dependabot-bundler 0.243.0 → 0.245.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 207f63c298a78b280ccc9b3fe1532398d835b63e9d07d03ca102b23ed69665ac
-  data.tar.gz: 2500aff804725bc44dbec2033c047c00ffb71dfcbf9ae0c87b5672dc7d0a4e41
+  metadata.gz: 5b064f061277407a92133970d8c0287c6aacf60cf52e8813d793d374dce4dd2b
+  data.tar.gz: 403e7e5d8b01c1deb8df4f00b04360e21c456f76bb434624fbc0a5f931e22bbf
 SHA512:
-  metadata.gz: 5b3ab8a5707a3bb5aa5ccc41e3e307dbfcf48e304f8b248b588502dc6a779101270d94c9e29918f24317230bb729033e97be7644450d0cdc5135b96048afed37
-  data.tar.gz: a74c2b9829c26159b8a16818ada22088bc75de98e597dbcfb34cb07b91236f4721c03842c679bf32e1975dfb499b11cc7333fe3dbed6a6e9498b88290ef65b1b
+  metadata.gz: ebfb704cba98fedb9a2d979f1d22ef598ae97cca14866247006e7deda488a17326bfef96c04ea30d0d72e26f9a4b3105728d89da1f1218cbb1fc5768f97a8952
+  data.tar.gz: 9091bffdc4c7bcf874118684eaf14af6cd232e168abc6c082fa25887815ea03df36b5adedd0b054000f7d38582aa44a89c89f769bdc9a43f534783e31d1ab8d8

data/helpers/v2/monkey_patches/definition_ruby_version_patch.rb

@@ -6,7 +6,14 @@ require "bundler/definition"
 module BundlerDefinitionRubyVersionPatch
   def ruby_version
     super || begin
-      Bundler::RubyVersion.from_string(File.read(".ruby-version", chomp: true))
+      file_content = Bundler.read_file(".ruby-version")
+      ruby_version =
+        if /^ruby(-|\s+)([^\s#]+)/ =~ file_content
+          ::Regexp.last_match(2)
+        else
+          file_content.strip
+        end
+      Bundler::RubyVersion.new(ruby_version, nil, nil, nil) if ruby_version
     rescue SystemCallError
       # .ruby-version doesn't exist, fallback to the Ruby Dependabot runs
     end

data/helpers/v2/spec/ruby_version_spec.rb

@@ -0,0 +1,40 @@
+# typed: false
+# frozen_string_literal: true
+
+require "native_spec_helper"
+require "shared_contexts"
+
+RSpec.describe BundlerDefinitionRubyVersionPatch do
+  include_context "in a temporary bundler directory"
+  include_context "stub rubygems compact index"
+
+  let(:project_name) { "ruby_version_implied" }
+  before do
+    @ui = Bundler.ui
+    Bundler.ui = Bundler::UI::Silent.new
+  end
+  after { Bundler.ui = @ui }
+
+  it "updates to the most recent version" do
+    in_tmp_folder do
+      File.delete(".ruby-version")
+      definition = Bundler::Definition.build("Gemfile", "Gemfile.lock", gems: ["statesman"])
+      definition.resolve_remotely!
+      specs = definition.resolve["statesman"]
+      expect(specs.size).to eq(1)
+      spec = specs.first
+      expect(spec.version).to eq("7.2.0")
+    end
+  end
+
+  it "doesn't update to a version that is not compatible with the Ruby version implied by .ruby-version" do
+    in_tmp_folder do
+      definition = Bundler::Definition.build("Gemfile", "Gemfile.lock", gems: ["statesman"])
+      definition.resolve_remotely!
+      specs = definition.resolve["statesman"]
+      expect(specs.size).to eq(1)
+      spec = specs.first
+      expect(spec.version).to eq("2.0.1")
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.243.0
+  version: 0.245.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-13 00:00:00.000000000 Z
+date: 2024-02-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.243.0
+        version: 0.245.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.243.0
+        version: 0.245.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -272,6 +272,7 @@ files:
 - helpers/v2/spec/functions/version_resolver_spec.rb
 - helpers/v2/spec/functions_spec.rb
 - helpers/v2/spec/native_spec_helper.rb
+- helpers/v2/spec/ruby_version_spec.rb
 - helpers/v2/spec/shared_contexts.rb
 - lib/dependabot/bundler.rb
 - lib/dependabot/bundler/file_fetcher.rb
@@ -312,7 +313,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.243.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.245.0
 post_install_message: 
 rdoc_options: []
 require_paths: