bundler-audit-fix 0.1.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 01d9c0fdba65b4b5e1347551f5a422354d3faca7ad7503b9660afb00f14b0974
-  data.tar.gz: 5e37e51063008125a94d552a733b0158c469d82513eba81a0ac6760e279e7bbf
+  metadata.gz: 2c681b15c5f4aab7669a41362ea73975636bbb6c1073184f30ea73863bd514ee
+  data.tar.gz: 7a79b41ebdbd0a88225d1030317442166d89802721fbaebc0e92cc30e0e1bbd1
 SHA512:
-  metadata.gz: 5043e0eeeba8507da23840984bf6e0c327386c14da1bdae1ee93c6e3e03b883c6125d60e9a4dd44811d01654e0fbde8ff1b54d6f49354ebff25b3cf7f2ad6ee1
-  data.tar.gz: 22cb90f36ea55de0c139d1f0611f865cf8b6d3eaaf7edfbd853d3a257b733564539cbeadc7c41532f764108108471a28de7461509795ec48d89df58071219594
+  metadata.gz: 67a0d7c19635e68877b0dd79f11b384e646c8f8cf8c305f72def4858669342ca9c4c16b814b980633965d451a6592e821ce393770b1585ebfcf6f8bbe479784b
+  data.tar.gz: d0842d3f843d25a790e3090f0b284790e5c0df54abeb51cc0e2c00acde443f35064d7451498b17b0e034eeb350fd9dc5877a89c9b3ea478ded17bf22b7b7898b

data/CHANGELOG.md

@@ -1,3 +1,23 @@
+# 0.2.1 - 2022-01-30
+
+- Fix bug for 0.2.0 (revert)
+
+# 0.2.0 - 2022-01-29
+
+- Exit with non-zero status code when `bundle-audit-fix` has no effect for dependency reasons.
+
+# 0.1.3 - 2021-12-23
+
+- The `bundle-audit-fix` command is now executable without `bundle exec` prefix.
+
+# 0.1.2 - 2021-12-23
+
+- Fix CLI is not working
+
+# 0.1.1
+
+(Unreleased)
+
 # 0.1.0 - 2021-12-20
 
 - Initial release

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    bundler-audit-fix (0.1.0)
+    bundler-audit-fix (0.2.1)
       bundler (>= 1.2.0, < 3)
       bundler-audit (~> 0.9.0)
       thor (~> 1.0)
@@ -51,7 +51,7 @@ GEM
     rubocop-ast (1.15.0)
       parser (>= 3.0.1.1)
     ruby-progressbar (1.11.0)
-    thor (1.1.0)
+    thor (1.2.1)
     unicode-display_width (2.1.0)
 
 PLATFORMS
@@ -65,4 +65,4 @@ DEPENDENCIES
   rubocop (~> 1.7)
 
 BUNDLED WITH
-   2.2.18
+   2.2.22

data/README.md

@@ -1,5 +1,7 @@
 # Bundler::Audit::Fix
 
+[![Gem Version](https://badge.fury.io/rb/bundler-audit-fix.svg)](https://badge.fury.io/rb/bundler-audit-fix)
+
 Automatically apply patched version of gems audited by [rubysec/bunder-audit](https://github.com/rubysec/bundler-audit).
 
 ## Installation
@@ -26,7 +28,7 @@ $ bundle-audit-fix update [dir]
 
 ### .bundler-audit.yml
 
-In addition to the original configuration, it supports `replacement` block.  If a gem that is related to a fixed version and not directly listed in the Gemfile (i.g. Rails family, etc.) needs to be updated, bundle-audit-fix will replace according to the specified like below.
+In addition to the original configuration, it supports `replacement` block. If a gem that is related to a fixed and same version and not directly listed in the Gemfile (e.g. Rails family) needs to be updated, bundle-audit-fix will replace according to the specified like below.
 
 ```yml
 replacement:

data/lib/bundler/audit/fix/cli.rb

@@ -18,6 +18,8 @@
 #
 
 require 'thor'
+require 'bundler'
+require 'bundler/cli'
 require 'bundler/cli/update'
 require 'bundler/audit/cli'
 require 'bundler/audit/database'
@@ -53,6 +55,12 @@ module Bundler
             Bundler::Audit::CLI.new.invoke(:update, options[:database])
           end
 
+          gemfile      = options[:gemfile_lock].sub(/\.lock$/, '')
+          gemfile_path = File.join(dir, gemfile)
+
+          # for https://github.com/rubygems/bundler/blob/35be6d9a603084f719fec4f4028c18860def07f6/lib/bundler/shared_helpers.rb#L229
+          ENV['BUNDLE_GEMFILE'] = gemfile_path
+
           database = Database.new(options[:database])
           begin
             scanner = Scanner.new(dir, options[:gemfile_lock], database, options[:config])
@@ -67,9 +75,6 @@ module Bundler
             patcher = Patcher.new(dir, report, options[:gemfile_lock], options[:config])
             gems_to_update = patcher.patch
 
-            gemfile      = options[:gemfile_lock].sub(/\.lock$/, '')
-            gemfile_path = File.join(dir, gemfile)
-
             Bundler::CLI::Update.new({ gemfile: gemfile_path }, gems_to_update).run
           rescue Bundler::GemfileNotFound, Bundler::GemfileLockNotFound => e
             say e.message, :red

data/lib/bundler/audit/fix/patcher.rb

@@ -71,7 +71,7 @@ module Bundler
         #
         def patch
           patterns, gems_to_update = build_patterns
-          gemfile = File.read(gemfile_path)
+          gemfile = File.read(gemfile_path, encoding: 'utf-8')
 
           patterns.each do |pattern, replace_with|
             gemfile = gemfile.gsub(pattern, replace_with)

data/lib/bundler/audit/fix/version.rb

@@ -20,7 +20,7 @@
 module Bundler
   module Audit
     module Fix
-      VERSION = '0.1.0'
+      VERSION = '0.2.1'
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: bundler-audit-fix
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Nobuo Takizawa
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-12-19 00:00:00.000000000 Z
+date: 2022-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -106,7 +106,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key:
 specification_version: 4
 summary: Automatic apply security update inspected by bundler-audit.