dependabot-composer 0.117.8 → 0.118.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61ce42acc125e8e1df2d3381fff9648e9ca6c9a309902ca2a4d53fc71893729f
-  data.tar.gz: d73558f7ce4b79a7e0a86d6996726b7cef5639a9a70b243ecf530fc2f2d8e671
+  metadata.gz: 8a95bf4958459b6b252d15dd02d51632ab0a0c0c37390f001bf6802037607458
+  data.tar.gz: 72563123b876cbffde8c7d2e3ef14c69162c0d4a4e807c076602fa56d05aa2c4
 SHA512:
-  metadata.gz: 1058abc5a895490698072699282cd9d289489e41e6ee790e191fe174b8e19512510eb8b9f4f982c053153b88361b32bb2141433fee503c35b2040d0a4273c1bb
-  data.tar.gz: 17099d9de001d34994ee37d8d3d5f6287970f1780204aa6f1339cc5be1037720d55c99bdb8c083b46aafe11c1da59489952d954fd337b388e893eabe62b8d304
+  metadata.gz: d4380a61ccc24e53ea3eaa252aa63c67f27071feb68f99ab910c1e4561bd0d8a9d49616415a8929c247c3f64f5b20e6680c7f0c873acc200c0de2f7f40638d6a
+  data.tar.gz: c0564dc2462c5a7090511d32c663178aa6b919f619166429e73f14e4529f18e8e43df9817f218cc2f1be8219feb4669603b0395f18849ba0823471a43415d185

data/lib/dependabot/composer/update_checker.rb

@@ -97,6 +97,7 @@ module Dependabot
           dependency_files: dependency_files,
           credentials: credentials,
           ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored,
           security_advisories: security_advisories
         )
       end
@@ -166,7 +167,8 @@ module Dependabot
         @git_commit_checker ||= Dependabot::GitCommitChecker.new(
           dependency: dependency,
           credentials: credentials,
-          ignored_versions: ignored_versions
+          ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored
         )
       end
     end

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -12,11 +12,13 @@ module Dependabot
     class UpdateChecker
       class LatestVersionFinder
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -43,8 +45,8 @@ module Dependabot
         def fetch_lowest_security_fix_version
           versions = available_versions
           versions = filter_prerelease_versions(versions)
-          versions = filter_ignored_versions(versions)
           versions = filter_vulnerable_versions(versions)
+          versions = filter_ignored_versions(versions)
           versions = filter_lower_versions(versions)
           versions.min
         end
@@ -56,8 +58,15 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
+          filtered =
+            versions_array.
             reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -288,7 +288,8 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size")
+          elsif error.message.start_with?("Allowed memory size") ||
+                error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&
                 !dependency.top_level?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.117.8
+  version: 0.118.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-12 00:00:00.000000000 Z
+date: 2020-06-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.8
+        version: 0.118.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.8
+        version: 0.118.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.82.0
+        version: 0.83.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.82.0
+        version: 0.83.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement