dependabot-common 0.186.1 → 0.189.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7aa607d4eb8b05e1773a2d7827071d00ec17123f2460d9c6f300559c9f8e555a
-  data.tar.gz: 3c7ed5b1c9f67f98db127a54a89584f9da26f574509d06a635690ef9f7b1d31c
+  metadata.gz: 390399dd3b8e97978cb4afdbf9944a44d340b31023feba4b61a5b7f1505be53c
+  data.tar.gz: b492637ad11614a576951a960039eddd7434c9ca685fe65bc413bf89b07d48cc
 SHA512:
-  metadata.gz: 3b0fcda24af49153516ac06d3b5da3708a3d5ee4c690b9db4eaf867aa4c629a02ab76ec59a1658c844423ed28d4afbc43a37d0e80751362d771c01dce578cc65
-  data.tar.gz: dc6a243ea14322702d102625d2897615e26bb5e1ae363b431a1fae33e37bc59bea7ef6f3fcedaa9161692ffc48523bfe6aec062ea7961743a0c063ab7b5a1973
+  metadata.gz: 713b03d4c1013b182a5b3a19c0fcdf602aa656162f5d6b812617c2b81bc970fc03767c6396031a1d979c0f75ea882531e40065ccfce36000f6fc8b79946195e0
+  data.tar.gz: 2727a71de1c31fdd1b1e4a9b514c5c14e838f6af9b8b1b28be2fa6b712b345a5dab025cadcf316c97fe495ca04f942b19655ba9e8783ee6f47ab470e5bb7af64

data/lib/dependabot/git_commit_checker.rb

@@ -240,6 +240,7 @@ module Dependabot
         when "github" then github_commit_comparison_status(tag, commit)
         when "gitlab" then gitlab_commit_comparison_status(tag, commit)
         when "bitbucket" then bitbucket_commit_comparison_status(tag, commit)
+        when "codecommit" then nil # TODO: get codecommit comparison status
         else raise "Unknown source"
         end
 

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -167,6 +167,7 @@ module Dependabot
               when "github" then fetch_github_file(file)
               when "gitlab" then fetch_gitlab_file(file)
               when "bitbucket" then fetch_bitbucket_file(file)
+              when "codecommit" then nil # TODO: git file from codecommit
               else raise "Unsupported provider '#{provider}'"
               end
           end
@@ -220,6 +221,7 @@ module Dependabot
           when "bitbucket" then fetch_bitbucket_file_list
           when "gitlab" then fetch_gitlab_file_list
           when "azure" then [] # TODO: Fetch files from Azure
+          when "codecommit" then [] # TODO: Fetch Files from Codecommit
           else raise "Unexpected repo provider '#{source.provider}'"
           end
         end

data/lib/dependabot/metadata_finders/base/commits_finder.rb

@@ -23,6 +23,7 @@ module Dependabot
         def commits_url
           return unless source
           return if source.provider == "azure" # TODO: Fetch Azure commits
+          return if source.provider == "codecommit" # TODO: Fetch Codecommit commits
 
           path =
             case source.provider
@@ -44,6 +45,7 @@ module Dependabot
           when "bitbucket" then fetch_bitbucket_commits
           when "gitlab" then fetch_gitlab_commits
           when "azure" then [] # TODO: Fetch Azure commits
+          when "codecommit" then [] # TODO: Fetch Codecommit commits
           else raise "Unexpected source provider '#{source.provider}'"
           end
         end

data/lib/dependabot/metadata_finders/base/release_finder.rb

@@ -194,8 +194,9 @@ module Dependabot
 
           case source.provider
           when "github" then fetch_github_releases
-          # Bitbucket doesn't support releases and Azure can't list API for annotated tags
-          when "bitbucket", "azure" then []
+          # Bitbucket and CodeCommit don't support releases and
+          # Azure can't list API for annotated tags
+          when "bitbucket", "azure", "codecommit" then []
           when "gitlab" then fetch_gitlab_releases
           else raise "Unexpected repo provider '#{source.provider}'"
           end

data/lib/dependabot/shared_helpers.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require "active_support/notifications"
 require "digest"
 require "English"
 require "excon"
@@ -150,9 +151,11 @@ module Dependabot
       options ||= {}
       headers = options.delete(:headers)
       {
+        instrumentor: ActiveSupport::Notifications,
         connect_timeout: 5,
         write_timeout: 5,
         read_timeout: 20,
+        retry_limit: 4, # Excon defaults to four retries, but let's set it explicitly for clarity
         omit_default_port: true,
         middlewares: excon_middleware,
         headers: excon_headers(headers)

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.186.1"
+  VERSION = "0.189.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.186.1
+  version: 0.189.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-10 00:00:00.000000000 Z
+date: 2022-05-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -326,14 +326,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.28.2
+        version: 1.29.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.28.2
+        version: 1.29.1
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement