dependabot-bundler 0.243.0 → 0.244.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 207f63c298a78b280ccc9b3fe1532398d835b63e9d07d03ca102b23ed69665ac
-  data.tar.gz: 2500aff804725bc44dbec2033c047c00ffb71dfcbf9ae0c87b5672dc7d0a4e41
+  metadata.gz: dc9561c2cec6477046f92d8c3539d69cfecdeeaff241a8c24a1bc6f76078741c
+  data.tar.gz: 401f077235d49135e00694bb549a9163222c54415541d954606b912389909c59
 SHA512:
-  metadata.gz: 5b3ab8a5707a3bb5aa5ccc41e3e307dbfcf48e304f8b248b588502dc6a779101270d94c9e29918f24317230bb729033e97be7644450d0cdc5135b96048afed37
-  data.tar.gz: a74c2b9829c26159b8a16818ada22088bc75de98e597dbcfb34cb07b91236f4721c03842c679bf32e1975dfb499b11cc7333fe3dbed6a6e9498b88290ef65b1b
+  metadata.gz: d2803abd9773bac2f56677927245d8552aa60be2c06203f94685cf765d8e563f0774ae9f3bc7ddac99b4d038ee3f096c21d9a69ba128926b6c316e952042b485
+  data.tar.gz: 2617cd80e87d7fa73143fa2fc6d569019e0757e69a68bcda25cbd7290d8cad9edaef5d61fb012ffcb244de71eddd50724ae4d70afd875905b35eb2535a8179a2

data/helpers/v2/monkey_patches/definition_ruby_version_patch.rb

@@ -6,7 +6,14 @@ require "bundler/definition"
 module BundlerDefinitionRubyVersionPatch
   def ruby_version
     super || begin
-      Bundler::RubyVersion.from_string(File.read(".ruby-version", chomp: true))
+      file_content = Bundler.read_file(".ruby-version")
+      ruby_version =
+        if /^ruby(-|\s+)([^\s#]+)/ =~ file_content
+          ::Regexp.last_match(2)
+        else
+          file_content.strip
+        end
+      Bundler::RubyVersion.new(ruby_version, nil, nil, nil) if ruby_version
     rescue SystemCallError
       # .ruby-version doesn't exist, fallback to the Ruby Dependabot runs
     end

data/helpers/v2/spec/ruby_version_spec.rb

@@ -0,0 +1,40 @@
+# typed: false
+# frozen_string_literal: true
+
+require "native_spec_helper"
+require "shared_contexts"
+
+RSpec.describe BundlerDefinitionRubyVersionPatch do
+  include_context "in a temporary bundler directory"
+  include_context "stub rubygems compact index"
+
+  let(:project_name) { "ruby_version_implied" }
+  before do
+    @ui = Bundler.ui
+    Bundler.ui = Bundler::UI::Silent.new
+  end
+  after { Bundler.ui = @ui }
+
+  it "updates to the most recent version" do
+    in_tmp_folder do
+      File.delete(".ruby-version")
+      definition = Bundler::Definition.build("Gemfile", "Gemfile.lock", gems: ["statesman"])
+      definition.resolve_remotely!
+      specs = definition.resolve["statesman"]
+      expect(specs.size).to eq(1)
+      spec = specs.first
+      expect(spec.version).to eq("7.2.0")
+    end
+  end
+
+  it "doesn't update to a version that is not compatible with the Ruby version implied by .ruby-version" do
+    in_tmp_folder do
+      definition = Bundler::Definition.build("Gemfile", "Gemfile.lock", gems: ["statesman"])
+      definition.resolve_remotely!
+      specs = definition.resolve["statesman"]
+      expect(specs.size).to eq(1)
+      spec = specs.first
+      expect(spec.version).to eq("2.0.1")
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.243.0
+  version: 0.244.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-13 00:00:00.000000000 Z
+date: 2024-02-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.243.0
+        version: 0.244.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.243.0
+        version: 0.244.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -272,6 +272,7 @@ files:
 - helpers/v2/spec/functions/version_resolver_spec.rb
 - helpers/v2/spec/functions_spec.rb
 - helpers/v2/spec/native_spec_helper.rb
+- helpers/v2/spec/ruby_version_spec.rb
 - helpers/v2/spec/shared_contexts.rb
 - lib/dependabot/bundler.rb
 - lib/dependabot/bundler/file_fetcher.rb
@@ -312,7 +313,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.243.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.244.0
 post_install_message: 
 rdoc_options: []
 require_paths: