bibliothecary 10.2.4 → 11.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 305a667de2b400a8b78c0dcc8159442ec94a0d0c05cca71b3eb2ed25be9ddec3
-  data.tar.gz: 42645beb4d9cfa6aab4837045541d7747370f14f791f96c8aca31594aa9b614e
+  metadata.gz: ed25de135032f95b602569a3ad5c1476f36be42599c0cd1b29032ecf7de8a47b
+  data.tar.gz: 6401e84f7ce40b499b4da8274f775813fe1dcfa41843e7cbcc761293ff287c0d
 SHA512:
-  metadata.gz: 8ef33d46181f9d9b33c53ef28b197b3b28d1dae1c1b9f8842019a716b547696c3a69ffa8c4c26ccc64e9cbb078d2559ffd57ae3688f5fee9554265aa5d0f6c4e
-  data.tar.gz: dec4e3346c4b2a6ff8b64a61e90d5d8956977b6b3b19b3b49d1caab9921d7c2f1b6f71d7023a36f12fed2498a8fa705f4efc4699337aef665ddb9385d7389413
+  metadata.gz: 8f0cedd4ebe9e4248ac0151b4073fa2671466cb4c4e04b2b1dc7e9a8daecbfca34126fa870cab97d3e95e231dcc8f1e01295a7c3b9b907bf64db1443dfa2ff7e
+  data.tar.gz: c44115bb427765889d363e59685dfe3bd7fff63b27bca352f453b74da2ddf269d75a526453eb0bdfcfdb219d073cea5172fbfdc4731f38a1d86d8748a7c030b9

data/.ruby-version

@@ -1 +1 @@
-3.0.7
+3.2.5

data/CHANGELOG.md

@@ -13,6 +13,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Removed
 
+## [11.0.0] - 2024-11-22
+
+### Changed
+
+- Removed lockfile_requirement from Bibliothecary::Dependency
+
 ## [10.2.4] - 2024-11-06
 
 ### Changed

data/lib/bibliothecary/dependency.rb

@@ -16,8 +16,6 @@ module Bibliothecary
   #   where it did not match the resolved name. This can be used for features like aliasing.
   # @attr_reader [String] original_requirement The original requirement used to require the dependency,
   #   for cases where it did not match the resolved name. This can be used for features like aliasing.
-  # @attr_reader [String] lockfile_requirement The requirement found in the lockfile, e.g. "1.0.0" or "^1.0.0". This is
-  #   only returned from the yarn.lock parser and may not be used by downstream users. TODO: should this be deprecated?
   # @source [String] source An optional string to store the location of the manifest that contained this
   #   dependency, e.g. "src/package.json".
   class Dependency
@@ -25,7 +23,6 @@ module Bibliothecary
       :name,
       :requirement,
       :original_requirement,
-      :lockfile_requirement,
       :platform,
       :type,
       :direct,
@@ -42,7 +39,6 @@ module Bibliothecary
       name:,
       requirement:,
       original_requirement: nil,
-      lockfile_requirement: nil,
       platform: nil,
       type: nil,
       direct: nil,
@@ -56,8 +52,6 @@ module Bibliothecary
       @platform = platform
       @requirement = requirement || "*"
       @original_requirement = original_requirement
-      # TODO: maybe deprecate this field? Is it possible to replace it with original_requirement?
-      @lockfile_requirement = lockfile_requirement
       @type = type
       @direct = direct
       @deprecated = deprecated

data/lib/bibliothecary/multi_parsers/dependencies_csv.rb

@@ -37,13 +37,6 @@ module Bibliothecary
               /^name$/i,
             ],
           },
-          # Lockfiles have exact versions.
-          "lockfile_requirement" => {
-            match: [
-              /^(lockfile |)requirement$/i,
-              /^version$/i,
-            ],
-          },
           # Manifests have versions that can have operators.
           # However, since Bibliothecary only currently supports analyzing a
           # single file as a single thing (either manifest or lockfile)

data/lib/bibliothecary/parsers/npm.rb

@@ -142,7 +142,6 @@ module Bibliothecary
             Dependency.new(
               name: dep[:name],
               requirement: dep[:version],
-              lockfile_requirement: dep[:requirement],
               type: dep[:type],
               local: dep[:requirement]&.start_with?("file:"),
             )
@@ -173,7 +172,6 @@ module Bibliothecary
             Dependency.new(
               name: name,
               requirement: metadata["version"],
-              lockfile_requirement: metadata.fetch("from", "").split("@").last,
               type: "runtime",
             ),
           ] + transform_tree_to_array(metadata.fetch("dependencies", {}))

data/lib/bibliothecary/version.rb

@@ -1,3 +1,3 @@
 module Bibliothecary
-  VERSION = "10.2.4"
+  VERSION = "11.0.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: bibliothecary
 version: !ruby/object:Gem::Version
-  version: 10.2.4
+  version: 11.0.0
 platform: ruby
 authors:
 - Andrew Nesbitt
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-06 00:00:00.000000000 Z
+date: 2024-11-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: tomlrb
@@ -313,7 +313,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.33
+rubygems_version: 3.4.19
 signing_key:
 specification_version: 4
 summary: Find and parse manifests