Fix npm_and_yarn engine detection

dependabot · Jan 23, 2025 · 403bf06 · 403bf06
1 parent 2ec3b06
commit 403bf06
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/npm_and_yarn/lib/dependabot/npm_and_yarn/version_selector.rb b/npm_and_yarn/lib/dependabot/npm_and_yarn/version_selector.rb
@@ -21,8 +21,7 @@ def setup(manifest_json, name)
 
         # Only keep matching specs versions i.e. "20.21.2", "7.1.2",
         # Additional specs can be added later
-        engine_versions.delete_if { |_key, value| !valid_extracted_version?(value) }
-        version = engine_versions.select { |engine, _value| engine.to_s.match(name) }
+        version = engine_versions.select { |engine, value| valid_extracted_version?(value) && engine.to_s.match(name) }
 
         version
       end