dependabot-bundler 0.227.0 → 0.228.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7023595adf12fbe47753c88f1f18a95d56ef336c503a76fdd1335c33b3bb8494
-  data.tar.gz: 2e100abbbdf9ac7c9768000c23386556a655c07022240f7a116f33361cbc11cf
+  metadata.gz: ebac6a7c9946a6ae4f667692707a5ffe26f8e6e2fa835313ae5b572d2996d3c3
+  data.tar.gz: 4169bdf566aeea7ca0b2015c0a2aaabb2a92881d7846b307fe8fe3f61bcc7489
 SHA512:
-  metadata.gz: 2834e755780893f71734a610865eb1575974aa20824b9ebd1a1e340c1c7824700eb7a4ae23546288f74da808228d1258ebe7e446d93af987fb3552db7764badd
-  data.tar.gz: d484aa2915784b4cbfafe2105982531471eb2bc86886f369a4d6797b7cce397243299b22edc33cda782e701d7f96fa812796350094bb716fc1cfc2c3f698d8d4
+  metadata.gz: 13014772dbb1504f74623f0a31c456b7110d5fc481159888a6d0a21247152dfb8871839fba07c554632ba9d6f7ce8d893a917b864d865d6c6196f9c1e506a351
+  data.tar.gz: 7337fb4b3d6bee80b1ace3de1d6a43cecdf5d266294cec46b51b7c61510693e7ead810a3203b516f3e9871eaecb00a6cff3fbb6fff0301b4083df90f5aa0bf95

data/helpers/v1/lib/functions.rb

@@ -127,7 +127,7 @@ module Functions
   end
 
   def self.set_bundler_flags_and_credentials(dir:, credentials:)
-    dir = dir ? Pathname.new(dir) : dir
+    dir = Pathname.new(dir) if dir
     Bundler.instance_variable_set(:@root, dir)
 
     # Remove installed gems from the default Rubygems index

data/helpers/v1/monkey_patches/resolver_spec_group_sane_eql.rb

@@ -8,7 +8,7 @@ require "bundler/resolver/spec_group"
 
 module BundlerResolverSpecGroupSaneEql
   def eql?(other)
-    return unless other.is_a?(self.class)
+    return false unless other.is_a?(self.class)
 
     super(other)
   end

data/helpers/v2/lib/functions.rb

@@ -129,7 +129,7 @@ module Functions
   end
 
   def self.set_bundler_flags_and_credentials(dir:, credentials:)
-    dir = dir ? Pathname.new(dir) : dir
+    dir = Pathname.new(dir) if dir
     Bundler.instance_variable_set(:@root, dir)
 
     # Remove installed gems from the default Rubygems index

data/lib/dependabot/bundler/native_helpers.rb

@@ -45,7 +45,9 @@ module Dependabot
             function: function,
             args: args,
             env: {
-              # Prevent the GEM_HOME from being set to a folder owned by root
+              # Set BUNDLE_PATH to a thread-safe location
+              "BUNDLE_PATH" => File.join(Dependabot::Utils::BUMP_TMP_DIR_PATH, ".bundle"),
+              # Set GEM_HOME to where the proper version of Bundler is installed
               "GEM_HOME" => File.join(helpers_path, ".bundle")
             }
           )

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.227.0
+  version: 0.228.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-08-18 00:00:00.000000000 Z
+date: 2023-08-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.227.0
+        version: 0.228.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.227.0
+        version: 0.228.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.50.0
+        version: 1.56.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -268,7 +268,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.227.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.228.0
 post_install_message: 
 rdoc_options: []
 require_paths: