dependabot-bundler 0.109.0 → 0.109.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5b24e140a17c4297f18646dc8342374eac943226879128787f3c66e93b0dd342
-  data.tar.gz: f36ada94e2d0dd76866dbb16bcffa7b5a0f353766219be4189b02e89b0608bec
+  metadata.gz: 619f8f7c92629a8b6357286f88ff778c2e0b09f6fb30be3cdd4ba64d221fa0e5
+  data.tar.gz: b7b91e27a3daad9254cd74d0416329f1cce492bb5e160872a38a5ef0bdb2291b
 SHA512:
-  metadata.gz: dcc0538af9f2d8e402d80dfc808587f1bcf7774f1006f809b28f7ab8a5875f2ed3f51c346c5dc18b6d4c2d850633f319fb771e708eb50788c84d062e7aaedb76
-  data.tar.gz: 41123eaa3af5098568220313d767c82aba0abbef4d508b2210c97f86fa2660af773ec10f555b6429fb53678eb34ebcf2320dca12d9cbe1b5d365f0640278f739
+  metadata.gz: 39eb8c10c6fd293c1a99171fe57bd0a14a9f857cc94ba3b6be62f0049dddfa790de805fd6c0127654fb226c3dafa316347433c0fcd00155a6b14c9fee6c42ff1
+  data.tar.gz: e95f103fc702d53ba568a5406618c96f572f61b862e37df1b27b0da666cf24fdfa7ccef95dd7ed70b4055c95cbb440674637ba685f865982bd06fc0be2640e13

data/lib/dependabot/bundler/update_checker/requirements_updater.rb

@@ -253,28 +253,35 @@ module Dependabot
 
         # Updates the version in a "<" or "<=" constraint to allow the given
         # version
+        # rubocop:disable Metrics/AbcSize
+        # rubocop:disable Metrics/PerceivedComplexity
         def update_greatest_version(requirement, version_to_be_permitted)
           if version_to_be_permitted.is_a?(String)
-            version_to_be_permitted =
-              Gem::Version.new(version_to_be_permitted)
+            version_to_be_permitted = Gem::Version.new(version_to_be_permitted)
           end
           op, version = requirement.requirements.first
           version = version.release if version.prerelease?
 
-          index_to_update =
-            version.segments.map.with_index { |seg, i| seg.zero? ? 0 : i }.max
+          index_to_update = [
+            version.segments.map.with_index { |seg, i| seg.zero? ? 0 : i }.max,
+            version_to_be_permitted.segments.count - 1
+          ].min
 
           new_segments = version.segments.map.with_index do |_, index|
             if index < index_to_update
               version_to_be_permitted.segments[index]
             elsif index == index_to_update
               version_to_be_permitted.segments[index] + 1
+            elsif index > version_to_be_permitted.segments.count - 1
+              nil
             else 0
             end
-          end
+          end.compact
 
           Gem::Requirement.new("#{op} #{new_segments.join('.')}")
         end
+        # rubocop:enable Metrics/AbcSize
+        # rubocop:enable Metrics/PerceivedComplexity
       end
     end
   end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.109.0
+  version: 0.109.1
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.109.0
+        version: 0.109.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.109.0
+        version: 0.109.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement