dependabot-bundler 0.182.0 → 0.182.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3e57188bd1df112be594b310a3cab71c8b8541e83d1fd61be7e7ce2a3f141720
-  data.tar.gz: b78a75e3514f9ada72f9ba77e529e2126db93a4043f5b4622e09d644b41984e4
+  metadata.gz: a646582e11ac99784db11b5db04033df6208e758888b7d3436aa77fff02e036f
+  data.tar.gz: cd0b0cf18bd9158a944c132736f6166896e1b182f5814431487801e0c39519fa
 SHA512:
-  metadata.gz: f947e37c1ffce4c8fd0f5c9c8f4895dca8c2a08002499c90565d3befd0a4b94c449f222571ec43e0e73a089a3601c683a4bde4ba4419fa5faa191df364180213
-  data.tar.gz: 4a67bc46c197fe3684df0cc5d414497b11f9843fa0f281e9461e2447d663e059d6d7ae762c7bede10a2a2d1077e27e5b4aea2a6efd70ad0ac7f30945d07da0f4
+  metadata.gz: 3395219563c7ad5e2947b6f84c98ad78a83034e8f996fe74247c837c544f6ba589d87f508095eb77dc3aa014436190281262df388ffaa5e3cc05350866d38c78
+  data.tar.gz: 7d217aa73323b85ca1b03204006fa3f6e948ba7e20fd10f0907f3acdb03b498d571516a0bd4ffc350237c5235e1562445ad3a10120f1b9c10c8bf812a828984a

data/helpers/v2/build

@@ -22,6 +22,6 @@ cd "$install_dir"
 
 # NOTE: Sets `BUNDLED WITH` to match the installed v2 version in Gemfile.lock
 # forcing specs and native helpers to run with the same version
-BUNDLER_VERSION=2.3.10 bundle config --local path ".bundle"
-BUNDLER_VERSION=2.3.10 bundle config --local without "test"
-BUNDLER_VERSION=2.3.10 bundle install
+BUNDLER_VERSION=2.3.12 bundle config --local path ".bundle"
+BUNDLER_VERSION=2.3.12 bundle config --local without "test"
+BUNDLER_VERSION=2.3.12 bundle install

data/helpers/v2/monkey_patches/definition_ruby_version_patch.rb

@@ -5,16 +5,32 @@ require "bundler/definition"
 module BundlerDefinitionRubyVersionPatch
   def source_requirements
     if ruby_version
-      requested_version = ruby_version.to_gem_version_with_patchlevel
+      requested_version = ruby_version.gem_version
       sources.metadata_source.specs <<
         Gem::Specification.new("Ruby\0", requested_version)
     end
 
     sources.metadata_source.specs <<
-      Gem::Specification.new("Ruby\0", "2.5.3p105")
+      Gem::Specification.new("Ruby\0", "2.5.3")
 
     super
   end
+
+  def metadata_dependencies
+    @metadata_dependencies ||=
+      [
+        Bundler::Dependency.new("Ruby\0", ruby_version_requirements),
+        Bundler::Dependency.new("RubyGems\0", Gem::VERSION)
+      ]
+  end
+
+  def ruby_version_requirements
+    return [] unless ruby_version
+
+    ruby_version.versions.map do |version|
+      Gem::Requirement.new(version)
+    end
+  end
 end
 
 Bundler::Definition.prepend(BundlerDefinitionRubyVersionPatch)

data/lib/dependabot/bundler/file_updater/lockfile_updater.rb

@@ -16,6 +16,7 @@ module Dependabot
         require_relative "gemspec_updater"
         require_relative "gemspec_sanitizer"
         require_relative "gemspec_dependency_name_finder"
+        require_relative "ruby_requirement_setter"
 
         LOCKFILE_ENDING =
           /(?<ending>\s*(?:RUBY VERSION|BUNDLED WITH).*)/m.freeze
@@ -82,7 +83,7 @@ module Dependabot
         end
 
         def write_temporary_dependency_files
-          File.write(gemfile.name, updated_gemfile_content(gemfile))
+          File.write(gemfile.name, prepared_gemfile_content(gemfile))
           File.write(lockfile.name, sanitized_lockfile_body)
 
           top_level_gemspecs.each do |gemspec|
@@ -222,6 +223,16 @@ module Dependabot
         end
         # rubocop:enable Metrics/PerceivedComplexity
 
+        def prepared_gemfile_content(file)
+          content = updated_gemfile_content(file)
+
+          top_level_gemspecs.each do |gs|
+            content = RubyRequirementSetter.new(gemspec: gs).rewrite(content)
+          end
+
+          content
+        end
+
         def updated_gemfile_content(file)
           GemfileUpdater.new(
             dependencies: dependencies,

data/lib/dependabot/bundler/helpers.rb

@@ -4,7 +4,7 @@ module Dependabot
   module Bundler
     module Helpers
       V1 = "1.17.3"
-      V2 = "2.3.10"
+      V2 = "2.3.12"
       # If we are updating a project with no Gemfile.lock, we default to the
       # newest version we support
       DEFAULT = V2

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.182.0
+  version: 0.182.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-20 00:00:00.000000000 Z
+date: 2022-04-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.182.0
+        version: 0.182.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.182.0
+        version: 0.182.1
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement