Matthew Nitschke ac22678812 feat(datasource/npm): integrity and tarball extraction (#44315) ...

* added support for extracting integrity and tarball from npm datasource

* test(datasource/npm): keep integrity and tarball in packument shape assertions

The packument-trimming tests on main pinned a cached shape that dropped
`dist.tarball`, so they broke once the schema started retaining
`integrity` and `tarball`. Update both expectations to the new shape and
cover `integrity` alongside `tarball`.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* test(workers/lookup): expect integrity and tarball on npm updates

`generateUpdate` copies `downloadUrl` and `newDigest` from the release
onto the update, so every npm lookup in these tests now carries the
tarball URL and, where the packument fixture has one, the integrity
hash. Pin and rollback updates are built without those release fields,
so their expectations are unchanged.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Michael Kriese <michael.kriese@mend.io>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-11 10:09:59 +00:00

..

global

feat(host-rules): add allowInternal

2026-09-10 14:52:01 +01:00

repository

feat(datasource/npm): integrity and tarball extraction (#44315)

2026-09-11 10:09:59 +00:00

types.ts

build(deps): update dependency prettier to v3.9.6 (main) (#45815)

2026-09-09 13:50:03 +00:00