dependabot-npm_and_yarn 0.182.0 → 0.182.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/package-lock.json +7 -7
  3. data/helpers/package.json +1 -1
  4. data/lib/dependabot/npm_and_yarn/package_name.rb +21 -0
  5. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 3e97677093da4655de7c484f38380ddba94bf4d77e10abffd78f744b0a4b8bda
4
- data.tar.gz: 614464679513daeb84ac13ba5c72c86077ed8036ca3834ded89107280c1b4403
3
+ metadata.gz: '09750678e33fa1395b60a074bf7a354d9c7bd34e60065d5aa5613633f624b149'
4
+ data.tar.gz: 1e680d2003a44f4ad4ad31068cc50e6ef2fdb79df08b4a23a292d5857adb50a7
5
5
  SHA512:
6
- metadata.gz: cea8bce99156d337ba234cbcd9eb8d9dd2ab9007a41490c80519d8991f0f99930aac018191f19da28eae1b3eb010990e6729e7e9f1012d204a32149738a5bbed
7
- data.tar.gz: a93e5939056fb01e82faea3b9c68ea3d096104efd16f3b65d530ee569383ee6dabf90e675aca85cab45edb2ee37a2736f40a80c977f61bced23f36fb7aaae8a2
6
+ metadata.gz: 5c73e38719968962220d5a46999d2f2ac1fa39beb090f9cb3d5e9f52da52a98a0091ec8edfe6e8164f9e0abcc1bc25fe99fa88c8ab67928a6129fb2f5eb31160
7
+ data.tar.gz: 18da817e1894b1f67c3243c3f4756f0e7069ab80199f3848cdb270b4747723331720298577c0950eb602f7fe924a07ab4cc634d68a7ae707594b10ca21f68bb8
data/helpers/package-lock.json CHANGED
@@ -7,7 +7,7 @@
7
7
  "name": "@dependabot/helper",
8
8
  "dependencies": {
9
9
  "@dependabot/yarn-lib": "^1.21.1",
10
- "@npmcli/arborist": "^5.0.6",
10
+ "@npmcli/arborist": "^5.1.0",
11
11
  "detect-indent": "^6.1.0",
12
12
  "npm": "6.14.16",
13
13
  "semver": "^7.3.7"
@@ -1545,9 +1545,9 @@
1545
1545
  }
1546
1546
  },
1547
1547
  "node_modules/@npmcli/arborist": {
1548
- "version": "5.0.6",
1549
- "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.0.6.tgz",
1550
- "integrity": "sha512-byBsiOgwEHb0zeEEYTkyyRiHIkvD/EoNpfUy71mrrMcBMWkaaVJoJHvJHu46MVPgz8WUdqJMwl8HhrHauY/TPg==",
1548
+ "version": "5.1.0",
1549
+ "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.1.0.tgz",
1550
+ "integrity": "sha512-MMutHkOmGyLJTBGXeeZ7khANmjlJtuqHScDATXaxChHMLF6MhAlw2Cca4TXlbeJuq0X1s7wm6ODa/vnBS3DVAw==",
1551
1551
  "dependencies": {
1552
1552
  "@isaacs/string-locale-compare": "^1.1.0",
1553
1553
  "@npmcli/installed-package-contents": "^1.0.7",
@@ -15403,9 +15403,9 @@
15403
15403
  }
15404
15404
  },
15405
15405
  "@npmcli/arborist": {
15406
- "version": "5.0.6",
15407
- "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.0.6.tgz",
15408
- "integrity": "sha512-byBsiOgwEHb0zeEEYTkyyRiHIkvD/EoNpfUy71mrrMcBMWkaaVJoJHvJHu46MVPgz8WUdqJMwl8HhrHauY/TPg==",
15406
+ "version": "5.1.0",
15407
+ "resolved": "https://registry.npmjs.org/@npmcli/arborist/-/arborist-5.1.0.tgz",
15408
+ "integrity": "sha512-MMutHkOmGyLJTBGXeeZ7khANmjlJtuqHScDATXaxChHMLF6MhAlw2Cca4TXlbeJuq0X1s7wm6ODa/vnBS3DVAw==",
15409
15409
  "requires": {
15410
15410
  "@isaacs/string-locale-compare": "^1.1.0",
15411
15411
  "@npmcli/installed-package-contents": "^1.0.7",
data/helpers/package.json CHANGED
@@ -10,7 +10,7 @@
10
10
  },
11
11
  "dependencies": {
12
12
  "@dependabot/yarn-lib": "^1.21.1",
13
- "@npmcli/arborist": "^5.0.6",
13
+ "@npmcli/arborist": "^5.1.0",
14
14
  "detect-indent": "^6.1.0",
15
15
  "npm": "6.14.16",
16
16
  "semver": "^7.3.7"
data/lib/dependabot/npm_and_yarn/package_name.rb CHANGED
@@ -11,6 +11,13 @@ module Dependabot
11
11
  (?<name>[a-z0-9\-~][a-z0-9\-._~]*) # capture package name
12
12
  \z # end of string
13
13
  }xi.freeze # multi-line/case-insensitive
14
+ TYPES_PACKAGE_NAME_REGEX = %r{
15
+ \A # beginning of string
16
+ @#{DEFINITELY_TYPED_SCOPE}\/ # starts with @types/
17
+ ((?<scope>.+)__)? # capture scope
18
+ (?<name>.+) # capture name
19
+ \z # end of string
20
+ }xi.freeze # multi-line/case-insensitive
14
21
 
15
22
  class InvalidPackageName < StandardError; end
16
23
 
@@ -38,6 +45,20 @@ module Dependabot
38
45
  to_s.eql?(other.to_s)
39
46
  end
40
47
 
48
+ def library_name
49
+ return self unless types_package?
50
+
51
+ @library_name ||=
52
+ begin
53
+ match = TYPES_PACKAGE_NAME_REGEX.match(to_s)
54
+ if match[:scope]
55
+ self.class.new("@#{match[:scope]}/#{match[:name]}")
56
+ else
57
+ self.class.new(match[:name].to_s)
58
+ end
59
+ end
60
+ end
61
+
41
62
  def types_package_name
42
63
  return self if types_package?
43
64
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.182.0
4
+ version: 0.182.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-04-20 00:00:00.000000000 Z
11
+ date: 2022-04-25 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.182.0
19
+ version: 0.182.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.182.0
26
+ version: 0.182.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debase
29
29
  requirement: !ruby/object:Gem::Requirement