renovate/renovate
1
0
Fork 0
mirror of https://github.com/renovatebot/renovate.git synced 2025-01-14 16:46:25 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
2111 commits 30 branches 9363 tags 243 MiB
Commit graph

1224 commits

Author SHA1 Message Date
Rhys Arkins
a302b11a26
feat: custom docker registries (#1707) 
Adds support for custom docker registries. To work (for now), registries must support anonymous public access to their v2 API. Tested against quay.io and gcr.io, including tags pagination for quay. Also needed to add a 10s timeout for registry queries to catch private/firewalled registries that we can't access.

Closes #797
 2018-03-23 14:48:36 +01:00
Rhys Arkins
83e7b5f0ef fix: pass up rate limit exceeded error when ensuring PR 2018-03-23 07:56:21 +01:00
Steven Hargrove
52721b8c14 fix: use only one yarn mutex type (#1706) 
Closes #1705
 2018-03-23 05:36:02 +01:00
Rhys Arkins
2fce3220e7 chore: downgrade duplicate lerna failure warn 2018-03-22 20:49:15 +01:00
Rhys Arkins
fc4d5fc08d fix: add check if lerna npmClient=yarn 2018-03-22 20:35:25 +01:00
Rhys Arkins
3acda0e524 chore: log massageConfig as config 2018-03-22 13:14:28 +01:00
Rhys Arkins
445cdbe3eb fix: loosen branch delete not exist check 2018-03-22 12:20:07 +01:00
Rhys Arkins
f0cd0cb8b8
feat: raise config action issue if failing to look up locked dependency (#1704) 
If an npm dependency can’t be found, and the package.json has a lock file, then Renovate will encounter lock file errors every time *any* dependency in that package.json has an update. Instead of raising PRs with an error, we instead now stop raising PRs and instead raise a config warning issue. Users can “dismiss” this by setting config option `updateLockFiles` to false.

Closes #1697
 2018-03-22 11:55:58 +01:00
Rhys Arkins
3a4a0cb029
feat: updateLockFiles (#1703) 
Adds an option “updateLockFiles” which defaults to true. Setting to false means that updating lock files (e.g. package-lock.json, yarn.lock and shrinkwrap.yaml) will be skipped. The main reason for doing this is for repositories that use a dependency we can’t resolve, so that they can keep updating the package.json without lock file.
 2018-03-22 10:41:26 +01:00
Rhys Arkins
aa56c049b4 chore: remove err from dep not found info log 2018-03-22 10:21:19 +01:00
Rhys Arkins
0462f91e7a fix: expand github errors for better debugging 
Try to get message and body in all errors we log
 2018-03-22 09:51:19 +01:00
Rhys Arkins
c1a7bff4a1 refactor: allow 10 loops instead of 5 2018-03-22 09:34:00 +01:00
Rhys Arkins
363a2cc2e5 fix: abort renovation if rate limit exceeded (github) 2018-03-22 09:26:20 +01:00
Rhys Arkins
5e898467d2 tests: fix coverage 2018-03-22 09:24:59 +01:00
Rhys Arkins
f0a61c8b26 chore: log custom docker host better 2018-03-22 08:58:59 +01:00
Rhys Arkins
d83164691b fix: adjust onboarding PR based on requireConfig setting 2018-03-22 05:33:09 +01:00
Rhys Arkins
6354f3d07a fix: try delete lock file maintenance branch only if it exists 2018-03-21 15:53:48 +01:00
Rhys Arkins
967529104d fix: add try/catch to branch delete (github) 2018-03-21 13:46:58 +01:00
Rhys Arkins
27ee7687d9 fix: skip branch creation if unpublishable pr not ready for creating 
Don’t create a branch until its unpublishable.

Fixes #1580
 2018-03-21 11:40:28 +01:00
Rhys Arkins
52ad9d8277
fix: skip branch creation if the updated dependency fails to lock (#1696) 
There are times when an npm dependency has an update available yet the “npm/yarn/pnpm install” fails to find it, and the lock file can’t be generated. We check for this any time there’s a lock file error and abort the branch creation, hoping it fixes itself on the next run.

Closes #1666
 2018-03-21 11:17:54 +01:00
Rhys Arkins
ee3240908b
feat: requireConfig (#1695) 
Adds option to bot owners to require a renovate config be in place.

Closes #1694
 2018-03-21 10:08:55 +01:00
Rhys Arkins
2ba360f6b3 chore: add sourceRepo to prList (github) 2018-03-21 09:14:48 +01:00
Rhys Arkins
60c997f180 chore: refactor delete to null 2018-03-21 09:10:53 +01:00
Rhys Arkins
fa523846ab fix: make nvm config mergeable 2018-03-21 06:03:06 +01:00
Rhys Arkins
5fa5793c3a chore: add logging to package file detection 2018-03-21 06:02:54 +01:00
Rhys Arkins
9bc232d960 fix: log 401/404 responses from Docker Hub 2018-03-21 05:51:55 +01:00
Rhys Arkins
42ea27a926 fix: skip looking up scratch base image (docker) 2018-03-21 05:16:03 +01:00
Rhys Arkins
78f5b35442 fix: skip named multistage docker builds 2018-03-20 21:42:34 +01:00
Rhys Arkins
85d697c649 chore: remove unused json-stringify-safe 2018-03-20 21:15:24 +01:00
Rhys Arkins
d77a3b2b92 fix: log error response body if present 2018-03-20 18:03:14 +01:00
Rhys Arkins
db1c33bb00 fix: throw registry-failure exception if docker has internal errors 2018-03-20 17:12:11 +01:00
Rhys Arkins
c9f2d387fa fix: use github tags not releases to determine node versions 
Closes #1691
 2018-03-20 15:51:37 +01:00
Rhys Arkins
b02e170b11 fix: export semverSort from github datasource 2018-03-20 15:51:12 +01:00
Rhys Arkins
6c677cbc92 fix: use onboarding status to determine mirror mode config branch 2018-03-20 13:29:08 +01:00
Rhys Arkins
dd93c1c194 fix: search changelogs down to fourth heading deep 
Closes #1687
 2018-03-20 10:07:50 +01:00
Rhys Arkins
3eaa75f3e4 fix: use looser changelog heading matching 2018-03-20 10:07:21 +01:00
Rhys Arkins
203930d2d6 fix: unescape issue number inside backticks 2018-03-20 09:59:58 +01:00
Rhys Arkins
a913a50715 fix: hard code public github api for release lookups 2018-03-20 09:24:22 +01:00
Rhys Arkins
e8fdf130c9 fix: handle unstable releases with upgradeInRange 
Fixes when a ranged version had a semver release part (e.g. 1.2.3-rc.5).

Closes #1689
 2018-03-20 07:20:14 +01:00
Rhys Arkins
b4bfb35418 chore: lower debug to trace for packagePatterns 2018-03-20 07:11:56 +01:00
Rhys Arkins
2364efdb39 fix: improve lockfile maintenance deletion logic 
Set lock file branches to always rebase stale, and delete if there’s no work to do.
 2018-03-20 06:48:27 +01:00
Rhys Arkins
0cfba9d014 chore: lessen debugging - move to trace 2018-03-20 06:39:37 +01:00
Rhys Arkins
d5903b720f chore: fix prettier 2018-03-18 10:05:47 +01:00
Rhys Arkins
b8105c2e9d fix: encodeURI filePath in getFile (github) 2018-03-18 08:42:04 +01:00
Rhys Arkins
f70c1fe749 fix: move mirrorMode branch creation into initRepo 2018-03-18 07:04:56 +01:00
Rhys Arkins
4121350eaa fix: use renovate-config as onboarding base branch for mirror mode 2018-03-18 06:46:01 +01:00
Rhys Arkins
ec34d136cf fix: don’t have blocking pin PRs when in mirror mode 2018-03-17 15:32:43 +01:00
Rhys Arkins
d86891cf81 fix: prTitle compilation with nested templates 
Closes #1652
 2018-03-17 10:58:42 +01:00
Rhys Arkins
159a0efc90 fix: retrieve baseCommitSha before comparing in mirrorMode 2018-03-17 07:16:56 +01:00
Rhys Arkins
13609b735d fix: improve try/catch for mirrorMode config 2018-03-17 07:02:38 +01:00
Rhys Arkins
ef26fdb3fe fix: mirrorMode fork patching 
When in mirrorMode, Renovate should keep its fork up to date
 2018-03-17 06:37:42 +01:00
Rhys Arkins
e50d9c1f05 feat: mirrorMode 
adds feature mirrorMode, aimed for “shadowing” a target repository.
 2018-03-17 06:07:39 +01:00
Rhys Arkins
fa2bda45fe fix: delete lockFileMaintenance branch if no longer necessary 
If a lockFileMaintenance branch returns no updated lockfiles then we should delete it.

Closes #1655
 2018-03-16 10:51:10 +01:00
Rhys Arkins
ef26aa7ea4 fix: rebase lock file maintenance PRs if configured 
Fixes so we skip lock file generation for lock file maintenance branches only if it *doesn’t* need rebasing.

Helps #1655
 2018-03-16 06:28:46 +01:00
Rhys Arkins
23d0290384
fix: raise PR immediately if there are lock file errors (#1664) 
fix: raise PR immediately if there are lock file errors
 2018-03-15 07:06:18 +01:00
Rhys Arkins
3a8f73adaa chore: better debugging for timezone/schedule 2018-03-15 06:22:25 +01:00
Rhys Arkins
2f6aac0ba6 fix: handle baseBranch array instead of string 2018-03-14 19:00:18 +01:00
Rhys Arkins
3f77d676cd
fix: docker multi-stage duplicate replace (#1662) 
Closes #1656
 2018-03-14 12:49:47 +01:00
Rhys Arkins
1b2a319643 fix: use escaped line returns in docker regex escape 2018-03-14 12:41:43 +01:00
Rhys Arkins
d0e76b9d51 fix: validate :timezone preset value 2018-03-13 21:47:08 +01:00
Rhys Arkins
ec14bf0e92
fix: reopen MR after branch deletion (GitLab) (#1660) 
Closes #1657
 2018-03-13 20:33:22 +01:00
Rhys Arkins
dbe9fd9dec fix: compile handlebars multiple times to catch nested templates 
Closes #1652
 2018-03-13 07:44:50 +01:00
Rhys Arkins
e62aa89a6c
feat: customisable prFooter (#1648) 2018-03-12 13:35:15 +01:00
Rhys Arkins
68117f08d3
fix: remove redundant handlebars compilations (#1637) 2018-03-12 05:23:00 +01:00
ikisialeu
c0f87172fa fix: validate timezones (#1638) 
`Adds a config validation check for timezone, checking it against the list in moment-timezome.js`. Configs with invalid timezones will raise a configuration error.

Closes #1483
 2018-03-12 04:24:45 +01:00
Rhys Arkins
bf43b2817c fix: travis newline replace problem 2018-03-10 16:58:47 +01:00
Rhys Arkins
36afcad570 fix: handle invalid travis supportPolicy 2018-03-10 16:58:34 +01:00
Rhys Arkins
f7696850e2 fix: use process.exitCode rather than process.exit 
As suggested in #1338
 2018-03-10 05:41:36 +01:00
Rhys Arkins
9ff363251f
fix: return non-zero exit code if any errors (#1625) 
fix: return non-zero exit code if any errors
 2018-03-09 12:00:57 +01:00
Rhys Arkins
09b8989b2e chore: error not warn when repository not found 2018-03-09 11:50:04 +01:00
Rhys Arkins
cd97792e7c
fix: allow rebaseStalePrs=false to take priority over repo settings (#1624) 
fix: allow rebaseStalePrs=false to take priority over repo settings
 2018-03-09 06:58:40 +01:00
eMerzh
088279abbd fix: return shrinkwrapdir to avoid crash (#1621) 2018-03-08 15:59:52 +01:00
Rhys Arkins
c2f0a46d9a feat: npm shrinkwrap 
Adds support for npm-shrinkwrap.json files.

Closes #67
 2018-03-08 09:46:08 +01:00
Rhys Arkins
862998c2b4 fix: don’t validate empty config 2018-03-08 08:00:12 +01:00
Rhys Arkins
ef828be054 refactor: log content before validation 2018-03-08 07:32:09 +01:00
Rhys Arkins
21a5af01c7 fix: add try/catch logging to migrate and validate code 
This reverts commit 97ea483f7e.
 2018-03-08 07:28:06 +01:00
Rhys Arkins
47bf45019d fix: better serialize content fields 2018-03-08 07:22:06 +01:00
Rhys Arkins
97ea483f7e fix: Revert "fix: add try/catch logging to migrate and validate code" 
This reverts commit 9b44e34fa7.
 2018-03-08 07:12:31 +01:00
Rhys Arkins
9b44e34fa7 fix: add try/catch logging to migrate and validate code 2018-03-08 06:02:16 +01:00
Rhys Arkins
7874188cb5 refactor: better debug migrateAndValidate 2018-03-07 15:13:37 +01:00
Rhys Arkins
c3db85c74e fix: correct setMeta for validatePrs() 2018-03-07 15:06:57 +01:00
Rhys Arkins
308ed432db
feat: upgradeInRange (#1608) 
Upgrade ranges to latest version even if latest version satisfies existing range.

| name    | value   |
| ------- | ------- |
| type    | boolean |
| default | false   |

By default, Renovate assumes that if you are using ranges then it's because you want them to be wide/open. As such, Renovate won't deliberately "narrow" the range by increasing the semver value inside.

For example, if your `package.json` specifies a value for `left-pad` of `^1.0.0` and the latest version on npmjs is `1.2.0`, then Renovate won't change anything. If instead you'd prefer to be updated to `^1.2.0` in cases like this, then set `upgradeInRange` to `true` in your Renovate config.

This feature supports simple caret (`^`) and tilde (`~`) ranges only, like `^1.0.0` and `~1.0.0`. It is not compatible with `pinVersions=true`.

Closes #1607
 2018-03-07 07:41:10 +01:00
Rhys Arkins
a2ef094485 feat: support pinned versions in .travis.yml 
If the existing version was pinned, or if pinVersions=true, then Renovate will use pinned versions for all the new values.

Closes #1605
 2018-03-06 22:18:13 +01:00
Rhys Arkins
e29c2d5aca fix: detect quotation mark in .travis.yml 2018-03-06 22:18:13 +01:00
Hutson Betts
d9f9e4692f docs(node): improve documentation clarity (#1606) 2018-03-06 21:42:47 +01:00
Rhys Arkins
d237c6c670 feat: add comment to PRs if config validation fails 2018-03-06 20:00:10 +01:00
Rhys Arkins
a186a4b091 chore: downgrade PR log to debug 2018-03-06 19:31:02 +01:00
Rhys Arkins
e7c325e6f0 fix: validate based on branchPrefix, not branchName 2018-03-06 16:12:59 +01:00
Rhys Arkins
453ce13278 fix: Revert "refactor: array concatenation (#1601)" 
This reverts commit dd26a018c5.
 2018-03-06 15:54:39 +01:00
Rhys Arkins
96835410d8
feat: validate renovate config PRs (#1602) 
feat: validate renovate config PRs
 2018-03-06 15:21:17 +01:00
AndreiMargineanu
dd26a018c5 refactor: array concatenation (#1601) 
Refactors all instances of .concat() to use array spread operators instead

Closes #1459
 2018-03-06 12:34:39 +01:00
Rhys Arkins
4104e81005 Revert "chore: remove unused getPrFiles functions" 
This reverts commit d5984a3cad.
 2018-03-06 12:18:35 +01:00
Rhys Arkins
a924ad3715 fix: add package.json > engines > node to “node.js” group 
This is so that the upgrade is combined with travis and nvm
 2018-03-06 11:15:04 +01:00
Rhys Arkins
46e2e95b32 fix: pr dep filter use manager in duplicate key 
To ensure we list both nvm and engines when upgrading node
 2018-03-06 11:14:32 +01:00
Adam Moss
621badb964 fix(allow-failure): enabled automerge when allowed failures occur 
Closes: #1586

Signed-off-by: Adam Moss <adam.moss@bcs.org.uk>
 2018-03-05 21:18:51 +01:00
Rhys Arkins
d5984a3cad chore: remove unused getPrFiles functions 2018-03-05 15:50:34 +01:00
Rhys Arkins
7ca9918c3c fix: don’t detect disabled managers 2018-03-05 14:56:21 +01:00
Rhys Arkins
e2f067faba Revert "fix: skip pruning for multiple baseBranches" 
This reverts commit 81c722473f.
 2018-03-05 13:53:37 +01:00
Rhys Arkins
3877b87c36 fix: delete branchList if repository has looped 2018-03-05 13:53:04 +01:00
Rhys Arkins
daba8ba560 fix: add travis content filter 2018-03-05 13:50:54 +01:00
Rhys Arkins
81c722473f fix: skip pruning for multiple baseBranches 2018-03-05 13:19:39 +01:00
Rhys Arkins
7021a073aa fix: clean up multiple baseBranches correctly 
Re-enables branch cleanup for multiple baseBranches
 2018-03-05 12:27:10 +01:00
Rhys Arkins
3d65e3a48e fix: disable branch pruning when multiple basebranches in use 2018-03-05 12:12:46 +01:00
Rhys Arkins
6530480410 refactor: simplify detectPackageFiles 2018-03-04 20:03:52 +01:00
Rhys Arkins
80dbeaa563 refactor: use filePattern to detect package files 2018-03-04 16:34:55 +01:00
Rhys Arkins
5e3822d0cc refactor: use filePattern for each manager 2018-03-04 16:09:12 +01:00
Rhys Arkins
dde5756488
feat: .nvmrc files (#1582) 
Adds initial support for `.nvmrc` renovation. If the existing value is a fully-specified semver version then it will be upgraded, otherwise left alone.

Closes #1270
 2018-03-04 15:52:06 +01:00
Rhys Arkins
f398fa19aa fix: Revert "refactor: improve migration scripts" 
This reverts commit c6be31543d.

Closes #1584
 2018-03-04 14:36:45 +01:00
Rhys Arkins
74a7242081 fix: node-travis migration 2018-03-04 14:20:04 +01:00
Rhys Arkins
c6be31543d refactor: improve migration scripts 2018-03-04 07:35:18 +01:00
Rhys Arkins
a2c4ecefda fix: delete empty errors and warnings from migrated config 2018-03-04 07:12:02 +01:00
Rhys Arkins
dae287b62b
refactor: node-travis definitions (#1583) 
Retains the "node" configuration object but moves enabling/disabling to "travis". Also removes the default `supportPolicy` from config.
 2018-03-04 07:08:19 +01:00
Rhys Arkins
33bcbdd91d fix: add repositoryUrl to travis results 2018-03-03 22:25:27 +01:00
Rhys Arkins
05c8af7e55 fix: add depType to group prBody 2018-03-03 22:25:06 +01:00
Rhys Arkins
faa4cc6171 fix: travis metadata and formatting 
Updates travis config and logic to use same variables as for other managers. This fixes the onboarding PR.

Fixes #1551
 2018-03-03 20:53:54 +01:00
Rhys Arkins
cd9218444d refactor: move node package lookup to node helper 2018-03-03 17:36:45 +01:00
Rhys Arkins
886a3d05bf refactor: rename ‘node’ manager to ‘travis’ 2018-03-03 15:35:43 +01:00
Rhys Arkins
3c56f8aeb6
refactor: move manager-specific code under lib/manager (#1573) 
Refactors all non-npm code to live inside lib/manager/*
 2018-03-03 14:39:39 +01:00
Rhys Arkins
7f9d73a318 feat: allowedVersions 
A semver range defining allowed versions for dependencies

| name | value  |
| ---- | ------ |
| type | string |

Use this - usually within a packageRule - to limit how far to upgrade a dependency. For example, if you wish to upgrade to angular v1.5 but not to `angular` v1.6 or higher, you could defined this to be `<= 1.5` or `< 1.6.0`:

```
  "packageRules": [{
    "packageNames": ["angular"],
    "allowedVersions": "<=1.5"
  }]
```
 2018-03-03 06:35:11 +01:00
Rhys Arkins
7db4951722 fix: use commonConfig branchPrefix only if set 2018-03-01 21:58:34 +01:00
Rhys Arkins
e9eba859ea fix: use original branchPrefix when pruning baseBranches 2018-03-01 21:34:27 +01:00
Rhys Arkins
e47766c0f4 fix: add try/catch to getAllRenovateBranches 2018-03-01 21:17:41 +01:00
Rhys Arkins
4f642d5a95 fix: optimise getAllRenovateBrnahces 
Supply prefix in query and paginate.
 2018-03-01 21:15:17 +01:00
Rhys Arkins
a3bd0a0e95 Revert "logs: log configs when baseBranches in use" 
This reverts commit c4cdfe8989.
 2018-03-01 21:08:01 +01:00
Rhys Arkins
3fd090f3ef feat: prBanner 
Enables a “banner” at the top of PRs. Must be set inside a config.js to work.
 2018-03-01 17:35:11 +01:00
Rhys Arkins
bb2fc1b7ca refactor: move npm extract from workers to manager 2018-03-01 10:21:26 +01:00
Rhys Arkins
cf336a0b21 refactor: use manager not packageFile 2018-02-28 19:01:35 +01:00
Rhys Arkins
c4cdfe8989 logs: log configs when baseBranches in use 2018-02-28 19:00:40 +01:00
Rhys Arkins
d68d5ccabf refactor: move npm resolve code into separate file 2018-02-28 07:06:04 +01:00
Rhys Arkins
9119568fe4 fix: add checks if pr branch still exists (gitlab) 
in GitLab, a PR may be open while the branch itself has been removed. We cant just assume that the branch exists because the PR does, even if it’s an edge case.
 2018-02-28 04:43:30 +01:00
Rhys Arkins
d0fa221ae3 fix: only rebase if pr is dirty (github) 2018-02-27 19:50:16 +01:00
Rhys Arkins
5c6139f030 fix: throw error if lerna out of disk space 2018-02-27 19:05:00 +01:00
Rhys Arkins
e011d95e86 fix: don’t resolve empty meteor package.js 
Refactors meteor to have a resolve function that detects/filters out empty files (like for other managers).
 2018-02-27 17:19:12 +01:00
Rhys Arkins
579214682f fix: throw config validation error if unknown filename 
Refactors manager.resolve to use file name to manager mappings.
 2018-02-27 16:58:36 +01:00
Rhys Arkins
55c3288c09 chore: log filename for .npmrc and .yarnrc 2018-02-27 16:47:21 +01:00
Rhys Arkins
df19a6e8bb fix: config.packageFiles null check 2018-02-27 16:40:03 +01:00
Rhys Arkins
1f6893f5e2 fix: npm config should only be merged for package.json 2018-02-27 15:43:19 +01:00
Rhys Arkins
bc684c7b29 fix: implicit patch-only upgrade 
Use type ‘patch’ only when patch automerge is true AND minor automerge is not true.
 2018-02-27 14:50:09 +01:00
Rhys Arkins
3d491797dc fix: retry npmjs 408 
npmjs’s CDN is (erroneously) returning 408 Timeout responses sometimes, so these should be retried.
 2018-02-27 14:31:36 +01:00
Rhys Arkins
f95058d66b refactor: move npm registry to datasource 2018-02-27 10:49:24 +01:00
Rhys Arkins
5d73738dde refactor: move docker registry to datasource 2018-02-27 10:28:31 +01:00
Rhys Arkins
ff1a75b42d fix: throw error if yarn out of disk space 
Closes #1548
 2018-02-26 17:03:12 +01:00
Rhys Arkins
9263fd36b3 fix: don’t overwrite edited onboarding configs 
Before, we were attempting to rebase edited branches if renovate.json was the only modified file. This “lost” the committer information - which seemed ok - but it also meant that on the subsequent run it then assumed Renovate was the only committer. Now we don’t rebase edited onboarding branches anymore.

Closes #1360
 2018-02-22 19:46:57 +01:00
Rhys Arkins
e516a22686 fix: check bazel versions for stable/unstable 2018-02-22 09:02:46 +01:00
Rhys Arkins
352ac76640 chore: add debugging to semantic commit detection 2018-02-22 08:58:44 +01:00
Rhys Arkins
49cedb15d8 fix: filter tags in getRepoTags request 2018-02-22 08:21:27 +01:00
Rhys Arkins
b00af3022a fix: re-enable package-lock-only for npm 
Closes #1531
 2018-02-22 07:42:59 +01:00
Rhys Arkins
1fd83139ed
feat: configurable onboarding config (#1543) 
Adds configuration option `onboardingConfig` that allows the default onboarding config to be extended or replaced via `config.js` or env configuration.

Closes #1521
 2018-02-21 19:50:58 +01:00
Rhys Arkins
11c3ce7674 refactor: skip logging lock files when commit files 2018-02-21 08:28:02 +01:00
Rhys Arkins
182d1c7348
fix: don't use --package-lock-only for npm install (#1544) 
* Revert "fix: disable reusing existing package-lock.json when upgrading (#1530)"

This reverts commit 2728e39963.

* switch from —package-lock-only to —ignore-scripts

Removing `--package-lock-only` option from npm installs due to https://github.com/npm/npm/issues/19852

Pretty sure this fixes #1495
 2018-02-21 08:12:25 +01:00