dependabot-cargo 0.97.3 → 0.97.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/cargo/file_updater/lockfile_updater.rb +3 -2
  3. data/lib/dependabot/cargo/update_checker/version_resolver.rb +7 -4
  4. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 20a85ddfc0db4a910fd2de051dc7903e495d6bd7102515a767244782fcbe1f0d
4
- data.tar.gz: ca8f4c88f944eb5cba89d2fb93d914fe5294d2c5c9e062cbf120b93c9fcbb53b
3
+ metadata.gz: '059939b3309966756e317b6ca8a49525a6bc9e2eea9215c57d8e05d60131e3bf'
4
+ data.tar.gz: cbdcb62d6635d1eca6d9b533f2aa876d65f404f4eccddda46683d2ebb76e97f7
5
5
  SHA512:
6
- metadata.gz: '084297ad705f9025d0438c29e0207e5a77471ed6f1bdc2687925cd1e0b33490bb208ce6bdb2fa662de88519b0c278a7b5bc0724f5546b8ba5e2830f968b65f03'
7
- data.tar.gz: 7fa36f9056bc585e27849b03050c9ceca39bb0585a0a7f6ab8306b68a0f9c4e433a65d92da285a84079670e171463b1c9e6092c59114dd3687c869dda91cc53d
6
+ metadata.gz: a4131176d13828990d16350fe501d41914602e0a44d22dd993d236b1928a09f51402271ebb721ff831303e17b1c3d458d36555177558d148529000d86e65a7a5
7
+ data.tar.gz: 17617144fafe767c6103d2fab2937ba84d83a01b41937a1cc2016724f6f935b8d7d976fc4a5f2344d2788a7205b34716b3dc54e7ebf6f243581bb3cb5e20b51b
data/lib/dependabot/cargo/file_updater/lockfile_updater.rb CHANGED
@@ -2,6 +2,7 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
+ require "shellwords"
5
6
  require "dependabot/git_commit_checker"
6
7
  require "dependabot/cargo/file_updater"
7
8
  require "dependabot/cargo/file_updater/manifest_updater"
@@ -26,8 +27,8 @@ module Dependabot
26
27
  SharedHelpers.with_git_configured(credentials: credentials) do
27
28
  # Shell out to Cargo, which handles everything for us, and does
28
29
  # so without doing an install (so it's fast).
29
- command = "cargo update -p #{dependency_spec}"
30
- run_shell_command(command)
30
+ command_parts = ["cargo", "update", "-p", dependency_spec]
31
+ run_shell_command(Shellwords.join(command_parts))
31
32
  end
32
33
 
33
34
  updated_lockfile = File.read("Cargo.lock")
data/lib/dependabot/cargo/update_checker/version_resolver.rb CHANGED
@@ -2,6 +2,7 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
+ require "shellwords"
5
6
  require "dependabot/shared_helpers"
6
7
  require "dependabot/cargo/update_checker"
7
8
  require "dependabot/cargo/file_parser"
@@ -45,8 +46,9 @@ module Dependabot
45
46
  SharedHelpers.with_git_configured(credentials: credentials) do
46
47
  # Shell out to Cargo, which handles everything for us, and does
47
48
  # so without doing an install (so it's fast).
48
- command = "cargo update -p #{dependency_spec} --verbose"
49
- run_cargo_command(command)
49
+ command_parts = ["cargo", "update", "-p", dependency_spec,
50
+ "--verbose"]
51
+ run_cargo_command(Shellwords.join(command_parts))
50
52
  end
51
53
 
52
54
  updated_version = fetch_version_from_new_lockfile
@@ -254,8 +256,9 @@ module Dependabot
254
256
  write_temporary_dependency_files(prepared: false)
255
257
 
256
258
  SharedHelpers.with_git_configured(credentials: credentials) do
257
- command = "cargo update -p #{dependency_spec} --verbose"
258
- run_cargo_command(command)
259
+ command_parts = ["cargo", "update", "-p", dependency_spec,
260
+ "--verbose"]
261
+ run_cargo_command(Shellwords.join(command_parts))
259
262
  end
260
263
  end
261
264
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-cargo
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.97.3
4
+ version: 0.97.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-03-10 00:00:00.000000000 Z
11
+ date: 2019-03-12 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.97.3
19
+ version: 0.97.4
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.97.3
26
+ version: 0.97.4
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement