dependabot-common 0.100.0 → 0.100.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/security_advisory.rb +4 -6
- data/lib/dependabot/version.rb +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 652b6b22407da442324dfe813447652717d8a1474847c1f507d526ffe34ee1fe
|
4
|
+
data.tar.gz: d267da22615e8971f02761a45bab24e55f6a82855455c77f9ae715067e37412e
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: e665f9996d95255cd9553cd224f2c50cd21b65fca9abcdd9be17ce63ca88d4d2d53b07181999ef29d4f0d0455d65bb904798d12141a8d4b9b196ffc52f062d3b
|
7
|
+
data.tar.gz: 704bf0d0990608d2b331a548ab0267472287f885e7875d34372366f5925f639fa262c067940cbb93d83dcb18284cb0e1f554e3d21552bde2c75001a873b7b5d7
|
@@ -20,16 +20,14 @@ module Dependabot
|
|
20
20
|
raise ArgumentError, "must be a #{version_class}"
|
21
21
|
end
|
22
22
|
|
23
|
-
in_safe_range =
|
24
|
-
|
25
|
-
any? { |r| r.satisfied_by?(version_class.new(version)) }
|
23
|
+
in_safe_range = safe_versions.
|
24
|
+
any? { |r| r.satisfied_by?(version) }
|
26
25
|
|
27
26
|
# If version is known safe for this advisory, it's not vulnerable
|
28
27
|
return false if in_safe_range
|
29
28
|
|
30
|
-
in_vulnerable_range =
|
31
|
-
|
32
|
-
any? { |r| r.satisfied_by?(version_class.new(version)) }
|
29
|
+
in_vulnerable_range = vulnerable_versions.
|
30
|
+
any? { |r| r.satisfied_by?(version) }
|
33
31
|
|
34
32
|
# If in the vulnerable range and not known safe, it's vulnerable
|
35
33
|
return true if in_vulnerable_range
|
data/lib/dependabot/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-common
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.100.
|
4
|
+
version: 0.100.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2019-04-
|
11
|
+
date: 2019-04-12 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: aws-sdk-ecr
|