dependabot-bundler 0.242.1 → 0.243.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 207f63c298a78b280ccc9b3fe1532398d835b63e9d07d03ca102b23ed69665ac
|
4
|
+
data.tar.gz: 2500aff804725bc44dbec2033c047c00ffb71dfcbf9ae0c87b5672dc7d0a4e41
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 5b3ab8a5707a3bb5aa5ccc41e3e307dbfcf48e304f8b248b588502dc6a779101270d94c9e29918f24317230bb729033e97be7644450d0cdc5135b96048afed37
|
7
|
+
data.tar.gz: a74c2b9829c26159b8a16818ada22088bc75de98e597dbcfb34cb07b91236f4721c03842c679bf32e1975dfb499b11cc7333fe3dbed6a6e9498b88290ef65b1b
|
@@ -4,6 +4,14 @@
|
|
4
4
|
require "bundler/definition"
|
5
5
|
|
6
6
|
module BundlerDefinitionRubyVersionPatch
|
7
|
+
def ruby_version
|
8
|
+
super || begin
|
9
|
+
Bundler::RubyVersion.from_string(File.read(".ruby-version", chomp: true))
|
10
|
+
rescue SystemCallError
|
11
|
+
# .ruby-version doesn't exist, fallback to the Ruby Dependabot runs
|
12
|
+
end
|
13
|
+
end
|
14
|
+
|
7
15
|
def source_requirements
|
8
16
|
if ruby_version
|
9
17
|
requested_version = ruby_version.gem_version
|
@@ -1,4 +1,4 @@
|
|
1
|
-
# typed:
|
1
|
+
# typed: true
|
2
2
|
# frozen_string_literal: true
|
3
3
|
|
4
4
|
require "sorbet-runtime"
|
@@ -98,7 +98,6 @@ module Dependabot
|
|
98
98
|
|
99
99
|
def ruby_version_file
|
100
100
|
return unless gemfile
|
101
|
-
return unless gemfile.content.include?(".ruby-version")
|
102
101
|
|
103
102
|
@ruby_version_file ||=
|
104
103
|
fetch_file_if_present(".ruby-version")
|
@@ -106,7 +105,7 @@ module Dependabot
|
|
106
105
|
end
|
107
106
|
|
108
107
|
def path_gemspecs
|
109
|
-
gemspec_files = []
|
108
|
+
gemspec_files = T.let([], T::Array[Dependabot::DependencyFile])
|
110
109
|
unfetchable_gems = []
|
111
110
|
|
112
111
|
path_gemspec_paths.each do |path|
|
@@ -153,6 +152,7 @@ module Dependabot
|
|
153
152
|
.tap { |req_files| req_files.each { |f| f.support_file = true } }
|
154
153
|
end
|
155
154
|
|
155
|
+
sig { params(dir_path: T.any(String, Pathname)).returns(T::Array[DependencyFile]) }
|
156
156
|
def fetch_gemspecs_from_directory(dir_path)
|
157
157
|
repo_contents(dir: dir_path, fetch_submodules: true)
|
158
158
|
.select { |f| f.name.end_with?(".gemspec", ".specification") }
|
@@ -201,7 +201,7 @@ module Dependabot
|
|
201
201
|
return @base_url if defined?(@base_url)
|
202
202
|
|
203
203
|
credential = credentials.find do |cred|
|
204
|
-
cred["type"] == "rubygems_server" && cred
|
204
|
+
cred["type"] == "rubygems_server" && cred.replaces_base?
|
205
205
|
end
|
206
206
|
host = credential ? credential["host"] : "rubygems.org"
|
207
207
|
@base_url = "https://#{host}" + ("/" unless host.end_with?("/"))
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-bundler
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.243.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-
|
11
|
+
date: 2024-02-13 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.243.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.243.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -312,7 +312,7 @@ licenses:
|
|
312
312
|
- Nonstandard
|
313
313
|
metadata:
|
314
314
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
315
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
315
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.243.0
|
316
316
|
post_install_message:
|
317
317
|
rdoc_options: []
|
318
318
|
require_paths:
|