dependabot-common 0.278.0 → 0.280.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 158d512a622b79fd58a2b7424f4fc5a90605d2a207399cd523cbeab88d9a5846
-  data.tar.gz: 330427de708292cebf134e78d466087cfea90a8a6d085906356b25ecea5ed7c5
+  metadata.gz: 2ae924a2cf736a7ed5602dfe97f4a3b55005de4ea62414cc3873a593b22e5b24
+  data.tar.gz: 610e19d87470728a685020743597e87495f7d61a7ae29b6e6076b0530bd5dc5b
 SHA512:
-  metadata.gz: '096aca3e0240e190ffdd55beae757d4649cd35f73f63c0abce9e38e970d7b39e924138df7b09b82c8b20cac79de27358da7348c0a05227be63295d8b8f925c30'
-  data.tar.gz: 36138eb3b247b2e0858c01c07db0f2facbea825f4002ed8282dea8416e98a95176bd104579ab457f7af91059709ce70d3fe5b4b6c53a7c16808c9ef465a6f24e
+  metadata.gz: 45eb26b84f90aa08d55407334ca8be24957d07d0f14d5d31eceb4a6d7e9f1d20b8c086f42fad5cabd26f4bc8e47b4c0228db16fb63cb033738e3a55c5c980951
+  data.tar.gz: 6412e967b632dd03177156b5f744ebcf8a014712832e62a89eb3cad362cbe1e3f14e570516d3201c26813346dd61744e58203fd7a2b9c7a206bcb89429388fd7

data/lib/dependabot/config/ignore_condition.rb

@@ -57,54 +57,20 @@ module Dependabot
         version = correct_version_for(dependency)
         return [] unless version
 
-        semver = version.to_semver
-
         transformed_update_types.flat_map do |t|
           case t
           when PATCH_VERSION_TYPE
-            ignore_patch(semver)
+            version.ignored_patch_versions
           when MINOR_VERSION_TYPE
-            ignore_minor(semver)
+            version.ignored_minor_versions
           when MAJOR_VERSION_TYPE
-            ignore_major(semver)
+            version.ignored_major_versions
           else
             []
           end
         end.compact
       end
 
-      sig { params(version: String).returns(T::Array[String]) }
-      def ignore_patch(version)
-        parts = version.split(".")
-        version_parts = parts.fill("0", parts.length...2)
-        upper_parts = version_parts.first(1) + [version_parts[1].to_i + 1]
-        lower_bound = "> #{version}"
-        upper_bound = "< #{upper_parts.join('.')}"
-
-        ["#{lower_bound}, #{upper_bound}"]
-      end
-
-      sig { params(version: String).returns(T::Array[String]) }
-      def ignore_minor(version)
-        parts = version.split(".")
-        version_parts = parts.fill("0", parts.length...2)
-        lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + ["a"]
-        upper_parts = version_parts.first(0) + [version_parts[0].to_i + 1]
-        lower_bound = ">= #{lower_parts.join('.')}"
-        upper_bound = "< #{upper_parts.join('.')}"
-
-        ["#{lower_bound}, #{upper_bound}"]
-      end
-
-      sig { params(version: String).returns(T::Array[String]) }
-      def ignore_major(version)
-        version_parts = version.split(".")
-        lower_parts = [version_parts[0].to_i + 1] + ["a"]
-        lower_bound = ">= #{lower_parts.join('.')}"
-
-        [lower_bound]
-      end
-
       sig { params(dependency: Dependency).returns(T.nilable(Version)) }
       def correct_version_for(dependency)
         version = dependency.version

data/lib/dependabot/errors.rb

@@ -240,6 +240,13 @@ module Dependabot
           "go-mod": error.go_mod
         }
       }
+    when Dependabot::UpdateNotPossible
+      {
+        "error-type": "update_not_possible",
+        "error-detail": {
+          dependencies: error.dependencies
+        }
+      }
     when BadRequirementError
       {
         "error-type": "illformed_requirement",
@@ -639,6 +646,21 @@ module Dependabot
   # Dependency level errors #
   ###########################
 
+  class UpdateNotPossible < DependabotError
+    extend T::Sig
+
+    sig { returns(T::Array[String]) }
+    attr_reader :dependencies
+
+    sig { params(dependencies: T::Array[String]).void }
+    def initialize(dependencies)
+      @dependencies = dependencies
+
+      msg = "The following dependencies could not be updated: #{@dependencies.join(', ')}"
+      super(msg)
+    end
+  end
+
   class GitDependenciesNotReachable < DependabotError
     extend T::Sig
 

data/lib/dependabot/shared_helpers.rb

@@ -419,6 +419,7 @@ module Dependabot
       params(
         command: String,
         allow_unsafe_shell_command: T::Boolean,
+        cwd: T.nilable(String),
         env: T.nilable(T::Hash[String, String]),
         fingerprint: T.nilable(String),
         stderr_to_stdout: T::Boolean
@@ -426,6 +427,7 @@ module Dependabot
     end
     def self.run_shell_command(command,
                                allow_unsafe_shell_command: false,
+                               cwd: nil,
                                env: {},
                                fingerprint: nil,
                                stderr_to_stdout: true)
@@ -434,10 +436,13 @@ module Dependabot
 
       puts cmd if ENV["DEBUG_HELPERS"] == "true"
 
+      opts = {}
+      opts[:chdir] = cwd if cwd
+
       if stderr_to_stdout
-        stdout, process = Open3.capture2e(env || {}, cmd)
+        stdout, process = Open3.capture2e(env || {}, cmd, opts)
       else
-        stdout, stderr, process = Open3.capture3(env || {}, cmd)
+        stdout, stderr, process = Open3.capture3(env || {}, cmd, opts)
       end
 
       time_taken = Time.now - start

data/lib/dependabot/version.rb

@@ -36,5 +36,37 @@ module Dependabot
     def to_semver
       @original_version
     end
+
+    sig { overridable.returns(T::Array[String]) }
+    def ignored_patch_versions
+      parts = to_semver.split(".")
+      version_parts = parts.fill("0", parts.length...2)
+      upper_parts = version_parts.first(1) + [version_parts[1].to_i + 1]
+      lower_bound = "> #{to_semver}"
+      upper_bound = "< #{upper_parts.join('.')}"
+
+      ["#{lower_bound}, #{upper_bound}"]
+    end
+
+    sig { overridable.returns(T::Array[String]) }
+    def ignored_minor_versions
+      parts = to_semver.split(".")
+      version_parts = parts.fill("0", parts.length...2)
+      lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + ["a"]
+      upper_parts = version_parts.first(0) + [version_parts[0].to_i + 1]
+      lower_bound = ">= #{lower_parts.join('.')}"
+      upper_bound = "< #{upper_parts.join('.')}"
+
+      ["#{lower_bound}, #{upper_bound}"]
+    end
+
+    sig { overridable.returns(T::Array[String]) }
+    def ignored_major_versions
+      version_parts = to_semver.split(".")
+      lower_parts = [version_parts[0].to_i + 1] + ["a"]
+      lower_bound = ">= #{lower_parts.join('.')}"
+
+      [lower_bound]
+    end
   end
 end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.278.0"
+  VERSION = "0.280.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.278.0
+  version: 0.280.0
 platform: ruby
 authors:
 - Dependabot
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-09-26 00:00:00.000000000 Z
+date: 2024-10-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -197,19 +197,33 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '8.0'
 - !ruby/object:Gem::Dependency
-  name: opentelemetry-sdk
+  name: opentelemetry-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '1.4'
+- !ruby/object:Gem::Dependency
+  name: opentelemetry-metrics-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: parser
   requirement: !ruby/object:Gem::Requirement
@@ -250,14 +264,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.11178
+        version: 0.5.11577
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.11178
+        version: 0.5.11577
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -424,14 +438,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -600,8 +614,8 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.278.0
-post_install_message: 
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.280.0
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -617,7 +631,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 3.3.7
 requirements: []
 rubygems_version: 3.5.9
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Shared code used across Dependabot Core
 test_files: []