dependabot-composer 0.155.0 → 0.156.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 25c69bc4fe60ac1dad962f729604ce0e41fbbadbc782c830b6e77207adc88ca5
-  data.tar.gz: f11d8363f995f72b4f7f35d0f2de6e8d3081237d6fe4b031199df69fcac160db
+  metadata.gz: 23bb6715369805466a228ae99713edc319b8b6a7bde076ce98f66a3514a942b3
+  data.tar.gz: e7f772626fc794e1e1538a6d30067d2c3531b8b8fc79e8e711e5527f3fa29129
 SHA512:
-  metadata.gz: 6fea90b2bcb1a6bdca3332c9367b8c2716c13f6c83b6b9854c358dc622b1377d1a8e1b66693538df81ed9f194efd42b364ec389c034418757c87ae2ac0aff8f6
-  data.tar.gz: 19c36ca09ce59ccdb20ca86ac79cf1cd8304163569cb7f6831aea2a9d269f81fb69469658c289d60dbebe465464c4d0c6ae5ffd68e7a3370e5c79ebd26f98bcc
+  metadata.gz: 05f20b588663ba453a290a5b8ec13a3f02ffd1a7176d1497bc894bf8f369f599b73e137220995f62726e830578f901329b7abb50c0cabff6da1b15a51d2d41da
+  data.tar.gz: ec9dd70dd027424dc47822bf312ac8270849bea585b3a91d1c45a29a79d4358b663ece73f373c917becf728bf21276c7cf677dfc146dd2aade0a8b14b0c0e76b

data/lib/dependabot/composer/file_fetcher.rb

@@ -79,14 +79,16 @@ module Dependabot
         @path_sources ||=
           begin
             repos = parsed_composer_json.fetch("repositories", [])
-            return [] unless repos.is_a?(Hash) || repos.is_a?(Array)
-
-            repos = repos.values if repos.is_a?(Hash)
-            repos = repos.select { |r| r.is_a?(Hash) }
-
-            repos.
-              select { |details| details["type"] == "path" }.
-              map { |details| details["url"] }
+            if repos.is_a?(Hash) || repos.is_a?(Array)
+              repos = repos.values if repos.is_a?(Hash)
+              repos = repos.select { |r| r.is_a?(Hash) }
+
+              repos.
+                select { |details| details["type"] == "path" }.
+                map { |details| details["url"] }
+            else
+              []
+            end
           end
       end
 

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -312,11 +312,9 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size") ||
-                error.message.start_with?("Out of memory")
+          elsif error.message.start_with?("Allowed memory size") || error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
-          elsif error.error_context[:process_termsig] ==
-                Dependabot::SharedHelpers::SIGKILL
+          elsif error.error_context[:process_termsig] == Dependabot::SharedHelpers::SIGKILL
             # If the helper was SIGKILL-ed, assume the OOMKiller did it
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.155.0
+  version: 0.156.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-22 00:00:00.000000000 Z
+date: 2021-06-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.0
+        version: 0.156.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.0
+        version: 0.156.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement