dependabot-composer 0.117.7 → 0.118.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3bf2ce518ea92650c5029b246f5ec19528efcc6b57cfbd95734b8913dd3945c2
-  data.tar.gz: a4a4607aa756e13c1836364375f05bc0a250c6e66f76268cae63675d8640fca1
+  metadata.gz: ec4ed4e0a1b25b7c62409471a71dcac7fa000f979fa0720d5e6a18e40adb9de3
+  data.tar.gz: d92cc7e6d4c896cebab1ef5db95efe840ef2747608bac6ae93b2947f89e441b2
 SHA512:
-  metadata.gz: dc6e275625435585e04feef26caba187ad6241fb2d9732d328c03c4cec1e86222d1b3a2a891aeaf9c38703d269a2aa8ed95eda0dde79a48fd949b7cf54544696
-  data.tar.gz: 3b15715981f5e6b74c4130ad5b195fec254844f469e20e03196616f43414b048e1f081d84874e2d75c760ea4b14ef9e196c9f218a3f465af36f4369aee6bda6c
+  metadata.gz: 2dfe1fc9fddb3c9951f127650d07345a230109a4cf7e9f89a677e0104b02671e16a8ce89ae3b8bd4bd9d430c7e18ea202278e815edec9ef42c0067e3c21838a2
+  data.tar.gz: 977906aa1e0cbe7794205d44b32960a70c423b8e1c5818a23a68952f29d2a8ba63a960b8cdbea51a0a1906ecb2082542a2818bf640d3bf19c203eff38fe84751

data/lib/dependabot/composer/update_checker.rb

@@ -97,6 +97,7 @@ module Dependabot
           dependency_files: dependency_files,
           credentials: credentials,
           ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored,
           security_advisories: security_advisories
         )
       end
@@ -166,7 +167,8 @@ module Dependabot
         @git_commit_checker ||= Dependabot::GitCommitChecker.new(
           dependency: dependency,
           credentials: credentials,
-          ignored_versions: ignored_versions
+          ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored
         )
       end
     end

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -12,11 +12,13 @@ module Dependabot
     class UpdateChecker
       class LatestVersionFinder
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -43,8 +45,8 @@ module Dependabot
         def fetch_lowest_security_fix_version
           versions = available_versions
           versions = filter_prerelease_versions(versions)
-          versions = filter_ignored_versions(versions)
           versions = filter_vulnerable_versions(versions)
+          versions = filter_ignored_versions(versions)
           versions = filter_lower_versions(versions)
           versions.min
         end
@@ -56,8 +58,15 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
+          filtered =
+            versions_array.
             reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -288,7 +288,8 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size")
+          elsif error.message.start_with?("Allowed memory size") ||
+                error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&
                 !dependency.top_level?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.117.7
+  version: 0.118.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-04-20 00:00:00.000000000 Z
+date: 2020-05-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.7
+        version: 0.118.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.7
+        version: 0.118.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.82.0
+        version: 0.83.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.82.0
+        version: 0.83.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement