dependabot-bundler 0.226.0 → 0.228.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 62e7833c9a64fc684512d74fa39ce224e18754731dddb5208d7984f920c54467
-  data.tar.gz: c598beadef625a3c4789a34cc52066bd96cc2b9b5a17e4c47b38ae3e2d96641c
+  metadata.gz: ebac6a7c9946a6ae4f667692707a5ffe26f8e6e2fa835313ae5b572d2996d3c3
+  data.tar.gz: 4169bdf566aeea7ca0b2015c0a2aaabb2a92881d7846b307fe8fe3f61bcc7489
 SHA512:
-  metadata.gz: 0d86274e3b7f9e971b6add631c155b67843fe5adbbf719b73934517b73824feca2eeb41ca37ab9557c9bb5737b67208f039cc7e852e73d97f3d1b40d4e77a0af
-  data.tar.gz: 105562225882a8b562ff3afdd2851a2fc05d7a0ee0ff61993b9688e4e5df0f6dffcb1f077e6b43a75150758d5ea1960eda2dbb30963a08bded17980d65b339c1
+  metadata.gz: 13014772dbb1504f74623f0a31c456b7110d5fc481159888a6d0a21247152dfb8871839fba07c554632ba9d6f7ce8d893a917b864d865d6c6196f9c1e506a351
+  data.tar.gz: 7337fb4b3d6bee80b1ace3de1d6a43cecdf5d266294cec46b51b7c61510693e7ead810a3203b516f3e9871eaecb00a6cff3fbb6fff0301b4083df90f5aa0bf95

data/helpers/v1/lib/functions/force_updater.rb

@@ -147,10 +147,10 @@ module Functions
       return [] unless lockfile
 
       all_deps =  Bundler::LockfileParser.new(lockfile).
-                  specs.map(&:name).map(&:to_s)
+                  specs.map { |x| x.name.to_s }
       top_level = Bundler::Definition.
                   build(gemfile_name, lockfile_name, {}).
-                  dependencies.map(&:name).map(&:to_s)
+                  dependencies.map { |x| x.name.to_s }
 
       all_deps - top_level
     end

data/helpers/v1/lib/functions/lockfile_updater.rb

@@ -136,12 +136,11 @@ module Functions
       dependencies_to_unlock << gem_name
     end
 
-    # rubocop:disable Metrics/PerceivedComplexity
     def unlock_blocking_subdeps(dependencies_to_unlock, error)
       all_deps =  Bundler::LockfileParser.new(lockfile).
-                  specs.map(&:name).map(&:to_s)
+                  specs.map { |x| x.name.to_s }
       top_level = build_definition([]).dependencies.
-                  map(&:name).map(&:to_s)
+                  map { |x| x.name.to_s }
       allowed_new_unlocks = all_deps - top_level - dependencies_to_unlock
 
       raise if allowed_new_unlocks.none?
@@ -163,7 +162,6 @@ module Functions
       # information to chart the full path through all conflicts unwound
       dependencies_to_unlock.append(*allowed_new_unlocks)
     end
-    # rubocop:enable Metrics/PerceivedComplexity
 
     def build_definition(dependencies_to_unlock)
       defn = Bundler::Definition.build(
@@ -177,7 +175,7 @@ module Functions
       # subdeps unlocked, like they were in the UpdateChecker, so we
       # mutate the unlocked gems array.
       unlocked = defn.instance_variable_get(:@unlock).fetch(:gems)
-      must_not_unlock = defn.dependencies.map(&:name).map(&:to_s) -
+      must_not_unlock = defn.dependencies.map { |x| x.name.to_s } -
                         dependencies_to_unlock
       unlocked.reject! { |n| must_not_unlock.include?(n) }
 

data/helpers/v1/lib/functions/version_resolver.rb

@@ -82,9 +82,9 @@ module Functions
       return [] unless lockfile
 
       all_deps =  ::Bundler::LockfileParser.new(lockfile).
-                  specs.map(&:name).map(&:to_s).uniq
+                  specs.map { |x| x.name.to_s }.uniq
       top_level = build_definition([]).dependencies.
-                  map(&:name).map(&:to_s)
+                  map { |x| x.name.to_s }
 
       all_deps - top_level
     end

data/helpers/v1/lib/functions.rb

@@ -127,7 +127,7 @@ module Functions
   end
 
   def self.set_bundler_flags_and_credentials(dir:, credentials:)
-    dir = dir ? Pathname.new(dir) : dir
+    dir = Pathname.new(dir) if dir
     Bundler.instance_variable_set(:@root, dir)
 
     # Remove installed gems from the default Rubygems index

data/helpers/v1/monkey_patches/resolver_spec_group_sane_eql.rb

@@ -8,7 +8,7 @@ require "bundler/resolver/spec_group"
 
 module BundlerResolverSpecGroupSaneEql
   def eql?(other)
-    return unless other.is_a?(self.class)
+    return false unless other.is_a?(self.class)
 
     super(other)
   end

data/helpers/v2/lib/functions/lockfile_updater.rb

@@ -144,9 +144,9 @@ module Functions
     end
 
     def unlock_blocking_subdeps(dependencies_to_unlock, error)
-      all_deps = lockfile_specs.map(&:name).map(&:to_s)
+      all_deps = lockfile_specs.map { |x| x.name.to_s }
       top_level = build_definition([]).dependencies.
-                  map(&:name).map(&:to_s)
+                  map { |x| x.name.to_s }
       allowed_new_unlocks = all_deps - top_level - dependencies_to_unlock
 
       raise if allowed_new_unlocks.none?
@@ -187,7 +187,7 @@ module Functions
       # subdeps unlocked, like they were in the UpdateChecker, so we
       # mutate the unlocked gems array.
       unlocked = defn.instance_variable_get(:@unlock).fetch(:gems)
-      must_not_unlock = defn.dependencies.map(&:name).map(&:to_s) -
+      must_not_unlock = defn.dependencies.map { |x| x.name.to_s } -
                         dependencies_to_unlock
       unlocked.reject! { |n| must_not_unlock.include?(n) }
 

data/helpers/v2/lib/functions/version_resolver.rb

@@ -82,9 +82,9 @@ module Functions
       return [] unless lockfile
 
       all_deps =  ::Bundler::LockfileParser.new(lockfile).
-                  specs.map(&:name).map(&:to_s).uniq
+                  specs.map { |x| x.name.to_s }.uniq
       top_level = build_definition([]).dependencies.
-                  map(&:name).map(&:to_s)
+                  map { |x| x.name.to_s }
 
       all_deps - top_level
     end

data/helpers/v2/lib/functions.rb

@@ -129,7 +129,7 @@ module Functions
   end
 
   def self.set_bundler_flags_and_credentials(dir:, credentials:)
-    dir = dir ? Pathname.new(dir) : dir
+    dir = Pathname.new(dir) if dir
     Bundler.instance_variable_set(:@root, dir)
 
     # Remove installed gems from the default Rubygems index

data/lib/dependabot/bundler/native_helpers.rb

@@ -45,7 +45,9 @@ module Dependabot
             function: function,
             args: args,
             env: {
-              # Prevent the GEM_HOME from being set to a folder owned by root
+              # Set BUNDLE_PATH to a thread-safe location
+              "BUNDLE_PATH" => File.join(Dependabot::Utils::BUMP_TMP_DIR_PATH, ".bundle"),
+              # Set GEM_HOME to where the proper version of Bundler is installed
               "GEM_HOME" => File.join(helpers_path, ".bundle")
             }
           )

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.226.0
+  version: 0.228.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-08-11 00:00:00.000000000 Z
+date: 2023-08-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.226.0
+        version: 0.228.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.226.0
+        version: 0.228.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.19.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.18.0
+        version: 1.19.0
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -268,7 +268,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.226.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.228.0
 post_install_message: 
 rdoc_options: []
 require_paths: