dependabot-bundler 0.117.10 → 0.117.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce7d913a19c88b51e923e910d9a0dfcab34ce388d5bfadd88b1557b0a6cb5a9c
-  data.tar.gz: 1d560a7ed55773c9f93528b3f5884d21bcb02941dd80cf1c4418aa5d76e050a9
+  metadata.gz: 2948a844ac190f6d04d4aca42fc77129cfee23da3ade8ae92abed1570f2ad7f6
+  data.tar.gz: 7578230a33de7b16aed1026c8e2c9341b96e1f2a45893ea08c29eb68481186b3
 SHA512:
-  metadata.gz: 2e4263438eac92397101192dfe7570dd76a5c1c0dbd296c513cdea470988a0af25d7727eb936a3a6783cd17f7cfc16dc995c03022774295208b62eabbf36fc9a
-  data.tar.gz: e5a15c23be2113bf4aedcfea2e6b37da319c36c2f2c860a5c136b026663d12ce52693d24f0673f8ce225675ae349c9a9a9471e175c24cd814dfac9478ed61b6c
+  metadata.gz: 6562f412cd62871c0e27bbfc6a378b8e625ca93e7868b001c65403d39f823bf782c75bc07edc374ae13e946114691b9f95655d1625a121dd9a74d8ce3aabd145
+  data.tar.gz: 5a6d586ad3b76c2dde0f7e29a292a0ea722ba50635d1660176a8d0acad6834d713f1ea615c405a1e78b76d331c7434d7ac3829c6c05b8ab9d8394972dc15ffe0

data/lib/dependabot/bundler/update_checker.rb

@@ -167,6 +167,7 @@ module Dependabot
               unprepared_dependency_files: dependency_files,
               credentials: credentials,
               ignored_versions: ignored_versions,
+              raise_on_ignored: raise_on_ignored,
               replacement_git_pin: tag
             ).latest_resolvable_version_details
             true
@@ -348,6 +349,7 @@ module Dependabot
               unprepared_dependency_files: dependency_files,
               credentials: credentials,
               ignored_versions: ignored_versions,
+              raise_on_ignored: raise_on_ignored,
               remove_git_source: remove_git_source,
               unlock_requirement: unlock_requirement,
               latest_allowable_version: latest_version
@@ -369,6 +371,7 @@ module Dependabot
               dependency_files: prepared_dependency_files,
               credentials: credentials,
               ignored_versions: ignored_versions,
+              raise_on_ignored: raise_on_ignored,
               security_advisories: security_advisories
             )
           end

data/lib/dependabot/bundler/update_checker/latest_version_finder.rb

@@ -19,11 +19,13 @@ module Dependabot
         include SharedBundlerHelpers
 
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -57,8 +59,8 @@ module Dependabot
 
           relevant_versions = registry_versions
           relevant_versions = filter_prerelease_versions(relevant_versions)
-          relevant_versions = filter_ignored_versions(relevant_versions)
           relevant_versions = filter_vulnerable_versions(relevant_versions)
+          relevant_versions = filter_ignored_versions(relevant_versions)
           relevant_versions = filter_lower_versions(relevant_versions)
 
           relevant_versions.min
@@ -71,8 +73,13 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
-            reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+          filtered = versions_array.
+                     reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/bundler/update_checker/version_resolver.rb

@@ -25,6 +25,7 @@ module Dependabot
 
         def initialize(dependency:, unprepared_dependency_files:,
                        credentials:, ignored_versions:,
+                       raise_on_ignored: false,
                        replacement_git_pin: nil, remove_git_source: false,
                        unlock_requirement: true,
                        latest_allowable_version: nil)
@@ -32,6 +33,7 @@ module Dependabot
           @unprepared_dependency_files = unprepared_dependency_files
           @credentials                 = credentials
           @ignored_versions            = ignored_versions
+          @raise_on_ignored            = raise_on_ignored
           @replacement_git_pin         = replacement_git_pin
           @remove_git_source           = remove_git_source
           @unlock_requirement          = unlock_requirement
@@ -270,6 +272,7 @@ module Dependabot
               dependency_files: dependency_files,
               credentials: credentials,
               ignored_versions: ignored_versions,
+              raise_on_ignored: @raise_on_ignored,
               security_advisories: []
             ).latest_version_details
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.117.10
+  version: 0.117.11
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-21 00:00:00.000000000 Z
+date: 2020-05-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.117.11
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.117.11
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement