dependabot-npm_and_yarn 0.120.1 → 0.120.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a40a9df4943b269d53644e0a34f3e667978e5bf777f1a3a2937e558171cbc45d
-  data.tar.gz: c8d9d332a154a859a9c008f576c89ff780f07374e3f4d99ac5002b940207727f
+  metadata.gz: 06ce3f20a20b0c56a0bd9e3bf7bb9dc9d1c257d16a7ec7d717fd91d8268f2b5f
+  data.tar.gz: ecd6893cf9fa812bd3f967f8453d7b5cf03560bb1cc3f67f22bf2d325c4373ca
 SHA512:
-  metadata.gz: 4c3cc1b09ae101fc24ef9f87e4fce546443dc52d2e46e9b523930880e49f4d334132852d9cc7e2e266dd95ec38a8c7806f7091b977591c499b276dd19a500a01
-  data.tar.gz: bc1b6a47fa83857f08863bc4f644ad0322882bc79a3f2c1826e6bd902522ff34fc9885b2b80d7aaad1013dbd2db06ac614323e714adf4a7a0e69524c1e0d7831
+  metadata.gz: e744444c7a684737b4ab4ea39f55efe2735115890bf09d4325ddde5d23dfc0ed65493e54d96644ee56d2ea1adb91af48910ce755fdb0d593ae05a0d6743655b3
+  data.tar.gz: e4319be89733258275e988e62543df28972bc7472e3212cd228772ade7c41bf79f96cc2c03db30cfc0371d7fdbfe61c08e0fcf38f65e857aeca1ef7fe3dd95ef

data/lib/dependabot/npm_and_yarn/metadata_finder.rb

@@ -156,9 +156,8 @@ module Dependabot
 
         response = Excon.get(
           "#{dependency_url}/latest",
-          headers: registry_auth_headers,
           idempotent: true,
-          **SharedHelpers.excon_defaults
+          **SharedHelpers.excon_defaults(headers: registry_auth_headers)
         )
 
         if response.status == 200
@@ -184,9 +183,8 @@ module Dependabot
 
         response = Excon.get(
           dependency_url,
-          headers: registry_auth_headers,
           idempotent: true,
-          **SharedHelpers.excon_defaults
+          **SharedHelpers.excon_defaults(headers: registry_auth_headers)
         )
 
         return @npm_listing = {} if response.status >= 500

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -237,18 +237,16 @@ module Dependabot
             begin
               status = Excon.get(
                 dependency_url + "/#{version}",
-                headers: registry_auth_headers,
                 idempotent: true,
-                **SharedHelpers.excon_defaults
+                **SharedHelpers.excon_defaults(headers: registry_auth_headers)
               ).status
 
               if status == 404 && dependency_registry != "registry.npmjs.org"
                 # Some registries don't handle escaped package names properly
                 status = Excon.get(
                   dependency_url.gsub("%2F", "/") + "/#{version}",
-                  headers: registry_auth_headers,
                   idempotent: true,
-                  **SharedHelpers.excon_defaults
+                  **SharedHelpers.excon_defaults(headers: registry_auth_headers)
                 ).status
               end
 
@@ -271,9 +269,8 @@ module Dependabot
             begin
               Excon.get(
                 dependency_url + "/latest",
-                headers: registry_auth_headers,
                 idempotent: true,
-                **SharedHelpers.excon_defaults
+                **SharedHelpers.excon_defaults(headers: registry_auth_headers)
               ).status < 400
             rescue Excon::Error::Timeout, Excon::Error::Socket
               # Give the benefit of the doubt if the registry is playing up
@@ -307,9 +304,8 @@ module Dependabot
         def fetch_npm_response
           response = Excon.get(
             dependency_url,
-            headers: registry_auth_headers,
             idempotent: true,
-            **SharedHelpers.excon_defaults
+            **SharedHelpers.excon_defaults(headers: registry_auth_headers)
           )
 
           return response unless response.status == 500

data/lib/dependabot/npm_and_yarn/update_checker/registry_finder.rb

@@ -45,9 +45,10 @@ module Dependabot
               response = Excon.get(
                 "https://#{details['registry'].gsub(%r{/+$}, '')}/"\
                 "#{escaped_dependency_name}",
-                headers: auth_header_for(details["token"]),
                 idempotent: true,
-                **SharedHelpers.excon_defaults
+                **SharedHelpers.excon_defaults(
+                  headers: auth_header_for(details["token"])
+                )
               )
               response.status < 400 && JSON.parse(response.body)
             rescue Excon::Error::Timeout,

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.120.1
+  version: 0.120.2
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.120.1
+        version: 0.120.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.120.1
+        version: 0.120.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement