dependabot-npm_and_yarn 0.138.6 → 0.138.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84916236c990d2af54694bb0aa0ec3da1a3363d0c1a7eb508569d2ed083fca98
-  data.tar.gz: 26b05fc417840eb81cc06663637c95002605c9e8419fe3a847017aa4a752e6f4
+  metadata.gz: 718352903b43db84d34c48dd5981eee3a6ed51a2b9b7f78f5fc46ee013bc3e33
+  data.tar.gz: 62b63995c1c0d41f5da987380222b716e3d18b0b80a733c6629eeaaa028b5c32
 SHA512:
-  metadata.gz: 44c451612fe14f3e2fbd9d8172f6000a09b17c29e238550d115a1200058dd1a50b7b979bb0c248bd129c702aaa62065bab1f4bacadbc92ec1a5f9e1d49edfae8
-  data.tar.gz: 1c5ca6fc36c28e86538beacdc3ff0c8253c18d0708469799dce7b5c10ca18b4d043bcfc6e2e04b927dcbd02ead64172016de5dfb5a9639fe53053df2d8bfa807
+  metadata.gz: a3de09fc0cb466562bd40a676301c84b7775252cbb47d7995e0154eee3471926fc0bf4bab860eebed09e7d24b4bf0b559eac613e58ac00ed1ee6e8f6e34b4921
+  data.tar.gz: 974974e318fafe8fcfeae7b5e63555e0683d70ac9fb81d10d5ff0c61288b52d455d92fd2e27a0bd559b281f6720ef26db33df03e8b60932c28570e0bebbb9004

data/helpers/package-lock.json

@@ -16,7 +16,7 @@
         "helper": "run.js"
       },
       "devDependencies": {
-        "eslint": "^7.22.0",
+        "eslint": "^7.23.0",
         "eslint-config-prettier": "^8.1.0",
         "jest": "^26.6.3",
         "prettier": "^2.2.1",
@@ -3456,9 +3456,9 @@
       }
     },
     "node_modules/eslint": {
-      "version": "7.22.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
-      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
+      "version": "7.23.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.23.0.tgz",
+      "integrity": "sha512-kqvNVbdkjzpFy0XOszNwjkKzZ+6TcwCQ/h+ozlcIWwaimBBuhlQ4nN6kbiM2L+OjDcznkTJxzYfRFH92sx4a0Q==",
       "dev": true,
       "dependencies": {
         "@babel/code-frame": "7.12.11",
@@ -8195,7 +8195,239 @@
         "validate-npm-package-name",
         "which",
         "worker-farm",
-        "write-file-atomic"
+        "write-file-atomic",
+        "agent-base",
+        "agentkeepalive",
+        "ansi-align",
+        "ansi-regex",
+        "ansi-styles",
+        "are-we-there-yet",
+        "asap",
+        "asn1",
+        "assert-plus",
+        "asynckit",
+        "aws-sign2",
+        "aws4",
+        "balanced-match",
+        "bcrypt-pbkdf",
+        "boxen",
+        "brace-expansion",
+        "buffer-from",
+        "builtins",
+        "byline",
+        "camelcase",
+        "capture-stack-trace",
+        "caseless",
+        "chalk",
+        "cidr-regex",
+        "cli-boxes",
+        "cliui",
+        "clone",
+        "code-point-at",
+        "color-convert",
+        "color-name",
+        "colors",
+        "combined-stream",
+        "concat-map",
+        "concat-stream",
+        "configstore",
+        "console-control-strings",
+        "copy-concurrently",
+        "core-util-is",
+        "create-error-class",
+        "cross-spawn",
+        "crypto-random-string",
+        "cyclist",
+        "dashdash",
+        "debug",
+        "decamelize",
+        "decode-uri-component",
+        "deep-extend",
+        "defaults",
+        "define-properties",
+        "delayed-stream",
+        "delegates",
+        "dot-prop",
+        "dotenv",
+        "duplexer3",
+        "duplexify",
+        "ecc-jsbn",
+        "emoji-regex",
+        "encoding",
+        "end-of-stream",
+        "env-paths",
+        "err-code",
+        "errno",
+        "es-abstract",
+        "es-to-primitive",
+        "es6-promise",
+        "es6-promisify",
+        "escape-string-regexp",
+        "execa",
+        "extend",
+        "extsprintf",
+        "fast-json-stable-stringify",
+        "flush-write-stream",
+        "forever-agent",
+        "form-data",
+        "from2",
+        "fs-minipass",
+        "fs.realpath",
+        "function-bind",
+        "gauge",
+        "genfun",
+        "get-caller-file",
+        "get-stream",
+        "getpass",
+        "global-dirs",
+        "got",
+        "har-schema",
+        "har-validator",
+        "has",
+        "has-flag",
+        "has-symbols",
+        "http-cache-semantics",
+        "http-proxy-agent",
+        "http-signature",
+        "https-proxy-agent",
+        "humanize-ms",
+        "iconv-lite",
+        "ignore-walk",
+        "import-lazy",
+        "ip",
+        "ip-regex",
+        "is-callable",
+        "is-ci",
+        "is-date-object",
+        "is-fullwidth-code-point",
+        "is-installed-globally",
+        "is-npm",
+        "is-obj",
+        "is-path-inside",
+        "is-redirect",
+        "is-regex",
+        "is-retry-allowed",
+        "is-stream",
+        "is-symbol",
+        "is-typedarray",
+        "isarray",
+        "isexe",
+        "isstream",
+        "jsbn",
+        "json-schema",
+        "json-stringify-safe",
+        "jsonparse",
+        "jsprim",
+        "latest-version",
+        "libnpmconfig",
+        "libnpmpublish",
+        "lodash._createset",
+        "lodash._root",
+        "lowercase-keys",
+        "make-dir",
+        "make-fetch-happen",
+        "mime-db",
+        "mime-types",
+        "minimatch",
+        "minimist",
+        "minizlib",
+        "ms",
+        "mute-stream",
+        "node-fetch-npm",
+        "npm-bundled",
+        "npm-logical-tree",
+        "npm-normalize-package-bin",
+        "npm-run-path",
+        "number-is-nan",
+        "oauth-sign",
+        "object-assign",
+        "object-keys",
+        "object.getownpropertydescriptors",
+        "os-homedir",
+        "os-tmpdir",
+        "p-finally",
+        "package-json",
+        "parallel-transform",
+        "path-exists",
+        "path-is-absolute",
+        "path-key",
+        "path-parse",
+        "performance-now",
+        "pify",
+        "prepend-http",
+        "process-nextick-args",
+        "promise-retry",
+        "promzard",
+        "proto-list",
+        "protoduck",
+        "prr",
+        "pseudomap",
+        "psl",
+        "pump",
+        "pumpify",
+        "punycode",
+        "qs",
+        "rc",
+        "registry-auth-token",
+        "registry-url",
+        "require-directory",
+        "require-main-filename",
+        "resolve-from",
+        "run-queue",
+        "safer-buffer",
+        "semver-diff",
+        "set-blocking",
+        "shebang-command",
+        "shebang-regex",
+        "signal-exit",
+        "smart-buffer",
+        "socks",
+        "socks-proxy-agent",
+        "spdx-correct",
+        "spdx-exceptions",
+        "spdx-expression-parse",
+        "spdx-license-ids",
+        "split-on-first",
+        "sshpk",
+        "stream-each",
+        "stream-iterate",
+        "stream-shift",
+        "strict-uri-encode",
+        "string_decoder",
+        "string-width",
+        "strip-ansi",
+        "strip-eof",
+        "strip-json-comments",
+        "supports-color",
+        "term-size",
+        "through",
+        "through2",
+        "timed-out",
+        "tough-cookie",
+        "tunnel-agent",
+        "tweetnacl",
+        "typedarray",
+        "unique-slug",
+        "unique-string",
+        "unzip-response",
+        "uri-js",
+        "url-parse-lax",
+        "util-deprecate",
+        "util-extend",
+        "util-promisify",
+        "verror",
+        "wcwidth",
+        "which-module",
+        "wide-align",
+        "widest-line",
+        "wrap-ansi",
+        "wrappy",
+        "xdg-basedir",
+        "xtend",
+        "y18n",
+        "yallist",
+        "yargs",
+        "yargs-parser"
       ],
       "dependencies": {
         "abbrev": "~1.1.1",
@@ -18659,9 +18891,9 @@
       }
     },
     "eslint": {
-      "version": "7.22.0",
-      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.22.0.tgz",
-      "integrity": "sha512-3VawOtjSJUQiiqac8MQc+w457iGLfuNGLFn8JmF051tTKbh5/x/0vlcEj8OgDCaw7Ysa2Jn8paGshV7x2abKXg==",
+      "version": "7.23.0",
+      "resolved": "https://registry.npmjs.org/eslint/-/eslint-7.23.0.tgz",
+      "integrity": "sha512-kqvNVbdkjzpFy0XOszNwjkKzZ+6TcwCQ/h+ozlcIWwaimBBuhlQ4nN6kbiM2L+OjDcznkTJxzYfRFH92sx4a0Q==",
       "dev": true,
       "requires": {
         "@babel/code-frame": "7.12.11",

data/helpers/package.json

@@ -16,7 +16,7 @@
     "semver": "^7.3.4"
   },
   "devDependencies": {
-    "eslint": "^7.22.0",
+    "eslint": "^7.23.0",
     "eslint-config-prettier": "^8.1.0",
     "jest": "^26.6.3",
     "prettier": "^2.2.1",

data/lib/dependabot/npm_and_yarn/dependency_files_filterer.rb

@@ -16,12 +16,10 @@ module Dependabot
 
       def files_requiring_update
         @files_requiring_update ||=
-          begin
-            dependency_files.select do |file|
-              package_files_requiring_update.include?(file) ||
-                package_required_lockfile?(file) ||
-                workspaces_lockfile?(file)
-            end
+          dependency_files.select do |file|
+            package_files_requiring_update.include?(file) ||
+              package_required_lockfile?(file) ||
+              workspaces_lockfile?(file)
           end
       end
 

data/lib/dependabot/npm_and_yarn/file_updater.rb

@@ -60,18 +60,16 @@ module Dependabot
 
       def filtered_dependency_files
         @filtered_dependency_files ||=
-          begin
-            if dependencies.select(&:top_level?).any?
-              DependencyFilesFilterer.new(
-                dependency_files: dependency_files,
-                updated_dependencies: dependencies
-              ).files_requiring_update
-            else
-              SubDependencyFilesFilterer.new(
-                dependency_files: dependency_files,
-                updated_dependencies: dependencies
-              ).files_requiring_update
-            end
+          if dependencies.select(&:top_level?).any?
+            DependencyFilesFilterer.new(
+              dependency_files: dependency_files,
+              updated_dependencies: dependencies
+            ).files_requiring_update
+          else
+            SubDependencyFilesFilterer.new(
+              dependency_files: dependency_files,
+              updated_dependencies: dependencies
+            ).files_requiring_update
           end
       end
 

data/lib/dependabot/npm_and_yarn/sub_dependency_files_filterer.rb

@@ -18,15 +18,13 @@ module Dependabot
 
       def files_requiring_update
         @files_requiring_update ||=
-          begin
-            lockfiles.select do |lockfile|
-              lockfile_dependencies(lockfile).any? do |sub_dep|
-                updated_dependencies.any? do |updated_dep|
-                  next false unless sub_dep.name == updated_dep.name
+          lockfiles.select do |lockfile|
+            lockfile_dependencies(lockfile).any? do |sub_dep|
+              updated_dependencies.any? do |updated_dep|
+                next false unless sub_dep.name == updated_dep.name
 
-                  version_class.new(updated_dep.version) >
-                    version_class.new(sub_dep.version)
-                end
+                version_class.new(updated_dep.version) >
+                  version_class.new(sub_dep.version)
               end
             end
           end

data/lib/dependabot/npm_and_yarn/update_checker.rb

@@ -165,17 +165,13 @@ module Dependabot
 
       def latest_version_for_git_dependency
         @latest_version_for_git_dependency ||=
-          begin
-            # If there's been a release that includes the current pinned ref
-            # or that the current branch is behind, we switch to that release.
-            if git_branch_or_ref_in_latest_release?
-              latest_released_version
-            elsif version_class.correct?(dependency.version)
-              latest_git_version_details[:version] &&
-                version_class.new(latest_git_version_details[:version])
-            else
-              latest_git_version_details[:sha]
-            end
+          if git_branch_or_ref_in_latest_release?
+            latest_released_version
+          elsif version_class.correct?(dependency.version)
+            latest_git_version_details[:version] &&
+              version_class.new(latest_git_version_details[:version])
+          else
+            latest_git_version_details[:sha]
           end
       end
 

data/lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb

@@ -75,12 +75,10 @@ module Dependabot
         end
 
         def possible_previous_versions_with_details
-          @possible_previous_versions_with_details ||= begin
-            npm_details.fetch("versions", {}).
-              transform_keys { |k| version_class.new(k) }.
-              reject { |v, _| v.prerelease? && !related_to_current_pre?(v) }.
-              sort_by(&:first).reverse
-          end
+          @possible_previous_versions_with_details ||= npm_details.fetch("versions", {}).
+                                                       transform_keys { |k| version_class.new(k) }.
+                                                       reject { |v, _| v.prerelease? && !related_to_current_pre?(v) }.
+                                                       sort_by(&:first).reverse
         end
 
         def possible_versions_with_details(filter_ignored: true)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.138.6
+  version: 0.138.7
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-29 00:00:00.000000000 Z
+date: 2021-03-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.6
+        version: 0.138.7
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.6
+        version: 0.138.7
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement