dependabot-cargo 0.350.0 → 0.352.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 187f0ee0a0683e211ad624f4ee54ffa140248d1cb555b458b8ecd7b39aab112a
4
- data.tar.gz: edb6e6ef2bc0c1f10784791deaeb70d5f450269c8bca5710becf7fd4f272a2cd
3
+ metadata.gz: 6b5f26a6bda88c9191a8006bd46ce7c367e59715039a79177e98ebe9df1b4744
4
+ data.tar.gz: 170a5a033426a28e08ef5bb181300dc841bc9eff8fd962e6818c29880fb25372
5
5
  SHA512:
6
- metadata.gz: 72fb4b6a508f76f723fa3181ea28dc10bce6a8b23a5698d1a3cefe95df418873f70f28f3fec591ee8303c6dec7dde8bdfb700c0f6748284ff4fcde4fbd7a31f5
7
- data.tar.gz: 69e748b545156fb2a3d89895a97161762b1e5f89ade7f69757c22d2fa97c19e7c18a151e04e58998cb21ba4d911b31b4182081fc664fee35d703722f60649a84
6
+ metadata.gz: 9362c59af176cd89cbad1af439c02f367173d19fca73afcf23deb27b85c54010ecbfb7bc454fc01cf2da6378ed95865427d6c4d0815fb0fc44cba56a84ee459e
7
+ data.tar.gz: 7b22ae501fe222ef5e2c872f46637d41d88a433031248149d30cb42fb378ff1040bf6642fe52efae1e4ce61a690c7379d47bba6b679c4c65cd6ec38f47c40326
@@ -77,6 +77,31 @@ module Dependabot
77
77
  super
78
78
  end
79
79
 
80
+ sig { override.returns(T::Array[String]) }
81
+ def ignored_major_versions
82
+ parts = to_s.split(".")
83
+ major = parts[0].to_i
84
+ minor = parts[1].to_i
85
+
86
+ # For 0.0.z versions, patch changes are breaking
87
+ # So ignoring "major" means ignoring all >= 0.0.(z+1)
88
+ if major.zero? && minor.zero?
89
+ patch = parts[2].to_i
90
+ lower_parts = [0, 0, patch + 1] + [lowest_prerelease_suffix]
91
+ return [">= #{lower_parts.join('.')}"]
92
+ end
93
+
94
+ # For 0.y.z versions (y > 0), minor changes are breaking
95
+ # So ignoring "major" means ignoring all >= 0.(y+1).0
96
+ if major.zero?
97
+ lower_parts = [0, minor + 1] + [lowest_prerelease_suffix]
98
+ return [">= #{lower_parts.join('.')}"]
99
+ end
100
+
101
+ # For 1.y.z+ versions, use standard semantic versioning
102
+ super
103
+ end
104
+
80
105
  # Determines the correct update type for a version change according to Cargo's semantic versioning rules
81
106
  # For pre-1.0 versions, Cargo treats changes in the leftmost non-zero component as breaking
82
107
  sig { params(from_version: T.any(String, Dependabot::Cargo::Version), to_version: T.any(String, Dependabot::Cargo::Version)).returns(String) }
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-cargo
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.350.0
4
+ version: 0.352.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.350.0
18
+ version: 0.352.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.350.0
25
+ version: 0.352.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -266,7 +266,7 @@ licenses:
266
266
  - MIT
267
267
  metadata:
268
268
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
269
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.350.0
269
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.352.0
270
270
  rdoc_options: []
271
271
  require_paths:
272
272
  - lib