dependabot-bundler 0.111.11 → 0.111.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9682c23792358c90265a17b3d1f814e3bb94bf68e0e1c6ba094c1af2507f3de0
-  data.tar.gz: e48390f6ff6724665f497732bbc1757440625f4b4fca1b4ea005c270d6f6f798
+  metadata.gz: 5213783a7eefdbb11ec239b5c2b1354f4d4495e12579f7a461c3b995d0bd550b
+  data.tar.gz: e056971a32402d53e88d979b536e517dc22dcbac8e9981dc4bfe0141aa83475b
 SHA512:
-  metadata.gz: b244bdb59e989d234d1c3dd3efbeef0401c5800d149623f39be63e7833480ae008cbbeca032b5977b9e789d8c9ac2bc5e43e19f2d03564f549b9d8032336429a
-  data.tar.gz: 84fef7e5770f7a40d7e58db121f49e35c9a4626c2f1c0b62a799fd8b650cfa04f6ff86d48f7d779ac4fd7da3e505269402bc2a333b970d339425823d4db25ce2
+  metadata.gz: 29cf37f1c0f69e8b284468a25bb7bffa9e198e9d520d684c04e51e1b08caa188a887fcc53ef7e6663f0fba1d497817bf567e9d36aa6dd2f4dd5b68c3f91c4a34
+  data.tar.gz: 1305358d0caf396a0d3116772454af5c7a05af37ed6f1f370ac50abde0d07bd55f9f05de922f9a996dd986cc3ad43596884ffb0af8d5df3ffa01e9d3b31bd4bd

data/lib/dependabot/bundler/file_updater/gemspec_sanitizer.rb

@@ -69,6 +69,9 @@ module Dependabot
             # Replace any `File.read(...)` calls with a dummy string
             replace_file_reads(node)
 
+            # Replace any `JSON.parse(...)` calls with a dummy hash
+            replace_json_parses(node)
+
             # Remove the arguments from any `Find.find(...)` calls
             remove_find_dot_find_args(node)
 
@@ -193,6 +196,23 @@ module Dependabot
             node.children[1] == :readlines
           end
 
+          def replace_json_parses(node)
+            return unless node.is_a?(Parser::AST::Node)
+            return if node.children[1] == :version=
+            return replace_json_parse(node) if node_parses_json?(node)
+
+            node.children.each { |child| replace_json_parses(child) }
+          end
+
+          def node_parses_json?(node)
+            return false unless node.is_a?(Parser::AST::Node)
+            return false unless node.children.first.is_a?(Parser::AST::Node)
+            return false unless node.children.first&.type == :const
+            return false unless node.children.first.children.last == :JSON
+
+            node.children[1] == :parse
+          end
+
           def remove_find_dot_find_args(node)
             return unless node.is_a?(Parser::AST::Node)
             return if node.children[1] == :version=
@@ -298,6 +318,13 @@ module Dependabot
             replace(node.loc.expression, %("#{replacement_version}"))
           end
 
+          def replace_json_parse(node)
+            replace(
+              node.loc.expression,
+              %({ "version" => "#{replacement_version}" })
+            )
+          end
+
           def replace_file_readlines(node)
             replace(node.loc.expression, %(["#{replacement_version}"]))
           end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.111.11
+  version: 0.111.12
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.11
+        version: 0.111.12
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.11
+        version: 0.111.12
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement