dependabot-npm_and_yarn 0.98.65 → 0.98.66

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/lib/npm/peer-dependency-checker.js +4 -0
  3. data/helpers/lib/npm/subdependency-updater.js +5 -1
  4. data/helpers/lib/npm/updater.js +5 -1
  5. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b46b31865856e85dbab8772f49a81a67589fa402924cc596f43284303b6ac1ef
4
- data.tar.gz: e5e84bed6338f03798a37dac00329c2f5171e9ec54b9a993b35ec677ab403c74
3
+ metadata.gz: '05429ad3571e271f79709fe88e5cf4a07a0713d7b9e1ee889ba3cf02c78c7292'
4
+ data.tar.gz: 6066bb6a982e5cb5eaf1cb8e8fc2ac949eb08742ce7e4927f664229494643003
5
5
  SHA512:
6
- metadata.gz: 43fa139600cd110a7815c69169ae2ab8566958132d50880199a0679c350199cd080a6437035c7b55aef9584092ebed897cf9b42df24afb91feac71c8c5bb1df4
7
- data.tar.gz: c6b7ae36baebea4542bedeb7dff130c93a7e7d46f5f7dd842b93d96cb42d2c1669a8fac070f1fc97fd117ed25b7c15cf62c9f374d61e7665ddd80c54261cccb9
6
+ metadata.gz: 70fdeeb2f827bbb5fcb9962519f3f55333b11ef48bd3681dd35d4018dfadf5b64e18ad33c987770b40d28cf3318182c431c5eb8da80d6d4b5fba35f948ae1ecc
7
+ data.tar.gz: fe882f8b76ceceba0c40a3d4b4c861b2152dc23e6fd35e9fdbdae9d6d353fb1b82e0166e52ad8ccf271c79436ea0ed7b824324fc47c8350ba72ad18d830f0921
data/helpers/lib/npm/peer-dependency-checker.js CHANGED
@@ -38,12 +38,16 @@ async function checkPeerDependencies(
38
38
  //
39
39
  // `'prefer-offline': true` sets fetch() cache key to `force-cache`
40
40
  // https://github.com/npm/npm-registry-fetch
41
+ //
42
+ // `'ignore-scripts': true` used to disable prepare and prepack scripts
43
+ // which are run when installing git dependencies
41
44
  await runAsync(npm, npm.load, [
42
45
  {
43
46
  loglevel: "silent",
44
47
  force: true,
45
48
  audit: false,
46
49
  "prefer-offline": true,
50
+ "ignore-scripts": true,
47
51
  save: false
48
52
  }
49
53
  ]);
data/helpers/lib/npm/subdependency-updater.js CHANGED
@@ -16,12 +16,16 @@ async function updateDependencyFile(directory, lockfileName) {
16
16
  //
17
17
  // `'prefer-offline': true` sets fetch() cache key to `force-cache`
18
18
  // https://github.com/npm/npm-registry-fetch
19
+ //
20
+ // `'ignore-scripts': true` used to disable prepare and prepack scripts
21
+ // which are run when installing git dependencies
19
22
  await runAsync(npm, npm.load, [
20
23
  {
21
24
  loglevel: "silent",
22
25
  force: true,
23
26
  audit: false,
24
- "prefer-offline": true
27
+ "prefer-offline": true,
28
+ "ignore-scripts": true
25
29
  }
26
30
  ]);
27
31
 
data/helpers/lib/npm/updater.js CHANGED
@@ -31,12 +31,16 @@ async function updateDependencyFiles(directory, dependencies, lockfileName) {
31
31
  //
32
32
  // `'prefer-offline': true` sets fetch() cache key to `force-cache`
33
33
  // https://github.com/npm/npm-registry-fetch
34
+ //
35
+ // `'ignore-scripts': true` used to disable prepare and prepack scripts
36
+ // which are run when installing git dependencies
34
37
  await runAsync(npm, npm.load, [
35
38
  {
36
39
  loglevel: "silent",
37
40
  force: true,
38
41
  audit: false,
39
- "prefer-offline": true
42
+ "prefer-offline": true,
43
+ "ignore-scripts": true
40
44
  }
41
45
  ]);
42
46
  const manifest = JSON.parse(readFile("package.json"));
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-npm_and_yarn
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.98.65
4
+ version: 0.98.66
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.98.65
19
+ version: 0.98.66
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.98.65
26
+ version: 0.98.66
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement