dependabot-composer 0.154.5 → 0.156.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 76a31ad903137a4810b34a17ccb449d0c6e97f05a6fb74fac0db804d48b3c3ea
-  data.tar.gz: 59624eb4b935bbdc213ae9be95e6e3a732173747afb7f893eee132861f03d52d
+  metadata.gz: b5c93db64d0705462cd2b04b9fa305443c929e487ba70155c243eca5e7dda703
+  data.tar.gz: ba9d16b1fc1a14cea2767d32db92611aabca8f5993c48fd492daf6e1a97c59d7
 SHA512:
-  metadata.gz: 5fafe03c27b309e8a7cd27ddfa0ebddecdb45b24da44584a0e355f7b8fd46a70fc2799841e9ffb1fbdf22859a09923ad856410eaa763c19057369b6a9436e589
-  data.tar.gz: 0d6fa4dbc077e0b60eefebfe73ba57219405551ebba2cd706b3f28b275507e4e03939cb21d646aa46744f30fd8ad34304380aacb40141fc47df25f38bcb21b37
+  metadata.gz: da2b82464f9d47a8cd9f5cfd118ebf2cb215f1055415911c6bf1db2c54f54b2e6f6c4734f6aaa7e3f6dabd9443042a68bf05c4d7799d14c1ee79d6c7aead68a7
+  data.tar.gz: e665ea08487e807bd4d532563c649838f8de91d75a0143f10789a4ea3d4cb6fbd726cc57eca1f68a8d7c1bba38ac57140058baa174eab02342395653e69bcd78

data/lib/dependabot/composer/file_fetcher.rb

@@ -79,14 +79,16 @@ module Dependabot
         @path_sources ||=
           begin
             repos = parsed_composer_json.fetch("repositories", [])
-            return [] unless repos.is_a?(Hash) || repos.is_a?(Array)
-
-            repos = repos.values if repos.is_a?(Hash)
-            repos = repos.select { |r| r.is_a?(Hash) }
-
-            repos.
-              select { |details| details["type"] == "path" }.
-              map { |details| details["url"] }
+            if repos.is_a?(Hash) || repos.is_a?(Array)
+              repos = repos.values if repos.is_a?(Hash)
+              repos = repos.select { |r| r.is_a?(Hash) }
+
+              repos.
+                select { |details| details["type"] == "path" }.
+                map { |details| details["url"] }
+            else
+              []
+            end
           end
       end
 

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -312,11 +312,9 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size") ||
-                error.message.start_with?("Out of memory")
+          elsif error.message.start_with?("Allowed memory size") || error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
-          elsif error.error_context[:process_termsig] ==
-                Dependabot::SharedHelpers::SIGKILL
+          elsif error.error_context[:process_termsig] == Dependabot::SharedHelpers::SIGKILL
             # If the helper was SIGKILL-ed, assume the OOMKiller did it
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.154.5
+  version: 0.156.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-22 00:00:00.000000000 Z
+date: 2021-06-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.5
+        version: 0.156.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.5
+        version: 0.156.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement