dependabot-cargo 0.98.17 → 0.98.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1dec9d9ba0f902fa50f3b9ae467607d3c32210b6bb9ed4b06282674f2860c9d0
-  data.tar.gz: 5656160bb35d69becb13ab8f64e9d28332c896ec499f1998b45ca335d1b29a68
+  metadata.gz: 785350f2e8fe6a5fe64f7a40dfd91d833fe165ef8285e35b324717e6bb9ebeb2
+  data.tar.gz: 28d13fa474f0eb2e035ebdd96809bf1d0bf4c43aa2131f1c651e715abd0e5633
 SHA512:
-  metadata.gz: d23b872dfdd0206e815a6f407e934da2571422a25c16a319e00e08cb5dff51644ec3294e0dab1cf3be4a7219bf3cb88ee5cb49b8d52c9046c7fd9293eb7aa71d
-  data.tar.gz: 2dc1b2f26c2dc8b778d93e4a1abded701bee5a26fde4ce8943a1065fd1e60cd4dc136b133fded9a5a7b9b911d19f6684bd62d82354122ae197b0ba074c8a3e2e
+  metadata.gz: ad795feb3dbc40642ad4a407aa22b1f5bcb63e9c4b7581b164599b309abc057e89f7c078c7e901f169ab75712509af673ca666649c8da2340929505c6961869e
+  data.tar.gz: b550896c688fc08af730d55c659f717674e2478bce1739fa20c76091c26f6cfc5d2aef8d3b3f11f2f895f96b2f70fa973a4d2448a4194c54987e89a1c202ffa0

data/lib/dependabot/cargo/file_fetcher.rb

@@ -161,6 +161,13 @@ module Dependabot
           end
         end
 
+        paths += replacement_path_dependency_paths_from_file(file)
+        paths
+      end
+
+      def replacement_path_dependency_paths_from_file(file)
+        paths = []
+
         # Paths specified as replacements
         parsed_file(file).fetch("replace", {}).each do |_, details|
           next unless details.is_a?(Hash)
@@ -169,6 +176,18 @@ module Dependabot
           paths << File.join(details["path"], "Cargo.toml")
         end
 
+        # Paths specified as patches
+        parsed_file(file).fetch("patch", {}).each do |_, details|
+          next unless details.is_a?(Hash)
+
+          details.each do |_, dep_details|
+            next unless dep_details.is_a?(Hash)
+            next unless dep_details["path"]
+
+            paths << File.join(dep_details["path"], "Cargo.toml")
+          end
+        end
+
         paths
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.98.17
+  version: 0.98.18
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-19 00:00:00.000000000 Z
+date: 2019-03-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.17
+        version: 0.98.18
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.98.17
+        version: 0.98.18
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement