bundle_update_interactive 0.11.2 → 0.13.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 666efa68646d077bd09553e0d6a8b5616c11fa2039404c7c742345fed473cc87
-  data.tar.gz: 11ccfc5e97a9de7d9fb7817d3a1d1579ee2735610ef576a5444e269772584cd1
+  metadata.gz: 241531e26f28203d5252a21dde1a4411b287da28c4874d92f630911c1d3ab06b
+  data.tar.gz: 3a909152167231b98e5c713e7a60e97aa3162d236871d59868400e7eb6f7f13a
 SHA512:
-  metadata.gz: 12248266b3033cd6b97f2f2b89b257522e5004787b325942d92c9b7cfd4c7f109d0f0dfc25a714e71ba5363206d846040cb14100cafada77419219f00ba46b4d
-  data.tar.gz: '09bb43da14acc2a1b22f1d2a418ad0719e822a86928cf168cb381a07b8006c37f831b72a638c049cbc4cf824363433c2ba8b63b29fce8fd4add172273201369b'
+  metadata.gz: 0abf24328ee286b56bfc2fccf796c289ff7567474ecaa50bb3ab92cc1a2618b0d38ad2f4b83135fe9ac3a0d7185ecb8b43a0db454af517c0ea9833b1b1fdd62e
+  data.tar.gz: af955d5858dd124377105f3c324a181a8c1a208faa902e6aef53c672c3bda199f1843c354f3ba206a17376f227f3ae3d6608285517e1967f791797f36616cfbe

data/README.md

@@ -3,7 +3,6 @@
 [![Gem Version](https://img.shields.io/gem/v/bundle_update_interactive)](https://rubygems.org/gems/bundle_update_interactive)
 [![Gem Downloads](https://img.shields.io/gem/dt/bundle_update_interactive)](https://www.ruby-toolbox.com/projects/bundle_update_interactive)
 [![GitHub Workflow Status](https://img.shields.io/github/actions/workflow/status/mattbrictson/bundle_update_interactive/ci.yml)](https://github.com/mattbrictson/bundle_update_interactive/actions/workflows/ci.yml)
-[![Code Climate maintainability](https://img.shields.io/codeclimate/maintainability/mattbrictson/bundle_update_interactive)](https://codeclimate.com/github/mattbrictson/bundle_update_interactive)
 
 **This gem adds an `update-interactive` command to [Bundler](https://bundler.io).** Run it to see what gems can be updated, then pick and choose which ones to update. If you've used `yarn upgrade-interactive`, the interface should be very familiar.
 

data/lib/bundle_update_interactive/http.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require "openssl"
 require "net/http"
 require "uri"
 
@@ -11,6 +12,22 @@ module BundleUpdateInteractive
       end
     end
 
+    class Error
+      attr_reader :exception
+
+      def initialize(exception)
+        @exception = exception
+      end
+
+      def code
+        nil
+      end
+
+      def success?
+        false
+      end
+    end
+
     class << self
       def get(url)
         http(:get, url)
@@ -28,6 +45,8 @@ module BundleUpdateInteractive
           http.public_send(method, uri.request_uri)
         end
         response.extend(Success)
+      rescue OpenSSL::OpenSSLError => e
+        Error.new(e)
       end
     end
   end

data/lib/bundle_update_interactive/report.rb

@@ -1,8 +1,6 @@
 # frozen_string_literal: true
 
 require "bundler"
-require "bundler/audit"
-require "bundler/audit/scanner"
 require "set"
 
 module BundleUpdateInteractive
@@ -23,8 +21,9 @@ module BundleUpdateInteractive
       @all_gems ||= withheld_gems.merge(updatable_gems)
     end
 
-    def scan_for_vulnerabilities!
+    def scan_for_vulnerabilities! # rubocop:disable Metrics/AbcSize
       return false if all_gems.empty?
+      return false unless try_load_bundler_audit
 
       Bundler::Audit::Database.update!(quiet: true)
       audit_report = Bundler::Audit::Scanner.new.report
@@ -40,5 +39,15 @@ module BundleUpdateInteractive
     private
 
     attr_reader :current_lockfile
+
+    # TODO: Remove this workaround once Bundler 4 compatible version of bundler-audit is released
+    def try_load_bundler_audit
+      require "bundler/audit"
+      require "bundler/audit/scanner"
+      true
+    rescue LoadError
+      puts "Failed to load bundler-audit. Skipping vulnerabilities scan."
+      false
+    end
   end
 end

data/lib/bundle_update_interactive/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module BundleUpdateInteractive
-  VERSION = "0.11.2"
+  VERSION = "0.13.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bundle_update_interactive
 version: !ruby/object:Gem::Version
-  version: 0.11.2
+  version: 0.13.0
 platform: ruby
 authors:
 - Matt Brictson
@@ -13,16 +13,22 @@ dependencies:
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '5'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '5'
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -180,7 +186,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 3.7.2
 specification_version: 4
 summary: Adds an update-interactive command to Bundler
 test_files: []