fix(api/tracking): ingore symlinks

api/outdated/outdated/tests/test_tracking.py

@@ -1,3 +1,4 @@
+from pathlib import Path
 from unittest.mock import PropertyMock, call
 
 import pytest
@@ -283,6 +284,16 @@ def test_lockfiles(db, project, tmp_repo_root, exists):
         assert not exists
 
 
+def test_lockfiles_ignore_symlinks(db, project, tmp_repo_root):
+    tracker = Tracker(project)
+    tracker.local_path.mkdir(parents=True, exist_ok=False)
+
+    lockfiles = tracker.lockfiles
+    assert lockfiles == []
+    (tracker.local_path / "yarn.lock").symlink_to(Path("/proc/1/environ"))
+    assert tracker.lockfiles == []
+
+
 @pytest.mark.django_db()
 def test_delete(tmp_repo_root, project_factory):
     project = project_factory(repo="my.git.com/foo/bar")

api/outdated/outdated/tracking.py

@@ -85,7 +85,13 @@ def lockfiles(self):
             if ".git" in dirs:
                 dirs.remove(".git")
 
-            lockfile_list.extend([Path(root).joinpath(file) for file in files])
+            lockfile_list.extend(
+                [
+                    Path(root).joinpath(file)
+                    for file in files
+                    if not Path(root).joinpath(file).is_symlink()
+                ]
+            )
 
         return lockfile_list