dependabot-bundler 0.185.0 → 0.186.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 149703a633283283d90f697876543e96944f656162a6011d8e583f4fdc3f86c8
-  data.tar.gz: d3cc9b9a84e614a943a33fbdc92d403ed61b3941d5485a26b186b647b97a90aa
+  metadata.gz: 2a0f90207335cf7528e49bc8773731cf96917a0e4f7dd39e73b6decb189df7ee
+  data.tar.gz: a7357ba2899310567bc32698f92b1c9aac88e80e194d7c7fefa8b9cc75b65bd9
 SHA512:
-  metadata.gz: 6c2e823978b05cf242308ba15a22470eceb7d777aba00700f3108adbe1ef4bce66a495c937e05dccf929494e53425bb2b5b4155eddd0ce5a95c84e35b60265b8
-  data.tar.gz: b97fb4091560f8bbcfe627bb8aa72421c66a1739313e8b334ced53d7d7b2204f44f2463a97b2f1c000695a09de230e65e5691cc8e36296d72891fb0213a2862e
+  metadata.gz: ce5bc9d8bc8f7a03471f4f5e328145f64e31c8c915690f38241654182e32f5a5a6bec74510f1983387e27564634cdc94e86ad265e768dfbdf4f47cf9e1c2f09c
+  data.tar.gz: 6d22fb4bf04d24383bf2de07d56da79acc0f19fc0b552f2bb62696ed9ea2afaabb270b9471062ab9fa7567d370e7e026e6ab8501d25a28bffc4fbc5310467f8f

data/helpers/v1/lib/functions/file_parser.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "uri"
+
 module Functions
   class FileParser
     def initialize(lockfile_name:)
@@ -73,7 +75,12 @@ module Functions
       return true if source.nil?
       return false unless source.is_a?(Bundler::Source::Rubygems)
 
-      source.remotes.any? { |r| r.to_s.include?("rubygems.org") }
+      source.remotes.any? do |r|
+        [
+          "rubygems.org",
+          "www.rubygems.org"
+        ].include?(URI(r.to_s).host)
+      end
     end
 
     def serialize_bundler_dependency(dependency)

data/helpers/v2/lib/functions/file_parser.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "uri"
+
 module Functions
   class FileParser
     def initialize(lockfile_name:)
@@ -74,7 +76,12 @@ module Functions
       return true if source.nil?
       return false unless source.is_a?(Bundler::Source::Rubygems)
 
-      source.remotes.any? { |r| r.to_s.include?("rubygems.org") }
+      source.remotes.any? do |r|
+        [
+          "rubygems.org",
+          "www.rubygems.org"
+        ].include?(URI(r.to_s).host)
+      end
     end
 
     def serialize_bundler_dependency(dependency)

data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "excon"
+require "uri"
 
 require "dependabot/bundler/update_checker"
 require "dependabot/bundler/native_helpers"
@@ -143,7 +144,10 @@ module Dependabot
             regex = BundlerErrorPatterns::HTTP_ERR_REGEX
             if error.message.match?(regex)
               source = error.message.match(regex)[:source]
-              raise if source.end_with?("rubygems.org/")
+              raise if [
+                "rubygems.org",
+                "www.rubygems.org"
+              ].include?(URI(source).host)
 
               raise Dependabot::PrivateSourceTimedOut, source
             end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.185.0
+  version: 0.186.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-09 00:00:00.000000000 Z
+date: 2022-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.185.0
+        version: 0.186.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.185.0
+        version: 0.186.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement