dependabot-npm_and_yarn 0.186.0 → 0.186.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aeff725531d7c22b4ef708a9bc7fa65726f8dd59bd4add961f917adb05d215e6
-  data.tar.gz: 18e5d38da3681f275f65dbac387cfa3621b225e1bf411db092367d4513a900b3
+  metadata.gz: 6ba76f738d1063edb7f67ffd5e91446dc499e4ce3c5669f30cd24549a81de2c7
+  data.tar.gz: 66a0dcbf534d029bf52515a562586adf5787a164456c2ebb4569ebf4997fbb1a
 SHA512:
-  metadata.gz: a36832bb9014119197be3a4656719fc1f621f6f375148235127f640b71f75ce92f47edd122e74bd9795a8952508f68eddbf7b897b368c03a74bbfdb27fda82e2
-  data.tar.gz: b9e2aab53895c9892a584e425fe9a1f8dd801610f3b8e0b5b65ae011ab0262f565dd01fe8116e92ac410dad446c07c47aaf77f803a44bab581459efa31f6ea59
+  metadata.gz: dd992188087707f9dbb6a40410e4e73831e8517c51735a627284dce456a50c5bab2624a0b7af29b86526ae6e2d61f03e5a210a383826df25f66f22c4a5e13843
+  data.tar.gz: a175aa22539ef2f3ec0e0c0adf6f70e2e883aa4fdcea6ed46a881241268b1c1245478835aaa7142dedef8b9639861500474a8dc767cd71cc622cdbeb65fb0c50

data/lib/dependabot/npm_and_yarn/package_name.rb

@@ -3,17 +3,17 @@
 module Dependabot
   module NpmAndYarn
     class PackageName
-      DEFINITELY_TYPED_SCOPE = /types/i.freeze
-      PACKAGE_NAME_REGEX     = %r{
+      PACKAGE_NAME_REGEX = %r{
           \A                                         # beginning of string
           (?=.{1,214}\z)                             # enforce length (1 - 214)
           (@(?<scope>[a-z0-9\-~][a-z0-9\-\._~]*)\/)? # capture 'scope' if present
           (?<name>[a-z0-9\-~][a-z0-9\-._~]*)         # capture package name
           \z                                         # end of string
       }xi.freeze                                     # multi-line/case-insensitive
+
       TYPES_PACKAGE_NAME_REGEX = %r{
           \A                                         # beginning of string
-          @#{DEFINITELY_TYPED_SCOPE}\/               # starts with @types/
+          @types\/                                   # starts with @types/
           ((?<scope>.+)__)?                          # capture scope
           (?<name>.+)                                # capture name
           \z                                         # end of string
@@ -81,7 +81,7 @@ module Dependabot
       end
 
       def types_package?
-        DEFINITELY_TYPED_SCOPE.match?(@scope)
+        "types".casecmp?(@scope)
       end
     end
   end

data/lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb

@@ -252,7 +252,10 @@ module Dependabot
 
           return false unless latest_allowable_version.backwards_compatible_with?(latest_types_package_version)
 
+          return false unless version_class.correct?(types_package.version)
+
           current_types_package_version = version_class.new(types_package.version)
+
           return false unless current_types_package_version < latest_types_package_version
 
           true
@@ -261,9 +264,12 @@ module Dependabot
         def original_package_update_available?
           return false if original_package.nil?
 
-          latest_version = latest_version_finder(original_package).latest_version_from_registry
+          return false unless version_class.correct?(original_package.version)
+
           original_package_version = version_class.new(original_package.version)
 
+          latest_version = latest_version_finder(original_package).latest_version_from_registry
+
           original_package_version < latest_version
         end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.186.0
+  version: 0.186.1
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.186.0
+        version: 0.186.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.186.0
+        version: 0.186.1
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement