dependabot-bundler 0.196.4 → 0.199.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b851dd00b7c62d39dfb073bc386ea42d704dc4c87a77c028ea3dcf19d3d44c07
-  data.tar.gz: 796fe1b5235f5ca23dfe3456106fb80331f69151ffd6201fb65b100d4ffab5cb
+  metadata.gz: '0850f1539e6bcb3d9bae55cae3455156393dfef87d34c8e8a1b8ff9134198592'
+  data.tar.gz: 874724514f1620c849c51309d9e0b9e95aba9ecb28a28c7215cfd1733c25ac6e
 SHA512:
-  metadata.gz: 9d2fac1f78f640e0cc8c641ec698e887deb1bd679b90ae863f072db70bb81750f129e7975bcd73f338fdd8a9decd3976a353853e591f842c40d76fc98d2f925e
-  data.tar.gz: 98776f867a7a1e5d07abfe35683661055789208c03262628057b7c9934da107aa72b92d544825ccce16d75a7f5d51efa5a6e96e9e938ef9d1e8a2beb930ea2c1
+  metadata.gz: f7d69686ce2be64b5c0a629ad34d95b53b57cc29242fe91127d89aae4f29d7e2358bb7af270465f9e6a4eafc031d64f39f11b405f301acb7a12e3e39144faa86
+  data.tar.gz: b60307e568dc687feb33a42ade178ae31120628c39929149a709b32f972a7697ead45606900e379275b3b590aa7a11bb0e338c955c998a0f194518fe56fb63c6

data/helpers/v2/build

@@ -22,6 +22,6 @@ cd "$install_dir"
 
 # NOTE: Sets `BUNDLED WITH` to match the installed v2 version in Gemfile.lock
 # forcing specs and native helpers to run with the same version
-BUNDLER_VERSION=2.3.13 bundle config --local path ".bundle"
-BUNDLER_VERSION=2.3.13 bundle config --local without "test"
-BUNDLER_VERSION=2.3.13 bundle install
+BUNDLER_VERSION=2.3.18 bundle config --local path ".bundle"
+BUNDLER_VERSION=2.3.18 bundle config --local without "test"
+BUNDLER_VERSION=2.3.18 bundle install

data/lib/dependabot/bundler/helpers.rb

@@ -4,7 +4,7 @@ module Dependabot
   module Bundler
     module Helpers
       V1 = "1.17.3"
-      V2 = "2.3.13"
+      V2 = "2.3.18"
       # If we are updating a project with no Gemfile.lock, we default to the
       # newest version we support
       DEFAULT = V2

data/lib/dependabot/bundler/metadata_finder.rb

@@ -3,6 +3,7 @@
 require "excon"
 require "dependabot/metadata_finders"
 require "dependabot/metadata_finders/base"
+require "dependabot/registry_client"
 
 module Dependabot
   module Bundler
@@ -127,10 +128,9 @@ module Dependabot
           "#{dependency.name}-#{dependency.version}.gemspec.rz"
 
         response =
-          Excon.get(
-            gemspec_uri,
-            idempotent: true,
-            **SharedHelpers.excon_defaults(headers: registry_auth_headers)
+          Dependabot::RegistryClient.get(
+            url: gemspec_uri,
+            headers: registry_auth_headers
           )
 
         return @rubygems_marshalled_gemspec_response = nil if response.status >= 400
@@ -145,10 +145,9 @@ module Dependabot
         return @rubygems_api_response if defined?(@rubygems_api_response)
 
         response =
-          Excon.get(
-            "#{registry_url}api/v1/gems/#{dependency.name}.json",
-            idempotent: true,
-            **SharedHelpers.excon_defaults(headers: registry_auth_headers)
+          Dependabot::RegistryClient.get(
+            url: "#{registry_url}api/v1/gems/#{dependency.name}.json",
+            headers: registry_auth_headers
           )
         return @rubygems_api_response = {} if response.status >= 400
 
@@ -186,11 +185,7 @@ module Dependabot
         return response_body if source_url
 
         rubygems_response =
-          Excon.get(
-            "https://rubygems.org/api/v1/gems/#{dependency.name}.json",
-            idempotent: true,
-            **SharedHelpers.excon_defaults
-          )
+          Dependabot::RegistryClient.get(url: "https://rubygems.org/api/v1/gems/#{dependency.name}.json")
         parsed_rubygems_body = JSON.parse(rubygems_response.body)
         rubygems_digest =
           parsed_rubygems_body.values_at("version", "authors", "info").hash

data/lib/dependabot/bundler/update_checker/latest_version_finder/dependency_source.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require "dependabot/registry_client"
 require "dependabot/bundler/native_helpers"
 require "dependabot/bundler/helpers"
 
@@ -84,10 +85,8 @@ module Dependabot
           def rubygems_versions
             @rubygems_versions ||=
               begin
-                response = Excon.get(
-                  dependency_rubygems_uri,
-                  idempotent: true,
-                  **SharedHelpers.excon_defaults
+                response = Dependabot::RegistryClient.get(
+                  url: dependency_rubygems_uri
                 )
 
                 JSON.parse(response.body).

data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb

@@ -6,6 +6,7 @@ require "uri"
 require "dependabot/bundler/update_checker"
 require "dependabot/bundler/native_helpers"
 require "dependabot/bundler/helpers"
+require "dependabot/registry_client"
 require "dependabot/shared_helpers"
 require "dependabot/errors"
 
@@ -182,10 +183,8 @@ module Dependabot
               uri = URI.parse(spec.fetch("auth_uri"))
               next false unless %w(http https).include?(uri.scheme)
 
-              Excon.get(
-                uri.to_s,
-                idempotent: true,
-                **SharedHelpers.excon_defaults
+              Dependabot::RegistryClient.get(
+                url: uri.to_s
               ).status == 200
             rescue Excon::Error::Socket, Excon::Error::Timeout
               false

data/lib/dependabot/bundler/update_checker/version_resolver.rb

@@ -6,6 +6,7 @@ require "dependabot/bundler/helpers"
 require "dependabot/bundler/update_checker"
 require "dependabot/bundler/file_updater/lockfile_updater"
 require "dependabot/bundler/requirement"
+require "dependabot/registry_client"
 require "dependabot/shared_helpers"
 require "dependabot/errors"
 
@@ -180,10 +181,8 @@ module Dependabot
           # If no Ruby version is specified, we don't have a problem
           return false unless details[:ruby_version]
 
-          versions = Excon.get(
-            "https://rubygems.org/api/v1/versions/#{dependency.name}.json",
-            idempotent: true,
-            **SharedHelpers.excon_defaults
+          versions = Dependabot::RegistryClient.get(
+            url: "https://rubygems.org/api/v1/versions/#{dependency.name}.json"
           )
 
           # Give the benefit of the doubt if something goes wrong fetching

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.196.4
+  version: 0.199.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-07-14 00:00:00.000000000 Z
+date: 2022-07-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.196.4
+        version: 0.199.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.196.4
+        version: 0.199.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement