dependabot-bundler 0.95.74 → 0.95.75

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4af9277b070fd69e9ca22e4237e6996624c8a79d6287d7347a0ce0a5b36e7840
-  data.tar.gz: b522f78272c0150ae2b76766323cbfe964aaeb4607b711a740a54efff4ceae87
+  metadata.gz: 10825068a3dce94f37767724e86315db9bcaa3e5fae76a1747f663985d504acd
+  data.tar.gz: 1c2d2fae2d4e97c2309d1122eb4938865f8ab813553a4a6b643d03c69ceaf6a1
 SHA512:
-  metadata.gz: bf415ca11f6304c3fb390c6f550e169cf58fd76b3fc893eeb5a2ccc5990ae2d181cef7c85145a005cef729c6922daf070073f5e404d6c93616dd8a394366d32c
-  data.tar.gz: 9f106762dad279e26d91e496cf2cb7f7e062cf117a81e20706682450f59ccd9109f37949e1649cce547c46ee786d5dc9632c6996ffce0cb7c0e2ee93d6f98d4c
+  metadata.gz: 0c522098f59d17e483126e21260d6dd4073f90c27723a503ce828783d111f4bf3919c2fbd345867c022423f4558feb21aca4d6c3f31d1bc16e687fe61174d57b
+  data.tar.gz: f10f5ab6557c18ce1860cd0df75d8e98f59feccf2405ab8bf66f32f04f7f5cff67e0b5bd64aa6b78452a7136930ae9b28881e44250cbf4bfa59ffa072a138fda

data/lib/dependabot/bundler/file_updater/gemspec_sanitizer.rb

@@ -68,6 +68,12 @@ module Dependabot
             remove_unnecessary_assignments(node)
           end
 
+          def on_const(node)
+            # Remove any uses of a VERSION constant (or similar), as
+            # that constant probably comes from a required file
+            replace_version_constant_references(node)
+          end
+
           private
 
           attr_reader :replacement_version
@@ -96,6 +102,18 @@ module Dependabot
             node.children.each { |child| replace_version_assignments(child) }
           end
 
+          def replace_version_constant_references(node)
+            return unless node.is_a?(Parser::AST::Node)
+
+            if node_is_version_constant?(node)
+              return replace(node.loc.expression, %("#{replacement_version}"))
+            end
+
+            node.children.each do |child|
+              replace_version_constant_references(child)
+            end
+          end
+
           def replace_file_assignments(node)
             return unless node.is_a?(Parser::AST::Node)
 
@@ -246,7 +264,7 @@ module Dependabot
           def replace_constant(node)
             case node.children.last&.type
             when :str, :int then nil # no-op
-            when :const, :send, :lvar
+            when :const, :send, :lvar, :if
               replace(
                 node.children.last.loc.expression,
                 %("#{replacement_version}")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.95.74
+  version: 0.95.75
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-02-26 00:00:00.000000000 Z
+date: 2019-02-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.74
+        version: 0.95.75
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.74
+        version: 0.95.75
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement