // Dedup each package to its maxSatisfying version
-      packages.forEach(p => {
+      packages.forEach((p) => {
         const targetVersion = semver.maxSatisfying(
           versions,
           p.requestedVersion
@@ -67,7 +67,7 @@ module.exports = (data, updatedDependencyName) => {
         if (targetVersion === null) return;
         if (targetVersion !== p.pkg.version) {
           const dedupedPackage = packages.find(
-            p => p.pkg.version === targetVersion
+            (p) => p.pkg.version === targetVersion
           );
           json[`${name}@${p.requestedVersion}`] = dedupedPackage.pkg;
         }

data/helpers/lib/yarn/index.js

@@ -7,5 +7,5 @@ module.exports = {
   parseLockfile: lockfileParser.parse,
   update: updater.updateDependencyFiles,
   updateSubdependency: subdependencyUpdater.updateDependencyFile,
-  checkPeerDependencies: peerDependencyChecker.checkPeerDependencies
+  checkPeerDependencies: peerDependencyChecker.checkPeerDependencies,
 };

data/helpers/lib/yarn/lockfile-parser.js

@@ -12,7 +12,7 @@ const parseLockfile = require("@dependabot/yarn-lib/lib/lockfile/parse")
   .default;
 
 async function parse(directory) {
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
   const data = readFile("yarn.lock");
   return parseLockfile(data).object;

data/helpers/lib/yarn/peer-dependency-checker.js

@@ -53,11 +53,11 @@ function installArgsWithVersion(depName, desiredVersion, requirements) {
   const source =
     "source" in requirements
       ? requirements.source
-      : (requirements.find(req => req.source) || {}).source;
+      : (requirements.find((req) => req.source) || {}).source;
   const req =
     "requirement" in requirements
       ? requirements.requirement
-      : (requirements.find(req => req.requirement) || {}).requirement;
+      : (requirements.find((req) => req.requirement) || {}).requirement;
 
   if (source && source.type === "git") {
     if (desiredVersion) {
@@ -93,7 +93,7 @@ async function checkPeerDepsForReq(
     ignoreEngines: true,
     ignorePlatform: true,
     dev: devRequirement(requirement),
-    optional: optionalRequirement(requirement)
+    optional: optionalRequirement(requirement),
   };
   const reporter = new BufferReporter();
   const config = new Config(reporter);
@@ -101,7 +101,7 @@ async function checkPeerDepsForReq(
   await config.init({
     cwd: path.join(directory, path.dirname(requirement.file)),
     nonInteractive: true,
-    enableDefaultRc: true
+    enableDefaultRc: true,
   });
 
   const lockfile = await Lockfile.fromDirectory(directory, reporter);
@@ -118,7 +118,7 @@ async function checkPeerDepsForReq(
   const eventBuffer = reporter.getBuffer();
   const peerDependencyWarnings = eventBuffer
     .map(({ data }) => data)
-    .filter(data => {
+    .filter((data) => {
       // Guard against event.data sometimes being an object
       return isString(data) && data.match(/(unmet|incorrect) peer dependency/);
     });

data/helpers/lib/yarn/replace-lockfile-declaration.js

@@ -39,7 +39,7 @@ module.exports = (
   const oldPackageReqs = getRequestedVersions(depName, oldJson);
   const newPackageReqs = getRequestedVersions(depName, newJson);
 
-  const reqToReplace = newPackageReqs.find(pattern => {
+  const reqToReplace = newPackageReqs.find((pattern) => {
     return !oldPackageReqs.includes(pattern);
   });
 

data/helpers/lib/yarn/subdependency-updater.js

@@ -15,7 +15,7 @@ const stringify = require("@dependabot/yarn-lib/lib/lockfile/stringify")
 function recoverVersionComments(oldLockfile, newLockfile) {
   const yarnRegex = /^# yarn v(\S+)\n/gm;
   const nodeRegex = /^# node v(\S+)\n/gm;
-  const oldMatch = regex => [].concat(oldLockfile.match(regex))[0];
+  const oldMatch = (regex) => [].concat(oldLockfile.match(regex))[0];
   return newLockfile
     .replace(yarnRegex, () => oldMatch(yarnRegex) || "")
     .replace(nodeRegex, () => oldMatch(nodeRegex) || "");
@@ -24,21 +24,21 @@ function recoverVersionComments(oldLockfile, newLockfile) {
 // Installs exact version and returns lockfile entry
 async function getLockfileEntryForUpdate(depName, depVersion) {
   const directory = fs.mkdtempSync(`${os.tmpdir()}${path.sep}`);
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
 
   const flags = {
     ignoreScripts: true,
     ignoreWorkspaceRootCheck: true,
     ignoreEngines: true,
-    ignorePlatform: true
+    ignorePlatform: true,
   };
   const reporter = new EventReporter();
   const config = new Config(reporter);
   await config.init({
     cwd: directory,
     nonInteractive: true,
-    enableDefaultRc: true
+    enableDefaultRc: true,
   });
 
   // Empty lockfile
@@ -58,21 +58,21 @@ async function updateDependencyFile(
   lockfileName,
   updatedDependency
 ) {
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
   const originalYarnLock = readFile(lockfileName);
 
   const flags = {
     ignoreScripts: true,
     ignoreWorkspaceRootCheck: true,
-    ignoreEngines: true
+    ignoreEngines: true,
   };
   const reporter = new EventReporter();
   const config = new Config(reporter);
   await config.init({
     cwd: directory,
     nonInteractive: true,
-    enableDefaultRc: true
+    enableDefaultRc: true,
   });
   config.enableLockfileVersions = Boolean(originalYarnLock.match(/^# yarn v/m));
   const depName = updatedDependency && updatedDependency.name;
@@ -103,7 +103,7 @@ async function updateDependencyFile(
   );
 
   return {
-    [lockfileName]: updatedYarnLockWithVersion
+    [lockfileName]: updatedYarnLockWithVersion,
   };
 }
 

data/helpers/lib/yarn/updater.js

@@ -17,7 +17,7 @@ const path = require("path");
 const { Add } = require("@dependabot/yarn-lib/lib/cli/commands/add");
 const { Install } = require("@dependabot/yarn-lib/lib/cli/commands/install");
 const {
-  cleanLockfile
+  cleanLockfile,
 } = require("@dependabot/yarn-lib/lib/cli/commands/upgrade");
 const Config = require("@dependabot/yarn-lib/lib/config").default;
 const { EventReporter } = require("@dependabot/yarn-lib/lib/reporters");
@@ -42,10 +42,10 @@ function flattenAllDependencies(manifest) {
 function recoverVersionComments(oldLockfile, newLockfile) {
   const yarnRegex = /^# yarn v(\S+)\n/gm;
   const nodeRegex = /^# node v(\S+)\n/gm;
-  const oldMatch = regex => [].concat(oldLockfile.match(regex))[0];
+  const oldMatch = (regex) => [].concat(oldLockfile.match(regex))[0];
   return newLockfile
-    .replace(yarnRegex, match => oldMatch(yarnRegex) || "")
-    .replace(nodeRegex, match => oldMatch(nodeRegex) || "");
+    .replace(yarnRegex, (match) => oldMatch(yarnRegex) || "")
+    .replace(nodeRegex, (match) => oldMatch(nodeRegex) || "");
 }
 
 function devRequirement(requirements) {
@@ -92,7 +92,7 @@ function installArgsWithVersion(
         `${depName}@${existingVersionRequirement.replace(
           /#.*/,
           ""
-        )}#${desiredVersion}`
+        )}#${desiredVersion}`,
       ];
     }
   } else {
@@ -101,7 +101,7 @@ function installArgsWithVersion(
 }
 
 async function updateDependencyFiles(directory, dependencies) {
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
   let updateRunResults = { "yarn.lock": readFile("yarn.lock") };
 
@@ -123,7 +123,7 @@ async function updateDependencyFile(
   desiredVersion,
   requirements
 ) {
-  const readFile = fileName =>
+  const readFile = (fileName) =>
     fs.readFileSync(path.join(directory, fileName)).toString();
   const originalYarnLock = readFile("yarn.lock");
   const originalPackageJson = readFile(requirements.file);
@@ -134,14 +134,14 @@ async function updateDependencyFile(
     ignoreEngines: true,
     ignorePlatform: true,
     dev: devRequirement(requirements),
-    optional: optionalRequirement(requirements)
+    optional: optionalRequirement(requirements),
   };
   const reporter = new EventReporter();
   const config = new Config(reporter);
   await config.init({
     cwd: path.join(directory, path.dirname(requirements.file)),
     nonInteractive: true,
-    enableDefaultRc: true
+    enableDefaultRc: true,
   });
   config.enableLockfileVersions = Boolean(originalYarnLock.match(/^# yarn v/m));
 
@@ -198,7 +198,7 @@ async function updateDependencyFile(
   updatedYarnLock = recoverVersionComments(originalYarnLock, updatedYarnLock);
 
   return {
-    "yarn.lock": updatedYarnLock
+    "yarn.lock": updatedYarnLock,
   };
 }
 

data/helpers/package.json

@@ -11,14 +11,14 @@
   "dependencies": {
     "@dependabot/yarn-lib": "^1.21.1",
     "detect-indent": "^6.0.0",
-    "npm": "6.14.2",
+    "npm": "6.14.3",
     "semver": "^7.1.3"
   },
   "devDependencies": {
     "eslint": "^6.8.0",
     "eslint-plugin-prettier": "^3.1.2",
     "jest": "^25.1.0",
-    "prettier": "^1.19.1",
+    "prettier": "^2.0.2",
     "rimraf": "^3.0.2"
   }
 }

data/helpers/run.js

@@ -5,7 +5,7 @@ function output(obj) {
 }
 
 const input = [];
-process.stdin.on("data", data => input.push(data));
+process.stdin.on("data", (data) => input.push(data));
 process.stdin.on("end", () => {
   const request = JSON.parse(input.join(""));
   const [manager, functionName] = request.function.split(":");
@@ -19,10 +19,10 @@ process.stdin.on("end", () => {
   try {
     func
       .apply(null, request.args)
-      .then(result => {
+      .then((result) => {
         output({ result: result });
       })
-      .catch(error => {
+      .catch((error) => {
         output({ error: error.message });
         process.exit(1);
       });

data/helpers/test/npm/helpers.js

@@ -2,6 +2,6 @@ const path = require("path");
 const fs = require("fs");
 
 module.exports = {
-  loadFixture: fixturePath =>
-    fs.readFileSync(path.join(__dirname, "fixtures", fixturePath)).toString()
+  loadFixture: (fixturePath) =>
+    fs.readFileSync(path.join(__dirname, "fixtures", fixturePath)).toString(),
 };

data/helpers/test/npm/updater.test.js

@@ -33,13 +33,13 @@ describe("updater", () => {
       {
         name: "left-pad",
         version: "1.1.3",
-        requirements: [{ file: "package.json", groups: ["dependencies"] }]
-      }
+        requirements: [{ file: "package.json", groups: ["dependencies"] }],
+      },
     ]);
     expect(result).toEqual({
       "package-lock.json": helpers.loadFixture(
         "updater/updated/package-lock.json"
-      )
+      ),
     });
   });
 });

data/helpers/test/yarn/helpers.js

@@ -2,6 +2,6 @@ const path = require("path");
 const fs = require("fs");
 
 module.exports = {
-  loadFixture: fixturePath =>
-    fs.readFileSync(path.join(__dirname, "fixtures", fixturePath)).toString()
+  loadFixture: (fixturePath) =>
+    fs.readFileSync(path.join(__dirname, "fixtures", fixturePath)).toString(),
 };

data/helpers/test/yarn/updater.test.js

@@ -33,11 +33,11 @@ describe("updater", () => {
       {
         name: "left-pad",
         version: "1.1.3",
-        requirements: [{ file: "package.json", groups: ["dependencies"] }]
-      }
+        requirements: [{ file: "package.json", groups: ["dependencies"] }],
+      },
     ]);
     expect(result).toEqual({
-      "yarn.lock": helpers.loadFixture("updater/updated/yarn.lock")
+      "yarn.lock": helpers.loadFixture("updater/updated/yarn.lock"),
     });
   });
 
@@ -48,8 +48,8 @@ describe("updater", () => {
       {
         name: "left-pad",
         version: "1.1.3",
-        requirements: [{ file: "package.json", groups: ["dependencies"] }]
-      }
+        requirements: [{ file: "package.json", groups: ["dependencies"] }],
+      },
     ]);
     expect(result["yarn.lock"]).toContain("\n# yarn v0.0.0-0\n");
     expect(result["yarn.lock"]).toContain("\n# node v0.0.0\n");
@@ -62,8 +62,8 @@ describe("updater", () => {
       {
         name: "left-pad",
         version: "1.1.3",
-        requirements: [{ file: "package.json", groups: ["dependencies"] }]
-      }
+        requirements: [{ file: "package.json", groups: ["dependencies"] }],
+      },
     ]);
     expect(result["yarn.lock"]).not.toContain("\n# yarn v");
     expect(result["yarn.lock"]).not.toContain("\n# node");
@@ -79,8 +79,8 @@ describe("updater", () => {
         {
           name: "left-pad",
           version: "99.99.99",
-          requirements: [{ file: "package.json", groups: ["dependencies"] }]
-        }
+          requirements: [{ file: "package.json", groups: ["dependencies"] }],
+        },
       ]);
     } catch (error) {
       expect(error).not.toBeNull();

data/helpers/yarn.lock

@@ -628,9 +628,9 @@ acorn-walk@^6.0.1:
   integrity sha512-7evsyfH1cLOCdAzZAd43Cic04yKydNx0cF+7tiA19p1XnLLPU4dpCQOqpjqwokFe//vS0QqfqqjCS2JkiIs0cA==
 
 acorn@^6.0.1:
-  version "6.3.0"
-  resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.3.0.tgz#0087509119ffa4fc0a0041d1e93a417e68cb856e"
-  integrity sha512-/czfa8BwS88b9gWQVhc8eknunSA2DoJpJyTQkhheIf5E48u1N0R4q/YxxsAeqRrmK9TQ/uYfgLDfZo91UlANIA==
+  version "6.4.1"
+  resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.4.1.tgz#531e58ba3f51b9dacb9a6646ca4debf5b14ca474"
+  integrity sha512-ZVA9k326Nwrj3Cj9jlh3wGFutC2ZornPNARZwsNYqQYgN0EsV2d53w5RN/co65Ohn4sUAUtb1rSUAOD6XN9idA==
 
 acorn@^7.1.0:
   version "7.1.0"
@@ -4200,16 +4200,16 @@ mimic-fn@^2.1.0:
   dependencies:
     brace-expansion "^1.1.7"
 
-minimist@0.0.8:
-  version "0.0.8"
-  resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
-  integrity sha1-hX/Kv8M5fSYluCKCYuhqp6ARsF0=
-
 minimist@^1.1.1, minimist@^1.2.0:
   version "1.2.0"
   resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.0.tgz#a35008b20f41383eec1fb914f4cd5df79a264284"
   integrity sha1-o1AIsg9BOD7sH7kU9M1d95omQoQ=
 
+minimist@^1.2.5:
+  version "1.2.5"
+  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.5.tgz#67d66014b66a6a8aaa0c083c5fd58df4e4e97602"
+  integrity sha512-FM9nNUYrRBAELZQT3xeZQ7fmMOBg6nWNmJKTcgsJeaLstP/UODVpGsr5OhXhhXg6f+qtJ8uiZ+PUxkDWcgIXLw==
+
 minipass@^2.2.1, minipass@^2.3.5:
   version "2.3.5"
   resolved "https://registry.yarnpkg.com/minipass/-/minipass-2.3.5.tgz#cacebe492022497f656b0f0f51e2682a9ed2d848"
@@ -4264,12 +4264,12 @@ mkdirp-promise@^5.0.1:
   dependencies:
     mkdirp "*"
 
-mkdirp@*, mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@~0.5.0, mkdirp@~0.5.1:
-  version "0.5.1"
-  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903"
-  integrity sha1-MAV0OOrGz3+MR2fzhkjWaX11yQM=
+mkdirp@*, mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@^0.5.3, mkdirp@~0.5.0:
+  version "0.5.3"
+  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.3.tgz#5a514b7179259287952881e94410ec5465659f8c"
+  integrity sha512-P+2gwrFqx8lhew375MQHHeTlY8AuOJSrGf0R5ddkEndUkmwpgUob/vQuBD1V22/Cw1/lJr4x+EjllSezBThzBg==
   dependencies:
-    minimist "0.0.8"
+    minimist "^1.2.5"
 
 move-concurrently@^1.0.1:
   version "1.0.1"
@@ -4545,10 +4545,10 @@ npm-user-validate@~1.0.0:
   resolved "https://registry.yarnpkg.com/npm-user-validate/-/npm-user-validate-1.0.0.tgz#8ceca0f5cea04d4e93519ef72d0557a75122e951"
   integrity sha1-jOyg9c6gTU6TUZ73LQVXp1Ei6VE=
 
-npm@6.14.2:
-  version "6.14.2"
-  resolved "https://registry.yarnpkg.com/npm/-/npm-6.14.2.tgz#f057d35cd4792c4c511bb1fa332edb43143d07b0"
-  integrity sha512-eBVjzvGJ9v2/jRJZFtIkvUVKmJ0sCJNNwc9Z1gI6llwaT7EBYWJe5o61Ipc1QR0FaDCKM3l1GizI09Ro3STJEw==
+npm@6.14.3:
+  version "6.14.3"
+  resolved "https://registry.yarnpkg.com/npm/-/npm-6.14.3.tgz#a122618543c6670765cf5e827cd996b5552f9b65"
+  integrity sha512-3tQYVEEdSGQGYoXhZvNqW8faqCidfMMaL387RdDo4Uu5kQy4IgvJ13NIsWVMQ6e3QWlbicNMSpFiyzYfMUuPDw==
   dependencies:
     JSONStream "^1.3.5"
     abbrev "~1.1.1"
@@ -4616,7 +4616,7 @@ npm@6.14.2:
     lru-cache "^5.1.1"
     meant "~1.0.1"
     mississippi "^3.0.0"
-    mkdirp "~0.5.1"
+    mkdirp "^0.5.3"
     move-concurrently "^1.0.1"
     node-gyp "^5.1.0"
     nopt "~4.0.1"
@@ -4650,7 +4650,7 @@ npm@6.14.2:
     readdir-scoped-modules "^1.1.0"
     request "^2.88.0"
     retry "^0.12.0"
-    rimraf "^2.6.3"
+    rimraf "^2.7.1"
     safe-buffer "^5.1.2"
     semver "^5.7.1"
     sha "^3.0.0"
@@ -5087,10 +5087,10 @@ prettier-linter-helpers@^1.0.0:
   dependencies:
     fast-diff "^1.1.2"
 
-prettier@^1.19.1:
-  version "1.19.1"
-  resolved "https://registry.yarnpkg.com/prettier/-/prettier-1.19.1.tgz#f7d7f5ff8a9cd872a7be4ca142095956a60797cb"
-  integrity sha512-s7PoyDv/II1ObgQunCbB9PdLmUcBZcnWOcxDh7O0N/UwDEsHyqkW+Qh28jW+mVuCdx7gLB0BotYI1Y6uI9iyew==
+prettier@^2.0.2:
+  version "2.0.2"
+  resolved "https://registry.yarnpkg.com/prettier/-/prettier-2.0.2.tgz#1ba8f3eb92231e769b7fcd7cb73ae1b6b74ade08"
+  integrity sha512-5xJQIPT8BraI7ZnaDwSbu5zLrB6vvi8hVV58yHQ+QK64qrY40dULy0HSRlQ2/2IdzeBpjhDkqdcFBnFeDEMVdg==
 
 pretty-format@^25.1.0:
   version "25.1.0"
@@ -5567,7 +5567,7 @@ rimraf@2.6.3:
   dependencies:
     glob "^7.1.3"
 
-rimraf@^2.5.0, rimraf@^2.5.2, rimraf@^2.5.4, rimraf@^2.6.2, rimraf@^2.6.3:
+rimraf@^2.5.0, rimraf@^2.5.2, rimraf@^2.5.4, rimraf@^2.6.2, rimraf@^2.6.3, rimraf@^2.7.1:
   version "2.7.1"
   resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.7.1.tgz#35797f13a7fdadc566142c29d4f07ccad483e3ec"
   integrity sha512-uWjbaKIK3T1OSVptzX7Nl6PvQ3qAGtKEtVRjRuazjfL3Bx5eI409VZSqgND+4UNnmzLVdPj9FqFJNPqBZFve4w==

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.117.3
+  version: 0.117.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-03-20 00:00:00.000000000 Z
+date: 2020-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.3
+        version: 0.117.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.3
+        version: 0.117.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement