dependabot-bundler 0.323.0 → 0.324.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61089855a3f2f11c508db380713e6c3fec0a6943f4f6a4c942a84d7d7c83df1d
-  data.tar.gz: 95f9747f594d2ee6a53f43c65837e3f6dc66914ec06f0f77d6ded46cf7bac7c5
+  metadata.gz: 55a6b99667f0ff80fec338e2dd0309c8877f12c9d990bcabc30b02c608924ffe
+  data.tar.gz: 620809604eadbfca78e1bbb75165e84d7bcbf44cf008fffd3a51165eb8be54fa
 SHA512:
-  metadata.gz: a1e61117e89c248688e502547ce730bb4998ae4f7dbaca1a9890929ae8c4404d41def111272b5d9257e8669025b890c252a4a179d06331bb5238740b4a1902c5
-  data.tar.gz: '0247980eee2b9a361c265bde7d24a35a2de798a974f15a751c0243fabf76678fb63a954cfe677684f3ae3d8e2007c0efce4caeb797a9856c8d291bca315c907b'
+  metadata.gz: a8ccd2b76ffd4e549aed85317933a71f69955a52f8a68a860c93e67761b5808e54c44fe95d74cb2b13f070fe2d58bd1266807714469c4aea8c6b083866ed2430
+  data.tar.gz: 82ad27d48844ae3d19f55e289840de300d546681b357c2ac6dbf2342c3c2fb333d57f09fb95599bb04ff9a7d2d63366ebebe6d3ff193f5f0a39d09cae098a061

data/lib/dependabot/bundler/package/package_details_fetcher.rb

@@ -27,6 +27,8 @@ module Dependabot
         PACKAGE_LANGUAGE = "ruby"
         APPLICATION_JSON = "application/json"
         RUBYGEMS = "rubygems"
+        GIT = "git"
+        OTHER = "other"
 
         sig do
           params(
@@ -54,7 +56,12 @@ module Dependabot
 
         sig { returns(Dependabot::Package::PackageDetails) }
         def fetch
-          rubygems_versions
+          case source_type
+          when GIT, OTHER
+            package_details([])
+          else
+            rubygems_versions
+          end
         end
 
         private
@@ -183,6 +190,16 @@ module Dependabot
           Requirement.new(req_string)
         end
 
+        sig { returns(T.nilable(String)) }
+        def source_type
+          return nil unless dependency.requirements.any?
+
+          first_requirement = dependency.requirements.first
+          return nil unless first_requirement && first_requirement[:source]
+
+          first_requirement[:source][:type]
+        end
+
         sig { override.returns(String) }
         def bundler_version
           @bundler_version ||= T.let(Helpers.bundler_version(lockfile), T.nilable(String))

data/lib/dependabot/bundler/update_checker/latest_version_finder.rb

@@ -59,17 +59,15 @@ module Dependabot
 
         sig { returns(T.nilable(T::Hash[Symbol, T.untyped])) }
         def latest_version_details
-          @latest_version_details ||= if cooldown_enabled?
-                                        latest_version = fetch_latest_version(language_version: nil)
-                                        latest_version ? { version: latest_version } : nil
-                                      else
-                                        fetch_latest_version_details
-                                      end
+          @latest_version_details ||= begin
+            latest_version = fetch_latest_version(language_version: nil)
+            latest_version ? { version: latest_version } : nil
+          end
         end
 
         sig { override.returns(T::Boolean) }
         def cooldown_enabled?
-          Dependabot::Experiments.enabled?(:enable_cooldown_for_bundler)
+          true
         end
 
         sig { override.returns(T.nilable(T::Array[Dependabot::Package::PackageRelease])) }
@@ -86,21 +84,6 @@ module Dependabot
 
         private
 
-        sig { returns(T.nilable(T::Hash[Symbol, Dependabot::Version])) }
-        def fetch_latest_version_details
-          return dependency_source.latest_git_version_details if dependency_source.git?
-
-          relevant_versions = releases_from_dependency_source
-          relevant_versions = filter_prerelease_versions(relevant_versions)
-          relevant_versions = filter_ignored_versions(relevant_versions)
-
-          return if relevant_versions.empty?
-
-          release = relevant_versions.max_by(&:version)
-
-          { version: release&.version }
-        end
-
         sig do
           params(language_version: T.nilable(T.any(String, Dependabot::Version)))
             .returns(T.nilable(Dependabot::Version))

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.323.0
+  version: 0.324.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.323.0
+        version: 0.324.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.323.0
+        version: 0.324.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -322,7 +322,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.323.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.324.0
 rdoc_options: []
 require_paths:
 - lib