dependabot-npm_and_yarn 0.191.0 → 0.191.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4eb3662e89f982d144ebf3e38cb01ca906e118bc7ce30560d2f6e0a232ee78f9
-  data.tar.gz: db2e8228c13906e995d9ca33cf47bc2ab51460ec86e7bc1c9abcb355b7cff028
+  metadata.gz: e5a135e31fe825f130a0500d45bdc43f2afdbc81ada4261e395f42121d731039
+  data.tar.gz: 9c99e2a1c9e815a43c08286cb68f034ae55df6e4482a66ea78fa3cfcae9ce8c3
 SHA512:
-  metadata.gz: 0d28c930cfc67555520a4583b5e23db882af3a015c3e1df2b23c626744c8f0a73c2d9c65d7a3b6af4f01be239f8539cd27db05fd32f11ae41d3fdc3528292145
-  data.tar.gz: 1a584c124824f2f6a4a69384ecf984f471ee547d845301dbcfe3f79d5257c223a7d871ee83b04f6a263d23274e472bbe8a6ed7f7c68b64206cffb554d250d7f2
+  metadata.gz: b0c7b3c84aad4c38ccc544a394649cde556152767c7ab3342930ca246c6d0667453868004488c298da81aaab5f58fe1ecf1b66bf88d56e6522c70fce7f7e55c9
+  data.tar.gz: 8bfda18f03db02a4a3dc5a82e49fb244e10a9d1e0fa1af7b5dfdc37d414937042a8e7ff91764d24fa9f8c4caa3418d3f774abee5e374bef9b1bcd4d6f8d7fc10

data/lib/dependabot/npm_and_yarn/file_fetcher.rb

@@ -321,18 +321,22 @@ module Dependabot
 
       # Only expands globs one level deep, so path/**/* gets expanded to path/
       def expanded_paths(path)
-        ignored_paths = path.scan(/!\((.*?)\)/).flatten
+        ignored_path = path.match?(/!\(.*?\)/) && path.gsub(/(!\((.*?)\))/, '\2')
 
         dir = directory.gsub(%r{(^/|/$)}, "")
         path = path.gsub(%r{^\./}, "").gsub(/!\(.*?\)/, "*")
         unglobbed_path = path.split("*").first&.gsub(%r{(?<=/)[^/]*$}, "") ||
                          "."
 
-        repo_contents(dir: unglobbed_path, raise_errors: false).
+        results =
+          repo_contents(dir: unglobbed_path, raise_errors: false).
           select { |file| file.type == "dir" }.
           map { |f| f.path.gsub(%r{^/?#{Regexp.escape(dir)}/?}, "") }.
-          select { |filename| File.fnmatch?(path, filename) }.
-          reject { |fn| ignored_paths.any? { |p| fn.include?(p) } }
+          select { |filename| File.fnmatch?(path, filename) }
+
+        return results unless ignored_path
+
+        results.reject { |filename| File.fnmatch?(ignored_path, filename) }
       end
 
       def parsed_package_json

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.191.0
+  version: 0.191.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-07 00:00:00.000000000 Z
+date: 2022-06-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.191.0
+        version: 0.191.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.191.0
+        version: 0.191.1
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement