dependabot-common 0.137.2 → 0.138.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3ec8ff3a39171dd6fd6758247321b09c5eb27fb06ca0404856d13c5440ad4c1e
-  data.tar.gz: 1c9eb5eb76f3041a92372c239832ce50db8cec79d6b12bee31bf76cac0835b19
+  metadata.gz: 14ae4d91b175345efcbfffe976cf9a20f2277473c583b07f19e6353e9d373300
+  data.tar.gz: be979b47ea466aac90dcb8a76700bc55de2bd7097164c8d3a42c22830a8289a0
 SHA512:
-  metadata.gz: 6fe9a23d72deef6833e7ab0e4ec0b5fc5200b8dc4906f9d0997df88d4467066cf7ca1c7f1ec9be9196c1c47ef159afa130b103d3bede3e59961a679a688dee50
-  data.tar.gz: ae59b7253316d77b7b493b1759957eb120b7a45af5588b0944afa7cb70ff1b1b2010cddbc30642e4e1c2a7f24c67ebfc609ef795e3413fb918fd1857bff9bfa8
+  metadata.gz: 791f65bf9e7f571729b689deecab539e90d7d4a37dc7a81d98efda97bd8133a0193bc5800155f5b93ecddd352a6ef70f0ab6899c65c5b31c136b62a8c40aded6
+  data.tar.gz: df3bb8557fee184c4a45fb53a096db04b3aa59d4cd697dd324d157a2dda983ef95f3d2d6504c439f0d43caafedddf4dd00ec2b17bcc9ca6600a691b149ec393c

data/lib/dependabot/errors.rb

@@ -47,6 +47,8 @@ module Dependabot
 
   class OutOfMemory < DependabotError; end
 
+  class NotImplemented < DependabotError; end
+
   #####################
   # Repo level errors #
   #####################

data/lib/dependabot/file_parsers/base.rb

@@ -1,17 +1,20 @@
 # frozen_string_literal: true
 
+require "dependabot/notifications"
+
 module Dependabot
   module FileParsers
     class Base
-      attr_reader :dependency_files, :repo_contents_path, :credentials, :source
+      attr_reader :dependency_files, :repo_contents_path, :credentials, :source, :options
 
       def initialize(dependency_files:, repo_contents_path: nil, source:,
-                     credentials: [], reject_external_code: false)
+                     credentials: [], reject_external_code: false, options: {})
         @dependency_files = dependency_files
         @repo_contents_path = repo_contents_path
         @credentials = credentials
         @source = source
         @reject_external_code = reject_external_code
+        @options = options
 
         check_required_files
       end

data/lib/dependabot/notifications.rb

@@ -0,0 +1,17 @@
+# frozen_string_literal: true
+
+require "active_support/notifications"
+
+module Dependabot
+  module Notifications
+    FILE_PARSER_PACKAGE_MANAGER_VERSION_PARSED = "dependabot.file_parser.package_manager_version_parsed"
+  end
+
+  def self.instrument(name, payload = {})
+    ActiveSupport::Notifications.instrument(name, payload)
+  end
+
+  def self.subscribe(pattern = nil, callback = nil, &block)
+    ActiveSupport::Notifications.subscribe(pattern, callback, &block)
+  end
+end

data/lib/dependabot/pull_request_creator.rb

@@ -13,6 +13,18 @@ module Dependabot
     require "dependabot/pull_request_creator/branch_namer"
     require "dependabot/pull_request_creator/labeler"
 
+    # Dependabot programmatically creates PRs which often include a large
+    # number of links to objects on `github.com`. GitHub hydrates these into
+    # rich links that leave a 'mention' on target Issues/Pull Requests.
+    #
+    # Due to the volume and nature of Dependabot PRs, these mentions are not
+    # useful and can overwhelm maintainers, so we use a redirection service
+    # to avoid enrichment.
+    #
+    # If you wish to disable this behaviour when using Dependabot Core directly,
+    # pass a nil value when initialising this class.
+    DEFAULT_GITHUB_REDIRECTION_SERVICE = "github-redirect.dependabot.com"
+
     class RepoNotFound < StandardError; end
 
     class RepoArchived < StandardError; end
@@ -46,7 +58,7 @@ module Dependabot
                    reviewers: nil, assignees: nil, milestone: nil,
                    branch_name_separator: "/", branch_name_prefix: "dependabot",
                    label_language: false, automerge_candidate: false,
-                   github_redirection_service: "github-redirect.dependabot.com",
+                   github_redirection_service: DEFAULT_GITHUB_REDIRECTION_SERVICE,
                    custom_headers: nil, require_up_to_date_base: false,
                    provider_metadata: {}, message: nil)
       @dependencies               = dependencies

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -25,7 +25,7 @@ module Dependabot
       def initialize(source:, dependencies:, files:, credentials:,
                      pr_message_header: nil, pr_message_footer: nil,
                      commit_message_options: {}, vulnerabilities_fixed: {},
-                     github_redirection_service: nil)
+                     github_redirection_service:)
         @dependencies               = dependencies
         @files                      = files
         @source                     = source

data/lib/dependabot/update_checkers/base.rb

@@ -9,12 +9,14 @@ module Dependabot
     class Base
       attr_reader :dependency, :dependency_files, :repo_contents_path,
                   :credentials, :ignored_versions, :raise_on_ignored,
-                  :security_advisories, :requirements_update_strategy
+                  :security_advisories, :requirements_update_strategy,
+                  :options
 
       def initialize(dependency:, dependency_files:, repo_contents_path: nil,
                      credentials:, ignored_versions: [],
                      raise_on_ignored: false, security_advisories: [],
-                     requirements_update_strategy: nil)
+                     requirements_update_strategy: nil,
+                     options: {})
         @dependency = dependency
         @dependency_files = dependency_files
         @repo_contents_path = repo_contents_path
@@ -23,6 +25,7 @@ module Dependabot
         @ignored_versions = ignored_versions
         @raise_on_ignored = raise_on_ignored
         @security_advisories = security_advisories
+        @options = options
       end
 
       def up_to_date?

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.137.2"
+  VERSION = "0.138.4"
 end

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.137.2
+  version: 0.138.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-16 00:00:00.000000000 Z
+date: 2021-03-25 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: activesupport
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
   requirement: !ruby/object:Gem::Requirement
@@ -401,6 +415,7 @@ files:
 - lib/dependabot/metadata_finders/base/changelog_pruner.rb
 - lib/dependabot/metadata_finders/base/commits_finder.rb
 - lib/dependabot/metadata_finders/base/release_finder.rb
+- lib/dependabot/notifications.rb
 - lib/dependabot/pull_request_creator.rb
 - lib/dependabot/pull_request_creator/azure.rb
 - lib/dependabot/pull_request_creator/bitbucket.rb