capistrano-bundle_audit 0.1.0 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 6ea145f68dcfb596d6495508735045ecfe748e4e
-  data.tar.gz: c1654a55b6549127642a85d61a3fa727e414bdf0
+SHA256:
+  metadata.gz: 27cd72db6ebf66b373872b72a8e87362d3d8674abded82b96fef73185eebdf16
+  data.tar.gz: c432b42cac41cf4742b9ac0bad2a50da7cf13f868b42655efd73f674047643b9
 SHA512:
-  metadata.gz: 1eab1bf796254f443ed10da984355c6947a3ce1fd4807f0c87a353c9b3cd0bd5be4f20b8629427cb8f4f346d6d40de1f794efc6b05d8d61dd5cb37baf68173dc
-  data.tar.gz: ab18c1f831df47f7a3fc33ef27e7436bbc74ee3866940d450ed408e8f4644bd95b9290b4469da32e690bdd8f9531157d823f8a0fd5e15ca6e8596f95f0ad9309
+  metadata.gz: 61ca67bf6418d1df1120eb1c51626506bf461931becab3e280f59169dd8b84fd49aa2e2fc27808ef0e64133120da371334e6b6f5a36e5f6165f4ae8878161b9b
+  data.tar.gz: 8095065fab426243284fabc367e481382651eb307d60f087c01f1be96afc019274f1bc99af6401ba5266b660c8d83fed9b2e5733895771770ab7f4e3de42cd5e

data/capistrano-bundle_audit.gemspec

@@ -18,8 +18,9 @@ Gem::Specification.new do |spec|
   spec.require_paths = ["lib"]
 
   spec.add_dependency "capistrano", "~> 3.0"
+  spec.add_dependency 'capistrano-bundler', ">= 1.4"
   spec.add_dependency "bundler-audit", "~> 0.5"
 
-  spec.add_development_dependency "bundler", "~> 1.6"
-  spec.add_development_dependency "rake", "~> 10.0"
+  spec.add_development_dependency "bundler", ">= 1.6"
+  spec.add_development_dependency "rake", ">= 10.0"
 end

data/lib/capistrano/bundle_audit/version.rb

@@ -1,5 +1,5 @@
 module Capistrano
   module BundleAudit
-    VERSION = "0.1.0"
+    VERSION = "0.4.0"
   end
 end

data/lib/capistrano/tasks/bundle_audit.rake

@@ -1,3 +1,4 @@
+require 'bundler'
 require 'shellwords'
 require 'tmpdir'
 
@@ -5,7 +6,8 @@ namespace :deploy do
   namespace :check do
     desc "Audit the Gemfile.lock for known vulnerabilities"
     task :bundle_audit do
-      on roles(:app), in: :sequence do |host|
+
+      on primary(:app), in: :sequence do |host|
 
         # Download the relevant files and run bundle-audit on them locally
         Dir.mktmpdir do |dir|
@@ -22,7 +24,7 @@ namespace :deploy do
               # bundle-audit includes failures for both gem vulnerabilities
               # and insecure gem sources, and offers no way to distinguish those cases.
               # unfortunately, we only want to fail when vulnerable gems are required.
-              # This should only fail if there is a bundle-audit output AND it has 
+              # This should only fail if there is a bundle-audit output AND it has
               # a solution available to upgrade. If no solution is available deploy
               # will still be allowed.
               if bundle_audit_output =~ /Solution: upgrade to/
@@ -39,7 +41,7 @@ namespace :deploy do
     end
   end
 
-  after 'deploy:updating', 'deploy:check:bundle_audit' unless ENV['SKIP_BUNDLE_AUDIT']
+  after 'bundler:install', 'deploy:check:bundle_audit' unless ENV['SKIP_BUNDLE_AUDIT']
 end
 
 namespace :load do

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-bundle_audit
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.4.0
 platform: ruby
 authors:
 - Chris Beer
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2016-06-23 00:00:00.000000000 Z
+date: 2021-03-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: capistrano
@@ -24,6 +24,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.0'
+- !ruby/object:Gem::Dependency
+  name: capistrano-bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.4'
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -42,31 +56,31 @@ dependencies:
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '1.6'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '10.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '10.0'
-description: 
+description:
 email:
 - cabeer@stanford.edu
 executables: []
@@ -86,7 +100,7 @@ homepage: ''
 licenses:
 - Apache 2
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -101,9 +115,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.6.4
-signing_key: 
+rubygems_version: 3.2.3
+signing_key:
 specification_version: 4
 summary: Audit a project's gem dependencies before deployment
 test_files: []