dependabot-common 0.187.0 → 0.188.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5a415dd5d41d2ea9bd87ba43b0f9ad9d45e55e8169f7e27e005512fb5a0e08ab
-  data.tar.gz: 50534c221638a6e3d1bb243723ec057005c965a0d0755d0d4dcef69f7f03d4fa
+  metadata.gz: 593f43c5e622caf3c10259a53e3c74b5912060fa0954616f5c579e9701d947e0
+  data.tar.gz: 724fde3aa5684da3eab762f040f5cae6421b9d0886bbdd40fd71f9bbba4d5d42
 SHA512:
-  metadata.gz: 27fc351fde03f6f671677a95f079d2b36995a8f00feb1dcefaaefbf9a2eedebd72bc3b4491631dc3dd96ea016c74871695915721387e8f83466eb9a0a8470c04
-  data.tar.gz: 3c240fc2d29dfa10702d75ec274ec1b9bba7ffa031d1a4d5843fa0b3cdf3294715c633d85c0585e2e655b965920c4432078e6b33818f9e7c36cea40757d9c308
+  metadata.gz: 1d66e45102760ce66dc119f6d75586934d0f8703985f5d965f8c2f2729cb7170d889607b099b84f34550c2142405a99f2a4ae5f2955144f314654bf8278a7925
+  data.tar.gz: b572f18d7685bfbf3c2b095fa5911358aaf6ab38e1df888000942747315cfb3918e7e0e3cc49a4a00f35445cdb11c484a75f8351af4670fafbc5bef732953efb

data/lib/dependabot/dependency_file.rb

@@ -4,6 +4,9 @@ require "pathname"
 
 module Dependabot
   class DependencyFile
+    # See https://www.unicode.org/faq/utf_bom.html#BOM
+    UTF_8_BOM = [0xEF, 0xBB, 0xBF].pack("C*").force_encoding("UTF-8").freeze
+
     attr_accessor :name, :content, :directory, :type, :support_file,
                   :symlink_target, :content_encoding, :operation
 
@@ -21,6 +24,9 @@ module Dependabot
     def initialize(name:, content:, directory: "/", type: "file",
                    support_file: false, symlink_target: nil,
                    content_encoding: ContentEncoding::UTF_8, deleted: false, operation: Operation::UPDATE)
+      # Remove UTF-8 byte order mark (BOM) from content, if present
+      content = content.delete_prefix(UTF_8_BOM) if content && content_encoding == ContentEncoding::UTF_8
+
       @name = name
       @content = content
       @directory = clean_directory(directory)

data/lib/dependabot/git_commit_checker.rb

@@ -240,6 +240,7 @@ module Dependabot
         when "github" then github_commit_comparison_status(tag, commit)
         when "gitlab" then gitlab_commit_comparison_status(tag, commit)
         when "bitbucket" then bitbucket_commit_comparison_status(tag, commit)
+        when "codecommit" then nil # TODO: get codecommit comparison status
         else raise "Unknown source"
         end
 

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -167,6 +167,7 @@ module Dependabot
               when "github" then fetch_github_file(file)
               when "gitlab" then fetch_gitlab_file(file)
               when "bitbucket" then fetch_bitbucket_file(file)
+              when "codecommit" then nil # TODO: git file from codecommit
               else raise "Unsupported provider '#{provider}'"
               end
           end
@@ -220,6 +221,7 @@ module Dependabot
           when "bitbucket" then fetch_bitbucket_file_list
           when "gitlab" then fetch_gitlab_file_list
           when "azure" then [] # TODO: Fetch files from Azure
+          when "codecommit" then [] # TODO: Fetch Files from Codecommit
           else raise "Unexpected repo provider '#{source.provider}'"
           end
         end

data/lib/dependabot/metadata_finders/base/commits_finder.rb

@@ -23,6 +23,7 @@ module Dependabot
         def commits_url
           return unless source
           return if source.provider == "azure" # TODO: Fetch Azure commits
+          return if source.provider == "codecommit" # TODO: Fetch Codecommit commits
 
           path =
             case source.provider
@@ -44,6 +45,7 @@ module Dependabot
           when "bitbucket" then fetch_bitbucket_commits
           when "gitlab" then fetch_gitlab_commits
           when "azure" then [] # TODO: Fetch Azure commits
+          when "codecommit" then [] # TODO: Fetch Codecommit commits
           else raise "Unexpected source provider '#{source.provider}'"
           end
         end

data/lib/dependabot/metadata_finders/base/release_finder.rb

@@ -194,8 +194,9 @@ module Dependabot
 
           case source.provider
           when "github" then fetch_github_releases
-          # Bitbucket doesn't support releases and Azure can't list API for annotated tags
-          when "bitbucket", "azure" then []
+          # Bitbucket and CodeCommit don't support releases and
+          # Azure can't list API for annotated tags
+          when "bitbucket", "azure", "codecommit" then []
           when "gitlab" then fetch_gitlab_releases
           else raise "Unexpected repo provider '#{source.provider}'"
           end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.187.0"
+  VERSION = "0.188.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.187.0
+  version: 0.188.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-13 00:00:00.000000000 Z
+date: 2022-05-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -326,14 +326,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.28.2
+        version: 1.29.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.28.2
+        version: 1.29.1
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement