dependabot-common 0.277.0 → 0.279.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a7543d885e4a35814953d8212da1438d0e343d0cf5d7aef83f7f2f02451a5ea3
-  data.tar.gz: b71e329381f97b309e9ca8b68c2b60bbf780e8c9a317558eb1f96e3ae3cae75f
+  metadata.gz: 43e1a4f4d63c0999b653f691d329d9e55be1ad64a631cd9d90601b448095de51
+  data.tar.gz: 3a8ae3ac61c4abe2e4f9f3b2c1259229f1678e7a4753deb2f4b2689488ddbaea
 SHA512:
-  metadata.gz: ac4cff3f2fcbcf43df1f6490f3cfa32c4d0f43f98b3409903b3f22ad3f12de3ccea86d4a2f2405daffcf17ed39539c6bfc15b1293a53542907229d1f3f939d4a
-  data.tar.gz: 3858ee8214c5afe7b065822afb4d0ce8bf0b9584ae882842efaa2a91ec5c59a8aa6869a9886f4cbbebad4a3c748b680acf45b62388dbbea286e62de6db2c6234
+  metadata.gz: 33205b1c99d6e7b5da8c41a6943faa3a4a10e570f31c569dd298bfb1f4f9867c0c372efb95992b1b6a0470d476745670b002c55c1a2509504a3e3c0064c77148
+  data.tar.gz: d13e0580d0c4a0a492b83f8c17b53d9906b7ee42a6cc767c580b758dd35fcded9d934ca3029f6a8ea4cac7ecc0e7e5817f3f50ea47ecc575a3fe35f3e654f30b

data/lib/dependabot/config/ignore_condition.rb

@@ -57,54 +57,20 @@ module Dependabot
         version = correct_version_for(dependency)
         return [] unless version
 
-        semver = version.to_semver
-
         transformed_update_types.flat_map do |t|
           case t
           when PATCH_VERSION_TYPE
-            ignore_patch(semver)
+            version.ignored_patch_versions
           when MINOR_VERSION_TYPE
-            ignore_minor(semver)
+            version.ignored_minor_versions
           when MAJOR_VERSION_TYPE
-            ignore_major(semver)
+            version.ignored_major_versions
           else
             []
           end
         end.compact
       end
 
-      sig { params(version: String).returns(T::Array[String]) }
-      def ignore_patch(version)
-        parts = version.split(".")
-        version_parts = parts.fill("0", parts.length...2)
-        upper_parts = version_parts.first(1) + [version_parts[1].to_i + 1]
-        lower_bound = "> #{version}"
-        upper_bound = "< #{upper_parts.join('.')}"
-
-        ["#{lower_bound}, #{upper_bound}"]
-      end
-
-      sig { params(version: String).returns(T::Array[String]) }
-      def ignore_minor(version)
-        parts = version.split(".")
-        version_parts = parts.fill("0", parts.length...2)
-        lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + ["a"]
-        upper_parts = version_parts.first(0) + [version_parts[0].to_i + 1]
-        lower_bound = ">= #{lower_parts.join('.')}"
-        upper_bound = "< #{upper_parts.join('.')}"
-
-        ["#{lower_bound}, #{upper_bound}"]
-      end
-
-      sig { params(version: String).returns(T::Array[String]) }
-      def ignore_major(version)
-        version_parts = version.split(".")
-        lower_parts = [version_parts[0].to_i + 1] + ["a"]
-        lower_bound = ">= #{lower_parts.join('.')}"
-
-        [lower_bound]
-      end
-
       sig { params(dependency: Dependency).returns(T.nilable(Version)) }
       def correct_version_for(dependency)
         version = dependency.version

data/lib/dependabot/errors.rb

@@ -240,6 +240,13 @@ module Dependabot
           "go-mod": error.go_mod
         }
       }
+    when Dependabot::UpdateNotPossible
+      {
+        "error-type": "update_not_possible",
+        "error-detail": {
+          dependencies: error.dependencies
+        }
+      }
     when BadRequirementError
       {
         "error-type": "illformed_requirement",
@@ -639,6 +646,21 @@ module Dependabot
   # Dependency level errors #
   ###########################
 
+  class UpdateNotPossible < DependabotError
+    extend T::Sig
+
+    sig { returns(T::Array[String]) }
+    attr_reader :dependencies
+
+    sig { params(dependencies: T::Array[String]).void }
+    def initialize(dependencies)
+      @dependencies = dependencies
+
+      msg = "The following dependencies could not be updated: #{@dependencies.join(', ')}"
+      super(msg)
+    end
+  end
+
   class GitDependenciesNotReachable < DependabotError
     extend T::Sig
 

data/lib/dependabot/shared_helpers.rb

@@ -419,6 +419,7 @@ module Dependabot
       params(
         command: String,
         allow_unsafe_shell_command: T::Boolean,
+        cwd: T.nilable(String),
         env: T.nilable(T::Hash[String, String]),
         fingerprint: T.nilable(String),
         stderr_to_stdout: T::Boolean
@@ -426,6 +427,7 @@ module Dependabot
     end
     def self.run_shell_command(command,
                                allow_unsafe_shell_command: false,
+                               cwd: nil,
                                env: {},
                                fingerprint: nil,
                                stderr_to_stdout: true)
@@ -434,10 +436,13 @@ module Dependabot
 
       puts cmd if ENV["DEBUG_HELPERS"] == "true"
 
+      opts = {}
+      opts[:chdir] = cwd if cwd
+
       if stderr_to_stdout
-        stdout, process = Open3.capture2e(env || {}, cmd)
+        stdout, process = Open3.capture2e(env || {}, cmd, opts)
       else
-        stdout, stderr, process = Open3.capture3(env || {}, cmd)
+        stdout, stderr, process = Open3.capture3(env || {}, cmd, opts)
       end
 
       time_taken = Time.now - start

data/lib/dependabot/version.rb

@@ -36,5 +36,37 @@ module Dependabot
     def to_semver
       @original_version
     end
+
+    sig { overridable.returns(T::Array[String]) }
+    def ignored_patch_versions
+      parts = to_semver.split(".")
+      version_parts = parts.fill("0", parts.length...2)
+      upper_parts = version_parts.first(1) + [version_parts[1].to_i + 1]
+      lower_bound = "> #{to_semver}"
+      upper_bound = "< #{upper_parts.join('.')}"
+
+      ["#{lower_bound}, #{upper_bound}"]
+    end
+
+    sig { overridable.returns(T::Array[String]) }
+    def ignored_minor_versions
+      parts = to_semver.split(".")
+      version_parts = parts.fill("0", parts.length...2)
+      lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + ["a"]
+      upper_parts = version_parts.first(0) + [version_parts[0].to_i + 1]
+      lower_bound = ">= #{lower_parts.join('.')}"
+      upper_bound = "< #{upper_parts.join('.')}"
+
+      ["#{lower_bound}, #{upper_bound}"]
+    end
+
+    sig { overridable.returns(T::Array[String]) }
+    def ignored_major_versions
+      version_parts = to_semver.split(".")
+      lower_parts = [version_parts[0].to_i + 1] + ["a"]
+      lower_bound = ">= #{lower_parts.join('.')}"
+
+      [lower_bound]
+    end
   end
 end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.277.0"
+  VERSION = "0.279.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.277.0
+  version: 0.279.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-23 00:00:00.000000000 Z
+date: 2024-10-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -197,19 +197,33 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '8.0'
 - !ruby/object:Gem::Dependency
-  name: opentelemetry-sdk
+  name: opentelemetry-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
+- !ruby/object:Gem::Dependency
+  name: opentelemetry-metrics-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: parser
   requirement: !ruby/object:Gem::Requirement
@@ -600,7 +614,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.277.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.279.0
 post_install_message: 
 rdoc_options: []
 require_paths: