@teambit/dependency-resolver 1.0.1086 → 1.0.1088

package/.npmignore

@@ -0,0 +1,18 @@
+dist/tsconfig.tsbuildinfo
+dist/tsconfig.json
+/tsconfig.json
+
+package-tar/
+.bit-capsule-ready
+/*.ts
+artifacts/*
+!artifacts/env-template
+!artifacts/ui-bundle
+!artifacts/preview-bundle
+package-tar/
+.bit-capsule-ready
+/*.ts
+artifacts/*
+!artifacts/env-template
+!artifacts/ui-bundle
+!artifacts/preview-bundle

package/dist/dependency-resolver.main.runtime.js

@@ -198,13 +198,6 @@ function _network() {
   };
   return data;
 }
-function _npmResolver() {
-  const data = require("@pnpm/npm-resolver");
-  _npmResolver = function () {
-    return data;
-  };
-  return data;
-}
 function _semver() {
   const data = _interopRequireWildcard(require("semver"));
   _semver = function () {
@@ -1417,7 +1410,7 @@ class DependencyResolverMain {
         errorMsg = `${errorPrefix} the policy version "${policyVersion}" of ${policy.dependencyId} is not valid for components, only for packages.
 as an alternative, you can use "+" to keep the same version installed in the workspace`;
       }
-      const isVersionValid = Boolean(this.isValidVersionSpecifier(policyVersion) || allowedSpecialChars.includes(policyVersion));
+      const isVersionValid = Boolean(this.isValidVersionSpecifier(policyVersion) || allowedSpecialChars.includes(policyVersion) || allowedPrefixes.some(prefix => policyVersion.startsWith(prefix)));
       if (isVersionValid) return;
       errorMsg = `${errorPrefix} the policy version "${policyVersion}" of ${policy.dependencyId} is not a valid semver version or range`;
     });
@@ -1439,9 +1432,22 @@ as an alternative, you can use "+" to keep the same version installed in the wor
    *   E.g.: https://registry.npmjs.org/is-odd/-/is-odd-0.1.0.tgz)
    */
   isValidVersionSpecifier(spec) {
-    return (0, _npmResolver().parseBareSpecifier)(spec, 'pkgname',
-    // This argument is the package but we don't need it
-    'latest', 'https://registry.npmjs.org/') != null;
+    const trimmedSpec = spec.trim();
+    if (!trimmedSpec) return false;
+    if (_semver().default.valid(trimmedSpec) || _semver().default.validRange(trimmedSpec)) return true;
+    if (/^(?:workspace|file|link|git|git\+(?:https?|ssh)|ssh):/.test(trimmedSpec)) return true;
+    if (/^https?:\/\/registry\.npmjs\.org\/.+\/-.+\.tgz(?:[#?].*)?$/.test(trimmedSpec)) return true;
+    if (trimmedSpec.startsWith('npm:')) {
+      const alias = trimmedSpec.slice('npm:'.length);
+      // The version separator is the first `@` past a scope prefix — a
+      // scoped alias's leading `@` is part of the package name, and the
+      // version is optional (`npm:pkg` aliases the latest version).
+      const versionStart = alias.indexOf('@', alias.startsWith('@') ? 1 : 0);
+      const aliasName = versionStart === -1 ? alias : alias.slice(0, versionStart);
+      if (!/^(?:@[^/@\s]+\/)?[^/@\s]+$/.test(aliasName)) return false;
+      return versionStart === -1 || this.isValidVersionSpecifier(alias.slice(versionStart + 1));
+    }
+    return /^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(trimmedSpec);
   }
 
   /**