dependabot-composer 0.129.1 → 0.130.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/v1/composer.lock +11 -11
  3. data/helpers/v2/composer.lock +11 -11
  4. data/lib/dependabot/composer/helpers.rb +10 -0
  5. metadata +8 -8
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 931d14a3a9a222959c3a3598607123335f9157a313fa40f7db9c83dc08a4b2bb
4
- data.tar.gz: d5c0645abff9d914bdd61b2befca8c86a56740a1241d580d5f1c71db96940151
3
+ metadata.gz: 5cbe9486ee5ed458a2d3bf2ab51ae24b24f8f880ff460d16e0ee66b9199d66ee
4
+ data.tar.gz: ac69caf247b603159e8ae3a3c711f1f0f14f525202bba80add8c602e8cb029ae
5
5
  SHA512:
6
- metadata.gz: 27bb2ffe07e40f9321d9ee1beecca7d923d65de4f685f91011c3027d5aa4dd87b07a86bfeff5ef5c305250a8cb65d12f4b421e726517df8292ffe193459b3097
7
- data.tar.gz: 3e7752f61e212b3e97daaaef8ef9fc85b22689eabe0245746ee948e8995b3b8dc6da0baf089bc1e2f2a418d35d4430958bc3e579601561f0ec15325023913390
6
+ metadata.gz: 7365106b9dfa875610c275eb9ca2f26bb2877690a5cacc375535778379d4feed1cfbc322f7c6b7b491579e058f925c2d72e6b44424971616f960d5d123aa2cb8
7
+ data.tar.gz: 2914b7773cce8f54e735dc3aa08ea7cb777eabf1c34823a8b3d3bdd3be8b10178fe08de70f921c3942b7965fc0315b0a614356a2ae7243092c4b9cc20521ced1
data/helpers/v1/composer.lock CHANGED
@@ -1687,16 +1687,16 @@
1687
1687
  },
1688
1688
  {
1689
1689
  "name": "friendsofphp/php-cs-fixer",
1690
- "version": "v2.17.2",
1690
+ "version": "v2.17.3",
1691
1691
  "source": {
1692
1692
  "type": "git",
1693
1693
  "url": "https://github.com/FriendsOfPHP/PHP-CS-Fixer.git",
1694
- "reference": "aaee4f3d16a996fc0b570be0c69d3b80c909c507"
1694
+ "reference": "bd32f5dd72cdfc7b53f54077f980e144bfa2f595"
1695
1695
  },
1696
1696
  "dist": {
1697
1697
  "type": "zip",
1698
- "url": "https://api.github.com/repos/FriendsOfPHP/PHP-CS-Fixer/zipball/aaee4f3d16a996fc0b570be0c69d3b80c909c507",
1699
- "reference": "aaee4f3d16a996fc0b570be0c69d3b80c909c507",
1698
+ "url": "https://api.github.com/repos/FriendsOfPHP/PHP-CS-Fixer/zipball/bd32f5dd72cdfc7b53f54077f980e144bfa2f595",
1699
+ "reference": "bd32f5dd72cdfc7b53f54077f980e144bfa2f595",
1700
1700
  "shasum": ""
1701
1701
  },
1702
1702
  "require": {
@@ -1722,7 +1722,7 @@
1722
1722
  "justinrainbow/json-schema": "^5.0",
1723
1723
  "keradus/cli-executor": "^1.4",
1724
1724
  "mikey179/vfsstream": "^1.6",
1725
- "php-coveralls/php-coveralls": "^2.4.1",
1725
+ "php-coveralls/php-coveralls": "^2.4.2",
1726
1726
  "php-cs-fixer/accessible-object": "^1.0",
1727
1727
  "php-cs-fixer/phpunit-constraint-isidenticalstring": "^1.2",
1728
1728
  "php-cs-fixer/phpunit-constraint-xmlmatchesxsd": "^1.2.1",
@@ -1783,7 +1783,7 @@
1783
1783
  "type": "github"
1784
1784
  }
1785
1785
  ],
1786
- "time": "2020-12-17T16:41:55+00:00"
1786
+ "time": "2020-12-24T11:14:44+00:00"
1787
1787
  },
1788
1788
  {
1789
1789
  "name": "php-cs-fixer/diff",
@@ -1838,16 +1838,16 @@
1838
1838
  },
1839
1839
  {
1840
1840
  "name": "phpstan/phpstan",
1841
- "version": "0.12.63",
1841
+ "version": "0.12.66",
1842
1842
  "source": {
1843
1843
  "type": "git",
1844
1844
  "url": "https://github.com/phpstan/phpstan.git",
1845
- "reference": "c97ec4754bd53099a06c24847bd2870b99966b6a"
1845
+ "reference": "4110a2425c6bd53acbdfcda07885e87b66e9ba3e"
1846
1846
  },
1847
1847
  "dist": {
1848
1848
  "type": "zip",
1849
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/c97ec4754bd53099a06c24847bd2870b99966b6a",
1850
- "reference": "c97ec4754bd53099a06c24847bd2870b99966b6a",
1849
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/4110a2425c6bd53acbdfcda07885e87b66e9ba3e",
1850
+ "reference": "4110a2425c6bd53acbdfcda07885e87b66e9ba3e",
1851
1851
  "shasum": ""
1852
1852
  },
1853
1853
  "require": {
@@ -1890,7 +1890,7 @@
1890
1890
  "type": "tidelift"
1891
1891
  }
1892
1892
  ],
1893
- "time": "2020-12-15T16:37:16+00:00"
1893
+ "time": "2021-01-11T16:43:15+00:00"
1894
1894
  },
1895
1895
  {
1896
1896
  "name": "psr/event-dispatcher",
data/helpers/v2/composer.lock CHANGED
@@ -1732,16 +1732,16 @@
1732
1732
  },
1733
1733
  {
1734
1734
  "name": "friendsofphp/php-cs-fixer",
1735
- "version": "v2.17.2",
1735
+ "version": "v2.17.3",
1736
1736
  "source": {
1737
1737
  "type": "git",
1738
1738
  "url": "https://github.com/FriendsOfPHP/PHP-CS-Fixer.git",
1739
- "reference": "aaee4f3d16a996fc0b570be0c69d3b80c909c507"
1739
+ "reference": "bd32f5dd72cdfc7b53f54077f980e144bfa2f595"
1740
1740
  },
1741
1741
  "dist": {
1742
1742
  "type": "zip",
1743
- "url": "https://api.github.com/repos/FriendsOfPHP/PHP-CS-Fixer/zipball/aaee4f3d16a996fc0b570be0c69d3b80c909c507",
1744
- "reference": "aaee4f3d16a996fc0b570be0c69d3b80c909c507",
1743
+ "url": "https://api.github.com/repos/FriendsOfPHP/PHP-CS-Fixer/zipball/bd32f5dd72cdfc7b53f54077f980e144bfa2f595",
1744
+ "reference": "bd32f5dd72cdfc7b53f54077f980e144bfa2f595",
1745
1745
  "shasum": ""
1746
1746
  },
1747
1747
  "require": {
@@ -1767,7 +1767,7 @@
1767
1767
  "justinrainbow/json-schema": "^5.0",
1768
1768
  "keradus/cli-executor": "^1.4",
1769
1769
  "mikey179/vfsstream": "^1.6",
1770
- "php-coveralls/php-coveralls": "^2.4.1",
1770
+ "php-coveralls/php-coveralls": "^2.4.2",
1771
1771
  "php-cs-fixer/accessible-object": "^1.0",
1772
1772
  "php-cs-fixer/phpunit-constraint-isidenticalstring": "^1.2",
1773
1773
  "php-cs-fixer/phpunit-constraint-xmlmatchesxsd": "^1.2.1",
@@ -1828,7 +1828,7 @@
1828
1828
  "type": "github"
1829
1829
  }
1830
1830
  ],
1831
- "time": "2020-12-17T16:41:55+00:00"
1831
+ "time": "2020-12-24T11:14:44+00:00"
1832
1832
  },
1833
1833
  {
1834
1834
  "name": "php-cs-fixer/diff",
@@ -1883,16 +1883,16 @@
1883
1883
  },
1884
1884
  {
1885
1885
  "name": "phpstan/phpstan",
1886
- "version": "0.12.63",
1886
+ "version": "0.12.66",
1887
1887
  "source": {
1888
1888
  "type": "git",
1889
1889
  "url": "https://github.com/phpstan/phpstan.git",
1890
- "reference": "c97ec4754bd53099a06c24847bd2870b99966b6a"
1890
+ "reference": "4110a2425c6bd53acbdfcda07885e87b66e9ba3e"
1891
1891
  },
1892
1892
  "dist": {
1893
1893
  "type": "zip",
1894
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/c97ec4754bd53099a06c24847bd2870b99966b6a",
1895
- "reference": "c97ec4754bd53099a06c24847bd2870b99966b6a",
1894
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/4110a2425c6bd53acbdfcda07885e87b66e9ba3e",
1895
+ "reference": "4110a2425c6bd53acbdfcda07885e87b66e9ba3e",
1896
1896
  "shasum": ""
1897
1897
  },
1898
1898
  "require": {
@@ -1935,7 +1935,7 @@
1935
1935
  "type": "tidelift"
1936
1936
  }
1937
1937
  ],
1938
- "time": "2020-12-15T16:37:16+00:00"
1938
+ "time": "2021-01-11T16:43:15+00:00"
1939
1939
  },
1940
1940
  {
1941
1941
  "name": "psr/event-dispatcher",
data/lib/dependabot/composer/helpers.rb CHANGED
@@ -10,11 +10,21 @@ module Dependabot
10
10
 
11
11
  def self.composer_version(composer_json, parsed_lockfile = nil)
12
12
  return "v1" if composer_json["name"] && composer_json["name"] !~ COMPOSER_V2_NAME_REGEX
13
+ return "v1" if invalid_v2_requirement?(composer_json)
13
14
  return "v2" unless parsed_lockfile && parsed_lockfile["plugin-api-version"]
14
15
 
15
16
  version = Composer::Version.new(parsed_lockfile["plugin-api-version"])
16
17
  version.canonical_segments.first == 1 ? "v1" : "v2"
17
18
  end
19
+
20
+ def self.invalid_v2_requirement?(composer_json)
21
+ return false unless composer_json.key?("require")
22
+
23
+ composer_json["require"].keys.any? do |key|
24
+ key != "php" && key !~ COMPOSER_V2_NAME_REGEX
25
+ end
26
+ end
27
+ private_class_method :invalid_v2_requirement?
18
28
  end
19
29
  end
20
30
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.129.1
4
+ version: 0.130.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-12-21 00:00:00.000000000 Z
11
+ date: 2021-01-13 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.129.1
19
+ version: 0.130.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.129.1
26
+ version: 0.130.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
100
100
  requirements:
101
101
  - - "~>"
102
102
  - !ruby/object:Gem::Version
103
- version: 1.6.0
103
+ version: 1.8.0
104
104
  type: :development
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
108
  - - "~>"
109
109
  - !ruby/object:Gem::Version
110
- version: 1.6.0
110
+ version: 1.8.0
111
111
  - !ruby/object:Gem::Dependency
112
112
  name: simplecov
113
113
  requirement: !ruby/object:Gem::Requirement
114
114
  requirements:
115
115
  - - "~>"
116
116
  - !ruby/object:Gem::Version
117
- version: 0.20.0
117
+ version: 0.21.0
118
118
  type: :development
119
119
  prerelease: false
120
120
  version_requirements: !ruby/object:Gem::Requirement
121
121
  requirements:
122
122
  - - "~>"
123
123
  - !ruby/object:Gem::Version
124
- version: 0.20.0
124
+ version: 0.21.0
125
125
  - !ruby/object:Gem::Dependency
126
126
  name: simplecov-console
127
127
  requirement: !ruby/object:Gem::Requirement