dependabot-cargo 0.106.19 → 0.106.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77897c15f811fffcd4ca4c6a8655d5a4706aa662024374667d9a089ffb804060
-  data.tar.gz: f5155dfa2741df885c212e7794b7a8f825dd12308653c67fd9f00395a3c1e49d
+  metadata.gz: 59c8fa278721ba6c1610974ca81f068d00b98512c87bf23d3b805aee0678bf02
+  data.tar.gz: f98ea502526b529b957c489f89fe769219e42cecc442bdce4efa1b4260796ec5
 SHA512:
-  metadata.gz: 9cbcc2893922fd1ea280d8770adc599ac87abc0babbe18c7ce17043acf6aaab0341da80159bd10a7cc936d0c0d5c0c9389f0f5635aba9c6db2fdb5fa1a7d540e
-  data.tar.gz: 68e702ee1bed4ccaf0f9fc9c0355cb984db3fb0984bc29435b8023c01b6b18a3adbe681eb7ebdc3cf7a67cb234d700fa508a5cc1ada943b6fd12ba77d0944126
+  metadata.gz: 3ef00901910bb72993b500202922ba444e3e39c9bff8a353117a652770b73d1beb988ae2a4efa1f53740fe2745c5acd0691a4a5f15784e790690312bbb5fc4f2
+  data.tar.gz: 9ebe2056943d5fa07e518fabb81740ff448311a6e359afc4f0fdff99b797b643f57bc9ed886224c114d2474b0e435e5d2bac4e3b71d84116177fc2362b68fcb5

data/lib/dependabot/cargo/file_parser.rb

@@ -33,9 +33,9 @@ module Dependabot
         dependencies.reject! { |d| patched_dependencies.include?(d.name) }
 
         # TODO: Currently, Dependabot can't handle dependencies that have
-        # multiple source types. Fix that!
+        # multiple sources. Fix that!
         dependencies.reject do |dep|
-          dep.requirements.map { |r| r.dig(:source, :type) }.uniq.count > 1
+          dep.requirements.map { |r| r.fetch(:source) }.uniq.count > 1
         end
       end
 

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -217,6 +217,13 @@ module Dependabot
             return nil
           end
 
+          if error.message.include?("all possible versions conflict")
+            # This happens when a top-level requirement locks us to an old
+            # patch release of a dependency that is a sub-dep of what we're
+            # updating. It's (probably) a Cargo bug.
+            return nil
+          end
+
           raise error
         end
         # rubocop:enable Metrics/AbcSize

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.106.19
+  version: 0.106.20
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.19
+        version: 0.106.20
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.19
+        version: 0.106.20
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement