dependabot-bundler 0.271.0 → 0.272.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c1f910e14e5b0e3f6d85ca51756747ac0598ff4edd45eeee2bdd87ba4a5b3e4f
-  data.tar.gz: 7e3f3ad5a35a6e9bd1b3c215fa0b8ba24f29efa3924eac444ff1aabd49876b19
+  metadata.gz: 75c8c544efaa87f9da00a193ac437b1978a0c3be6bf6c1d243eadfadbafaea86
+  data.tar.gz: d96dd90d64184986f2b2d2b93515cd086654af60e92040894522d61bc6fe29cb
 SHA512:
-  metadata.gz: 8ec691e2bc736caab0108898d34ce5530a7d56e3d9fcf9d270d5cdabbdc03db21e32a3a3a846c0d470712e3aeb10061575143b87d6f18bf9582d89d9be87b4ce
-  data.tar.gz: 9af2d68ebcebef4bb9273c51ca95a5e4d56ce920ad8debe905f1717e55114a6e672562d2eae7263628e89b5edc1ad0b5d5d02546587ce142c1d8ce556eaa8b43
+  metadata.gz: 002d895d792d36afef336906a6fe8de9613e4732212e87f725271ad9dd16fbe6e02c72701a5e2866cedb9f4234f96287cb33264d5823aac2def2dd6569130ad9
+  data.tar.gz: d74e3785f13d60e1d905c761883d028f3653a2a7bff5bf7aef1cf63f807703419d17e4ba055291a11af36a81c3875af93130c875948ca1b9a87fc620e2ca1340

data/lib/dependabot/bundler/file_parser/file_preparer.rb

@@ -5,6 +5,7 @@ require "sorbet-runtime"
 require "dependabot/dependency_file"
 require "dependabot/file_parsers/base"
 require "dependabot/bundler/file_updater/gemspec_sanitizer"
+require "dependabot/bundler/package_manager"
 
 module Dependabot
   module Bundler

data/lib/dependabot/bundler/file_parser.rb

@@ -16,11 +16,13 @@ require "dependabot/errors"
 module Dependabot
   module Bundler
     class FileParser < Dependabot::FileParsers::Base
+      extend T::Sig
       require "dependabot/file_parsers/base/dependency_set"
       require "dependabot/bundler/file_parser/file_preparer"
       require "dependabot/bundler/file_parser/gemfile_declaration_finder"
       require "dependabot/bundler/file_parser/gemspec_declaration_finder"
 
+      sig { override.returns(T::Array[Dependabot::Dependency]) }
       def parse
         dependency_set = DependencySet.new
         dependency_set += gemfile_dependencies
@@ -30,6 +32,11 @@ module Dependabot
         dependency_set.dependencies
       end
 
+      sig { returns(PackageManagerBase) }
+      def package_manager
+        PackageManager.new(bundler_version)
+      end
+
       private
 
       def check_external_code(dependencies)

data/lib/dependabot/bundler/file_updater.rb

@@ -14,24 +14,13 @@ module Dependabot
       require_relative "file_updater/gemspec_updater"
       require_relative "file_updater/lockfile_updater"
 
-      def self.updated_files_regex(allowlist_enabled = false)
-        if allowlist_enabled
-          [
-            # Matches Gemfile, Gemfile.lock, gems.rb, gems.locked, .gemspec files, and anything in vendor directory
-            %r{^(Gemfile(\.lock)?|gems\.(rb|locked)|.*\.gemspec|vendor/.*)$},
-            # Matches the same files in any subdirectory
-            %r{^.*\/(Gemfile|Gemfile\.lock|gems\.rb|gems\.locked)$}
-          ]
-        else
-          # Old regex. After 100% rollout of the allowlist, this will be removed.
-          [
-            /^Gemfile$/,
-            /^Gemfile\.lock$/,
-            /^gems\.rb$/,
-            /^gems\.locked$/,
-            /^*\.gemspec$/
-          ]
-        end
+      def self.updated_files_regex
+        [
+          # Matches Gemfile, Gemfile.lock, gems.rb, gems.locked, .gemspec files, and anything in vendor directory
+          %r{^(Gemfile(\.lock)?|gems\.(rb|locked)|.*\.gemspec|vendor/.*)$},
+          # Matches the same files in any subdirectory
+          %r{^.*/(Gemfile|Gemfile\.lock|gems\.rb|gems\.locked)$}
+        ]
       end
 
       # rubocop:disable Metrics/PerceivedComplexity

data/lib/dependabot/bundler/package_manager.rb

@@ -0,0 +1,53 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+require "dependabot/bundler/version"
+require "dependabot/package_manager"
+
+module Dependabot
+  module Bundler
+    PACKAGE_MANAGER = "bundler"
+
+    SUPPORTED_BUNDLER_VERSIONS = T.let([
+      Version.new("2")
+    ].freeze, T::Array[Dependabot::Version])
+
+    DEPRECATED_BUNDLER_VERSIONS = T.let([
+      Version.new("1")
+    ].freeze, T::Array[Dependabot::Version])
+
+    class PackageManager < PackageManagerBase
+      extend T::Sig
+
+      sig { params(version: T.any(String, Dependabot::Version)).void }
+      def initialize(version)
+        @version = T.let(Version.new(version), Dependabot::Version)
+        @name = T.let(PACKAGE_MANAGER, String)
+        @deprecated_versions = T.let(DEPRECATED_BUNDLER_VERSIONS, T::Array[Dependabot::Version])
+        @supported_versions = T.let(SUPPORTED_BUNDLER_VERSIONS, T::Array[Dependabot::Version])
+      end
+
+      sig { override.returns(String) }
+      attr_reader :name
+
+      sig { override.returns(Dependabot::Version) }
+      attr_reader :version
+
+      sig { override.returns(T::Array[Dependabot::Version]) }
+      attr_reader :deprecated_versions
+
+      sig { override.returns(T::Array[Dependabot::Version]) }
+      attr_reader :supported_versions
+
+      sig { override.returns(T::Boolean) }
+      def deprecated?
+        deprecated_versions.include?(version)
+      end
+      sig { override.returns(T::Boolean) }
+      def unsupported?
+        !deprecated? && version < supported_versions.first
+      end
+    end
+  end
+end

data/lib/dependabot/bundler.rb

@@ -10,6 +10,7 @@ require "dependabot/bundler/file_updater"
 require "dependabot/bundler/metadata_finder"
 require "dependabot/bundler/requirement"
 require "dependabot/bundler/version"
+require "dependabot/bundler/package_manager"
 
 require "dependabot/pull_request_creator/labeler"
 Dependabot::PullRequestCreator::Labeler

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.271.0
+  version: 0.272.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-08-15 00:00:00.000000000 Z
+date: 2024-08-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.271.0
+        version: 0.272.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.271.0
+        version: 0.272.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -329,6 +329,7 @@ files:
 - lib/dependabot/bundler/helpers.rb
 - lib/dependabot/bundler/metadata_finder.rb
 - lib/dependabot/bundler/native_helpers.rb
+- lib/dependabot/bundler/package_manager.rb
 - lib/dependabot/bundler/requirement.rb
 - lib/dependabot/bundler/update_checker.rb
 - lib/dependabot/bundler/update_checker/conflicting_dependency_resolver.rb
@@ -345,7 +346,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.271.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.272.0
 post_install_message: 
 rdoc_options: []
 require_paths: