dependabot-bundler 0.125.5 → 0.127.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c81f55d3546d0e6c2b754b1c5efafd70989da4988c1051eb40b3d1f0df6d3751
-  data.tar.gz: 3990918323f045728053182776017d5f35f1c1984aa27c4c32b65b7cb1ce064b
+  metadata.gz: 144dc9eb837efd26ab301efedf1ca2f0e42cc6d46a51fe9c9cfc35410a28dd00
+  data.tar.gz: 9d22aaa9270a397c1be80437c383dba9df21c17d475439ec663cdf15b81ef577
 SHA512:
-  metadata.gz: ed32dc19f13699a8783c2f45343e3c5c6eb15f46befa55f61850a3e317b767a0edf812310f6f89dffb9d629f26095c15f19df59a879ab4ab8b603228543418c0
-  data.tar.gz: 1a6e14564567cf179a8cedbfb8ecf6175833f6958ec9b7e9ff44e03392df70b4860005d7e0308338c3438d84c621f9a9bdd780e032bdfe9d75ce7dab66dbd0dd
+  metadata.gz: 91c0a9688c564defe0d3ad7a2310fff80fe1cd83d99f6edd887749bb9359b8b55c21d42411d0c6e9a60b800778ae1d99111aefb5690aa4c03e4031b439bc157d
+  data.tar.gz: 6a169875e0008fd52f7124ac265607413ea039ca2eb58524b0398f07d9cba9c07d2c669ea19bb32ab4deb367d1abacfdfbb01fb6c31a786989006a145204eed9

data/lib/dependabot/bundler/file_updater/gemspec_sanitizer.rb

@@ -235,7 +235,7 @@ module Dependabot
             return unless node.is_a?(Parser::AST::Node)
 
             if unnecessary_assignment?(node) &&
-               node.children.last&.location&.respond_to?(:heredoc_end)
+               node.children.last&.location.respond_to?(:heredoc_end)
               range_to_remove = node.loc.expression.join(
                 node.children.last.location.heredoc_end
               )

data/lib/dependabot/bundler/file_updater/lockfile_updater.rb

@@ -70,9 +70,9 @@ module Dependabot
                 args: {
                   gemfile_name: gemfile.name,
                   lockfile_name: lockfile.name,
-                  using_bundler_2: using_bundler_2?,
+                  using_bundler2: using_bundler2?,
                   dir: tmp_dir,
-                  credentials: relevant_credentials,
+                  credentials: credentials,
                   dependencies: dependencies.map(&:to_h)
                 }
               )
@@ -234,17 +234,6 @@ module Dependabot
         end
         # rubocop:enable Metrics/PerceivedComplexity
 
-        def relevant_credentials
-          credentials.
-            select { |cred| cred["password"] || cred["token"] }.
-            select do |cred|
-              next true if cred["type"] == "git_source"
-              next true if cred["type"] == "rubygems_server"
-
-              false
-            end
-        end
-
         def prepared_gemfile_content(file)
           content =
             GemfileUpdater.new(
@@ -307,7 +296,7 @@ module Dependabot
           dependency_files.select { |f| f.name.end_with?(".specification") }
         end
 
-        def using_bundler_2?
+        def using_bundler2?
           return unless lockfile
 
           lockfile.content.match?(/BUNDLED WITH\s+2/m)

data/lib/dependabot/bundler/metadata_finder.rb

@@ -117,7 +117,7 @@ module Dependabot
         end
       end
 
-      # Note: This response MUST NOT be unmarshalled
+      # NOTE: This response MUST NOT be unmarshalled
       # (as calling Marshal.load is unsafe)
       def rubygems_marshalled_gemspec_response
         return @rubygems_marshalled_gemspec_response if defined?(@rubygems_marshalled_gemspec_response)

data/lib/dependabot/bundler/update_checker/conflicting_dependency_resolver.rb

@@ -35,9 +35,9 @@ module Dependabot
                 dir: tmp_dir,
                 dependency_name: dependency.name,
                 target_version: target_version,
-                credentials: relevant_credentials,
+                credentials: credentials,
                 lockfile_name: lockfile.name,
-                using_bundler_2: using_bundler_2?
+                using_bundler2: using_bundler2?
               }
             )
           end

data/lib/dependabot/bundler/update_checker/force_updater.rb

@@ -50,10 +50,10 @@ module Dependabot
                 dir: tmp_dir,
                 dependency_name: dependency.name,
                 target_version: target_version,
-                credentials: relevant_credentials,
+                credentials: credentials,
                 gemfile_name: gemfile.name,
                 lockfile_name: lockfile.name,
-                using_bundler_2: using_bundler_2?,
+                using_bundler2: using_bundler2?,
                 update_multiple_dependencies: update_multiple_dependencies?
               }
             )
@@ -141,18 +141,7 @@ module Dependabot
           File.write(lockfile.name, sanitized_lockfile_body) if lockfile
         end
 
-        def relevant_credentials
-          credentials.
-            select { |cred| cred["password"] || cred["token"] }.
-            select do |cred|
-              next true if cred["type"] == "git_source"
-              next true if cred["type"] == "rubygems_server"
-
-              false
-            end
-        end
-
-        def using_bundler_2?
+        def using_bundler2?
           return unless lockfile
 
           lockfile.content.match?(/BUNDLED WITH\s+2/m)

data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb

@@ -169,8 +169,8 @@ module Dependabot
               args: {
                 dir: tmp_dir,
                 gemfile_name: gemfile.name,
-                credentials: relevant_credentials,
-                using_bundler_2: using_bundler_2?
+                credentials: credentials,
+                using_bundler2: using_bundler2?
               }
             )
             git_specs.reject do |spec|
@@ -193,8 +193,8 @@ module Dependabot
               args: {
                 dir: dir,
                 gemfile_name: gemfile.name,
-                credentials: relevant_credentials,
-                using_bundler_2: using_bundler_2?
+                credentials: credentials,
+                using_bundler2: using_bundler2?
               }
             )
           end
@@ -210,24 +210,11 @@ module Dependabot
           File.write(lockfile.name, sanitized_lockfile_body) if lockfile
         end
 
-        def relevant_credentials
-          [
-            *git_source_credentials,
-            *private_registry_credentials
-          ].select { |cred| cred["password"] || cred["token"] }
-        end
-
         def private_registry_credentials
           credentials.
             select { |cred| cred["type"] == "rubygems_server" }
         end
 
-        def git_source_credentials
-          credentials.
-            select { |cred| cred["password"] || cred["token"] }.
-            select { |cred| cred["type"] == "git_source" }
-        end
-
         def gemfile
           dependency_files.find { |f| f.name == "Gemfile" } ||
             dependency_files.find { |f| f.name == "gems.rb" }
@@ -244,7 +231,7 @@ module Dependabot
           lockfile.content.gsub(re, "")
         end
 
-        def using_bundler_2?
+        def using_bundler2?
           return unless lockfile
 
           lockfile.content.match?(/BUNDLED WITH\s+2/m)

data/lib/dependabot/bundler/update_checker/version_resolver.rb

@@ -83,7 +83,7 @@ module Dependabot
                   dependency_requirements: dependency.requirements,
                   gemfile_name: gemfile.name,
                   lockfile_name: lockfile&.name,
-                  using_bundler_2: using_bundler_2?,
+                  using_bundler2: using_bundler2?,
                   dir: tmp_dir,
                   credentials: credentials
                 }
@@ -213,7 +213,7 @@ module Dependabot
             dependency_files.find { |f| f.name == "gems.locked" }
         end
 
-        def using_bundler_2?
+        def using_bundler2?
           return unless lockfile
 
           lockfile.content.match?(/BUNDLED WITH\s+2/m)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.125.5
+  version: 0.127.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-25 00:00:00.000000000 Z
+date: 2020-12-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.125.5
+        version: 0.127.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.125.5
+        version: 0.127.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.93.0
+        version: 1.6.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.93.0
+        version: 1.6.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.19.0
+        version: 0.20.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.19.0
+        version: 0.20.0
 - !ruby/object:Gem::Dependency
   name: simplecov-console
   requirement: !ruby/object:Gem::Requirement