dependabot-composer 0.117.9 → 0.118.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0eae8dba36253c94de2d33a83fc213ecb7651eb6063f89af5c5eed1f258f4f39
-  data.tar.gz: 06f9f5095d1ce2666e64029f5e8d674883d768fdc0279c2edcd5b5f8a474770c
+  metadata.gz: 283622317b97f8dbd9930f2b0b434b4d4c0347c5eff22a316f37c7337c474aec
+  data.tar.gz: f9af99d876ed463332ac22cc88f058e45232165852fa677517f7d4c8c9d2d125
 SHA512:
-  metadata.gz: 2e69e8f26c3eb87f1f92fbbf26ad2e715bb0fc64d02347aa1ff8232097270d9163af67f0bb6fd15c81422729b12e23281b231d1b2d027ac5b7e2a035cde91ade
-  data.tar.gz: ec8220f98e485b63880867f015674d9e6d4a028c4e13b3c2753109c538aaf7b06177c9674f1081efcd5480fcaad7094da02840153a075978a3b3309978628809
+  metadata.gz: 5e5c893b7a4f4876c0d1cdd54e460b48cfc8a854eadaa60d33f0f886874b3584edc88a1d2a6610d77019c1b2cbc8e6cb1e8eefe1b1552b58377e49ec0f310d69
+  data.tar.gz: e1148dd1fdf7de83ef6ecdb7d081ada78a633ed5b05ff7cca04d79c58be034562794659ea79b0160c04b08ecfcafb5680eccd0923bcf3aa0055915e94b42ffde

data/lib/dependabot/composer/update_checker.rb

@@ -97,6 +97,7 @@ module Dependabot
           dependency_files: dependency_files,
           credentials: credentials,
           ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored,
           security_advisories: security_advisories
         )
       end
@@ -166,7 +167,8 @@ module Dependabot
         @git_commit_checker ||= Dependabot::GitCommitChecker.new(
           dependency: dependency,
           credentials: credentials,
-          ignored_versions: ignored_versions
+          ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored
         )
       end
     end

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -12,11 +12,13 @@ module Dependabot
     class UpdateChecker
       class LatestVersionFinder
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -43,8 +45,8 @@ module Dependabot
         def fetch_lowest_security_fix_version
           versions = available_versions
           versions = filter_prerelease_versions(versions)
-          versions = filter_ignored_versions(versions)
           versions = filter_vulnerable_versions(versions)
+          versions = filter_ignored_versions(versions)
           versions = filter_lower_versions(versions)
           versions.min
         end
@@ -56,8 +58,15 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
+          filtered =
+            versions_array.
             reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -288,7 +288,8 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size")
+          elsif error.message.start_with?("Allowed memory size") ||
+                error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&
                 !dependency.top_level?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.117.9
+  version: 0.118.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-19 00:00:00.000000000 Z
+date: 2020-06-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.9
+        version: 0.118.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.9
+        version: 0.118.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement