licensed 5.0.2 → 5.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d20897c4058c8e9ad19047b9739d2a8e720bfbc89c905a6bfcb49d9fc7bc3e68
-  data.tar.gz: e9ca15847323c009380cdb7aef13eb20115f70e9794cd789e1154d5b64521040
+  metadata.gz: f709ba93b840e75db483c4c14bf8badddbb87d75a56735098a24a31f40caf094
+  data.tar.gz: e05c7d64e925f9f78f56facd1a08fa521f5ce04d7d05ae1590fae17ab7c64c75
 SHA512:
-  metadata.gz: 7beedc9a4c747ce3a915afd5f1b22555e59c0e96d025e184cffa8255a61b8d908ef5eaf3d29471e48c6e592e1fa19e4afbc90b647601e488ef8d67495077b988
-  data.tar.gz: 6a02a0c4a839d4fb907fccc6f7893e324cc9d53b9ac9aea3c7781d6a876ced89a88f7a08173fe26aa48a756addc477404037012991199f4b809d5228baefaf8f
+  metadata.gz: 478e80694a1d1f33f27bccb37f8788154700a5a7f36fe8eee69e6a7d7ad6241ee208f7b2840a22b6a9f651a4a8c1b44c53ba016422ec28bddc9f790ba6f80464
+  data.tar.gz: 88aee1891a8d056c2567416c79a31e67c0bbfacb08b48616087de43e2adb7f4e2819323a7ea702008e6cbfa4def25c34db24f546b9bbaef63603a4c9dfc62400

data/CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## 5.0.3
+
+- Support pnpm v9 (<https://github.com/licensee/licensed/pull/803>)
+
 ## 5.0.2
 
 - Pin setup-ruby and set permissions in test workflow (<https://github.com/licensee/licensed/pull/768>)

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    licensed (5.0.2)
+    licensed (5.0.3)
       csv (~> 3.3)
       json (~> 2.6)
       licensee (~> 9.16)
@@ -73,7 +73,7 @@ GEM
     pathname-common_prefix (0.0.2)
     public_suffix (6.0.1)
     racc (1.8.1)
-    rack (3.0.9.1)
+    rack (3.0.12)
     rainbow (3.1.1)
     rake (13.2.1)
     regexp_parser (2.6.2)

data/lib/licensed/sources/pnpm.rb

@@ -18,19 +18,24 @@ module Licensed
       end
 
       def enumerate_dependencies
-        packages.map do |package|
-          name_with_version = "#{package["name"]}@#{package["version"]}"
-          Dependency.new(
-            name: name_with_version,
-            version: package["version"],
-            path: package["path"],
-            metadata: {
-              "type"     => PNPM.type,
-              "name"     => package["name"],
-              "summary"  => package["description"],
-              "homepage" => package["homepage"]
-            }
-          )
+        packages.flat_map do |package|
+          versions = package.key?("versions") ? package["versions"] : [package["version"]]
+          paths = package.key?("paths") ? package["paths"] : [package["path"]]
+
+          versions.zip(paths).map do |version, path|
+            name_with_version = "#{package["name"]}@#{version}"
+            Dependency.new(
+              name: name_with_version,
+              version: version,
+              path: path,
+              metadata: {
+                "type"     => PNPM.type,
+                "name"     => package["name"],
+                "summary"  => package["description"],
+                "homepage" => package["homepage"]
+              }
+            )
+          end
         end
       end
 

data/lib/licensed/version.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 module Licensed
-  VERSION = "5.0.2".freeze
+  VERSION = "5.0.3".freeze
 
   def self.previous_major_versions
     major_version = Gem::Version.new(Licensed::VERSION).segments.first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: licensed
 version: !ruby/object:Gem::Version
-  version: 5.0.2
+  version: 5.0.3
 platform: ruby
 authors:
 - GitHub
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2025-02-06 00:00:00.000000000 Z
+date: 2025-02-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: csv