dependabot-bundler 0.271.0 → 0.273.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c1f910e14e5b0e3f6d85ca51756747ac0598ff4edd45eeee2bdd87ba4a5b3e4f
-  data.tar.gz: 7e3f3ad5a35a6e9bd1b3c215fa0b8ba24f29efa3924eac444ff1aabd49876b19
+  metadata.gz: a5554d7f181a363c73cb74d605a85a8062b3a9d8ebdaa44fa751c233e36313fa
+  data.tar.gz: '087d2cf82ce414863a7e23252cf879a059c81a206a521f804a6e95ca2fee1d22'
 SHA512:
-  metadata.gz: 8ec691e2bc736caab0108898d34ce5530a7d56e3d9fcf9d270d5cdabbdc03db21e32a3a3a846c0d470712e3aeb10061575143b87d6f18bf9582d89d9be87b4ce
-  data.tar.gz: 9af2d68ebcebef4bb9273c51ca95a5e4d56ce920ad8debe905f1717e55114a6e672562d2eae7263628e89b5edc1ad0b5d5d02546587ce142c1d8ce556eaa8b43
+  metadata.gz: e037f93c304cb062d2e79a165b7f3b724c032369c0f31ad5aa2d4d28274aafc431207f46914ad5a7eafeddb929e0c67e4f864b1f34ad6d49aa8b97aac63b3341
+  data.tar.gz: 2c9dc3a918092189741123b6fe90662d9547eb48f0ad36428d86f153869372e82d6d87c18c88de70f7380de48b458393c80a4eb12ba6260d6cbaaefc27ab652c

data/lib/dependabot/bundler/file_parser/file_preparer.rb

@@ -5,6 +5,7 @@ require "sorbet-runtime"
 require "dependabot/dependency_file"
 require "dependabot/file_parsers/base"
 require "dependabot/bundler/file_updater/gemspec_sanitizer"
+require "dependabot/bundler/package_manager"
 
 module Dependabot
   module Bundler

data/lib/dependabot/bundler/file_parser.rb

@@ -16,11 +16,13 @@ require "dependabot/errors"
 module Dependabot
   module Bundler
     class FileParser < Dependabot::FileParsers::Base
+      extend T::Sig
       require "dependabot/file_parsers/base/dependency_set"
       require "dependabot/bundler/file_parser/file_preparer"
       require "dependabot/bundler/file_parser/gemfile_declaration_finder"
       require "dependabot/bundler/file_parser/gemspec_declaration_finder"
 
+      sig { override.returns(T::Array[Dependabot::Dependency]) }
       def parse
         dependency_set = DependencySet.new
         dependency_set += gemfile_dependencies
@@ -30,6 +32,11 @@ module Dependabot
         dependency_set.dependencies
       end
 
+      sig { returns(PackageManagerBase) }
+      def package_manager
+        PackageManager.new(bundler_version)
+      end
+
       private
 
       def check_external_code(dependencies)

data/lib/dependabot/bundler/file_updater.rb

@@ -14,24 +14,13 @@ module Dependabot
       require_relative "file_updater/gemspec_updater"
       require_relative "file_updater/lockfile_updater"
 
-      def self.updated_files_regex(allowlist_enabled = false)
-        if allowlist_enabled
-          [
-            # Matches Gemfile, Gemfile.lock, gems.rb, gems.locked, .gemspec files, and anything in vendor directory
-            %r{^(Gemfile(\.lock)?|gems\.(rb|locked)|.*\.gemspec|vendor/.*)$},
-            # Matches the same files in any subdirectory
-            %r{^.*\/(Gemfile|Gemfile\.lock|gems\.rb|gems\.locked)$}
-          ]
-        else
-          # Old regex. After 100% rollout of the allowlist, this will be removed.
-          [
-            /^Gemfile$/,
-            /^Gemfile\.lock$/,
-            /^gems\.rb$/,
-            /^gems\.locked$/,
-            /^*\.gemspec$/
-          ]
-        end
+      def self.updated_files_regex
+        [
+          # Matches Gemfile, Gemfile.lock, gems.rb, gems.locked, .gemspec files, and anything in vendor directory
+          %r{^(Gemfile(\.lock)?|gems\.(rb|locked)|.*\.gemspec|vendor/.*)$},
+          # Matches the same files in any subdirectory
+          %r{^.*/(Gemfile|Gemfile\.lock|gems\.rb|gems\.locked)$}
+        ]
       end
 
       # rubocop:disable Metrics/PerceivedComplexity

data/lib/dependabot/bundler/package_manager.rb

@@ -0,0 +1,53 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+require "dependabot/bundler/version"
+require "dependabot/package_manager"
+
+module Dependabot
+  module Bundler
+    PACKAGE_MANAGER = "bundler"
+
+    SUPPORTED_BUNDLER_VERSIONS = T.let([
+      Version.new("2")
+    ].freeze, T::Array[Dependabot::Version])
+
+    DEPRECATED_BUNDLER_VERSIONS = T.let([
+      Version.new("1")
+    ].freeze, T::Array[Dependabot::Version])
+
+    class PackageManager < PackageManagerBase
+      extend T::Sig
+
+      sig { params(version: T.any(String, Dependabot::Version)).void }
+      def initialize(version)
+        @version = T.let(Version.new(version), Dependabot::Version)
+        @name = T.let(PACKAGE_MANAGER, String)
+        @deprecated_versions = T.let(DEPRECATED_BUNDLER_VERSIONS, T::Array[Dependabot::Version])
+        @supported_versions = T.let(SUPPORTED_BUNDLER_VERSIONS, T::Array[Dependabot::Version])
+      end
+
+      sig { override.returns(String) }
+      attr_reader :name
+
+      sig { override.returns(Dependabot::Version) }
+      attr_reader :version
+
+      sig { override.returns(T::Array[Dependabot::Version]) }
+      attr_reader :deprecated_versions
+
+      sig { override.returns(T::Array[Dependabot::Version]) }
+      attr_reader :supported_versions
+
+      sig { override.returns(T::Boolean) }
+      def deprecated?
+        deprecated_versions.include?(version)
+      end
+      sig { override.returns(T::Boolean) }
+      def unsupported?
+        !deprecated? && version < supported_versions.first
+      end
+    end
+  end
+end

data/lib/dependabot/bundler.rb

@@ -10,6 +10,7 @@ require "dependabot/bundler/file_updater"
 require "dependabot/bundler/metadata_finder"
 require "dependabot/bundler/requirement"
 require "dependabot/bundler/version"
+require "dependabot/bundler/package_manager"
 
 require "dependabot/pull_request_creator/labeler"
 Dependabot::PullRequestCreator::Labeler

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.271.0
+  version: 0.273.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-08-15 00:00:00.000000000 Z
+date: 2024-08-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.271.0
+        version: 0.273.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.271.0
+        version: 0.273.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -329,6 +329,7 @@ files:
 - lib/dependabot/bundler/helpers.rb
 - lib/dependabot/bundler/metadata_finder.rb
 - lib/dependabot/bundler/native_helpers.rb
+- lib/dependabot/bundler/package_manager.rb
 - lib/dependabot/bundler/requirement.rb
 - lib/dependabot/bundler/update_checker.rb
 - lib/dependabot/bundler/update_checker/conflicting_dependency_resolver.rb
@@ -345,7 +346,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.271.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.273.0
 post_install_message: 
 rdoc_options: []
 require_paths: