feat(npm): add detection for overrides block

lib/modules/manager/npm/extract/__snapshots__/index.spec.ts.snap

@@ -29,6 +29,72 @@ Object {
 }
 `;
 
+exports[`modules/manager/npm/extract/index .extractPackageFile() extracts dependencies from overrides 1`] = `
+Object {
+  "constraints": Object {},
+  "deps": Array [
+    Object {
+      "currentValue": "18.0.5",
+      "datasource": "npm",
+      "depName": "@types/react",
+      "depType": "devDependencies",
+      "prettyDepType": "devDependency",
+    },
+    Object {
+      "commitMessageTopic": "Node.js",
+      "currentValue": "8.9.2",
+      "datasource": "npm",
+      "depName": "node",
+      "depType": "overrides",
+      "prettyDepType": "overrides",
+    },
+    Object {
+      "currentValue": "18.0.5",
+      "datasource": "npm",
+      "depName": "@types/react",
+      "depType": "overrides",
+      "prettyDepType": "overrides",
+    },
+    Object {
+      "currentValue": "1.0.0",
+      "datasource": "npm",
+      "depName": "foo",
+      "depType": "overrides",
+      "prettyDepType": "overrides",
+    },
+    Object {
+      "currentValue": "1.0.0",
+      "datasource": "npm",
+      "depName": "foo2",
+      "depType": "overrides",
+      "prettyDepType": "overrides",
+    },
+    Object {
+      "currentValue": "1.0.0",
+      "datasource": "npm",
+      "depName": "bar2",
+      "depType": "overrides",
+      "prettyDepType": "overrides",
+    },
+  ],
+  "lernaClient": undefined,
+  "lernaPackages": undefined,
+  "managerData": Object {
+    "lernaJsonFile": undefined,
+    "yarnZeroInstall": false,
+  },
+  "npmLock": undefined,
+  "npmrc": undefined,
+  "packageFileVersion": undefined,
+  "packageJsonName": undefined,
+  "packageJsonType": "app",
+  "pnpmShrinkwrap": undefined,
+  "skipInstalls": true,
+  "yarnLock": undefined,
+  "yarnWorkspacesPackages": undefined,
+}
+`;
+
 exports[`modules/manager/npm/extract/index .extractPackageFile() extracts engines 1`] = `
 Object {
   "constraints": Object {

lib/modules/manager/npm/extract/index.spec.ts

@@ -669,6 +669,80 @@ describe('modules/manager/npm/extract/index', () => {
         ],
       });
     });
+
+    it('extracts dependencies from overrides', async () => {
+      const content = `{
+        "devDependencies": {
+          "@types/react": "18.0.5"
+        },
+        "overrides": {
+          "node": "8.9.2",
+          "@types/react": "18.0.5",
+          "baz": {
+            "bar": {
+              "foo": "1.0.0"
+            }
+          },
+          "foo2": {
+            ".": "1.0.0",
+            "bar2": "1.0.0"
+          },
+          "emptyObject":{}
+        }
+      }`;
+      const res = await npmExtract.extractPackageFile(
+        content,
+        'package.json',
+        defaultConfig
+      );
+      expect(res).toMatchSnapshot({
+        deps: [
+          {
+            depType: 'devDependencies',
+            depName: '@types/react',
+            currentValue: '18.0.5',
+            datasource: 'npm',
+            prettyDepType: 'devDependency',
+          },
+          {
+            depType: 'overrides',
+            depName: 'node',
+            currentValue: '8.9.2',
+            datasource: 'npm',
+            commitMessageTopic: 'Node.js',
+            prettyDepType: 'overrides',
+          },
+          {
+            depType: 'overrides',
+            depName: '@types/react',
+            currentValue: '18.0.5',
+            datasource: 'npm',
+            prettyDepType: 'overrides',
+          },
+          {
+            prettyDepType: 'overrides',
+            depType: 'overrides',
+            depName: 'foo',
+            currentValue: '1.0.0',
+            datasource: 'npm',
+          },
+          {
+            prettyDepType: 'overrides',
+            depType: 'overrides',
+            depName: 'foo2',
+            currentValue: '1.0.0',
+            datasource: 'npm',
+          },
+          {
+            prettyDepType: 'overrides',
+            depType: 'overrides',
+            depName: 'bar2',
+            currentValue: '1.0.0',
+            datasource: 'npm',
+          },
+        ],
+      });
+    });
   });
 
   describe('.postExtract()', () => {

lib/modules/manager/npm/extract/index.ts

@@ -172,6 +172,7 @@ export async function extractPackageFile(
     volta: 'volta',
     resolutions: 'resolutions',
     packageManager: 'packageManager',
+    overrides: 'overrides',
   };
 
   const constraints: Record<string, any> = {};
@@ -337,6 +338,45 @@ export async function extractPackageFile(
     return dep;
   }
 
+  /**
+   * Used when there is a json object as a value in overrides block.
+   * @param depType
+   * @param parentDep
+   * @param children
+   * @returns PackageDependency array
+   */
+  function extractOverrideDepsRec(
+    depType: string,
+    parentDep: string,
+    children: NpmPackageDependency
+  ): PackageDependency[] {
+    const deps: PackageDependency[] = [];
+    if (!depType || !children || is.emptyObject(children)) {
+      return deps;
+    }
+
+    for (const [key, val] of Object.entries(children)) {
+      if (is.string(val)) {
+        // val is a normal version
+        let dep: PackageDependency = {};
+        dep.prettyDepType = depType;
+        dep.depType = depType;
+        // special handling for "." key
+        // "." means the constraint is applied to the parent dep
+        const depName = key === '.' ? parentDep : key;
+        dep.depName = depName;
+        dep = { ...dep, ...extractDependency(depType, depName, val) };
+        deps.push(dep);
+      } else {
+        // val is an object, run recursively.
+        const depsOfObject = extractOverrideDepsRec(depType, key, val);
+        deps.push(...depsOfObject);
+      }
+    }
+
+    return deps;
+  }
+
   for (const depType of Object.keys(depTypes) as (keyof typeof depTypes)[]) {
     let dependencies = packageJson[depType];
     if (dependencies) {
@@ -362,13 +402,17 @@ export async function extractPackageFile(
           if (depName !== key) {
             dep.managerData = { key };
           }
-          dep = { ...dep, ...extractDependency(depType, depName, val) };
-          if (depName === 'node') {
-            // This is a special case for Node.js to group it together with other managers
-            dep.commitMessageTopic = 'Node.js';
+          if (depType === 'overrides' && !is.string(val)) {
+            deps.push(...extractOverrideDepsRec(depType, depName, val));
+          } else {
+            dep = { ...dep, ...extractDependency(depType, depName, val) };
+            if (depName === 'node') {
+              // This is a special case for Node.js to group it together with other managers
+              dep.commitMessageTopic = 'Node.js';
+            }
+            dep.prettyDepType = depTypes[depType];
+            deps.push(dep);
           }
-          dep.prettyDepType = depTypes[depType];
-          deps.push(dep);
         }
       } catch (err) /* istanbul ignore next */ {
         logger.debug({ fileName, depType, err }, 'Error parsing package.json');

lib/modules/manager/npm/extract/types.ts

@@ -13,7 +13,7 @@ export interface NpmPackage extends PackageJson {
   _id?: any;
   dependenciesMeta?: DependenciesMeta;
   packageManager?: string;
-
+  overrides?: OverrideDependency;
   volta?: PackageJson.Dependency;
 }
 
@@ -31,3 +31,5 @@ export interface LockFile {
 export interface PnpmWorkspaceFile {
   packages: string[];
 }
+
+export type OverrideDependency = Record<string, string | any>;

lib/modules/manager/npm/types.ts

@@ -68,4 +68,5 @@ export type NpmDepType =
   | 'devDependencies'
   | 'optionalDependencies'
   | 'peerDependencies'
-  | 'resolutions';
+  | 'resolutions'
+  | 'overrides';