dependabot-bundler 0.383.0 → 0.384.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d1ba21c738892e21622391ab82718a15bc4fbd0ba49080dde90ed4fa917cfe61
-  data.tar.gz: 809f4495fbc61b082895ec1e411be55abe73f57655dcbfdaca818e5d83e36594
+  metadata.gz: 3daa49f0b7badcac1b05d18da5a85120669028a0e05217e9f25909841c90593c
+  data.tar.gz: 86a858104d17f0050cbede5e5d9d815a47b2c0ee36ba844d4777f71a70840549
 SHA512:
-  metadata.gz: 30e9d815ca521d360711378caf668148ad4d75e62ccb42e851e9200fc309e08bf57c4cb2e841143c086e1087a061f90bfb19778c7d9e2e30ce1229eaf5335ee0
-  data.tar.gz: 3f13429240d46f3f0a942db18625b095bdceb4df72a0ea71b7e26779ed58ec1259927e604881d8420a756a493fe93d97671aef547091ca3d7161b3b5f2a7ea80
+  metadata.gz: 57636ebdc4fa11bebb74e6839df1d363dcb6db1e381b2070c5e81f76301ada8d747c36965c85c269cc25cd6a4ecc5b2d7312d3d9f3eeadc7c9b48e2d61fdedb1
+  data.tar.gz: 7907b9f4b766c2e080a0d2842c5cf3b10fc8c02dbfdfdf2f545366ecdf4c6566e8dcffa89783e83d6b65c4884da627624f98a469a8b93a24d20f9ac28752427f

data/helpers/v2/monkey_patches/definition_ruby_version_patch.rb

@@ -26,7 +26,7 @@ module BundlerDefinitionRubyVersionPatch
         Gem::Specification.new("Ruby\0", requested_version)
     end
 
-    %w(2.5.3 2.6.10 2.7.8 3.0.7 3.1.6 3.2.8 3.3.8 3.4.8).each do |version|
+    %w(2.5.3 2.6.10 2.7.8 3.0.7 3.1.7 3.2.11 3.3.11 3.4.9).each do |version|
       sources.metadata_source.specs << Gem::Specification.new("Ruby\0", version)
     end
 

data/helpers/v4/monkey_patches/definition_ruby_version_patch.rb

@@ -26,7 +26,7 @@ module BundlerDefinitionRubyVersionPatch
         Gem::Specification.new("Ruby\0", requested_version)
     end
 
-    %w(2.5.3 2.6.10 2.7.8 3.0.7 3.1.6 3.2.8 3.3.8 3.4.8).each do |version|
+    %w(2.5.3 2.6.10 2.7.8 3.0.7 3.1.7 3.2.11 3.3.11 3.4.9).each do |version|
       sources.metadata_source.specs << Gem::Specification.new("Ruby\0", version)
     end
 

data/lib/dependabot/bundler/file_updater/gemspec_sanitizer.rb

@@ -1,7 +1,8 @@
 # typed: strict
 # frozen_string_literal: true
 
-require "parser/current"
+require "parser"
+require "prism"
 require "dependabot/bundler/file_updater"
 
 module Dependabot
@@ -37,7 +38,7 @@ module Dependabot
         def rewrite(content)
           buffer = Parser::Source::Buffer.new("(gemspec_content)")
           buffer.source = content
-          ast = Parser::CurrentRuby.new.parse(buffer)
+          ast = Prism::Translation::ParserCurrent.new.parse(buffer)
 
           updated_content =
             Rewriter

data/lib/dependabot/bundler/file_updater/git_pin_replacer.rb

@@ -2,7 +2,8 @@
 # frozen_string_literal: true
 
 require "sorbet-runtime"
-require "parser/current"
+require "parser"
+require "prism"
 require "dependabot/bundler/file_updater"
 
 module Dependabot
@@ -27,7 +28,7 @@ module Dependabot
         def rewrite(content)
           buffer = Parser::Source::Buffer.new("(gemfile_content)")
           buffer.source = content
-          ast = Parser::CurrentRuby.new.parse(buffer)
+          ast = Prism::Translation::ParserCurrent.new.parse(buffer)
 
           Rewriter
             .new(dependency: dependency, new_pin: new_pin)

data/lib/dependabot/bundler/file_updater/git_source_remover.rb

@@ -1,7 +1,8 @@
 # typed: strict
 # frozen_string_literal: true
 
-require "parser/current"
+require "parser"
+require "prism"
 require "sorbet-runtime"
 
 require "dependabot/bundler/file_updater"
@@ -24,7 +25,7 @@ module Dependabot
         def rewrite(content)
           buffer = Parser::Source::Buffer.new("(gemfile_content)")
           buffer.source = content
-          ast = Parser::CurrentRuby.new.parse(buffer)
+          ast = Prism::Translation::ParserCurrent.new.parse(buffer)
 
           Rewriter.new(dependency: dependency).rewrite(buffer, ast)
         end

data/lib/dependabot/bundler/file_updater/requirement_replacer.rb

@@ -1,7 +1,8 @@
 # typed: strict
 # frozen_string_literal: true
 
-require "parser/current"
+require "parser"
+require "prism"
 require "sorbet-runtime"
 
 require "dependabot/bundler/file_updater"
@@ -53,7 +54,7 @@ module Dependabot
 
           buffer = Parser::Source::Buffer.new("(gemfile_content)")
           buffer.source = content
-          ast = Parser::CurrentRuby.new.parse(buffer)
+          ast = Prism::Translation::ParserCurrent.new.parse(buffer)
 
           updated_content = Rewriter.new(
             dependency: dependency,

data/lib/dependabot/bundler/file_updater/ruby_requirement_setter.rb

@@ -1,7 +1,8 @@
 # typed: strict
 # frozen_string_literal: true
 
-require "parser/current"
+require "parser"
+require "prism"
 require "sorbet-runtime"
 
 require "dependabot/bundler/file_updater"
@@ -15,7 +16,7 @@ module Dependabot
         extend T::Sig
 
         RUBY_VERSIONS = %w(
-          1.8.7 1.9.3 2.0.0 2.1.10 2.2.10 2.3.8 2.4.10 2.5.9 2.6.9 2.7.6 3.0.6 3.1.6 3.2.8 3.3.8 3.4.8
+          1.8.7 1.9.3 2.0.0 2.1.10 2.2.10 2.3.8 2.4.10 2.5.9 2.6.10 2.7.8 3.0.7 3.1.7 3.2.11 3.3.11 3.4.9 4.0.5
         ).freeze
 
         LANGUAGE = "ruby"
@@ -34,7 +35,7 @@ module Dependabot
 
           buffer = Parser::Source::Buffer.new("(gemfile_content)")
           buffer.source = content
-          ast = Parser::CurrentRuby.new.parse(buffer)
+          ast = Prism::Translation::ParserCurrent.new.parse(buffer)
 
           if declares_ruby_version?(ast)
             GemfileRewriter.new(
@@ -87,7 +88,7 @@ module Dependabot
         # rubocop:disable Security/Eval
         sig { returns(T.untyped) }
         def ruby_requirement
-          ast = Parser::CurrentRuby.parse(gemspec.content)
+          ast = Prism::Translation::ParserCurrent.parse(gemspec.content)
           requirement_node = find_ruby_requirement_node(ast)
           return unless requirement_node
 

data/lib/dependabot/bundler/package/package_details_fetcher.rb

@@ -3,7 +3,6 @@
 
 require "json"
 require "time"
-require "cgi"
 require "excon"
 require "nokogiri"
 require "sorbet-runtime"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.383.0
+  version: 0.384.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.383.0
+        version: 0.384.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.383.0
+        version: 0.384.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -351,7 +351,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.383.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.384.0
 rdoc_options: []
 require_paths:
 - lib
@@ -366,7 +366,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 3.3.0
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 4.0.14
 specification_version: 4
 summary: Provides Dependabot support for Ruby (bundler)
 test_files: []