dependabot-cargo 0.117.8 → 0.118.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 43c0053134f3743c27ffff575dfe6598fd17a88006cb095dbb9fc01f13cfdf7c
-  data.tar.gz: 7321b8e2f2731325133030fa8e1ff99e6d7ac197c57e8504b8d513470f32e0cb
+  metadata.gz: a756e18862c9085726a2be98f05aa1961a511d9acedd039b60b2f956ff00b975
+  data.tar.gz: f33632428ab0671539c291ba5c50f7db58cb8458409a8619ba03ea610300d015
 SHA512:
-  metadata.gz: 2ebe3aae54605c8ef0b7a34977099d3fa0174306ab99d4e15e8de88a41abd2a09bbad6dc14129e20cec42ca8a02fc6d85dfc21cabd2a704c42ca9a2edb88411b
-  data.tar.gz: 47b576a2ddb5e65f07b8e1218699a03777856329b64e5b89f2d453bd07d1afdc83a8bdd2af24d263c5e271e959419fb50af3864ea4e05f58be4ff69f2bfd074f
+  metadata.gz: c63e86d36dc2a68b8a2c25808809dd0f4c3f46261d4d72fb473035bb6bbfb2af1bbe576b2ff6df9ef1339dabe3087717aed92120df6f15fdf4409c7d171c9ee9
+  data.tar.gz: 79f65b90a7558b2460a173c722e41726de170f56dddf8440aecaef3e3d66a99635ecb48830cee06f5aff0a27d9d67d7bea001fe69023c6b70e8c1286d259c184

data/lib/dependabot/cargo/file_updater/lockfile_updater.rb

@@ -170,6 +170,8 @@ module Dependabot
 
             next if virtual_manifest?(file)
 
+            File.write(File.join(dir, "build.rs"), dummy_app_content)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)

data/lib/dependabot/cargo/update_checker.rb

@@ -109,6 +109,7 @@ module Dependabot
           dependency_files: dependency_files,
           credentials: credentials,
           ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored,
           security_advisories: security_advisories
         )
       end

data/lib/dependabot/cargo/update_checker/latest_version_finder.rb

@@ -8,11 +8,13 @@ module Dependabot
     class UpdateChecker
       class LatestVersionFinder
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -39,8 +41,8 @@ module Dependabot
         def fetch_lowest_security_fix_version
           versions = available_versions
           versions = filter_prerelease_versions(versions)
-          versions = filter_ignored_versions(versions)
           versions = filter_vulnerable_versions(versions)
+          versions = filter_ignored_versions(versions)
           versions = filter_lower_versions(versions)
           versions.min
         end
@@ -52,8 +54,13 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
-            reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+          filtered = versions_array.
+                     reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise Dependabot::AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -337,6 +337,8 @@ module Dependabot
 
             next if virtual_manifest?(file)
 
+            File.write(File.join(dir, "build.rs"), dummy_app_content)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.117.8
+  version: 0.118.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-12 00:00:00.000000000 Z
+date: 2020-06-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.8
+        version: 0.118.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.8
+        version: 0.118.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.82.0
+        version: 0.83.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.82.0
+        version: 0.83.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement