dependabot-npm_and_yarn 0.99.6 → 0.99.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 581563b30edd72e465afbfc6ee916626c1c26d065ab0f24360d8308725cf0a57
-  data.tar.gz: c669978a18739e734a14d2a71828a0312b52983c2f70c90d9c23aa449e5d5afe
+  metadata.gz: 255e19328cb7b5b82a02a88155cf53826acf94492b31d45346f92b5061b5be3f
+  data.tar.gz: bc7ea6386c309f631bb33b2000290d247637390bdb534c8372d8e9ba1e41ee54
 SHA512:
-  metadata.gz: f6e08b9e07baaecfdfbe274b46ea049cb4eca802150e34bc2aade25722d749fc2efef3735ee840398f2daf0740f141d43ab3001a0bd88b630ae0d2140ca87521
-  data.tar.gz: 3fd4da4586458d75d884338cdb527b18b2861bdf757a0380dbdd797b5e63a00e2d9a1423221195a35949278429f35abd02805c42f935d022edf11f7973c033d5
+  metadata.gz: 565e5b647c70b12d31dba605fa0b9d4099fa0c4ea4c363662e552d5f4358d530a485c2675a070e5d191af96cb9d17b0a1fe6ba4d2f6c652a97617210005344dd
+  data.tar.gz: 2fc3ebf07b933be705fa259fc396d5cf6a7f76aa07cbd5a558f89083a66ab994b57e94ff70a08dac31abb2c7897decbd8515d1637368a0e56c4d08e567974fc4

data/lib/dependabot/npm_and_yarn/requirement.rb

@@ -11,7 +11,7 @@ module Dependabot
 
       # Override the version pattern to allow a 'v' prefix
       quoted = OPS.keys.map { |k| Regexp.quote(k) }.join("|")
-      version_pattern = "v?#{Gem::Version::VERSION_PATTERN}"
+      version_pattern = "v?#{NpmAndYarn::Version::VERSION_PATTERN}"
 
       PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*"
       PATTERN = /\A#{PATTERN_RAW}\z/.freeze

data/lib/dependabot/npm_and_yarn/version.rb

@@ -12,20 +12,37 @@ require "rubygems_version_patch"
 module Dependabot
   module NpmAndYarn
     class Version < Gem::Version
+      attr_reader :build_info
+
+      VERSION_PATTERN = Gem::Version::VERSION_PATTERN + '(\+[0-9a-zA-Z\-.]+)?'
+      ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/.freeze
+
       def self.correct?(version)
         version = version.gsub(/^v/, "") if version.is_a?(String)
-        super(version)
+
+        return false if version.nil?
+
+        version.to_s.match?(ANCHORED_VERSION_PATTERN)
       end
 
       def initialize(version)
         @version_string = version.to_s
         version = version.gsub(/^v/, "") if version.is_a?(String)
+
+        if version.to_s.include?("+")
+          version, @build_info = version.to_s.split("+")
+        end
+
         super
       end
 
       def to_s
         @version_string
       end
+
+      def inspect
+        "#<#{self.class} #{@version_string}>"
+      end
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.99.6
+  version: 0.99.7
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.99.6
+        version: 0.99.7
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.99.6
+        version: 0.99.7
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement