dependabot-npm_and_yarn 0.95.26 → 0.95.27

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2923d2b4c9529e35c72a0edf582a149b76382b68e3247c81c662c44971407bab
-  data.tar.gz: ced9cf1b1eefad75a87ba832a0088c15ea58addde5e12445d222c3a4ccbfd04b
+  metadata.gz: e8d276477c99d2d012c2579ad0486f968e5755f50892ddf40e3f7a46aceb218f
+  data.tar.gz: 9f9c1ffaae3551fd80a953d279e87615d1738cc448117553780cfb9fe33f7454
 SHA512:
-  metadata.gz: c685abe65cfd17dea02989cac012d9407638206f657e44217cd9c455bec09cb8b3f77d5802f6a6b9b08aaec2f1c5c7b1897f6527fa6c7f9421e003bf932a2705
-  data.tar.gz: db29a9ce36c1bcfba68525f4455533cdb5b6f2dd2172e0ca49706d7e6c2e2a710e31053991e15fec31e112f99b8f616d0727007268291430a1c75815aa274d79
+  metadata.gz: 3285c3aba6816672d2648578a68ef4338b9047ac16c9703aa9ecfa48ef93fb571f86ac69be78b8d939bfbe7651be95cc5128f3fc3fdd4486e956ed7beaf64ab6
+  data.tar.gz: 799795d72ab085c98c375992515e52da301c41e31951b20f4dd440a770be4e9f38b4fccdcc93b0be89a9b76dd185cb9b09a75946294ffbe8662f0b2d0a7dba25

data/helpers/npm/lib/peer-dependency-checker.js

@@ -35,7 +35,18 @@ async function checkPeerDependencies(
   // in npm/lib/install/validate-args.js
   // Platform is checked and raised from (EBADPLATFORM):
   // https://github.com/npm/npm-install-checks
-  await runAsync(npm, npm.load, [{ loglevel: "silent", force: true }]);
+  //
+  // `'prefer-offline': true` sets fetch() cache key to `force-cache`
+  // https://github.com/npm/npm-registry-fetch
+  await runAsync(npm, npm.load, [
+    {
+      loglevel: "silent",
+      force: true,
+      audit: false,
+      "prefer-offline": true,
+      save: false
+    }
+  ]);
 
   const dryRun = true;
 
@@ -70,22 +81,14 @@ async function checkPeerDependencies(
     packageLockOnly: true
   });
 
-  // A bug in npm means the initial install will remove any git dependencies
-  // from the lockfile. A subsequent install with no arguments fixes this.
-  const cleanupInstaller = new installer.Installer(directory, dryRun, [], {
-    packageLockOnly: true
-  });
-
   // Skip printing the success message
   initialInstaller.printInstalled = cb => cb();
-  cleanupInstaller.printInstalled = cb => cb();
 
   // There are some hard-to-prevent bits of output.
   // This is horrible, but works.
   const unmute = muteStderr();
   try {
     await runAsync(initialInstaller, initialInstaller.run, []);
-    await runAsync(cleanupInstaller, cleanupInstaller.run, []);
   } finally {
     unmute();
   }

data/helpers/npm/lib/subdependency-updater.js

@@ -13,7 +13,17 @@ async function updateDependencyFile(directory, lockfileName) {
   // in npm/lib/install/validate-args.js
   // Platform is checked and raised from (EBADPLATFORM):
   // https://github.com/npm/npm-install-checks
-  await runAsync(npm, npm.load, [{ loglevel: "silent", force: true }]);
+  //
+  // `'prefer-offline': true` sets fetch() cache key to `force-cache`
+  // https://github.com/npm/npm-registry-fetch
+  await runAsync(npm, npm.load, [
+    {
+      loglevel: "silent",
+      force: true,
+      audit: false,
+      "prefer-offline": true
+    }
+  ]);
 
   const dryRun = true;
   const initialInstaller = new installer.Installer(directory, dryRun, [], {

data/helpers/npm/lib/updater.js

@@ -28,7 +28,17 @@ async function updateDependencyFiles(directory, dependencies, lockfileName) {
   // in npm/lib/install/validate-args.js
   // Platform is checked and raised from (EBADPLATFORM):
   // https://github.com/npm/npm-install-checks
-  await runAsync(npm, npm.load, [{ loglevel: "silent", force: true }]);
+  //
+  // `'prefer-offline': true` sets fetch() cache key to `force-cache`
+  // https://github.com/npm/npm-registry-fetch
+  await runAsync(npm, npm.load, [
+    {
+      loglevel: "silent",
+      force: true,
+      audit: false,
+      "prefer-offline": true
+    }
+  ]);
   const oldPackage = JSON.parse(readFile("package.json"));
 
   const dryRun = true;

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.95.26
+  version: 0.95.27
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.26
+        version: 0.95.27
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.26
+        version: 0.95.27
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement