dependabot-cargo 0.117.10 → 0.118.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7c7b65f2ab064710bd8dc3e92530b12d0748c341ca3cd6f9aa266530ea8c6456
-  data.tar.gz: 23e6588370b6e61f4566a0031a0db049a9c675d09e8cd411f29b1ad150be5d22
+  metadata.gz: cc7666bde78709dde2c1f8055a1e12737cedbbd2718b7910f71fce5741944ce0
+  data.tar.gz: 782815e89df86db60dbe9ae95f3baf90f7cd2c5e1589fa74869f59ff9206d517
 SHA512:
-  metadata.gz: 723e9b08c65cb74d80d15b6cd5f1837a037e4a93dc36da16c7b54c9cd5a8d8ff632ce71dc9b413535e6a3c7f3d7ccd5ac96224a2f07243366d333438d617d21e
-  data.tar.gz: 9f3901957ceefe8da003e404722ff898b4035eb625ec5c01a2573d509a331056122249b3824af04ce69bd080fb99fb362ccc2fc0f523539aab01b93356116902
+  metadata.gz: 46a0798c4ef1eb5e3aafe1faecfab3a904ed2cdece1e028b57030e18a7bed337809814998131be4d8dc5f10295a808a32257a3ed68ca1cfc0fa12b004a73dd35
+  data.tar.gz: 3cc19f68c6d1e3b476ba50c90fc1b71048c97e99fa0e1115f5b0efc0d9f3beac48d6299a755836b5eb81d53fd180f9dccc94f090f8d9fd3203dcfabc25b45ef7

data/lib/dependabot/cargo/file_updater/lockfile_updater.rb

@@ -170,6 +170,8 @@ module Dependabot
 
             next if virtual_manifest?(file)
 
+            File.write(File.join(dir, "build.rs"), dummy_app_content)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)

data/lib/dependabot/cargo/update_checker.rb

@@ -109,6 +109,7 @@ module Dependabot
           dependency_files: dependency_files,
           credentials: credentials,
           ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored,
           security_advisories: security_advisories
         )
       end

data/lib/dependabot/cargo/update_checker/latest_version_finder.rb

@@ -8,11 +8,13 @@ module Dependabot
     class UpdateChecker
       class LatestVersionFinder
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -39,8 +41,8 @@ module Dependabot
         def fetch_lowest_security_fix_version
           versions = available_versions
           versions = filter_prerelease_versions(versions)
-          versions = filter_ignored_versions(versions)
           versions = filter_vulnerable_versions(versions)
+          versions = filter_ignored_versions(versions)
           versions = filter_lower_versions(versions)
           versions.min
         end
@@ -52,8 +54,13 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
-            reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+          filtered = versions_array.
+                     reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise Dependabot::AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -337,6 +337,8 @@ module Dependabot
 
             next if virtual_manifest?(file)
 
+            File.write(File.join(dir, "build.rs"), dummy_app_content)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.117.10
+  version: 0.118.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-21 00:00:00.000000000 Z
+date: 2020-06-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.118.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.118.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement