dependanot 0.1.10 → 0.1.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0471f5a768b50b41aa35cb8c9d174cb03ea1c33df18876bd09bbba5c6b42e993
-  data.tar.gz: 9c855417ea4ab1d5f9f3cee0cb0967becb5b15b2567bddb50f72b1d0aed7ada3
+  metadata.gz: e5badfc35fefa1a5209ee7e9495d8051990d5c64c379a1653aeb4e1075c3bce6
+  data.tar.gz: 85c462d293de42633139a913aa28e73e13460745ccd421cd0ba02898749b2be7
 SHA512:
-  metadata.gz: 4c26a3edfcf2a09c9a98b554d4b6c6312030996c9f3a8b76f80b696b6b30c18cb3760bce57372b4b3b19456b2a0b440ed125c17e86a40c3e60078e4673c4c057
-  data.tar.gz: 5ec531ad6b506b93e560bbe08950c10a8049cfddc2e588ead9240d57b92c13c802c752ae5e71643424071c5cf8535cb42d068e91910421cdd3e4c2fa3d546c0e
+  metadata.gz: a9189f9292c94bac7e08ab53c6039e7a305d03f4fe631f13558807ec27703446e3c55b636c5e97f9e34a10b1cb0de83abeabd0576c49f2ddcac6e33257f3f9f1
+  data.tar.gz: b172ac7a995ad36e83c480db71d5046a95e97b2f66aa872046bf3b5045f77d0de62b9aa6490c32dafead65530aee7a200d1cb7e245742bd8fe233316323381f2

data/lib/dependabot/cli.rb

@@ -11,7 +11,9 @@ module Dependabot
       method_option :dependency, aliases: "-d", type: :string, desc: "Update a specific dependency", default: nil
       method_option :push, aliases: "-p", type: :boolean, desc: "Push the update as a pull request. Default: --no-push", default: false
       method_option :recursive, aliases: "-r", type: :boolean, desc: "Perform a recursive. Default: --no-recursive", default: false
+      method_option :verbose, aliases: "-v", type: :boolean, desc: "Increase verbosity. Default: --no-verbose", default: false
       def scan(path = Pathname.pwd)
+        Dependabot.logger.level = :debug if options[:verbose]
         ::Dependabot::CLI::Scan.new(path, options).run
       end
 

data/lib/dependabot/git.rb

@@ -13,7 +13,7 @@ module Dependabot
     end
 
     def checkout(branch:)
-      repo.create_branch(branch, repo.head.name)
+      repo.create_branch(branch, repo.head.name) unless repo.branches[branch]
       repo.checkout(branch)
     end
 

data/lib/dependabot/npm/update.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module Dependabot
+  module Npm
+    class Update < ::Spandx::Core::Plugin
+      def match?(dependency)
+        dependency.package_manager == :npm
+      end
+
+      def enhance(dependency)
+        return dependency unless match?(dependency)
+
+        Dir.chdir(dependency.path.parent) do
+          system("rm -fr node_modules/#{dependency.name}")
+          system("npm update #{dependency.name}")
+        end
+        dependency
+      end
+    end
+  end
+end

data/lib/dependabot/publish.rb

@@ -30,9 +30,12 @@ module Dependabot
     def transaction(push:)
       git.checkout(branch: pull_request.head)
       callback = yield Callback
-      return if no_changes? || !push
+      return if no_changes?
 
-      commit_and_push
+      git.commit(all: true, message: pull_request.commit_message)
+      return unless push
+
+      git.push(remote: "origin", branch: pull_request.head)
       callback.call
     ensure
       reset
@@ -46,10 +49,5 @@ module Dependabot
     def no_changes?
       git.patch.empty?
     end
-
-    def commit_and_push
-      git.commit(all: true, message: pull_request.commit_message)
-      git.push(remote: "origin", branch: pull_request.head)
-    end
   end
 end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.1.10"
+  VERSION = "0.1.11"
 end

data/lib/dependabot.rb

@@ -9,6 +9,7 @@ require "spandx"
 require "straw"
 
 require_relative "dependabot/bundler/update"
+require_relative "dependabot/npm/update"
 require_relative "dependabot/callback"
 require_relative "dependabot/git"
 require_relative "dependabot/publish"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependanot
 version: !ruby/object:Gem::Version
-  version: 0.1.10
+  version: 0.1.11
 platform: ruby
 authors:
 - mo khan
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2021-12-22 00:00:00.000000000 Z
+date: 2021-12-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -112,6 +112,7 @@ files:
 - lib/dependabot/cli.rb
 - lib/dependabot/cli/scan.rb
 - lib/dependabot/git.rb
+- lib/dependabot/npm/update.rb
 - lib/dependabot/publish.rb
 - lib/dependabot/pull_request.rb
 - lib/dependabot/templates/pull.md.erb
@@ -138,7 +139,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.32
+rubygems_version: 3.2.33
 signing_key:
 specification_version: 4
 summary: Definitely not Dependabot