dependabot-composer 0.183.0 → 0.186.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/v1/composer.json +1 -1
  3. data/helpers/v1/composer.lock +6 -6
  4. data/helpers/v2/composer.json +1 -1
  5. data/helpers/v2/composer.lock +6 -6
  6. data/lib/dependabot/composer/update_checker/version_resolver.rb +7 -2
  7. metadata +24 -10
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ba5c9383429b63120bc815e44faae8ab2bd1fe0202d1e212703b1a70cffa1abb
4
- data.tar.gz: 3135eca14c691ee71990c223697a4636b1e486d4d57c83dc695934f42e317743
3
+ metadata.gz: 4d22beb2ca5c2f636f3d87d91508c7b5587863bda7513c14f872ba9aacb82cd9
4
+ data.tar.gz: c2f8888551709fdb80e8bc82b5704de9288a779dc7059b6fe9a08402d112e529
5
5
  SHA512:
6
- metadata.gz: 34668e35f648a040cdca4f3b3c777114a6f72c5f23d4a3bcec71bcd3e57c6faf38d632b99566eb66b5623f5398abb1db7b6407db68285991fdd5a5c04d6ebc35
7
- data.tar.gz: 0c7b5e9d6438f2c41cd0aee95a40f74f07dab116c170140aa76c5805feb1d27ea599bb537a110c3b4487df2f6f9a00d005cf6d9c43b7205e1d5e933d2194a514
6
+ metadata.gz: 3d3d03012e067cc47b2ee8a5d653be27aef986080dfa59727fe3e0249244493e200bbcc182f8c5635f5f7f6ef3d9f1be033708462dca2e4216a3e23ab6dc5dc8
7
+ data.tar.gz: c3870cbb8ba39de4c437b840c651fb18096682af3e9bd0421c64517da9874cbeef44ccd2ea8a525940beb407e0e8497ac2447dbaf0632b74de8bec6faed522e8
data/helpers/v1/composer.json CHANGED
@@ -6,7 +6,7 @@
6
6
  },
7
7
  "require-dev": {
8
8
  "friendsofphp/php-cs-fixer": "^2.9",
9
- "phpstan/phpstan": "~1.5.4"
9
+ "phpstan/phpstan": "~1.6.4"
10
10
  },
11
11
  "autoload": {
12
12
  "psr-4": {
data/helpers/v1/composer.lock CHANGED
@@ -4,7 +4,7 @@
4
4
  "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
5
5
  "This file is @generated automatically"
6
6
  ],
7
- "content-hash": "03602c0b4bc1d9c6c9272d1bcf622a0f",
7
+ "content-hash": "ac4a5ae99bf2e3bf6843dc7062421d09",
8
8
  "packages": [
9
9
  {
10
10
  "name": "composer/ca-bundle",
@@ -1922,16 +1922,16 @@
1922
1922
  },
1923
1923
  {
1924
1924
  "name": "phpstan/phpstan",
1925
- "version": "1.5.6",
1925
+ "version": "1.6.4",
1926
1926
  "source": {
1927
1927
  "type": "git",
1928
1928
  "url": "https://github.com/phpstan/phpstan.git",
1929
- "reference": "799dd8c2d2c9c704bb55d2078078cb970cf0f6d1"
1929
+ "reference": "e4cd0c2dd97809fcfdcd1f367ccf0be86c235168"
1930
1930
  },
1931
1931
  "dist": {
1932
1932
  "type": "zip",
1933
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/799dd8c2d2c9c704bb55d2078078cb970cf0f6d1",
1934
- "reference": "799dd8c2d2c9c704bb55d2078078cb970cf0f6d1",
1933
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/e4cd0c2dd97809fcfdcd1f367ccf0be86c235168",
1934
+ "reference": "e4cd0c2dd97809fcfdcd1f367ccf0be86c235168",
1935
1935
  "shasum": ""
1936
1936
  },
1937
1937
  "require": {
@@ -1973,7 +1973,7 @@
1973
1973
  "type": "tidelift"
1974
1974
  }
1975
1975
  ],
1976
- "time": "2022-04-15T11:13:37+00:00"
1976
+ "time": "2022-05-02T16:02:21+00:00"
1977
1977
  },
1978
1978
  {
1979
1979
  "name": "psr/cache",
data/helpers/v2/composer.json CHANGED
@@ -6,7 +6,7 @@
6
6
  },
7
7
  "require-dev": {
8
8
  "friendsofphp/php-cs-fixer": "^3.0",
9
- "phpstan/phpstan": "~1.5.4"
9
+ "phpstan/phpstan": "~1.6.4"
10
10
  },
11
11
  "autoload": {
12
12
  "psr-4": {
data/helpers/v2/composer.lock CHANGED
@@ -4,7 +4,7 @@
4
4
  "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
