feat(npm): add detection for overrides block

lib/modules/manager/npm/extract/index.spec.ts

@@ -669,6 +669,85 @@ describe('modules/manager/npm/extract/index', () => {
         ],
       });
     });
+
+    it('extracts dependencies from overrides', async () => {
+      const content = `{
+        "devDependencies": {
+          "@types/react": "18.0.5"
+        },
+        "overrides": {
+          "node": "8.9.2",
+          "@types/react": "18.0.5",
+          "baz": {
+            "node": "8.9.2",
+            "bar": {
+              "foo": "1.0.0"
+            }
+          },
+          "foo2": {
+            ".": "1.0.0",
+            "bar2": "1.0.0"
+          },
+          "emptyObject":{}
+        }
+      }`;
+      const res = await npmExtract.extractPackageFile(
+        content,
+        'package.json',
+        defaultConfig
+      );
+      expect(res).toMatchObject({
+        deps: [
+          {
+            depType: 'devDependencies',
+            depName: '@types/react',
+            currentValue: '18.0.5',
+            datasource: 'npm',
+            prettyDepType: 'devDependency',
+          },
+          {
+            depType: 'overrides',
+            depName: 'node',
+            currentValue: '8.9.2',
+            datasource: 'npm',
+            commitMessageTopic: 'Node.js',
+            prettyDepType: 'overrides',
+          },
+          {
+            depType: 'overrides',
+            depName: '@types/react',
+            currentValue: '18.0.5',
+            datasource: 'npm',
+            prettyDepType: 'overrides',
+          },
+          {
+            depName: 'node',
+            parents: ['baz'],
+            commitMessageTopic: 'Node.js',
+            currentValue: '8.9.2',
+            datasource: 'npm',
+          },
+          {
+            depName: 'foo',
+            parents: ['baz', 'bar'],
+            currentValue: '1.0.0',
+            datasource: 'npm',
+          },
+          {
+            depName: 'foo2',
+            parents: ['foo2'],
+            currentValue: '1.0.0',
+            datasource: 'npm',
+          },
+          {
+            depName: 'bar2',
+            parents: ['foo2'],
+            currentValue: '1.0.0',
+            datasource: 'npm',
+          },
+        ],
+      });
+    });
   });
 
   describe('.postExtract()', () => {

lib/modules/manager/npm/extract/index.ts

@@ -173,6 +173,7 @@ export async function extractPackageFile(
     volta: 'volta',
     resolutions: 'resolutions',
     packageManager: 'packageManager',
+    overrides: 'overrides',
   };
 
   const constraints: Record<string, any> = {};
@@ -338,6 +339,44 @@ export async function extractPackageFile(
     return dep;
   }
 
+  /**
+   * Used when there is a json object as a value in overrides block.
+   * @param parents
+   * @param child
+   * @returns PackageDependency array
+   */
+  function extractOverrideDepsRec(
+    parents: string[],
+    child: NpmManagerData
+  ): PackageDependency[] {
+    const deps: PackageDependency[] = [];
+    if (!child || is.emptyObject(child)) {
+      return deps;
+    }
+    for (const [key, val] of Object.entries(child)) {
+      if (is.string(val)) {
+        const dep: NpmManagerData = {};
+        // special handling for "." key
+        // "." means the constraint is applied to the parent dep
+        dep.depName = key === '.' ? parents[parents.length - 1] : key;
+        dep.depType = 'overrides';
+        dep.parents = parents.slice(); // set parents for dependency
+        nodeCommitTopic(dep);
+        deps.push({
+          ...dep,
+          ...extractDependency('overrides', dep.depName, val),
+        });
+      } else {
+        // val is an object, run recursively.
+        parents.push(key);
+        const depsOfObject = extractOverrideDepsRec(parents, val);
+        deps.push(...depsOfObject);
+      }
+    }
+    parents.pop();
+    return deps;
+  }
+
   for (const depType of Object.keys(depTypes) as (keyof typeof depTypes)[]) {
     let dependencies = packageJson[depType];
     if (dependencies) {
@@ -363,13 +402,14 @@ export async function extractPackageFile(
           if (depName !== key) {
             dep.managerData = { key };
           }
-          dep = { ...dep, ...extractDependency(depType, depName, val) };
-          if (depName === 'node') {
-            // This is a special case for Node.js to group it together with other managers
-            dep.commitMessageTopic = 'Node.js';
+          if (depType === 'overrides' && !is.string(val)) {
+            deps.push(...extractOverrideDepsRec([depName], val));
+          } else {
+            dep = { ...dep, ...extractDependency(depType, depName, val) };
+            nodeCommitTopic(dep);
+            dep.prettyDepType = depTypes[depType];
+            deps.push(dep);
           }
-          dep.prettyDepType = depTypes[depType];
-          deps.push(dep);
         }
       } catch (err) /* istanbul ignore next */ {
         logger.debug({ fileName, depType, err }, 'Error parsing package.json');
@@ -460,3 +500,10 @@ export async function extractAllPackageFiles(
   await postExtract(npmFiles, !!config.updateInternalDeps);
   return npmFiles;
 }
+
+function nodeCommitTopic(dep: NpmManagerData): void {
+  // This is a special case for Node.js to group it together with other managers
+  if (dep.depName === 'node') {
+    dep.commitMessageTopic = 'Node.js';
+  }
+}

lib/modules/manager/npm/extract/types.ts

@@ -13,7 +13,7 @@ export interface NpmPackage extends PackageJson {
   _id?: any;
   dependenciesMeta?: DependenciesMeta;
   packageManager?: string;
-
+  overrides?: OverrideDependency;
   volta?: PackageJson.Dependency;
 }
 
@@ -31,3 +31,9 @@ export interface LockFile {
 export interface PnpmWorkspaceFile {
   packages: string[];
 }
+
+export type OverrideDependency = Record<string, string | RecursiveOverride>;
+
+export interface RecursiveOverride {
+  [P: string]: RecursiveOverride;
+}

lib/modules/manager/npm/types.ts

@@ -67,12 +67,14 @@ export type NpmDepType =
   | 'dependencies'
   | 'devDependencies'
   | 'optionalDependencies'
+  | 'overrides'
   | 'peerDependencies'
-  | 'resolutions';
+  | 'resolutions'
+  | 'overrides';
 
 export interface NpmManagerData extends Record<string, any> {
   hasPackageManager?: boolean;
-
   lernaJsonFile?: string;
+  parents?: string[];
   yarnZeroInstall?: boolean;
 }

lib/modules/manager/npm/update/dependency/index.spec.ts

@@ -296,5 +296,56 @@ describe('modules/manager/npm/update/dependency/index', () => {
       });
       expect(testContent).toEqual(outputContent);
     });
+
+    it('handles override dependency', () => {
+      const upgrade = {
+        depType: 'overrides',
+        depName: 'typescript',
+        newValue: '0.60.0',
+      };
+      const overrideDependencies = `{
+        "overrides": {
+          "typescript": "0.0.5"
+        }
+      }`;
+      const expected = `{
+        "overrides": {
+          "typescript": "0.60.0"
+        }
+      }`;
+      const testContent = npmUpdater.updateDependency({
+        fileContent: overrideDependencies,
+        upgrade,
+      });
+      expect(testContent).toEqual(expected);
+    });
+
+    it('handles override dependency object', () => {
+      const upgrade = {
+        depType: 'overrides',
+        depName: 'typescript',
+        newValue: '0.60.0',
+        parents: ['awesome-typescript-loader'],
+      };
+      const overrideDependencies = `{
+        "overrides": {
+          "awesome-typescript-loader": {
+           "typescript": "3.0.0"
+         }
+        }
+      }`;
+      const expected = `{
+        "overrides": {
+          "awesome-typescript-loader": {
+           "typescript": "0.60.0"
+         }
+        }
+      }`;
+      const testContent = npmUpdater.updateDependency({
+        fileContent: overrideDependencies,
+        upgrade,
+      });
+      expect(testContent).toEqual(expected);
+    });
   });
 });

lib/modules/manager/npm/update/dependency/index.ts

@@ -1,10 +1,16 @@
+import is from '@sindresorhus/is';
 import { dequal } from 'dequal';
 import { logger } from '../../../../../logger';
 import { escapeRegExp, regEx } from '../../../../../util/regex';
 import { matchAt, replaceAt } from '../../../../../util/string';
 import type { UpdateDependencyConfig } from '../../../types';
-import type { DependenciesMeta, NpmPackage } from '../../extract/types';
-import type { NpmDepType } from '../../types';
+import type {
+  DependenciesMeta,
+  NpmPackage,
+  OverrideDependency,
+  RecursiveOverride,
+} from '../../extract/types';
+import type { NpmDepType, NpmManagerData } from '../../types';
 
 function renameObjKey(
   oldObj: DependenciesMeta,
@@ -28,7 +34,8 @@ function replaceAsString(
   depType: NpmDepType | 'dependenciesMeta' | 'packageManager',
   depName: string,
   oldValue: string,
-  newValue: string
+  newValue: string,
+  parents?: string[]
 ): string {
   if (depType === 'packageManager') {
     parsedContents[depType] = newValue;
@@ -46,6 +53,16 @@ function replaceAsString(
         newValue
       );
     }
+  } else if (parents && depType === 'overrides') {
+    // there is an object as a value in overrides block
+    const { depObjectReference, overrideDepName } = overrideDepPosition(
+      parsedContents[depType]!,
+      parents,
+      depName
+    );
+    if (depObjectReference) {
+      depObjectReference[overrideDepName] = newValue;
+    }
   } else {
     // The old value is the version of the dependency
     parsedContents[depType]![depName] = newValue;
@@ -117,13 +134,28 @@ export function updateDependency({
   logger.debug(`npm.updateDependency(): ${depType}.${depName} = ${newValue}`);
   try {
     const parsedContents: NpmPackage = JSON.parse(fileContent);
+    let overrideDepParents: string[] | undefined = undefined;
     // Save the old version
     let oldVersion: string | undefined;
     if (depType === 'packageManager') {
       oldVersion = parsedContents[depType];
       newValue = `${depName}@${newValue}`;
+    } else if (isOverrideObject(upgrade)) {
+      const npmOverrideDep: NpmManagerData = upgrade;
+      overrideDepParents = npmOverrideDep.parents;
+      if (overrideDepParents) {
+        // old version when there is an object as a value in overrides block
+        const { depObjectReference, overrideDepName } = overrideDepPosition(
+          parsedContents['overrides']!,
+          overrideDepParents,
+          depName
+        );
+        if (depObjectReference) {
+          oldVersion = depObjectReference[overrideDepName]!;
+        }
+      }
     } else {
-      oldVersion = parsedContents[depType as NpmDepType]![depName];
+      oldVersion = parsedContents[depType as NpmDepType]![depName] as string;
     }
     if (oldVersion === newValue) {
       logger.trace('Version is already updated');
@@ -137,7 +169,8 @@ export function updateDependency({
       depType as NpmDepType,
       depName,
       oldVersion!,
-      newValue!
+      newValue!,
+      overrideDepParents
     );
     if (upgrade.newName) {
       newFileContent = replaceAsString(
@@ -146,7 +179,8 @@ export function updateDependency({
         depType as NpmDepType,
         depName,
         depName,
-        upgrade.newName
+        upgrade.newName,
+        overrideDepParents
       );
     }
     /* eslint-enable @typescript-eslint/no-unnecessary-type-assertion */
@@ -223,3 +257,27 @@ export function updateDependency({
     return null;
   }
 }
+function overrideDepPosition(
+  overrideBlock: OverrideDependency,
+  parents: string[],
+  depName: string
+): {
+  depObjectReference: Record<string, string>;
+  overrideDepName: string;
+} {
+  // get override dep position when its nested in an object
+  const lastParent = parents[parents.length - 1];
+  let overrideDep: OverrideDependency = overrideBlock;
+  for (const parent of parents) {
+    if (overrideDep) {
+      overrideDep = overrideDep[parent]! as Record<string, RecursiveOverride>;
+    }
+  }
+  const overrideDepName = depName === lastParent ? '.' : depName;
+  const depObjectReference = overrideDep as Record<string, string>;
+  return { depObjectReference, overrideDepName };
+}
+
+function isOverrideObject(upgrade: NpmManagerData): boolean {
+  return !is.undefined(upgrade.parents) && upgrade.depType === 'overrides';
+}