From 25a35b871dbb4140774ef269fc4985be9c1bf07a Mon Sep 17 00:00:00 2001
From: Rhys Arkins <rhys@arkins.net>
Date: Fri, 29 Jun 2018 06:31:12 +0200
Subject: [PATCH] fix(npm): set lockedVersion only if valid semver
---
lib/manager/npm/extract/locked-versions.js | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/lib/manager/npm/extract/locked-versions.js b/lib/manager/npm/extract/locked-versions.js
index abf8a8747f..e6da65290b 100644
--- a/lib/manager/npm/extract/locked-versions.js
+++ b/lib/manager/npm/extract/locked-versions.js
@@ -1,5 +1,6 @@
const { getNpmLock } = require('./npm');
const { getYarnLock } = require('./yarn');
+const { valid } = require('semver');
module.exports = {
getLockedVersions,
@@ -27,7 +28,7 @@ async function getLockedVersions(packageFiles) {
lockFileCache[npmLock] = await getNpmLock(npmLock);
}
for (const dep of packageFile.deps) {
- dep.lockedVersion = lockFileCache[npmLock][dep.depName];
+ dep.lockedVersion = valid(lockFileCache[npmLock][dep.depName]);
}
} else if (pnpmShrinkwrap) {
logger.info('TODO: implement shrinkwrap.yaml parsing of lockVersion');
--
GitLab