dependabot-cargo 0.113.25 → 0.115.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e835a382965b5cdf3eb77ba93f08897b019738577fa0f8aa479169ad67c033f0
-  data.tar.gz: cdd0d442e36432e4764cc3d44f9479278b6932cc172d06c8b7a309ab4254d419
+  metadata.gz: dc08c1500ca48741ddaaf6622efcf20957201554c683a1b3e301563fc61ddba0
+  data.tar.gz: af8946dd87f66c1e7a694e678ee6f495b1bbea24011310d2d6a34deea7b3dcb6
 SHA512:
-  metadata.gz: 56316e04faf2fa659319d0763f89d1c9ad9a63351a45ac301b1353e79c276baf9b707b459d158020cfbdb9165f7cba3cc345f9e452dc610837638c1596f7b01c
-  data.tar.gz: d6a6f66e3de346a9a397c995ae4b22f7b40afece325bbced6919869e2784950ff872c244bb406bd55dba9d59bb6b3be504bbce51bda2127f9811c9d13ce59a4e
+  metadata.gz: 2ac934b3bd032940e2af2ee9c8ab9b28d80a5135eccf5c5b2e62f5e88829da5242b7579572f6db0b8750cb6c85493f979007b37352cb3cb1650fb26c7dc494eb
+  data.tar.gz: 4277293d8d5a46e554ff0e7b8c545ce74c4d56ff876a8ca1852b4e99b6f339f5e807a9e022106ef447f2cf61b1d26b4f3ea67414f24df071b5894d209e1af25f

data/lib/dependabot/cargo/file_updater/lockfile_updater.rb

@@ -173,6 +173,8 @@ module Dependabot
             FileUtils.mkdir_p(Pathname.new(path).dirname)
             File.write(file.name, prepared_manifest_content(file))
 
+            next if virtual_manifest?(file)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)
@@ -368,6 +370,10 @@ module Dependabot
           @toolchain ||=
             dependency_files.find { |f| f.name == "rust-toolchain" }
         end
+
+        def virtual_manifest?(file)
+          !file.content.include?("[package]")
+        end
       end
     end
   end

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -340,6 +340,8 @@ module Dependabot
             FileUtils.mkdir_p(dir)
             File.write(file.name, sanitized_manifest_content(file.content))
 
+            next if virtual_manifest?(file)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)
@@ -415,6 +417,13 @@ module Dependabot
           ).git_dependency?
         end
 
+        # When the package table is not present in a workspace manifest, it is
+        # called a virtual manifest: https://doc.rust-lang.org/cargo/reference/
+        # manifest.html#virtual-manifest
+        def virtual_manifest?(file)
+          !file.content.include?("[package]")
+        end
+
         def version_class
           Cargo::Version
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.113.25
+  version: 0.115.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-11-28 00:00:00.000000000 Z
+date: 2019-12-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.113.25
+        version: 0.115.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.113.25
+        version: 0.115.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement