dependabot-bundler 0.106.32 → 0.106.33

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aa3b098bb3cc9dadf493316b50ba20f52fcfa21a0b16eb27dcf5c7afc2d4f039
-  data.tar.gz: 364baf6b8b99b85774cbd37d7372a165a2d72453e6e9e57c64241502247ecb1c
+  metadata.gz: ef093e33e7f963cddf83131c718d3548e60ec3269bab3eaf95a842225f720fc5
+  data.tar.gz: 0b2105f8c29ad46c0c5561e413bf327eedb807163aaf9d1e7c3dc1adc28ca909
 SHA512:
-  metadata.gz: f0927264e8d167f14528e44207d9f1e41a66e8a97fc30e9cd364ade57d6e31692d39e2e82fd8376c0d11c5a4580340ccd33fde8f926eae5b62f77eb070a1db4f
-  data.tar.gz: 33c8ef9e1280c12db4c3e082f0d0ccd4a8d1a971defa5069a8ce5cc03d466f43d07ce5ad352ad2f4c3d527457e2db466b38caf65a2c161e935d1062fdc8c8458
+  metadata.gz: 7f8290ba4bfd3e5b6ea96f3ebc2d29affa194cb37fea6ab947cf0ccf486155f8d6f9cd2bd68092b09ea7ae0ec5bd0367f7ab22c8b01ed6812a676860a9bca2b3
+  data.tar.gz: 33bd0e51040f64f0d92caa34d7e5061118eba8e1fa533056e07f15da2d0f2f71a70894389a980f3d445e9eaccdb83604a10d2121ba4a4403b3e2661d770b78be

data/lib/dependabot/bundler/file_updater/lockfile_updater.rb

@@ -90,6 +90,10 @@ module Dependabot
                   )
                 end
 
+                # Equivalent of running --full-index. Ensures recent
+                # dependencies are always fetched, and fixes Artifactory issues
+                ::Bundler::Fetcher.disable_endpoint
+
                 generate_lockfile
               end
             end

data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb

@@ -36,7 +36,6 @@ module Dependabot
         #########################
 
         def in_a_temporary_bundler_context(error_handling: true)
-          base_directory = dependency_files.first.directory
           SharedHelpers.in_a_temporary_directory(base_directory) do |tmp_dir|
             write_temporary_dependency_files
 
@@ -58,6 +57,10 @@ module Dependabot
                 )
               end
 
+              # Equivalent of running --full-index. Ensures recent dependencies
+              # are always fetched, and fixes Artifactory issues
+              ::Bundler::Fetcher.disable_endpoint
+
               yield
             end
           end
@@ -68,10 +71,11 @@ module Dependabot
             sleep(rand(1.0..5.0)) && retry
           end
 
-          raise unless error_handling
+          error_handling ? handle_bundler_errors(e) : raise
+        end
 
-          # Raise more descriptive errors
-          handle_bundler_errors(e)
+        def base_directory
+          dependency_files.first.directory
         end
 
         def retryable_error?(error)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.106.32
+  version: 0.106.33
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-05-03 00:00:00.000000000 Z
+date: 2019-05-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.32
+        version: 0.106.33
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.32
+        version: 0.106.33
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement