dependabot-bundler 0.227.0 → 0.229.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7023595adf12fbe47753c88f1f18a95d56ef336c503a76fdd1335c33b3bb8494
-  data.tar.gz: 2e100abbbdf9ac7c9768000c23386556a655c07022240f7a116f33361cbc11cf
+  metadata.gz: aebdf859dd5aea604a8c209c7e74ed216ccafc206c5cd19c225ee0c8971e0896
+  data.tar.gz: f3f2ec8fa7812e9d4e056e9ec22dbb6b76865aa1790461068c9617d1734cec5e
 SHA512:
-  metadata.gz: 2834e755780893f71734a610865eb1575974aa20824b9ebd1a1e340c1c7824700eb7a4ae23546288f74da808228d1258ebe7e446d93af987fb3552db7764badd
-  data.tar.gz: d484aa2915784b4cbfafe2105982531471eb2bc86886f369a4d6797b7cce397243299b22edc33cda782e701d7f96fa812796350094bb716fc1cfc2c3f698d8d4
+  metadata.gz: 619a5a6c1ae140eda8468fb3b5a75893094d990b7f4e86860ee7601012cdc61197df57e7cae17f7c25980e844ab9a169f7c88f124d88219d5e612f358b285a37
+  data.tar.gz: 6698d2264ce455a7181edda03d4b286e21070286865281982b48ae6044ad830afbbaceeb876999a2ecd3b07e9b5888205064f98c7bedef9f802fcb403939affb

data/helpers/v1/lib/functions.rb

@@ -127,7 +127,7 @@ module Functions
   end
 
   def self.set_bundler_flags_and_credentials(dir:, credentials:)
-    dir = dir ? Pathname.new(dir) : dir
+    dir = Pathname.new(dir) if dir
     Bundler.instance_variable_set(:@root, dir)
 
     # Remove installed gems from the default Rubygems index

data/helpers/v1/monkey_patches/resolver_spec_group_sane_eql.rb

@@ -8,7 +8,7 @@ require "bundler/resolver/spec_group"
 
 module BundlerResolverSpecGroupSaneEql
   def eql?(other)
-    return unless other.is_a?(self.class)
+    return false unless other.is_a?(self.class)
 
     super(other)
   end

data/helpers/v2/lib/functions.rb

@@ -129,7 +129,7 @@ module Functions
   end
 
   def self.set_bundler_flags_and_credentials(dir:, credentials:)
-    dir = dir ? Pathname.new(dir) : dir
+    dir = Pathname.new(dir) if dir
     Bundler.instance_variable_set(:@root, dir)
 
     # Remove installed gems from the default Rubygems index

data/lib/dependabot/bundler/native_helpers.rb

@@ -45,7 +45,9 @@ module Dependabot
             function: function,
             args: args,
             env: {
-              # Prevent the GEM_HOME from being set to a folder owned by root
+              # Set BUNDLE_PATH to a thread-safe location
+              "BUNDLE_PATH" => File.join(Dependabot::Utils::BUMP_TMP_DIR_PATH, ".bundle"),
+              # Set GEM_HOME to where the proper version of Bundler is installed
               "GEM_HOME" => File.join(helpers_path, ".bundle")
             }
           )

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.227.0
+  version: 0.229.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-08-18 00:00:00.000000000 Z
+date: 2023-08-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.227.0
+        version: 0.229.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.227.0
+        version: 0.229.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -268,7 +268,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.227.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.229.0
 post_install_message: 
 rdoc_options: []
 require_paths: