Update request

This reverts commit 3f01228db4.

package.json

@@ -1,4 +1,5 @@
 {
+  "private": true,
   "name": "bower",
   "version": "1.8.8",
   "description": "The browser package manager",
@@ -17,11 +18,11 @@
   "dependencies": {
     "abbrev": "^1.0.5",
     "archy": "1.0.0",
-    "bower-config": "^1.4.2",
-    "bower-endpoint-parser": "^0.2.2",
-    "bower-json": "^0.8.1",
-    "bower-logger": "^0.2.2",
-    "bower-registry-client": "^1.0.0",
+    "bower-config": "file:packages/bower-config",
+    "bower-endpoint-parser": "file:packages/bower-endpoint-parser",
+    "bower-json": "file:packages/bower-json",
+    "bower-logger": "file:packages/bower-logger",
+    "bower-registry-client": "file:packages/bower-registry-client",
     "cardinal": "0.4.4",
     "chalk": "^1.0.0",
     "chmodr": "1.0.2",
@@ -49,7 +50,7 @@
     "p-throttler": "0.1.1",
     "promptly": "0.2.0",
     "q": "^1.1.2",
-    "request": "2.67.0",
+    "request": "2.76.0",
     "request-progress": "0.3.1",
     "requireg": "^0.1.5",
     "resolve": "^1.1.7",
@@ -73,7 +74,7 @@
     "husky": "^0.14.3",
     "in-publish": "^2.0.0",
     "lint-staged": "^9.5.0",
-    "mocha": "^2.5.3",
+    "mocha": "^3.5.3",
     "multiline": "^1.0.2",
     "nock": "^11.7.0",
     "nock-legacy": "npm:nock@9.2.3",
@@ -98,5 +99,13 @@
   "files": [
     "bin",
     "lib"
-  ]
+  ],
+  "resolutions": {
+    "deep-extend": "0.5.1"
+  },
+  "workspaces": {
+    "packages": [
+      "packages/*"
+    ]
+  }
 }

packages/bower-config/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## 1.4.2
 
+- Prevent errors when expanded env variable does not exist
+
+## 1.4.2
+
 - Update minimist to 0.2.1 to fix security issue
 
 ## 1.4.0

packages/bower-config/lib/util/expand.js

@@ -33,9 +33,7 @@ function doEnvReplaceStr(f) {
         esc = esc.length && esc.length % 2;
         if (esc) return orig;
         if (undefined === process.env[name]) {
-            throw new Error(
-                'Environment variable used in .bowerrc is not defined: ' + orig
-            );
+            return '${' + name + '}';
         }
 
         return process.env[name];

packages/bower-config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bower-config",
-  "version": "1.4.2",
+  "version": "1.4.3",
   "description": "The Bower config reader and writer.",
   "author": "Twitter",
   "license": "MIT",
@@ -22,7 +22,7 @@
     "expect.js": "^0.3.1",
     "glob": "^4.5.3",
     "mkdirp": "^0.5.0",
-    "mocha": "^2.5.3",
+    "mocha": "^3.5.3",
     "node-uuid": "^1.4.3",
     "q": "^1.2.0",
     "rimraf": "^2.3.2"

packages/bower-endpoint-parser/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "expect.js": "~0.2.0",
-    "mocha": "^2.5.3",
+    "mocha": "^3.5.3",
     "mout": "~0.9.0"
   },
   "scripts": {

packages/bower-json/CHANGELOG.md

@@ -1,3 +1,15 @@
+# 0.8.4
+
+- Update deep-extend (security fix)
+
+# 0.8.3
+
+- Fix requires
+
+# 0.8.2
+
+- Drop dependency on meow (vendor ext-name)
+
 # 0.8.1
 
 - Revert strict name validations and allow @, spaces and slashes

packages/bower-json/lib/util/isAsset.js

@@ -1,4 +1,4 @@
-var extName = require('ext-name');
+var extName = require('../vendor/ext-name');
 
 function isAsset(filename) {
     var info = extName(filename);

packages/bower-json/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bower-json",
-  "version": "0.8.1",
+  "version": "0.8.4",
   "description": "Read bower.json files with semantics, normalisation, defaults and validation",
   "author": "Twitter",
   "license": "MIT",
@@ -10,7 +10,7 @@
     "node": ">=0.10.0"
   },
   "dependencies": {
-    "deep-extend": "^0.4.0",
+    "deep-extend": "^0.5.1",
     "ends-with": "^0.2.0",
     "ext-list": "^2.0.0",
     "sort-keys-length": "^1.0.0",
@@ -19,8 +19,8 @@
   },
   "devDependencies": {
     "expect.js": "^0.3.1",
-    "mocha": "^2.5.3",
-    "request": "^2.64.0",
+    "mocha": "^3.5.3",
+    "request": "2.76.0",
     "underscore.string": "^3.0.3"
   },
   "scripts": {

packages/bower-logger/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "expect.js": "~0.2.0",
-    "mocha": "^2.5.3"
+    "mocha": "^3.5.3"
   },
   "scripts": {
     "test": "mocha -R spec"

packages/bower-registry-client/package.json

@@ -13,7 +13,7 @@
     "async": "^0.2.8",
     "graceful-fs": "^4.0.0",
     "lru-cache": "^2.3.0",
-    "request": "^2.51.0",
+    "request": "2.76.0",
     "request-replay": "^0.2.0",
     "rimraf": "^2.2.0",
     "mkdirp": "^0.3.5"
@@ -21,7 +21,7 @@
   "devDependencies": {
     "bower-config": "^1.1.2",
     "expect.js": "~0.2.0",
-    "mocha": "^2.5.3",
+    "mocha": "^3.5.3",
     "nock": "9.2.3"
   },
   "scripts": {

test/commands/install.js

@@ -692,7 +692,7 @@ describe('bower install', function() {
         });
     });
 
-    it('recognizes proxy option in config', function(done) {
+    it('recognizes proxy option in config', function() {
         this.timeout(10000);
 
         tempDir.prepare({
@@ -722,7 +722,6 @@ describe('bower install', function() {
             ])
             .fail(function(error) {
                 expect(error.message).to.equal('Status code of 500');
-                done();
             });
     });