dependabot-npm_and_yarn 0.95.7 → 0.95.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5308d128fdd9d6a187db7d5672d8a9894aea98ae8c092a65068d355b6449387e
-  data.tar.gz: 6701f6e73d6c84b2510b03de05631f1133174bb92a3ede67f52e6a026c85b8df
+  metadata.gz: fcb230f82a9014b78811e97fbdf85c72936603f73dd1ee724e3b118bcc892ee3
+  data.tar.gz: 3fcb40a9cfe97b4406cf8cdbe75fb8063255a46ff9ecb0d0158c7921f08601c4
 SHA512:
-  metadata.gz: 1180da6e83713aa96e6b5aed6575fc805d9e597e739129069f12509c3576fe65463a662fee8f845cf2de3e618801f2905079fc2c0d495488b134222ac7181f48
-  data.tar.gz: 56b7a7f2e3d7656f3d305874e6f857d3e24bd20989415d1780b047a2b2334b07d922055096fb21c1df645696ded27a9affb791a6bc31573d8e5f98dcbd1c3dc0
+  metadata.gz: 62b6b6c734621c3ec4a219e5e155fb0b25926652521823b668955ad9502c1961f62648641685b48c58c06eb39b5469cd19a1b4000500835039da6855c6c5d6eb
+  data.tar.gz: 8a012e89b58c3466c4495d3b45ad6547f55c0be7128d081767815e2a922602182d13da7a9ef69e7d06f66ac654a7b8a19e7c5409b9ffb6d8a1d6d7ee86508888

data/lib/dependabot/npm_and_yarn/file_parser.rb

@@ -44,8 +44,12 @@ module Dependabot
         # TODO: Currently, Dependabot can't handle dependencies that have both
         # a git source *and* a non-git source. Fix that!
         dependencies.reject do |dep|
-          dep.requirements.any? { |r| r.dig(:source, :type) == "git" } &&
-            dep.requirements.any? { |r| r.dig(:source, :type) != "git" }
+          git_reqs =
+            dep.requirements.select { |r| r.dig(:source, :type) == "git" }
+          next false if git_reqs.none?
+          next true if git_reqs.map { |r| r.fetch(:source) }.uniq.count > 1
+
+          dep.requirements.any? { |r| r.dig(:source, :type) != "git" }
         end
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.95.7
+  version: 0.95.8
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-02-09 00:00:00.000000000 Z
+date: 2019-02-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.7
+        version: 0.95.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.7
+        version: 0.95.8
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement