dependabot-bundler 0.106.32 → 0.106.33

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/bundler/file_updater/lockfile_updater.rb +4 -0
  3. data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb +8 -4
  4. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: aa3b098bb3cc9dadf493316b50ba20f52fcfa21a0b16eb27dcf5c7afc2d4f039
4
- data.tar.gz: 364baf6b8b99b85774cbd37d7372a165a2d72453e6e9e57c64241502247ecb1c
3
+ metadata.gz: ef093e33e7f963cddf83131c718d3548e60ec3269bab3eaf95a842225f720fc5
4
+ data.tar.gz: 0b2105f8c29ad46c0c5561e413bf327eedb807163aaf9d1e7c3dc1adc28ca909
5
5
  SHA512:
6
- metadata.gz: f0927264e8d167f14528e44207d9f1e41a66e8a97fc30e9cd364ade57d6e31692d39e2e82fd8376c0d11c5a4580340ccd33fde8f926eae5b62f77eb070a1db4f
7
- data.tar.gz: 33c8ef9e1280c12db4c3e082f0d0ccd4a8d1a971defa5069a8ce5cc03d466f43d07ce5ad352ad2f4c3d527457e2db466b38caf65a2c161e935d1062fdc8c8458
6
+ metadata.gz: 7f8290ba4bfd3e5b6ea96f3ebc2d29affa194cb37fea6ab947cf0ccf486155f8d6f9cd2bd68092b09ea7ae0ec5bd0367f7ab22c8b01ed6812a676860a9bca2b3
7
+ data.tar.gz: 33bd0e51040f64f0d92caa34d7e5061118eba8e1fa533056e07f15da2d0f2f71a70894389a980f3d445e9eaccdb83604a10d2121ba4a4403b3e2661d770b78be
data/lib/dependabot/bundler/file_updater/lockfile_updater.rb CHANGED
@@ -90,6 +90,10 @@ module Dependabot
90
90
  )
91
91
  end
92
92
 
93
+ # Equivalent of running --full-index. Ensures recent
94
+ # dependencies are always fetched, and fixes Artifactory issues
95
+ ::Bundler::Fetcher.disable_endpoint
96
+
93
97
  generate_lockfile
94
98
  end
95
99
  end
data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb CHANGED
@@ -36,7 +36,6 @@ module Dependabot
36
36
  #########################
37
37
 
38
38
  def in_a_temporary_bundler_context(error_handling: true)
39
- base_directory = dependency_files.first.directory
40
39
  SharedHelpers.in_a_temporary_directory(base_directory) do |tmp_dir|
41
40
  write_temporary_dependency_files
42
41
 
@@ -58,6 +57,10 @@ module Dependabot
58
57
  )
59
58
  end
60
59
 
60
+ # Equivalent of running --full-index. Ensures recent dependencies
61
+ # are always fetched, and fixes Artifactory issues
62
+ ::Bundler::Fetcher.disable_endpoint
63
+
61
64
  yield
62
65
  end
63
66
  end
@@ -68,10 +71,11 @@ module Dependabot
68
71
  sleep(rand(1.0..5.0)) && retry
69
72
  end
70
73
 
71
- raise unless error_handling
74
+ error_handling ? handle_bundler_errors(e) : raise
75
+ end
72
76
 
73
- # Raise more descriptive errors
74
- handle_bundler_errors(e)
77
+ def base_directory
78
+ dependency_files.first.directory
75
79
  end
76
80
 
77
81
  def retryable_error?(error)
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-bundler
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.106.32
4
+ version: 0.106.33
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-05-03 00:00:00.000000000 Z
11
+ date: 2019-05-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.106.32
19
+ version: 0.106.33
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.106.32
26
+ version: 0.106.33
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement