dependabot-bundler 0.98.31 → 0.98.32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9d62c98291695b78c000b8c556ba06633d5e9c89e10130905360ba2212773adb
-  data.tar.gz: 6cce373e8a2a0c186426866e7126d86c1e8164f228df942db33954c590d46754
+  metadata.gz: 6cdfc7c9aa4b92c745867f1a67629b935830a79af1b1240026428db173991458
+  data.tar.gz: 83565f42e3c62fe6c539de65319717ea9776eaf48bb13eb4bb6ac852c351af8b
 SHA512:
-  metadata.gz: 28aa8a5bb65ae22a2d2ed285b22456f848b65d04f4b3b21acf30d2a63ed396ae36ecc11dc07fe1940a90e1e8bba08c3879a9012f03671bd1c01e566de2dba642
-  data.tar.gz: 761335aa5c41a3bb819b5cb6380fa0cf6fc990e41662439045f683afd9489d62b06a8fdf9306e98de4e54f8e37140b31e942dc9747fc7ac25da0f6803bc1612b
+  metadata.gz: 4f5b084f43714fdbdb33a01cd2f781d6e68095fa6aa321460fea4d2ce66fd501c92b192ef513757cd024785a018cc56e48a905f654d2b9725cddf1e6dedf047a
+  data.tar.gz: cd9d828a9b9dda9027210e51c9889ba1441c1754042d4d533917bee3b5dff4c313a98c3731dbb360a42b573bc9b93d17542995985d4bc28048c1f558746b9d1f

data/lib/dependabot/bundler/file_updater/lockfile_updater.rb

@@ -330,12 +330,14 @@ module Dependabot
         end
 
         def relevant_credentials
-          credentials.select do |cred|
-            next true if cred["type"] == "git_source"
-            next true if cred["type"] == "rubygems_server"
+          credentials.
+            select { |cred| cred["password"] || cred["token"] }.
+            select do |cred|
+              next true if cred["type"] == "git_source"
+              next true if cred["type"] == "rubygems_server"
 
-            false
-          end
+              false
+            end
         end
 
         def updated_gemfile_content(file)

data/lib/dependabot/bundler/metadata_finder.rb

@@ -220,7 +220,7 @@ module Dependabot
           credentials.
           select { |cred| cred["type"] == "rubygems_server" }.
           find { |cred| registry_url.include?(cred["host"]) }&.
-          fetch("token")
+          fetch("token", nil)
 
         return {} unless token
 

data/lib/dependabot/bundler/update_checker/force_updater.rb

@@ -246,12 +246,14 @@ module Dependabot
         end
 
         def relevant_credentials
-          credentials.select do |cred|
-            next true if cred["type"] == "git_source"
-            next true if cred["type"] == "rubygems_server"
+          credentials.
+            select { |cred| cred["password"] || cred["token"] }.
+            select do |cred|
+              next true if cred["type"] == "git_source"
+              next true if cred["type"] == "rubygems_server"
 
-            false
-          end
+              false
+            end
         end
       end
     end

data/lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb

@@ -221,15 +221,21 @@ module Dependabot
         end
 
         def relevant_credentials
-          private_registry_credentials + git_source_credentials
+          [
+            *git_source_credentials,
+            *private_registry_credentials
+          ].select { |cred| cred["password"] || cred["token"] }
         end
 
         def private_registry_credentials
-          credentials.select { |cred| cred["type"] == "rubygems_server" }
+          credentials.
+            select { |cred| cred["type"] == "rubygems_server" }
         end
 
         def git_source_credentials
-          credentials.select { |cred| cred["type"] == "git_source" }
+          credentials.
+            select { |cred| cred["password"] || cred["token"] }.
+            select { |cred| cred["type"] == "git_source" }
         end
 
         def gemfile

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.98.31
+  version: 0.98.32
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-22 00:00:00.000000000 Z
+date: 2019-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.31
+        version: 0.98.32
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.31
+        version: 0.98.32
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement