dependabot-npm_and_yarn 0.351.0 → 0.352.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/build +1 -1
  3. data/helpers/lib/npm6/peer-dependency-checker.js +0 -1
  4. data/helpers/lib/npm6/subdependency-updater.js +0 -1
  5. data/helpers/lib/npm6/updater.js +0 -1
  6. data/helpers/package-lock.json +1027 -1010
  7. data/helpers/package.json +3 -3
  8. data/lib/dependabot/npm_and_yarn/dependency_grapher/lockfile_generator.rb +5 -2
  9. data/lib/dependabot/npm_and_yarn/dependency_grapher.rb +1 -1
  10. data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb +5 -25
  11. data/lib/dependabot/npm_and_yarn/file_updater/pnpm_lockfile_updater.rb +4 -0
  12. data/lib/dependabot/npm_and_yarn/file_updater/yarn_lockfile_updater.rb +4 -0
  13. data/lib/dependabot/npm_and_yarn/helpers.rb +59 -1
  14. data/lib/dependabot/npm_and_yarn/native_helpers.rb +0 -6
  15. data/lib/dependabot/npm_and_yarn/registry_helper.rb +12 -4
  16. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 58fb5e0f894d8303fda1c4ee5a250a5153a209047fb47b99b827a042bdedcc43
4
- data.tar.gz: 4f7dbc1168c7672fa786fbdb253def7cd208064a2722ce63e94b387ab306d117
3
+ metadata.gz: 3c6afca8ada5497325cb00c5ceefe07285166dfceca0be4821277be0afd7e05c
4
+ data.tar.gz: ed8378f1770b7641f371ffe78e97e9b39a294d83a28abeb5230cb9cb80d88c46
5
5
  SHA512:
6
- metadata.gz: a7a6a0aeb758960adc54fca50c16142de988e0feed5b719c6b1edd34af72469e7829d906016e6f020a5190e9b50288df1eb4d2cc0745197b11bc4da8e4dca6f5
7
- data.tar.gz: ae780bf718e902b6a6c46658727ac4bdd7b94271474f11014450d4288abc05613fdb927d329b3e20176fd6fb8b322453bf7fd36132ad7f62fc815f7b17264bd3
6
+ metadata.gz: c33c39ec9aaab3e6b589207eb8988e3ffb9e1d836d9c201131af18e9f55e1e618701173f1578a05a220aeb3a2ba31b9009d79907d51756476cec2b98910d8c93
7
+ data.tar.gz: fa6846be31248911f026adc143fe33abfa84337e95d457b00d541ac73699606d57336e74ad3fd08fe1665c91d5d13e7ab069220b691fc2dc7815edf4eabb9815
data/helpers/build CHANGED
@@ -23,4 +23,4 @@ cp -r \
23
23
  "$install_dir"
24
24
 
25
25
  cd "$install_dir"
26
- npm ci --no-audit --fetch-timeout=600000 --fetch-retries=5 --no-dry-run --no-ignore-scripts
26
+ npm ci --fetch-timeout=600000 --fetch-retries=5
data/helpers/lib/npm6/peer-dependency-checker.js CHANGED
@@ -45,7 +45,6 @@ async function checkPeerDependencies(
45
45
  {
46
46
  loglevel: "silent",
47
47
  force: true,
48
- audit: false,
49
48
  "prefer-offline": true,
50
49
  "ignore-scripts": true,
51
50
  save: false,
data/helpers/lib/npm6/subdependency-updater.js CHANGED
@@ -39,7 +39,6 @@ async function updateDependencyFile(directory, lockfileName, dependencies) {
39
39
  {
40
40
  loglevel: "silent",
41
41
  force: true,
42
- audit: false,
43
42
  "prefer-offline": true,
44
43
  "ignore-scripts": true,
45
44
  },
data/helpers/lib/npm6/updater.js CHANGED
@@ -39,7 +39,6 @@ async function updateDependencyFiles(directory, lockfileName, dependencies) {
39
39
  {
40
40
  loglevel: "silent",
41
41
  force: true,
42
- audit: false,
43
42
  "prefer-offline": true,
44
43
  "ignore-scripts": true,
45
44
  },