Class: Dependabot::NpmAndYarn::UpdateChecker
- Inherits:
-
UpdateCheckers::Base
- Object
- UpdateCheckers::Base
- Dependabot::NpmAndYarn::UpdateChecker
show all
- Defined in:
- lib/dependabot/npm_and_yarn/update_checker.rb,
lib/dependabot/npm_and_yarn/update_checker/registry_finder.rb,
lib/dependabot/npm_and_yarn/update_checker/library_detector.rb,
lib/dependabot/npm_and_yarn/update_checker/version_resolver.rb,
lib/dependabot/npm_and_yarn/update_checker/requirements_updater.rb,
lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb,
lib/dependabot/npm_and_yarn/update_checker/dependency_files_builder.rb,
lib/dependabot/npm_and_yarn/update_checker/subdependency_version_resolver.rb,
lib/dependabot/npm_and_yarn/update_checker/conflicting_dependency_resolver.rb
Defined Under Namespace
Classes: ConflictingDependencyResolver, DependencyFilesBuilder, LatestVersionFinder, LibraryDetector, RegistryFinder, RequirementsUpdater, SubdependencyVersionResolver, VersionResolver
Instance Method Summary
collapse
Instance Method Details
#conflicting_dependencies ⇒ Object
97
98
99
100
101
102
103
104
105
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 97
def conflicting_dependencies
ConflictingDependencyResolver.new(
dependency_files: dependency_files,
credentials: credentials
).conflicting_dependencies(
dependency: dependency,
target_version: lowest_security_fix_version
)
end
|
#latest_resolvable_previous_version(updated_version) ⇒ Object
63
64
65
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 63
def latest_resolvable_previous_version(updated_version)
version_resolver.latest_resolvable_previous_version(updated_version)
end
|
#latest_resolvable_version ⇒ Object
27
28
29
30
31
32
33
34
35
36
37
38
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 27
def latest_resolvable_version
return unless latest_version
@latest_resolvable_version ||=
if dependency.top_level?
version_resolver.latest_resolvable_version
else
subdependency_version_resolver.latest_resolvable_version
end
end
|
#latest_resolvable_version_with_no_unlock ⇒ Object
55
56
57
58
59
60
61
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 55
def latest_resolvable_version_with_no_unlock
return latest_resolvable_version unless dependency.top_level?
return latest_resolvable_version_with_no_unlock_for_git_dependency if git_dependency?
latest_version_finder.latest_version_with_no_unlock
end
|
#latest_version ⇒ Object
18
19
20
21
22
23
24
25
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 18
def latest_version
@latest_version ||=
if git_dependency?
latest_version_for_git_dependency
else
latest_version_details&.fetch(:version)
end
end
|
#lowest_resolvable_security_fix_version ⇒ Object
44
45
46
47
48
49
50
51
52
53
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 44
def lowest_resolvable_security_fix_version
raise "Dependency not vulnerable!" unless vulnerable?
return latest_resolvable_version unless dependency.top_level?
lowest_security_fix_version
end
|
#lowest_security_fix_version ⇒ Object
40
41
42
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 40
def lowest_security_fix_version
latest_version_finder.lowest_security_fix_version
end
|
#requirements_update_strategy ⇒ Object
89
90
91
92
93
94
95
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 89
def requirements_update_strategy
return @requirements_update_strategy.to_sym if @requirements_update_strategy
library? ? :widen_ranges : :bump_versions
end
|
#updated_requirements ⇒ Object
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
|
# File 'lib/dependabot/npm_and_yarn/update_checker.rb', line 67
def updated_requirements
resolvable_version =
if preferred_resolvable_version.is_a?(version_class)
preferred_resolvable_version.to_s
elsif preferred_resolvable_version.nil?
nil
else
latest_version_details&.fetch(:version, nil)&.to_s
end
@updated_requirements ||=
RequirementsUpdater.new(
requirements: dependency.requirements,
updated_source: updated_source,
latest_resolvable_version: resolvable_version,
update_strategy: requirements_update_strategy
).updated_requirements
end
|