dependabot-bundler 0.265.0 → 0.267.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d837627e4b7f0b89fba5bf610da2537ff7c794c2bfa274e4107fb17a5cb6892
-  data.tar.gz: bf2c9faaea5a3383fb132a00c1e0ad24422ebca868d08180b7bddc136060ffeb
+  metadata.gz: 1e357e6fc4d35510809265927eee0e2bb31f6a04e83193b5031966c53b6801f6
+  data.tar.gz: a6868142bd65fa6c78a9971d5e9cb6872408f4055e1e7fed655ef693a7d762d0
 SHA512:
-  metadata.gz: c4d95df44cf030707e74a9cfe2c4c76efa26e8edbda9778f08befd5bb17daf1f913f13638ae977a70c5902cc48f304356570364b66fe212cd09868743e21d470
-  data.tar.gz: ad22e17aa52f00e9ab78938781407da1f95d58b5002ee1a7923397cad80ea0ba2b76193ba9de2b5030fc34e7e90abd41fe46e117d7fc32202e80623d668b847c
+  metadata.gz: d508e07d23e23125d89b16d43d65ee637315e07a0e78029a6f40b96e167fbd36511803ef83275b303d3df4cdc251dce4ccc0696c0efe68967f461e0a2fb1c70f
+  data.tar.gz: 92c1f567ebe086f7749110704d3b21d38aacccdcc16f9b6b536505a95c44e19e5630aa4f32872c0dc15ab076ffa1ad758e09ddcd205569007e3a5647ec061d35

data/helpers/v1/monkey_patches/resolver_spec_group_sane_eql.rb

@@ -11,7 +11,7 @@ module BundlerResolverSpecGroupSaneEql
   def eql?(other)
     return false unless other.is_a?(self.class)
 
-    super(other)
+    super
   end
 end
 

data/helpers/v2/lib/functions/force_updater.rb

@@ -3,7 +3,6 @@
 
 module Functions
   class ForceUpdater
-    class TransitiveDependencyError < StandardError; end
     class TopLevelDependencyDowngradedError < StandardError; end
 
     def initialize(dependency_name:, target_version:, gemfile_name:,
@@ -120,16 +119,28 @@ module Functions
       dep = definition.dependencies
                       .find { |d| d.name == dependency_name }
 
-      # If the dependency is not found in the Gemfile it means this is a
-      # transitive dependency that we can't force update.
-      raise TransitiveDependencyError unless dep
-
-      # Set the requirement for the gem we're forcing an update of
-      new_req = Gem::Requirement.create("= #{target_version}")
-      dep.instance_variable_set(:@requirement, new_req)
-      dep.source = nil if dep.source.is_a?(Bundler::Source::Git)
-
-      definition
+      if dep
+        # Set the requirement for the gem we're forcing an update of
+        new_req = Gem::Requirement.create("= #{target_version}")
+        dep.instance_variable_set(:@requirement, new_req)
+        dep.source = nil if dep.source.is_a?(Bundler::Source::Git)
+
+        definition
+      else
+        # If the dependency is not found in the Gemfile it means this is a
+        # transitive dependency. To force update it, we recreate a definition
+        # from the Gemfile, but add an extra dependency to it that pins the
+        # dependency we want to update.
+        gemfile = Pathname.new(gemfile_name).expand_path
+        builder = Bundler::Dsl.new
+        builder.eval_gemfile(gemfile)
+        builder.gem dependency_name, "= #{target_version}"
+        builder.to_definition(
+          lockfile_name,
+          gems: gems_to_unlock + subdependencies,
+          conservative: true
+        )
+      end
     end
 
     def lockfile

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.265.0
+  version: 0.267.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-07-11 00:00:00.000000000 Z
+date: 2024-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.265.0
+        version: 0.267.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.265.0
+        version: 0.267.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.63.2
+        version: 1.65.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.63.2
+        version: 1.65.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -345,7 +345,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.265.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.267.0
 post_install_message: 
 rdoc_options: []
 require_paths: