bundler-patch 0.6.0 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 11622ac1ecc12f9b1357768a9d8548fa5b9d54fd
-  data.tar.gz: 9f824a7f9b6fe2c3478700d24281ef5006ce2102
+  metadata.gz: d81e3f4667e6cb684ba7caf5ff5ab7778712964e
+  data.tar.gz: f54482f58a5e12f47b740a9bc4dfe0992daa49ca
 SHA512:
-  metadata.gz: 272b7fef46e02020fb40ea6888501c704aaf0e93f428505d43f8b512829b0e383efef0a2e1f6aec6a08f972ee80fa826df6059cb137a3bfbe1a2524bc758e661
-  data.tar.gz: b71751b264518c672f6fde631f7becc3307874a9ae547437849015438d8842b74cb4548fb85f359ef3d4d1c524e1607749f88e6dd4f80f94b76f7b76f282c6d9
+  metadata.gz: 419579e3bbbe1653877d8fe227995bdac95208141804eea933171108851ae317df0d4c5f2a5defbe82aff46342ddb10954c3330f543e0f9e787a805aac37f127
+  data.tar.gz: 85f1d8f4b1d2b7cb316a62efb85f84fcf041552db77c97ee15c5adecb967514f9470c660c0c9bf2f76158639236ecb1d1ee36f731427abcf8920dff11b0d4dad

data/README.md

@@ -5,9 +5,11 @@
 ## Goals
 
 - Update the Gemfile, .ruby-version and other files to patch an app according to `ruby-advisory-db` content.
-- Don't upgrade past the minimum gem version required.
+- Provide conservative update of select or all gems. Conservative meaning to the latest release (default) or minor (optional) version.
+- Don't security patch past the minimum gem version required. (This may change).
 - Minimal munging to existing version spec.
 - Support a database of custom advisories for internal gems.
+- Provide reasonable support for keeping a large number of apps and services up-to-date as automatically as possible.
 
 ## Installation
 
@@ -107,6 +109,16 @@ the downloading the full dependency data from remote sources.
 
 ## Development
 
+### Status
+
+0.x versions are subject to breaking changes, there's a fair amount of experimenting going on and some future plans to
+not only revisit the command names but also investigate making this a proper Bundler plugin.
+
+We'd love to get real world scenarios where things don't go as planned to help flesh out varying details of what many
+believe a conservative update should be.
+
+### How To
+
 After checking out the repo, run `bin/setup` to install dependencies. Then, run `rake spec` to run the tests. You can
 also run `bin/console` for an interactive prompt that will allow you to experiment.
 
@@ -122,14 +134,3 @@ Bug reports and pull requests are welcome on GitHub at https://github.com/living
 ## License
 
 The gem is available as open source under the terms of the [MIT License](http://opensource.org/licenses/MIT).
-
-
-## Misc
-
-None of these do what we need, but may have some code doing some similar work in places.
-
-- http://www.rubydoc.info/gems/bundler-auto-update/0.1.0 (runs tests after each gem upgrade)
-- http://www.rubydoc.info/gems/bundler-updater/0.0.3 (interactive prompt for what's available to upgrade to)
-- https://github.com/rosylilly/bundler-add (outputs Gemfile line for adding a gem)
-
-

data/lib/bundler/patch/scanner.rb

@@ -20,9 +20,7 @@ module Bundler::Patch
         puts # extra line to separate from advisory db update text
         puts 'Detected vulnerabilities:'
         puts '-------------------------'
-        gem_patches.each do |gp|
-          puts "Need to update #{gp.gem_name}: #{gp.old_version} => #{gp.new_version}" # TODO: Bundler.ui
-        end
+        puts gem_patches.map(&:to_s).uniq.sort.join("\n")
       end
     end
 

data/lib/bundler/patch/version.rb

@@ -1,5 +1,5 @@
 module Bundler
   module Patch
-    VERSION = '0.6.0'
+    VERSION = '0.6.1'
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: bundler-patch
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.6.1
 platform: ruby
 authors:
 - chrismo