dependabot-bundler 0.111.55 → 0.111.56

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3f895bf22bde52b1e33294771af9dd313f27c350038a05e87fda048027c47e9c
-  data.tar.gz: 7a2587a78b4ca9ea5d5a1761eedf815bd646fdff08d5d1e2f1ed69db6834e2c8
+  metadata.gz: 30aa64b87532695481e1d9de1ebed56f7ae4ca05c287973d001753a50b0637e0
+  data.tar.gz: dc78680bd6c11e1ab87344247d0a7935ea57c3e9e8ac9bd615b35db461382888
 SHA512:
-  metadata.gz: 0a3ac76c18ca75f8e8b3e6719fbaaa058156628488f3d850f342e61292edaa9d52762543202ac4b9022039540aca2963607e0bfeb0624f58187b9e70e653d020
-  data.tar.gz: 70d4b77f6e9feb8bad8353625e9bd65e0c44a845f8b60029d1775d9453148cfcbda810ea6c7425d50aa6cbdea7c3cf12aafc6315876da31554d7ee5d783f80d6
+  metadata.gz: 071b3e836140f90d717699f5b113d65935b53963ef036443b7f64c1efebc25ce2f8c872de3f54c5c6d74664f567a54b37794c3b19eec2c83491a2dcd7725ee01
+  data.tar.gz: b4b72924be60499b496dcbdccdc0dd2ab3095168896f3ec392e1506766a2fe07b00018174b1cc1c478e2ace1cc131fca3a31c9bfc1e5bcf1d20f475d578e2077

data/lib/dependabot/bundler/file_fetcher.rb

@@ -159,16 +159,15 @@ module Dependabot
 
       def fetch_gemspecs_from_directory(dir_path)
         repo_contents(dir: dir_path, fetch_submodules: true).
-          select { |f| f.name.end_with?(".gemspec") }.
+          select { |f| f.name.end_with?(".gemspec", ".specification") }.
           map { |f| File.join(dir_path, f.name) }.
           map { |fp| fetch_file_from_host(fp, fetch_submodules: true) }
       end
 
       def fetch_path_gemspec_paths
         if lockfile
-          parsed_lockfile = ::Bundler::LockfileParser.new(
-            sanitized_lockfile_content
-          )
+          parsed_lockfile = ::Bundler::LockfileParser.
+                            new(sanitized_lockfile_content)
           parsed_lockfile.specs.
             select { |s| s.source.instance_of?(::Bundler::Source::Path) }.
             map { |s| s.source.path }.uniq

data/lib/dependabot/bundler/file_parser/file_preparer.rb

@@ -29,7 +29,8 @@ module Dependabot
             *evaled_gemfiles,
             lockfile,
             ruby_version_file,
-            *imported_ruby_files
+            *imported_ruby_files,
+            *specification_files
           ].compact
         end
 
@@ -45,6 +46,7 @@ module Dependabot
         def evaled_gemfiles
           dependency_files.
             reject { |f| f.name.end_with?(".gemspec") }.
+            reject { |f| f.name.end_with?(".specification") }.
             reject { |f| f.name.end_with?(".lock") }.
             reject { |f| f.name.end_with?(".ruby-version") }.
             reject { |f| f.name == "Gemfile" }.
@@ -52,6 +54,10 @@ module Dependabot
             reject { |f| f.name == "gems.locked" }
         end
 
+        def specification_files
+          dependency_files.select { |f| f.name.end_with?(".specification") }
+        end
+
         def lockfile
           dependency_files.find { |f| f.name == "Gemfile.lock" } ||
             dependency_files.find { |f| f.name == "gems.locked" }

data/lib/dependabot/bundler/file_parser.rb

@@ -265,6 +265,7 @@ module Dependabot
       def evaled_gemfiles
         dependency_files.
           reject { |f| f.name.end_with?(".gemspec") }.
+          reject { |f| f.name.end_with?(".specification") }.
           reject { |f| f.name.end_with?(".lock") }.
           reject { |f| f.name.end_with?(".ruby-version") }.
           reject { |f| f.name == "Gemfile" }.

data/lib/dependabot/bundler/file_updater/lockfile_updater.rb

@@ -247,6 +247,12 @@ module Dependabot
             FileUtils.mkdir_p(Pathname.new(path).dirname)
             File.write(path, sanitized_gemspec_content(file.content))
           end
+
+          specification_files.each do |file|
+            path = file.name
+            FileUtils.mkdir_p(Pathname.new(path).dirname)
+            File.write(path, file.content)
+          end
         end
 
         def write_imported_ruby_files
@@ -403,6 +409,7 @@ module Dependabot
           @evaled_gemfiles ||=
             dependency_files.
             reject { |f| f.name.end_with?(".gemspec") }.
+            reject { |f| f.name.end_with?(".specification") }.
             reject { |f| f.name.end_with?(".lock") }.
             reject { |f| f.name.end_with?(".ruby-version") }.
             reject { |f| f.name == "Gemfile" }.
@@ -411,6 +418,10 @@ module Dependabot
             reject(&:support_file?)
         end
 
+        def specification_files
+          dependency_files.select { |f| f.name.end_with?(".specification") }
+        end
+
         def git_dependency?(dep)
           GitCommitChecker.new(
             dependency: dep,

data/lib/dependabot/bundler/file_updater.rb

@@ -82,6 +82,7 @@ module Dependabot
         @evaled_gemfiles ||=
           dependency_files.
           reject { |f| f.name.end_with?(".gemspec") }.
+          reject { |f| f.name.end_with?(".specification") }.
           reject { |f| f.name.end_with?(".lock") }.
           reject { |f| f.name.end_with?(".ruby-version") }.
           reject { |f| f.name == "Gemfile" }.

data/lib/dependabot/bundler/update_checker/file_preparer.rb

@@ -89,7 +89,12 @@ module Dependabot
           end
 
           # No editing required for lockfile or Ruby version file
-          files += [lockfile, ruby_version_file, *imported_ruby_files].compact
+          files += [
+            lockfile,
+            ruby_version_file,
+            *imported_ruby_files,
+            *specification_files
+          ].compact
         end
         # rubocop:enable Metrics/AbcSize
         # rubocop:enable Metrics/MethodLength
@@ -119,6 +124,7 @@ module Dependabot
         def evaled_gemfiles
           dependency_files.
             reject { |f| f.name.end_with?(".gemspec") }.
+            reject { |f| f.name.end_with?(".specification") }.
             reject { |f| f.name.end_with?(".lock") }.
             reject { |f| f.name.end_with?(".ruby-version") }.
             reject { |f| f.name == "Gemfile" }.
@@ -131,6 +137,10 @@ module Dependabot
             dependency_files.find { |f| f.name == "gems.locked" }
         end
 
+        def specification_files
+          dependency_files.select { |f| f.name.end_with?(".specification") }
+        end
+
         def top_level_gemspecs
           dependency_files.
             select { |f| f.name.end_with?(".gemspec") }.

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.111.55
+  version: 0.111.56
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.55
+        version: 0.111.56
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.55
+        version: 0.111.56
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement