dependabot-composer 0.155.1 → 0.156.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 39ada4ad6001e182c36be5e53885a5b04852e62c0f14b9baba45553970e56740
-  data.tar.gz: 797e76a6679129f8697ea3d1d1395e84b33432f3f24ee7af872cf8aa80642357
+  metadata.gz: 7520afc57e113bc67119db043bbdad91ae738a38705e47188890bf418a4ae2ae
+  data.tar.gz: c03c3b2afb2ab8b02849bff718bdeca4c731adf20a3ea517f0c82d812c5eae66
 SHA512:
-  metadata.gz: b797f22b24502f442501458bb141658bc2e420940b055e6e4a7fcad86e7edb15ad6fcc93b7cd46b37a8a9eeba1db88e399a56a623c4faff68fb3d08a77895f7b
-  data.tar.gz: df6f7a0af0a97be52b29d44e3d20cc22364a746a2a4ac99c666bab16b762b54debd38fd7490fb0a74e8a387b0c17f324f3ea80107c6fd80a9a7fd0b1531aed21
+  metadata.gz: 2d2d13445a40f3fe7e8b1fb87b707f7dc116a9b3777c40de18e4a21531d52a4f7988017dfa8956af65eaf50e2011dcd0997749a4b0ab9f7288ab14489c91e8fb
+  data.tar.gz: ab69137db239357ec8fd0168cf5f49abef398914c2bfe43afd388a843df2993252275596c66df2e3060dc2552659b9c3af2e3de25011d5076555dde701b48404

data/lib/dependabot/composer/file_fetcher.rb

@@ -79,14 +79,16 @@ module Dependabot
         @path_sources ||=
           begin
             repos = parsed_composer_json.fetch("repositories", [])
-            return [] unless repos.is_a?(Hash) || repos.is_a?(Array)
-
-            repos = repos.values if repos.is_a?(Hash)
-            repos = repos.select { |r| r.is_a?(Hash) }
-
-            repos.
-              select { |details| details["type"] == "path" }.
-              map { |details| details["url"] }
+            if repos.is_a?(Hash) || repos.is_a?(Array)
+              repos = repos.values if repos.is_a?(Hash)
+              repos = repos.select { |r| r.is_a?(Hash) }
+
+              repos.
+                select { |details| details["type"] == "path" }.
+                map { |details| details["url"] }
+            else
+              []
+            end
           end
       end
 

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -312,11 +312,9 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size") ||
-                error.message.start_with?("Out of memory")
+          elsif error.message.start_with?("Allowed memory size") || error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
-          elsif error.error_context[:process_termsig] ==
-                Dependabot::SharedHelpers::SIGKILL
+          elsif error.error_context[:process_termsig] == Dependabot::SharedHelpers::SIGKILL
             # If the helper was SIGKILL-ed, assume the OOMKiller did it
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.155.1
+  version: 0.156.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-23 00:00:00.000000000 Z
+date: 2021-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.1
+        version: 0.156.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.1
+        version: 0.156.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement