dependabot-cargo 0.216.0 → 0.216.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a703a41b5c7903d51de877727762fc65183f03093205a185dff2fbcedb958076
-  data.tar.gz: 397d241631ce98380aa93fc4275da005130eb9698b29c30bbd610c6285840d59
+  metadata.gz: 60cb4695acae2f3864eb492bbb986ac49bfe702eae65d566ad256a559ae9915c
+  data.tar.gz: 8ca9c6f5aae7889073e3d64f61d539d596262090b393d0f7d7079f311b17b27c
 SHA512:
-  metadata.gz: 414c85341229431f5743788b1280a86a7d9075c98d323db7ee4248cafccd074b8b5fef8bffdfd0badfeb5be02901aaa36df8273dcca00b1a46ab17c8e6362b9a
-  data.tar.gz: 6f7f6ff7921444cae0cfc8a8f0839520997d228f9534f2512342bd2a3d2d7e67f0107122cbd7930c6767b010c14aa55b1f542655ef3f98e24e324cd5db5eb829
+  metadata.gz: b7089e2510a3ae8be2e7a85137ba52412f08c427b1362a172d5a2438d585c264b4b1ebf34603391b21fa56ad1fd0d319bedd11340841029d5871b4a794e1eda1
+  data.tar.gz: b2bc27a454960015bfd7039a01f2180eb49b66241f8f5f93c80c802f7dbd45aa25c3cfae8cc815ef130a606cc1f0e69d578d33875c07e4d14aa74ac58f0142c9

data/lib/dependabot/cargo/file_fetcher.rb

@@ -20,6 +20,21 @@ module Dependabot
         "Repo must contain a Cargo.toml."
       end
 
+      def package_manager_version
+        channel = if rust_toolchain
+                    TomlRB.parse(rust_toolchain.content).fetch("toolchain", nil)&.fetch("channel", nil)
+                  else
+                    "default"
+                  end
+
+        {
+          ecosystem: "cargo",
+          package_managers: {
+            "channel" => channel
+          }
+        }
+      end
+
       private
 
       def fetch_files
@@ -285,8 +300,17 @@ module Dependabot
       end
 
       def rust_toolchain
-        @rust_toolchain ||= fetch_file_if_present("rust-toolchain")&.
+        return @rust_toolchain if defined?(@rust_toolchain)
+
+        @rust_toolchain = fetch_file_if_present("rust-toolchain")&.
                             tap { |f| f.support_file = true }
+
+        # Per https://rust-lang.github.io/rustup/overrides.html the file can
+        # have a `.toml` extension, but the non-extension version is preferred.
+        # Renaming here to simplify finding it later in the code.
+        @rust_toolchain ||= fetch_file_if_present("rust-toolchain.toml")&.
+                            tap { |f| f.support_file = true }&.
+                            tap { |f| f.name = "rust-toolchain" }
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.216.0
+  version: 0.216.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-12 00:00:00.000000000 Z
+date: 2023-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.0
+        version: 0.216.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.0
+        version: 0.216.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.48.0
+        version: 1.50.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.48.0
+        version: 1.50.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement