dependabot-composer 0.111.18 → 0.111.19

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c4ad1299bb5744ee16c0310fd05385060be131bdf8385fb3e9fe28e48f44ded2
-  data.tar.gz: f6886189fb4707416565b1934f63a164deeed5986737b70634f0064f84f0208c
+  metadata.gz: 0e522407c232a8fd30cbe85d1f65def39bcd72bc8cd0c9410e25f30b93536c63
+  data.tar.gz: 1e8d89a21f4b58083ba56517beaa99c9624d7c29b32ca28a4d56ce500b0bda4a
 SHA512:
-  metadata.gz: 42e123d13601c38213f1f8668549caff6ef4a304df021d0b701d90bb1f7c743cb2b711862731c1317ab24ac49061d0e81dfdad2b7abe0f7c095ff0629dc87a86
-  data.tar.gz: f268a0f14f5399c8a56013eb4f51806757259fbce6bc73d88c8293c778e5c76276b5522ea12d9b61b3a49e5712e5561abbf8acf26101a6632587e574f6a637d0
+  metadata.gz: 395b524a629bd8bd40cce8196d3b4d77f5bd7bbed1864cb5ce718ca3261e30efcdbd2b66344c01ba580bb39dbfc72c2539945c9668a794697199856aaf7eabe9
+  data.tar.gz: 8a1d56c2218d18c36611a311b5f392a23d4276f2bb2bafdd2b96d2e1a39f4de9c4f7a8d5967d012dacff3828ea0d48e0cebc3cb79a24c9d109e1660a0c427f4d

data/lib/dependabot/composer/file_updater/lockfile_updater.rb

@@ -27,7 +27,7 @@ module Dependabot
           @dependencies = dependencies
           @dependency_files = dependency_files
           @credentials = credentials
-          @composer_platform_extensions = {}
+          @composer_platform_extensions = initial_platform
         end
 
         def updated_lockfile_content
@@ -353,6 +353,17 @@ module Dependabot
             select { |cred| cred["password"] }
         end
 
+        def initial_platform
+          return {} unless parsed_composer_json["type"] == "library"
+          return {} unless parsed_composer_json.dig("require", "php")
+
+          { "php" => [parsed_composer_json.dig("require", "php")] }
+        end
+
+        def parsed_composer_json
+          JSON.parse(composer_json.content)
+        end
+
         def composer_json
           @composer_json ||=
             dependency_files.find { |f| f.name == "composer.json" }

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -32,7 +32,7 @@ module Dependabot
           @dependency_files             = dependency_files
           @requirements_to_unlock       = requirements_to_unlock
           @latest_allowable_version     = latest_allowable_version
-          @composer_platform_extensions = {}
+          @composer_platform_extensions = initial_platform
         end
 
         def latest_resolvable_version
@@ -276,6 +276,17 @@ module Dependabot
           NativeHelpers.composer_helper_path
         end
 
+        def initial_platform
+          return {} unless parsed_composer_file["type"] == "library"
+          return {} unless parsed_composer_file.dig("require", "php")
+
+          { "php" => [parsed_composer_file.dig("require", "php")] }
+        end
+
+        def parsed_composer_file
+          JSON.parse(composer_file.content)
+        end
+
         def composer_file
           @composer_file ||=
             dependency_files.find { |f| f.name == "composer.json" }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.111.18
+  version: 0.111.19
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.18
+        version: 0.111.19
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.18
+        version: 0.111.19
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement