dependabot-bundler 0.108.24 → 0.108.25

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e703f59040ae75933ed8d58ed7da6f1b8210c900b3f5149a459b12a38d0e185e
-  data.tar.gz: f0f7cd8ba99d6afeaa67280376269b00c2b91aa487db34caca0ae04e0f51858d
+  metadata.gz: f3579ce9ab11965cc6adf3c8e92731d09e769ddb175fb4fe3d0efdde61c167d5
+  data.tar.gz: 0a571f739cb32ab37a4080783248c1afd800747c819f593c817b71045f636cf4
 SHA512:
-  metadata.gz: 855e5c174b4a7dfae0519fd033b60d69fb36a48a40470c97e4a73eb0bb7b636721da3da9cdf225c726dcd9e0da1af788cd18549c942809fed1fb56378fff8546
-  data.tar.gz: 9df52bc76f9128fd05fd5da65ceb1e9965302945b49efa0af4955caab5cb2f06189a0d75d3078ca0457706a97febc1d6cb3a55b98f4acc30adb715e05328e541
+  metadata.gz: 61375aada99c2319798aab1b767903ae20b8cf2828c8e2fb03c3ec11c19797171bdd43c2560f45dd8d72bcad8c759a982325867312b577ca4510b6629038d77b
+  data.tar.gz: 3bab2058a5d62f0131f746878eab25d6599b46348bd0b8ce7cdbac81d8bc991d7ca972c43c1302e6f23064bb79e3e8f84b396a890d808190d0889635641d80c3

data/lib/dependabot/bundler/update_checker.rb

@@ -158,6 +158,25 @@ module Dependabot
           end
       end
 
+      def git_tag_resolvable?(tag)
+        @git_tag_resolvable ||= {}
+        return @git_tag_resolvable[tag] if @git_tag_resolvable.key?(tag)
+
+        @git_tag_resolvable[tag] =
+          begin
+            VersionResolver.new(
+              dependency: dependency,
+              unprepared_dependency_files: dependency_files,
+              credentials: credentials,
+              ignored_versions: ignored_versions,
+              replacement_git_pin: tag
+            ).latest_resolvable_version_details
+            true
+          rescue Dependabot::DependencyFileNotResolvable
+            false
+          end
+      end
+
       def latest_version_details(remove_git_source: false)
         @latest_version_details ||= {}
         @latest_version_details[remove_git_source] ||=
@@ -253,7 +272,7 @@ module Dependabot
         latest_tag_details = git_commit_checker.local_tag_for_latest_version
         return false unless latest_tag_details
 
-        resolvable?(latest_tag_details.fetch(:version))
+        git_tag_resolvable?(latest_tag_details.fetch(:tag))
       end
 
       def git_branch_or_ref_in_release?(release)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.108.24
+  version: 0.108.25
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.108.24
+        version: 0.108.25
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.108.24
+        version: 0.108.25
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement