dependabot-bazel 0.400.0 → 0.402.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/bazel/file_parser.rb +7 -1
- data/lib/dependabot/bazel/update_checker.rb +3 -1
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1ad3140e4f9bf078454babd6e4b6baa18d6561b27625668015d50e4aff3fb53a
|
|
4
|
+
data.tar.gz: a5f8828652516f5cca0a9aacf175967d32a3437be089c98cbb28532827f7b73a
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 52aefd20b13b6aba2871a074569750d44770b2b525d660083d5434e195cad5aef5a0a77ecb7343b89dcc1246a0987fcc23504affffc94e9c7c0feb0463c995af
|
|
7
|
+
data.tar.gz: 6b004286afad5a80bc781ce482fed65971b767efcd14ad3c21a605f89358e896f49a729e93fd017243f1581db872b1fd1e9dea15d47f671e02add9863eb7b2d7
|
|
@@ -151,7 +151,13 @@ module Dependabot
|
|
|
151
151
|
sig { returns(T.nilable(String)) }
|
|
152
152
|
def bazel_version
|
|
153
153
|
bazelversion_file = dependency_files.find { |f| f.name == ".bazelversion" }
|
|
154
|
-
bazelversion_file&.content&.strip
|
|
154
|
+
version = bazelversion_file&.content&.strip
|
|
155
|
+
return version if version.nil? || Version.correct?(version)
|
|
156
|
+
|
|
157
|
+
# Bazelisk also accepts release channels (latest, last_green) and forks (<fork>/<version>),
|
|
158
|
+
# which are not versions Dependabot can compare, so treat them as if no version was pinned.
|
|
159
|
+
Dependabot.logger.info("Ignoring .bazelversion value that is not a version: #{version.inspect}")
|
|
160
|
+
nil
|
|
155
161
|
end
|
|
156
162
|
|
|
157
163
|
sig { params(file: Dependabot::DependencyFile).returns(DependencySet) }
|
|
@@ -228,7 +228,9 @@ module Dependabot
|
|
|
228
228
|
cooldown = update_cooldown
|
|
229
229
|
return false unless cooldown
|
|
230
230
|
|
|
231
|
-
|
|
231
|
+
# Starlark constants parsed as versions (e.g. RULES_ANDROID_VERSION) are not comparable
|
|
232
|
+
current = dependency.version
|
|
233
|
+
current_version = version_class.new(current) if current && version_class.correct?(current)
|
|
232
234
|
new_version = version_class.new(version_string)
|
|
233
235
|
days = Dependabot::UpdateCheckers::CooldownCalculation.cooldown_days_for(cooldown, current_version, new_version)
|
|
234
236
|
Dependabot::UpdateCheckers::CooldownCalculation.within_cooldown_window?(release_date, days)
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-bazel
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.402.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.402.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.402.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: debug
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -269,7 +269,7 @@ licenses:
|
|
|
269
269
|
- MIT
|
|
270
270
|
metadata:
|
|
271
271
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
272
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
272
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.402.0
|
|
273
273
|
rdoc_options: []
|
|
274
274
|
require_paths:
|
|
275
275
|
- lib
|