dependabot-bundler 0.175.0 → 0.178.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8ede49064cce19d5a8c93de6d8dd9abe3c247596faff8fef802f768754149d37
-  data.tar.gz: ef8691d12674dc82db0f13559ba0a5401f19ab9ea7d2076f3b46fe0de7fd60c6
+  metadata.gz: 3e0c8c8c515a14a088d51dcedcfc96331538ade00aa2a4adb37fc6bbbdac58cb
+  data.tar.gz: '016822f022016965e9c9355cf821b3f45e5c32815d6c2408eda021c06fb74dd9'
 SHA512:
-  metadata.gz: b333c94388b9cdea06905e9738193c84f9dc45c1f7651b13270214dfa63fcd85311f22b2040a60033fcb625caebba0a52ff1f4272051b1cbdca2fca6f5bcc454
-  data.tar.gz: 8c813190addee4451cd1049f39f652490315ac193e18ea255494d5a9db8618e427dc58957431185f563d587352630cdaff53ee30999af5ed05f4b5cb1c87deb7
+  metadata.gz: 1228ecb3da6432ddc78440abc5a22c5b587719ca92fa4bdd5c730ed047d68b04600473a67240b5ea6367fa068606e0757e2cf7cb063fca5644de5b5e099d37c1
+  data.tar.gz: 6f29eeb844a12b53a39759243e8ba6b3c42a324cc54c7b1e10b7f8b8cf34cfcac11cbe5b0e9aa21ef6d0633667a66c077e886dc567d9fd7c054a3ec58d019c7f

data/helpers/v2/build

@@ -22,6 +22,6 @@ cd "$install_dir"
 
 # NOTE: Sets `BUNDLED WITH` to match the installed v2 version in Gemfile.lock
 # forcing specs and native helpers to run with the same version
-BUNDLER_VERSION=2.2.33 bundle config --local path ".bundle"
-BUNDLER_VERSION=2.2.33 bundle config --local without "test"
-BUNDLER_VERSION=2.2.33 bundle install
+BUNDLER_VERSION=2.3.8 bundle config --local path ".bundle"
+BUNDLER_VERSION=2.3.8 bundle config --local without "test"
+BUNDLER_VERSION=2.3.8 bundle install

data/helpers/v2/lib/functions/dependency_source.rb

@@ -40,7 +40,7 @@ module Functions
       bundler_source.
         fetchers.flat_map do |fetcher|
           fetcher.
-            specs_with_retry([dependency_name], bundler_source).
+            specs([dependency_name], bundler_source).
             search_all(dependency_name)
         end.
         map(&:version)

data/helpers/v2/spec/functions/dependency_source_spec.rb

@@ -115,6 +115,9 @@ RSpec.describe Functions::DependencySource do
         stub_request(:get, registry_url + "specs.4.8.gz").
           with(basic_auth: ["SECRET_CODES", ""]).
           to_return(status: 400)
+        stub_request(:get, registry_url + "info/business").
+          with(basic_auth: ["SECRET_CODES", ""]).
+          to_return(status: 400)
       end
 
       it "blows up with a useful error" do

data/helpers/v2/spec/functions/version_resolver_spec.rb

@@ -29,6 +29,15 @@ RSpec.describe Functions::VersionResolver do
 
   let(:rubygems_url) { "https://index.rubygems.org/api/v1/" }
   let(:old_index_url) { rubygems_url + "dependencies" }
+  let(:gemfury_url) { "https://repo.fury.io/greysteil/" }
+
+  before do
+    stub_request(:get, "https://rubygems.org/quick/Marshal.4.8/statesman-1.2.1.gemspec.rz").
+      to_return(status: 200, body: fixture("rubygems_responses", "statesman-1.2.1.gemspec.rz"))
+
+    stub_request(:get, %r{quick/Marshal.4.8/business-.*.gemspec.rz}).
+      to_return(status: 200, body: fixture("rubygems_responses", "business-1.0.0.gemspec.rz"))
+  end
 
   describe "#version_details" do
     subject do
@@ -48,7 +57,6 @@ RSpec.describe Functions::VersionResolver do
       let(:requirement_string) { ">= 0" }
 
       before do
-        gemfury_url = "https://repo.fury.io/greysteil/"
         gemfury_deps_url = gemfury_url + "api/v1/dependencies"
 
         stub_request(:get, gemfury_url + "versions").

data/lib/dependabot/bundler/helpers.rb

@@ -4,7 +4,7 @@ module Dependabot
   module Bundler
     module Helpers
       V1 = "1.17.3"
-      V2 = "2.2.33"
+      V2 = "2.3.8"
       # If we are updating a project with no Gemfile.lock, we default to the
       # newest version we support
       DEFAULT = V2

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.175.0
+  version: 0.178.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-25 00:00:00.000000000 Z
+date: 2022-03-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.175.0
+        version: 0.178.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.175.0
+        version: 0.178.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement