bundle_update_interactive 0.13.0 → 0.13.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/LICENSE.txt +1 -1
- data/lib/bundle_update_interactive/report.rb +3 -12
- data/lib/bundle_update_interactive/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0ab3f3bab66373c5e9f73f56c6de931ebd95bf734c8f9bce4c5ea4199a0b76f0
|
|
4
|
+
data.tar.gz: 79e66d604b1c82dc93525009550cff01ca5c9f0ad2ea64c19125c18df3368cfe
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f285ffc92f5136391ad95e888301dd62c3e51ba6851090a9733b56d7a80a69abb63dc55de0ea6340d111c50b55cf18712c2d991dbbe4dd30b7506ac490975bca
|
|
7
|
+
data.tar.gz: b48c495e673e689215099de8238d2358b81c089e9b0d23aecfe18e2c7abd014e674af79df9281665eaee8dede6fc5f497e3a43c81d6566743b6079b1d82ee3a6
|
data/LICENSE.txt
CHANGED
|
@@ -1,6 +1,8 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
3
|
require "bundler"
|
|
4
|
+
require "bundler/audit"
|
|
5
|
+
require "bundler/audit/scanner"
|
|
4
6
|
require "set"
|
|
5
7
|
|
|
6
8
|
module BundleUpdateInteractive
|
|
@@ -21,9 +23,8 @@ module BundleUpdateInteractive
|
|
|
21
23
|
@all_gems ||= withheld_gems.merge(updatable_gems)
|
|
22
24
|
end
|
|
23
25
|
|
|
24
|
-
def scan_for_vulnerabilities!
|
|
26
|
+
def scan_for_vulnerabilities!
|
|
25
27
|
return false if all_gems.empty?
|
|
26
|
-
return false unless try_load_bundler_audit
|
|
27
28
|
|
|
28
29
|
Bundler::Audit::Database.update!(quiet: true)
|
|
29
30
|
audit_report = Bundler::Audit::Scanner.new.report
|
|
@@ -39,15 +40,5 @@ module BundleUpdateInteractive
|
|
|
39
40
|
private
|
|
40
41
|
|
|
41
42
|
attr_reader :current_lockfile
|
|
42
|
-
|
|
43
|
-
# TODO: Remove this workaround once Bundler 4 compatible version of bundler-audit is released
|
|
44
|
-
def try_load_bundler_audit
|
|
45
|
-
require "bundler/audit"
|
|
46
|
-
require "bundler/audit/scanner"
|
|
47
|
-
true
|
|
48
|
-
rescue LoadError
|
|
49
|
-
puts "Failed to load bundler-audit. Skipping vulnerabilities scan."
|
|
50
|
-
false
|
|
51
|
-
end
|
|
52
43
|
end
|
|
53
44
|
end
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: bundle_update_interactive
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.13.
|
|
4
|
+
version: 0.13.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Matt Brictson
|
|
@@ -186,7 +186,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
186
186
|
- !ruby/object:Gem::Version
|
|
187
187
|
version: '0'
|
|
188
188
|
requirements: []
|
|
189
|
-
rubygems_version:
|
|
189
|
+
rubygems_version: 4.0.3
|
|
190
190
|
specification_version: 4
|
|
191
191
|
summary: Adds an update-interactive command to Bundler
|
|
192
192
|
test_files: []
|