dependabot-composer 0.123.1 → 0.124.4

Sign up to get free protection for your applications and to get access to all the features.
@@ -34,6 +34,10 @@ module Dependabot
34
34
  ).latest_resolvable_version
35
35
  end
36
36
 
37
+ def lowest_security_fix_version
38
+ latest_version_finder.lowest_security_fix_version
39
+ end
40
+
37
41
  def lowest_resolvable_security_fix_version
38
42
  raise "Dependency not vulnerable!" unless vulnerable?
39
43
 
@@ -105,7 +109,7 @@ module Dependabot
105
109
  def fetch_lowest_resolvable_security_fix_version
106
110
  return nil if path_dependency? || git_dependency?
107
111
 
108
- fix_version = latest_version_finder.lowest_security_fix_version
112
+ fix_version = lowest_security_fix_version
109
113
  return latest_resolvable_version if fix_version.nil?
110
114
 
111
115
  resolved_fix_version = VersionResolver.new(
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.123.1
4
+ version: 0.124.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-10-19 00:00:00.000000000 Z
11
+ date: 2020-10-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.123.1
19
+ version: 0.124.4
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.123.1
26
+ version: 0.124.4
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -218,7 +218,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
218
218
  - !ruby/object:Gem::Version
219
219
  version: 2.5.0
220
220
  requirements: []
221
- rubygems_version: 3.1.2
221
+ rubygems_version: 3.1.4
222
222
  signing_key:
223
223
  specification_version: 4
224
224
  summary: PHP (Composer) support for dependabot