dependabot-cargo 0.359.0 → 0.360.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/cargo/helpers.rb +4 -18
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 241a4a4123c74e3a27b9c36e550ca881ede693ac10ff9c98e105a483259d6159
|
|
4
|
+
data.tar.gz: 31aeb042f06741c7d3664dcd369cfb9359a18daf0fd96edc1de44b5ac3b1a04e
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 7a3adae6d469742208aca2c4f0e92f6cc9fed98d86496471b06657d3e29721258a539c0f1a1aef2d3e69e9a1d56701c88e7a9ee08484a792aba9a7266b554d27
|
|
7
|
+
data.tar.gz: 9229cbc207a735eb6852f06df90c6cd821fd41cf48e52ae5113b136a7b91d240ef91180383008283da4093f9b84f4e4b24b1ac9912e671c579023d517ce7b964
|
|
@@ -12,27 +12,13 @@ module Dependabot
|
|
|
12
12
|
def self.setup_credentials_in_environment(credentials)
|
|
13
13
|
credentials.each do |cred|
|
|
14
14
|
next if cred["type"] != "cargo_registry"
|
|
15
|
+
next if cred["registry"].nil? # this will not be present for org-level registries
|
|
16
|
+
next if cred["token"].nil?
|
|
15
17
|
|
|
16
18
|
# If there is a 'token' property, then apply it.
|
|
17
|
-
#
|
|
18
|
-
# all tokens. So in that case, we assume that the dependabot proxy will re-inject the
|
|
19
|
-
# actual correct token, and we just use 'token' as a placeholder at this point.
|
|
20
|
-
# (We must add these environment variables here, or 'cargo update' will not think it is
|
|
21
|
-
# configured properly for the private registries.)
|
|
22
|
-
|
|
19
|
+
# In production Dependabot-Action or Dependabot-CLI will inject the real token via the Proxy.
|
|
23
20
|
token_env_var = "CARGO_REGISTRIES_#{T.must(cred['registry']).upcase.tr('-', '_')}_TOKEN"
|
|
24
|
-
|
|
25
|
-
token = "placeholder_token"
|
|
26
|
-
if cred["token"].nil?
|
|
27
|
-
Dependabot.logger.info("No token found for #{cred['registry']}, dependabot-cli proxy will inject it")
|
|
28
|
-
else
|
|
29
|
-
token = cred["token"]
|
|
30
|
-
Dependabot.logger.info(
|
|
31
|
-
"Token found for #{cred['registry']}, setting #{token_env_var} to provided token value"
|
|
32
|
-
)
|
|
33
|
-
end
|
|
34
|
-
|
|
35
|
-
ENV[token_env_var] ||= token
|
|
21
|
+
ENV[token_env_var] ||= cred["token"]
|
|
36
22
|
end
|
|
37
23
|
|
|
38
24
|
# And set CARGO_REGISTRY_GLOBAL_CREDENTIAL_PROVIDERS here as well, so Cargo will expect tokens
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-cargo
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.360.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.360.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.360.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: debug
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -266,7 +266,7 @@ licenses:
|
|
|
266
266
|
- MIT
|
|
267
267
|
metadata:
|
|
268
268
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
269
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
269
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.360.0
|
|
270
270
|
rdoc_options: []
|
|
271
271
|
require_paths:
|
|
272
272
|
- lib
|