diff --git a/CHANGELOG.md b/CHANGELOG.md index e4b6c71f35..fca4e891ee 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1323,7 +1323,7 @@ ## v0.102.1, 12 April 2019 -- JS: Don't assume we can upgrade sub-dependencies to a secure verison +- JS: Don't assume we can upgrade sub-dependencies to a secure version ## v0.102.0, 12 April 2019 diff --git a/common/lib/dependabot/update_checkers/base.rb b/common/lib/dependabot/update_checkers/base.rb index a823164702..dd1886e2dd 100644 --- a/common/lib/dependabot/update_checkers/base.rb +++ b/common/lib/dependabot/update_checkers/base.rb @@ -208,7 +208,7 @@ def numeric_version_up_to_date? # If a lockfile isn't out of date and the package has switched to a git # source then we'll get a numeric version switching to a git SHA. In - # this case we treat the verison as up-to-date so that it's ignored. + # this case we treat the version as up-to-date so that it's ignored. return true if latest_version.to_s.match?(/^[0-9a-f]{40}$/) latest_version <= version_class.new(dependency.version) diff --git a/python/lib/dependabot/python/file_parser/poetry_files_parser.rb b/python/lib/dependabot/python/file_parser/poetry_files_parser.rb index 56eec277c3..e2e01e57cb 100644 --- a/python/lib/dependabot/python/file_parser/poetry_files_parser.rb +++ b/python/lib/dependabot/python/file_parser/poetry_files_parser.rb @@ -91,7 +91,7 @@ def version_from_lockfile(dep_name) parsed_lockfile.fetch("package", []). find { |p| normalise(p.fetch("name")) == normalise(dep_name) }&. - fetch("verison", nil) + fetch("version", nil) end def check_requirements(req)