dependabot-bundler 0.251.0 → 0.253.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba73dba0b4c1818a3974d48de55ed45907c6313b7a7d93a7e7f438af22cf20ac
-  data.tar.gz: 38594d1b08adc8b5e65c1b7716a762c28acd36af9bacde2c38dd88f507407ae7
+  metadata.gz: 8308752a979115637d445363c2d8260f39f8322817bb90b8e176e45001e0f127
+  data.tar.gz: cb8e40cc5445beddac8b30a1ae689be7d1da12cfe729840fd632d21dd8111028
 SHA512:
-  metadata.gz: e5a26067edfaaaec12e58558f015f0632f2c17a9c929ed2e9714e3767f425cbb6cd441322ee4b4128a245b54b66ec15a405d3338cae9668a8232ef5564c6a53a
-  data.tar.gz: d56e1a245336c959b9c09c89890efde80cadf9ffd851266fa8be959330d89646894ce00c8c8a93b5e579762ad2d26972292669acb79e41861fac29fcbeaa4ec2
+  metadata.gz: 6bf5d34f12beb56c184bc27c61585289fa8554d7558565b1eb4f6688579cfd146f3d0c7f9573fcea5795de8d78517f521c8e90ae0d9e04b29b766350dd800833
+  data.tar.gz: 3836d4c3cf47d235c8637768ad202f5c20ec55665d0ac46717d3ea8b358e17e4fa42c2f6c2b7955de6a16d535d08c007abb9aeec19bb51de306defc5429977cd

data/lib/dependabot/bundler/file_parser.rb

@@ -75,7 +75,9 @@ module Dependabot
         dependencies
       end
 
-      def gemspec_dependencies
+      def gemspec_dependencies # rubocop:disable Metrics/PerceivedComplexity
+        return @gemspec_dependencies if defined?(@gemspec_dependencies)
+
         queue = Queue.new
 
         SharedHelpers.in_a_temporary_repo_directory(base_directory, repo_contents_path) do
@@ -108,7 +110,7 @@ module Dependabot
 
         dependency_set = DependencySet.new
         dependency_set << queue.pop(true) while queue.size.positive?
-        dependency_set
+        @gemspec_dependencies ||= dependency_set
       end
 
       def lockfile_dependencies

data/lib/dependabot/bundler/helpers.rb

@@ -30,9 +30,9 @@ module Dependabot
         return "unknown" unless lockfile
 
         if (matches = lockfile.content.match(BUNDLER_MAJOR_VERSION_REGEX))
-          matches[:version]
+          matches[:version].to_i.to_s
         else
-          "1"
+          "unspecified"
         end
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.251.0
+  version: 0.253.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-04-05 00:00:00.000000000 Z
+date: 2024-04-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.251.0
+        version: 0.253.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.251.0
+        version: 0.253.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -178,20 +178,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 0.7.3
-- !ruby/object:Gem::Dependency
-  name: stackprof
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.2.16
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.2.16
 - !ruby/object:Gem::Dependency
   name: turbo_tests
   requirement: !ruby/object:Gem::Requirement
@@ -342,7 +328,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.251.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.253.0
 post_install_message: 
 rdoc_options: []
 require_paths: