dependabot-npm_and_yarn 0.98.54 → 0.98.55

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2519db1b627e2df67d5f9329759197ee31447d745e5bffcb7ccbda001fa74ead
-  data.tar.gz: 047aa0253028c392916ca345565354aa810f535a1e7480c31240123acf7c375c
+  metadata.gz: c1b60ad0cde3a07eb21dc861b48b62baaf6a581915e55c1b11fd81373929651f
+  data.tar.gz: 155018fb261ff5c681cec8cfe01ee84766de16d35b25a1edb59c51a537e04987
 SHA512:
-  metadata.gz: ba6ac068d22a3b536f5965c3de31e5327075b90bad3ec01290ed829baf571877c9584e9029318e8293e5cace02c7dba05886cff266f43757d203d814898c0f62
-  data.tar.gz: e9d64b579762374750f29cc7ca4956230f6f25cd6753dca0f0faa1184a73b6a2640ce06a9e323f884531ea7b5223bda4b16a74f7af06dfe4dd18ce9948bbe71d
+  metadata.gz: 702a87f110e7085ba75c887ec69e7641501cc42033831d75912d11decbf915c9294e7c2c124a11f4ef7a70850d0da9e9ab78b4a00f39a2387fae6f5799974ab0
+  data.tar.gz: 7a0a503775c5e4d2efc1d762ced122a22f63775c1d2789b4850ee8143d4a0e00918cb1f69e27827c08bd19caf96746ba141a1c28fffa5b0f71eebeef48255007

data/lib/dependabot/npm_and_yarn/file_updater/npm_lockfile_updater.rb

@@ -35,7 +35,7 @@ module Dependabot
                 run_current_npm_update(lockfile_name: lockfile_name)
               end
               updated_content = updated_files.fetch(lockfile_name)
-              post_process_npm_lockfile(updated_content)
+              post_process_npm_lockfile(lockfile.content, updated_content)
             end
         rescue SharedHelpers::HelperSubprocessFailed => error
           handle_npm_updater_error(error, lockfile)
@@ -474,8 +474,9 @@ module Dependabot
           npm_lockfile.merge("dependencies" => dependencies)
         end
 
-        def post_process_npm_lockfile(lockfile_content)
-          updated_content = lockfile_content
+        def post_process_npm_lockfile(original_content, updated_content)
+          updated_content =
+            replace_project_metadata(updated_content, original_content)
 
           # Switch SSH requirements back for git dependencies
           git_ssh_requirements_to_swap.each do |req|
@@ -515,6 +516,17 @@ module Dependabot
           updated_content
         end
 
+        def replace_project_metadata(new_content, old_content)
+          old_name = old_content.match(/(?<="name": ").*(?=",)/)&.to_s
+
+          if old_name
+            new_content = new_content.
+                          sub(/(?<="name": ").*(?=",)/, old_name)
+          end
+
+          new_content
+        end
+
         def tarball_urls
           all_urls = [*package_locks, *shrinkwraps].flat_map do |file|
             file.content.scan(/"resolved":\s+"(.*)\"/).flatten
@@ -554,6 +566,7 @@ module Dependabot
 
         def sanitized_package_json_content(content)
           content.
+            gsub(/\{\{.*?\}\}/, "something"). # {{ name }} syntax not allowed
             gsub(/(?<!\\)\\ /, " ").          # escaped whitespace not allowed
             gsub(%r{^\s*//.*}, " ")           # comments are not allowed
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.98.54
+  version: 0.98.55
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.54
+        version: 0.98.55
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.54
+        version: 0.98.55
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement