dependabot-cargo 0.113.25 → 0.113.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e835a382965b5cdf3eb77ba93f08897b019738577fa0f8aa479169ad67c033f0
-  data.tar.gz: cdd0d442e36432e4764cc3d44f9479278b6932cc172d06c8b7a309ab4254d419
+  metadata.gz: 3b852184aa4a1694a1a514a967c0756c82e93b681c592e7d7b61cb1346872c55
+  data.tar.gz: dc8241eb339b1686b23d4ef53fa7fc0260e5db8a0c352c6107d546e84f43e13a
 SHA512:
-  metadata.gz: 56316e04faf2fa659319d0763f89d1c9ad9a63351a45ac301b1353e79c276baf9b707b459d158020cfbdb9165f7cba3cc345f9e452dc610837638c1596f7b01c
-  data.tar.gz: d6a6f66e3de346a9a397c995ae4b22f7b40afece325bbced6919869e2784950ff872c244bb406bd55dba9d59bb6b3be504bbce51bda2127f9811c9d13ce59a4e
+  metadata.gz: 7cab40eaea274b7c438a472c6511673749ee56426bbad96112b17ddf115973c58e5b2c7a7edb02964070dac3f334a586132e37f41d4ce324b1f571f30a383f80
+  data.tar.gz: acc1375242c5dc34e954f285189db79368b638272efbce9df4c64ff9cc8dd114a69f4065ca4477f462993c456ac64fa19f7fe53cce1b3a5727c11ba86e0703e3

data/lib/dependabot/cargo/file_updater/lockfile_updater.rb

@@ -173,6 +173,8 @@ module Dependabot
             FileUtils.mkdir_p(Pathname.new(path).dirname)
             File.write(file.name, prepared_manifest_content(file))
 
+            next if virtual_manifest?(file)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)
@@ -368,6 +370,10 @@ module Dependabot
           @toolchain ||=
             dependency_files.find { |f| f.name == "rust-toolchain" }
         end
+
+        def virtual_manifest?(file)
+          !file.content.include?("[package]")
+        end
       end
     end
   end

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -340,6 +340,8 @@ module Dependabot
             FileUtils.mkdir_p(dir)
             File.write(file.name, sanitized_manifest_content(file.content))
 
+            next if virtual_manifest?(file)
+
             FileUtils.mkdir_p(File.join(dir, "src"))
             File.write(File.join(dir, "src/lib.rs"), dummy_app_content)
             File.write(File.join(dir, "src/main.rs"), dummy_app_content)
@@ -415,6 +417,13 @@ module Dependabot
           ).git_dependency?
         end
 
+        # When the package table is not present in a workspace manifest, it is
+        # called a virtual manifest: https://doc.rust-lang.org/cargo/reference/
+        # manifest.html#virtual-manifest
+        def virtual_manifest?(file)
+          !file.content.include?("[package]")
+        end
+
         def version_class
           Cargo::Version
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.113.25
+  version: 0.113.26
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-11-28 00:00:00.000000000 Z
+date: 2019-11-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.113.25
+        version: 0.113.26
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.113.25
+        version: 0.113.26
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement