danger-gem_changes 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b90abf7d1a201531f08f7af72190e138cf14c5f4f47dd238145fa9ba47b8f70e
+  data.tar.gz: e2621d8f5b4ab6fd712c0b664e93922157f213f5260d9803faf85bec77056a79
+SHA512:
+  metadata.gz: 5cad6310e609b0fb0278ac24b8e03b7057481d7799acdf33c5d1cac77e0270089b660625549bc7f51ee08a72ecb257a74b69885233dc2959470d76a9080c6e17
+  data.tar.gz: 92a1e2d83779561eafa148d4eab18c2ae618750a178e50a5a4b0c8d6726b63906c64a47d385bffe0e5e11a1d5dc000faa7473a64979abec90d4b0f2a25108038

data/.gitignore

@@ -0,0 +1,4 @@
+.DS_Store
+pkg
+.idea/
+.yardoc

data/.rubocop.yml

@@ -0,0 +1,153 @@
+# Defaults can be found here: https://github.com/bbatsov/rubocop/blob/master/config/default.yml
+
+# If you don't like these settings, just delete this file :)
+
+require:
+  - rubocop-rake
+  - rubocop-rspec
+
+AllCops:
+  TargetRubyVersion: 2.7
+  NewCops: enable
+
+Style/StringLiterals:
+  EnforcedStyle: double_quotes
+  Enabled: true
+
+# kind_of? is a good way to check a type
+Style/ClassCheck:
+  EnforcedStyle: kind_of?
+
+# specs sometimes have useless assignments, which is fine
+Lint/UselessAssignment:
+  Exclude:
+    - '**/spec/**/*'
+
+# We could potentially enable the 2 below:
+Layout/FirstHashElementIndentation:
+  Enabled: false
+
+Layout/HashAlignment:
+  Enabled: false
+
+# HoundCI doesn't like this rule
+Layout/DotPosition:
+  Enabled: false
+
+# We allow !! as it's an easy way to convert ot boolean
+Style/DoubleNegation:
+  Enabled: false
+
+# Cop supports --auto-correct.
+Lint/UnusedBlockArgument:
+  Enabled: false
+
+# We want to allow class Fastlane::Class
+Style/ClassAndModuleChildren:
+  Enabled: false
+
+Metrics/AbcSize:
+  Max: 60
+
+# The %w might be confusing for new users
+Style/WordArray:
+  MinSize: 19
+
+# raise and fail are both okay
+Style/SignalException:
+  Enabled: false
+
+# Better too much 'return' than one missing
+Style/RedundantReturn:
+  Enabled: false
+
+# Having if in the same line might not always be good
+Style/IfUnlessModifier:
+  Enabled: false
+
+# and and or is okay
+Style/AndOr:
+  Enabled: false
+
+# Configuration parameters: CountComments.
+Metrics/ClassLength:
+  Max: 350
+
+Metrics/CyclomaticComplexity:
+  Max: 17
+
+# Configuration parameters: AllowURI, URISchemes.
+Layout/LineLength:
+  Max: 370
+
+# Configuration parameters: CountKeywordArgs.
+Metrics/ParameterLists:
+  Max: 10
+
+Metrics/PerceivedComplexity:
+  Max: 18
+
+# Sometimes it's easier to read without guards
+Style/GuardClause:
+  Enabled: false
+
+# something = if something_else
+# that's confusing
+Style/ConditionalAssignment:
+  Enabled: false
+
+# Better to have too much self than missing a self
+Style/RedundantSelf:
+  Enabled: false
+
+Metrics/MethodLength:
+  Max: 60
+
+# We're not there yet
+Style/Documentation:
+  Enabled: false
+
+# Adds complexity
+Style/IfInsideElse:
+  Enabled: false
+
+# danger specific
+
+Style/BlockComments:
+  Enabled: false
+
+Layout/MultilineMethodCallIndentation:
+  EnforcedStyle: indented
+
+# FIXME: 25
+Metrics/BlockLength:
+  Max: 345
+  Exclude:
+    - "**/*_spec.rb"
+
+Style/MixinGrouping:
+  Enabled: false
+
+Naming/FileName:
+  Enabled: false
+
+Layout/HeredocIndentation:
+  Enabled: false
+
+Style/SpecialGlobalVars:
+  Enabled: false
+
+Style/PercentLiteralDelimiters:
+  PreferredDelimiters:
+    "%":  ()
+    "%i": ()
+    "%q": ()
+    "%Q": ()
+    "%r": "{}"
+    "%s": ()
+    "%w": ()
+    "%W": ()
+    "%x": ()
+
+Security/YAMLLoad:
+  Enabled: false

data/.travis.yml

@@ -0,0 +1,10 @@
+language: ruby
+cache:
+  directories:
+    - bundle
+
+rvm:
+  - 2.7
+
+script:
+    - bundle exec rake spec

data/Gemfile

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+source "https://rubygems.org"
+
+# Specify your gem's dependencies in danger-gems.gemspec
+gemspec
+
+# General ruby development
+gem "bundler"
+gem "rake"
+
+# Testing support
+gem "rspec"
+
+# Linting code and docs
+gem "rubocop"
+gem "rubocop-rake"
+gem "rubocop-rspec"
+gem "yard"
+
+# Makes testing easy via `bundle exec guard`
+gem "guard"
+gem "guard-rspec"
+
+# If you want to work on older builds of ruby
+gem "listen"
+
+gem "debug"

data/Gemfile.lock

@@ -0,0 +1,200 @@
+PATH
+  remote: .
+  specs:
+    danger-gem_changes (0.0.1)
+      danger-plugin-api (~> 1.0)
+      nokogiri (~> 1.0)
+      open-uri (~> 0.4)
+
+GEM
+  remote: https://rubygems.org/
+  specs:
+    addressable (2.8.6)
+      public_suffix (>= 2.0.2, < 6.0)
+    ast (2.4.2)
+    base64 (0.2.0)
+    claide (1.1.0)
+    claide-plugins (0.9.2)
+      cork
+      nap
+      open4 (~> 1.3)
+    coderay (1.1.3)
+    colored2 (3.1.2)
+    cork (0.3.0)
+      colored2 (~> 3.1)
+    danger (9.4.3)
+      claide (~> 1.0)
+      claide-plugins (>= 0.9.2)
+      colored2 (~> 3.1)
+      cork (~> 0.1)
+      faraday (>= 0.9.0, < 3.0)
+      faraday-http-cache (~> 2.0)
+      git (~> 1.13)
+      kramdown (~> 2.3)
+      kramdown-parser-gfm (~> 1.0)
+      no_proxy_fix
+      octokit (>= 4.0)
+      terminal-table (>= 1, < 4)
+    danger-plugin-api (1.0.0)
+      danger (> 2.0)
+    date (3.3.4)
+    debug (1.9.2)
+      irb (~> 1.10)
+      reline (>= 0.3.8)
+    diff-lcs (1.5.1)
+    faraday (2.9.0)
+      faraday-net_http (>= 2.0, < 3.2)
+    faraday-http-cache (2.5.1)
+      faraday (>= 0.8)
+    faraday-net_http (3.1.0)
+      net-http
+    ffi (1.16.3)
+    formatador (1.1.0)
+    git (1.19.1)
+      addressable (~> 2.8)
+      rchardet (~> 1.8)
+    guard (2.18.1)
+      formatador (>= 0.2.4)
+      listen (>= 2.7, < 4.0)
+      lumberjack (>= 1.0.12, < 2.0)
+      nenv (~> 0.1)
+      notiffany (~> 0.0)
+      pry (>= 0.13.0)
+      shellany (~> 0.0)
+      thor (>= 0.18.1)
+    guard-compat (1.2.1)
+    guard-rspec (4.7.3)
+      guard (~> 2.1)
+      guard-compat (~> 1.1)
+      rspec (>= 2.99.0, < 4.0)
+    io-console (0.7.2)
+    irb (1.13.1)
+      rdoc (>= 4.0.0)
+      reline (>= 0.4.2)
+    json (2.7.2)
+    kramdown (2.4.0)
+      rexml
+    kramdown-parser-gfm (1.1.0)
+      kramdown (~> 2.0)
+    language_server-protocol (3.17.0.3)
+    listen (3.9.0)
+      rb-fsevent (~> 0.10, >= 0.10.3)
+      rb-inotify (~> 0.9, >= 0.9.10)
+    lumberjack (1.2.10)
+    method_source (1.1.0)
+    nap (1.1.0)
+    nenv (0.3.0)
+    net-http (0.4.1)
+      uri
+    no_proxy_fix (0.1.2)
+    nokogiri (1.16.4-arm64-darwin)
+      racc (~> 1.4)
+    notiffany (0.1.3)
+      nenv (~> 0.1)
+      shellany (~> 0.0)
+    octokit (8.1.0)
+      base64
+      faraday (>= 1, < 3)
+      sawyer (~> 0.9)
+    open-uri (0.4.1)
+      stringio
+      time
+      uri
+    open4 (1.3.4)
+    parallel (1.24.0)
+    parser (3.3.1.0)
+      ast (~> 2.4.1)
+      racc
+    pry (0.14.2)
+      coderay (~> 1.1)
+      method_source (~> 1.0)
+    psych (5.1.2)
+      stringio
+    public_suffix (5.0.5)
+    racc (1.7.3)
+    rainbow (3.1.1)
+    rake (13.2.1)
+    rb-fsevent (0.11.2)
+    rb-inotify (0.10.1)
+      ffi (~> 1.0)
+    rchardet (1.8.0)
+    rdoc (6.6.3.1)
+      psych (>= 4.0.0)
+    regexp_parser (2.9.0)
+    reline (0.5.6)
+      io-console (~> 0.5)
+    rexml (3.2.6)
+    rspec (3.13.0)
+      rspec-core (~> 3.13.0)
+      rspec-expectations (~> 3.13.0)
+      rspec-mocks (~> 3.13.0)
+    rspec-core (3.13.0)
+      rspec-support (~> 3.13.0)
+    rspec-expectations (3.13.0)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.13.0)
+    rspec-mocks (3.13.1)
+      diff-lcs (>= 1.2.0, < 2.0)
+      rspec-support (~> 3.13.0)
+    rspec-support (3.13.1)
+    rubocop (1.63.5)
+      json (~> 2.3)
+      language_server-protocol (>= 3.17.0)
+      parallel (~> 1.10)
+      parser (>= 3.3.0.2)
+      rainbow (>= 2.2.2, < 4.0)
+      regexp_parser (>= 1.8, < 3.0)
+      rexml (>= 3.2.5, < 4.0)
+      rubocop-ast (>= 1.31.1, < 2.0)
+      ruby-progressbar (~> 1.7)
+      unicode-display_width (>= 2.4.0, < 3.0)
+    rubocop-ast (1.31.3)
+      parser (>= 3.3.1.0)
+    rubocop-capybara (2.20.0)
+      rubocop (~> 1.41)
+    rubocop-factory_bot (2.25.1)
+      rubocop (~> 1.41)
+    rubocop-rake (0.6.0)
+      rubocop (~> 1.0)
+    rubocop-rspec (2.29.2)
+      rubocop (~> 1.40)
+      rubocop-capybara (~> 2.17)
+      rubocop-factory_bot (~> 2.22)
+      rubocop-rspec_rails (~> 2.28)
+    rubocop-rspec_rails (2.28.3)
+      rubocop (~> 1.40)
+    ruby-progressbar (1.13.0)
+    sawyer (0.9.2)
+      addressable (>= 2.3.5)
+      faraday (>= 0.17.3, < 3)
+    shellany (0.0.1)
+    stringio (3.1.0)
+    terminal-table (3.0.2)
+      unicode-display_width (>= 1.1.1, < 3)
+    thor (1.3.1)
+    time (0.3.0)
+      date
+    unicode-display_width (2.5.0)
+    uri (0.13.0)
+    yard (0.9.36)
+
+PLATFORMS
+  arm64-darwin-22
+  ruby
+
+DEPENDENCIES
+  bundler
+  danger-gem_changes!
+  debug
+  guard
+  guard-rspec
+  listen
+  rake
+  rspec
+  rubocop
+  rubocop-rake
+  rubocop-rspec
+  yard
+
+BUNDLED WITH
+   2.5.6

data/Guardfile

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+# A guardfile for making Danger Plugins
+# For more info see https://github.com/guard/guard#readme
+
+# To run, use `bundle exec guard`.
+
+guard :rspec, cmd: "bundle exec rspec" do
+  require "guard/rspec/dsl"
+  dsl = Guard::RSpec::Dsl.new(self)
+
+  # RSpec files
+  rspec = dsl.rspec
+  watch(rspec.spec_helper) { rspec.spec_dir }
+  watch(rspec.spec_support) { rspec.spec_dir }
+  watch(rspec.spec_files)
+
+  # Ruby files
+  ruby = dsl.ruby
+  dsl.watch_spec_files_for(ruby.lib_files)
+end

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2024 John DeSilva <john@aesthetikx.info>
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,20 @@
+# danger-gem_changes
+
+A description of danger-gem_changes.
+
+## Installation
+
+    $ gem install danger-gem_changes
+
+## Usage
+
+    Methods and attributes from this plugin are available in
+    your `Dangerfile` under the `gem_changes` namespace.
+
+## Development
+
+1. Clone this repo
+2. Run `bundle install` to setup dependencies.
+3. Run `bundle exec rake spec` to run the tests.
+4. Use `bundle exec guard` to automatically have tests run as you make changes.
+5. Make your changes.

data/Rakefile

@@ -0,0 +1,23 @@
+# frozen_string_literal: true
+
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+require "rubocop/rake_task"
+
+RSpec::Core::RakeTask.new(:specs)
+
+task :default do
+  Rake::Task["specs"].invoke
+  Rake::Task["rubocop"].invoke
+  Rake::Task["spec_docs"].invoke
+end
+
+desc "Run RuboCop on the lib/specs directory"
+RuboCop::RakeTask.new(:rubocop) do |task|
+  task.patterns = ["lib/**/*.rb", "spec/**/*.rb"]
+end
+
+desc "Ensure that the plugin passes `danger plugins lint`"
+task :spec_docs do
+  sh "bundle exec danger plugins lint"
+end

data/danger-gem_changes.gemspec

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+lib = File.expand_path("lib", __dir__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require "gem_changes/version"
+
+Gem::Specification.new do |spec|
+  spec.name          = "danger-gem_changes"
+  spec.version       = GemChanges::VERSION
+  spec.authors       = ["John DeSilva"]
+  spec.email         = ["john@aesthetikx.info"]
+  spec.description   = "A danger plugin for helping review gem depencency changes."
+  spec.summary       = spec.description
+  spec.homepage      = "https://github.com/Aesthetikx/danger-gem_changes"
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files`.split($/)
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.require_paths = ["lib"]
+
+  spec.metadata["rubygems_mfa_required"] = "true"
+  spec.required_ruby_version = ">= 2.7"
+  spec.add_runtime_dependency "danger-plugin-api", "~> 1.0"
+  spec.add_runtime_dependency "nokogiri", "~> 1.0"
+  spec.add_runtime_dependency "open-uri", "~> 0.4"
+end

data/lib/danger_plugin.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+
+require "gem_changes"
+
+module Danger
+  # This is your plugin class. Any attributes or methods you expose here will
+  # be available from within your Dangerfile.
+  #
+  # To be published on the Danger plugins site, you will need to have
+  # the public interface documented. Danger uses [YARD](http://yardoc.org/)
+  # for generating documentation from your plugin source, and you can verify
+  # by running `danger plugins lint` or `bundle exec rake spec`.
+  #
+  # You should replace these comments with a public description of your library.
+  #
+  # @example Ensure people are well warned about merging on Mondays
+  #
+  #          my_plugin.warn_on_mondays
+  #
+  # @see  Aesthetikx/danger-gems
+  # @tags monday, weekends, time, rattata
+  #
+  class DangerGemChanges < Plugin
+    def summarize_changes(changes: self.changes, title: "Gemfile.lock Changes")
+      return if changes.empty?
+
+      string = "### #{title}\n"
+
+      string += GemChanges::SummaryTable.new(changes: changes).markdown
+
+      markdown string
+    end
+
+    def changes
+      GemChanges::Gemfile.changes(git: git)
+    end
+
+    def additions
+      changes.select(&:addition?)
+    end
+
+    def removals
+      changes.select(&:removal?)
+    end
+
+    def upgrades
+      changes.select(&:upgrade?)
+    end
+
+    def downgrades
+      changes.select(&:downgrade?)
+    end
+  end
+end

data/lib/gem_changes/change.rb

@@ -0,0 +1,39 @@
+# frozen_string_literal: true
+
+module GemChanges
+  Change = Struct.new(:gem, :from, :to, keyword_init: true) do
+    def initialize(gem:, from:, to:)
+      super(gem: gem, from: Version(from), to: Version(to))
+    end
+
+    def change?
+      to and from
+    end
+
+    def addition?
+      from.nil?
+    end
+
+    def removal?
+      to.nil?
+    end
+
+    def upgrade?
+      change? and to > from
+    end
+
+    def downgrade?
+      change? and to < from
+    end
+
+    private
+
+    def Version(something)
+      case something
+      when nil then nil
+      when ::Gem::Version then something
+      else ::Gem::Version.new(something)
+      end
+    end
+  end
+end

data/lib/gem_changes/gem.rb

@@ -0,0 +1,45 @@
+# frozen_string_literal: true
+
+require "nokogiri"
+require "open-uri"
+
+module GemChanges
+  Gem = Struct.new(:name, keyword_init: true) do
+    def rubygems_uri
+      "https://rubygems.org/gems/#{name}"
+    end
+
+    def changelog_uri
+      rubygems_document.css("a#changelog").first["href"]
+    rescue StandardError
+      nil
+    end
+
+    def source_code_uri
+      github_span = rubygems_document.at_css("span.github-btn")
+
+      if github_span
+        user = github_span.attr("data-user")
+        repo = github_span.attr("data-repo")
+        return "https://github.com/#{user}/#{repo}"
+      end
+
+      code = rubygems_document.at_css("a#code")&.attr("href")
+      home = rubygems_document.at_css("a#home")&.attr("href")
+
+      [code, home].compact.first
+    rescue StandardError
+      nil
+    end
+
+    private
+
+    def rubygems_document
+      @rubygems_document ||= Nokogiri::HTML(rubygems_html)
+    end
+
+    def rubygems_html
+      OpenURI.open_uri(rubygems_uri).read
+    end
+  end
+end

data/lib/gem_changes/gemfile.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+module GemChanges
+  module Gemfile
+    REMOVAL_REGEX = /^-    ([^ ]*) \((.*)\)/.freeze
+    ADDITION_REGEX = /^\+    ([^ ]*) \((.*)\)/.freeze
+
+    module_function def changes(git:)
+      diff = git.diff_for_file("Gemfile.lock")
+
+      return [] if diff.nil?
+
+      added = {}
+
+      diff.patch.scan(ADDITION_REGEX).each do |match|
+        added[match[0]] = match[1]
+      end
+
+      removed = {}
+
+      diff.patch.scan(REMOVAL_REGEX).each do |match|
+        removed[match[0]] = match[1]
+      end
+
+      all_gems = added.keys | removed.keys
+
+      all_gems.map do |gem_name|
+        gem = Gem.new(name: gem_name)
+
+        Change.new(gem: gem, from: removed[gem_name], to: added[gem_name])
+      end
+    end
+  end
+end

data/lib/gem_changes/summary_table.rb

@@ -0,0 +1,95 @@
+# frozen_string_literal: true
+
+module GemChanges
+  class SummaryTable
+    attr_reader :changes
+
+    def initialize(changes:)
+      @changes = changes
+    end
+
+    def markdown
+      string = ""
+
+      string += "| Gem | Source | Changelog | Change |\n"
+      string += "| --- | ------ | --------- | ------ |\n"
+
+      rows = changes.map { |change| Row.new(change: change) }
+
+      string += rows.map(&:markdown).join
+
+      string
+    end
+
+    class Row
+      attr_reader :gem, :change
+
+      def initialize(change:)
+        @change = change
+        @gem = change.gem
+      end
+
+      def markdown
+        string = "| "
+
+        string += [
+          rubygems_link,
+          source_link,
+          changelog_link,
+          change_link
+        ].join(" | ")
+
+        string += " |\n"
+
+        string
+      end
+
+      def rubygems_link
+        "[#{gem.name}](#{gem.rubygems_uri})"
+      end
+
+      def source_link
+        "[Source](#{gem.source_code_uri})"
+      end
+
+      def changelog_link
+        "[Changelog](#{gem.changelog_uri})"
+      end
+
+      def change_link
+        text = change_text
+        link = compare_uri
+
+        if link
+          "[#{text}](#{link})"
+        else
+          text
+        end
+      end
+
+      private
+
+      def change_text
+        if change.addition?
+          "Added at #{change.to}"
+        elsif change.removal?
+          "Removed at #{change.from}"
+        elsif change.upgrade?
+          "v#{change.from} -> v#{change.to}"
+        elsif change.downgrade?
+          "v#{change.to} <- v#{change.from}"
+        else
+          fail "Unknown change type"
+        end
+      end
+
+      def compare_uri
+        return nil unless change.change?
+
+        from, to = [change.from, change.to].sort
+
+        "#{gem.source_code_uri}/compare/v#{from}...v#{to}"
+      end
+    end
+  end
+end

data/lib/gem_changes/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module GemChanges
+  VERSION = "0.0.1"
+end

data/lib/gem_changes.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+require "gem_changes/change"
+require "gem_changes/gem"
+require "gem_changes/gemfile"
+require "gem_changes/summary_table"
+require "gem_changes/version"

data/spec/fixtures/Gemfile.lock.patch

@@ -0,0 +1,30 @@
+commit 7e4433828eb92cb8e8d6239bf9ab93e1c767e2e8
+Author: John DeSilva <desilvjo@umich.edu>
+Date:   Fri May 10 21:47:39 2024 -0400
+
+    Install rubocop-performance
+
+diff --git a/Gemfile.lock b/Gemfile.lock
+index eabec13..f4353d2 100644
+--- a/Gemfile.lock
++++ b/Gemfile.lock
+@@ -145,6 +145,9 @@ GEM
+       rubocop (~> 1.41)
+-    rubocop-factory_bot (2.25.1)
++    rubocop-factory_bot (2.25.0)
+       rubocop (~> 1.41)
++    rubocop-performance (1.21.0)
++      rubocop (>= 1.48.1, < 2.0)
++      rubocop-ast (>= 1.31.1, < 2.0)
+-    rubocop-rake (0.6.0)
++    rubocop-rake (0.6.1)
+       rubocop (~> 1.0)
+-    rubocop-rspec (2.29.2)
+@@ -181,6 +184,7 @@ DEPENDENCIES
+   rake
+   rspec
+   rubocop
++  rubocop-performance
+   rubocop-rake
+-  rubocop-rspec
+   yard

data/spec/gem_changes_spec.rb

@@ -0,0 +1,107 @@
+# frozen_string_literal: true
+
+require File.expand_path("spec_helper", __dir__)
+
+module Danger
+  describe Danger::DangerGemChanges do
+    it "is a plugin" do
+      expect(described_class.new(nil)).to be_a Danger::Plugin
+    end
+
+    describe "with Dangerfile" do
+      before do
+        @dangerfile = testing_dangerfile
+        @my_plugin = @dangerfile.gem_changes
+
+        modified_gemfile_lock = Git::Diff::DiffFile.new(
+          "base",
+          path: "Gemfile.lock",
+          patch: File.read("spec/fixtures/Gemfile.lock.patch")
+        )
+
+        allow(@dangerfile.git).to \
+          receive(:diff_for_file)
+          .with("Gemfile.lock")
+          .and_return(modified_gemfile_lock)
+      end
+
+      it "knows about changes" do
+        changes = @my_plugin.changes
+
+        expect(changes.count).to eq(4)
+      end
+
+      it "knows about additions" do
+        additions = @my_plugin.additions
+
+        expect(additions).to eq(
+          [
+            GemChanges::Change.new(
+              gem: GemChanges::Gem.new(name: "rubocop-performance"),
+              from: nil,
+              to: "1.21.0"
+            )
+          ]
+        )
+      end
+
+      it "knows about removals" do
+        removals = @my_plugin.removals
+
+        expect(removals).to eq(
+          [
+            GemChanges::Change.new(
+              gem: GemChanges::Gem.new(name: "rubocop-rspec"),
+              from: "2.29.2",
+              to: nil
+            )
+          ]
+        )
+      end
+
+      it "knows about upgrades" do
+        upgrades = @my_plugin.upgrades
+
+        expect(upgrades).to eq(
+          [
+            GemChanges::Change.new(
+              gem: GemChanges::Gem.new(name: "rubocop-rake"),
+              from: "0.6.0",
+              to: "0.6.1"
+            )
+          ]
+        )
+      end
+
+      it "knows about downgrades" do
+        downgrades = @my_plugin.downgrades
+
+        expect(downgrades).to eq(
+          [
+            GemChanges::Change.new(
+              gem: GemChanges::Gem.new(name: "rubocop-factory_bot"),
+              from: "2.25.1",
+              to: "2.25.0"
+            )
+          ]
+        )
+      end
+
+      it "can generate a markdown table" do
+        @my_plugin.summarize_changes
+
+        markdown = @dangerfile.status_report[:markdowns].last.message
+
+        expect(markdown).to eq(<<~MARKDOWN)
+          ### Gemfile.lock Changes
+          | Gem | Source | Changelog | Change |
+          | --- | ------ | --------- | ------ |
+          | [rubocop-factory_bot](https://rubygems.org/gems/rubocop-factory_bot) | [Source](https://github.com/rubocop/rubocop-factory_bot) | [Changelog](https://github.com/rubocop/rubocop-factory_bot/blob/master/CHANGELOG.md) | [v2.25.0 <- v2.25.1](https://github.com/rubocop/rubocop-factory_bot/compare/v2.25.0...v2.25.1) |
+          | [rubocop-performance](https://rubygems.org/gems/rubocop-performance) | [Source](https://github.com/rubocop/rubocop-performance/) | [Changelog](https://github.com/rubocop/rubocop-performance/blob/master/CHANGELOG.md) | Added at 1.21.0 |
+          | [rubocop-rake](https://rubygems.org/gems/rubocop-rake) | [Source](https://github.com/rubocop/rubocop-rake) | [Changelog](https://github.com/rubocop/rubocop-rake/blob/master/CHANGELOG.md) | [v0.6.0 -> v0.6.1](https://github.com/rubocop/rubocop-rake/compare/v0.6.0...v0.6.1) |
+          | [rubocop-rspec](https://rubygems.org/gems/rubocop-rspec) | [Source](https://github.com/rubocop/rubocop-rspec) | [Changelog](https://github.com/rubocop/rubocop-rspec/blob/master/CHANGELOG.md) | Removed at 2.29.2 |
+        MARKDOWN
+      end
+    end
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+
+require "pathname"
+ROOT = Pathname.new(File.expand_path("..", __dir__))
+$:.unshift("#{ROOT}lib".to_s)
+$:.unshift("#{ROOT}spec".to_s)
+
+require "bundler/setup"
+require "debug"
+
+require "rspec"
+require "danger"
+
+if `git remote -v` == ""
+  puts "You cannot run tests without setting a local git remote on this repo"
+  puts "It's a weird side-effect of Danger's internals."
+  exit(0)
+end
+
+# Use coloured output, it's the best.
+RSpec.configure do |config|
+  config.filter_gems_from_backtrace "bundler"
+  config.color = true
+  config.tty = true
+end
+
+require "danger_plugin"
+
+# These functions are a subset of https://github.com/danger/danger/blob/master/spec/spec_helper.rb
+# If you are expanding these files, see if it's already been done ^.
+
+# A silent version of the user interface,
+# it comes with an extra function `.string` which will
+# strip all ANSI colours from the string.
+
+# rubocop:disable Lint/NestedMethodDefinition
+def testing_ui
+  @output = StringIO.new
+  def @output.winsize
+    [20, 9999]
+  end
+
+  cork = Cork::Board.new(out: @output)
+  def cork.string
+    out.string.gsub(/\e\[([;\d]+)?m/, "")
+  end
+  cork
+end
+# rubocop:enable Lint/NestedMethodDefinition
+
+# Example environment (ENV) that would come from
+# running a PR on TravisCI
+def testing_env
+  {
+    "HAS_JOSH_K_SEAL_OF_APPROVAL" => "true",
+    "TRAVIS_PULL_REQUEST" => "800",
+    "TRAVIS_REPO_SLUG" => "artsy/eigen",
+    "TRAVIS_COMMIT_RANGE" => "759adcbd0d8f...13c4dc8bb61d",
+    "DANGER_GITHUB_API_TOKEN" => "123sbdq54erfsd3422gdfio"
+  }
+end
+
+# A stubbed out Dangerfile for use in tests
+def testing_dangerfile
+  env = Danger::EnvironmentManager.new(testing_env)
+  Danger::Dangerfile.new(env, testing_ui)
+end

metadata

@@ -0,0 +1,106 @@
+--- !ruby/object:Gem::Specification
+name: danger-gem_changes
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- John DeSilva
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2024-05-12 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: danger-plugin-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: open-uri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+description: A danger plugin for helping review gem depencency changes.
+email:
+- john@aesthetikx.info
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".rubocop.yml"
+- ".travis.yml"
+- Gemfile
+- Gemfile.lock
+- Guardfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- danger-gem_changes.gemspec
+- lib/danger_plugin.rb
+- lib/gem_changes.rb
+- lib/gem_changes/change.rb
+- lib/gem_changes/gem.rb
+- lib/gem_changes/gemfile.rb
+- lib/gem_changes/summary_table.rb
+- lib/gem_changes/version.rb
+- spec/fixtures/Gemfile.lock.patch
+- spec/gem_changes_spec.rb
+- spec/spec_helper.rb
+homepage: https://github.com/Aesthetikx/danger-gem_changes
+licenses:
+- MIT
+metadata:
+  rubygems_mfa_required: 'true'
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '2.7'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.4.10
+signing_key:
+specification_version: 4
+summary: A danger plugin for helping review gem depencency changes.
+test_files: []