5
5
  "This file is @generated automatically"
6
6
  ],
7
- "content-hash": "d213a87797435bef13d3f83ba0e3c16b",
7
+ "content-hash": "f009496780e9f8a7f35fbdda5f7f00b6",
8
8
  "packages": [
9
9
  {
10
10
  "name": "composer/ca-bundle",
@@ -2108,16 +2108,16 @@
2108
2108
  },
2109
2109
  {
2110
2110
  "name": "phpstan/phpstan",
2111
- "version": "1.5.6",
2111
+ "version": "1.6.4",
2112
2112
  "source": {
2113
2113
  "type": "git",
2114
2114
  "url": "https://github.com/phpstan/phpstan.git",
2115
- "reference": "799dd8c2d2c9c704bb55d2078078cb970cf0f6d1"
2115
+ "reference": "e4cd0c2dd97809fcfdcd1f367ccf0be86c235168"
2116
2116
  },
2117
2117
  "dist": {
2118
2118
  "type": "zip",
2119
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/799dd8c2d2c9c704bb55d2078078cb970cf0f6d1",
2120
- "reference": "799dd8c2d2c9c704bb55d2078078cb970cf0f6d1",
2119
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/e4cd0c2dd97809fcfdcd1f367ccf0be86c235168",
2120
+ "reference": "e4cd0c2dd97809fcfdcd1f367ccf0be86c235168",
2121
2121
  "shasum": ""
2122
2122
  },
2123
2123
  "require": {
@@ -2159,7 +2159,7 @@
2159
2159
  "type": "tidelift"
2160
2160
  }
2161
2161
  ],
2162
- "time": "2022-04-15T11:13:37+00:00"
2162
+ "time": "2022-05-02T16:02:21+00:00"
2163
2163
  },
2164
2164
  {
2165
2165
  "name": "psr/cache",
data/lib/dependabot/composer/update_checker/version_resolver.rb CHANGED
@@ -1,7 +1,9 @@
1
1
  # frozen_string_literal: true
2
2
 
3
- require "dependabot/errors"
4
3
  require "json"
4
+ require "uri"
5
+
6
+ require "dependabot/errors"
5
7
  require "dependabot/shared_helpers"
6
8
  require "dependabot/composer/update_checker"
7
9
  require "dependabot/composer/version"
@@ -308,7 +310,10 @@ module Dependabot
308
310
  raise Dependabot::PrivateSourceAuthenticationFailure, source
309
311
  elsif error.message.match?(SOURCE_TIMED_OUT_REGEX)
310
312
  url = error.message.match(SOURCE_TIMED_OUT_REGEX).named_captures.fetch("url")
311
- raise if url.include?("packagist.org")
313
+ raise if [
314
+ "packagist.org",
315
+ "www.packagist.org"
316
+ ].include?(URI(url).host)
312
317
 
313
318
  source = url.gsub(%r{/packages.json$}, "")
314
319
  raise Dependabot::PrivateSourceTimedOut, source
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.183.0
4
+ version: 0.186.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-04-29 00:00:00.000000000 Z
11
+ date: 2022-05-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,42 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.183.0
19
+ version: 0.186.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.183.0
26
+ version: 0.186.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debase
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
- - - "~>"
31
+ - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 0.2.4.1
33
+ version: 0.2.3
34
34
  type: :development
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
- - - "~>"
38
+ - - '='
39
+ - !ruby/object:Gem::Version
40
+ version: 0.2.3
41
+ - !ruby/object:Gem::Dependency
42
+ name: debase-ruby_core_source
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - '='
46
+ - !ruby/object:Gem::Version
47
+ version: 0.10.14
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - '='
39
53
  - !ruby/object:Gem::Version
40
- version: 0.2.4.1
54
+ version: 0.10.14
41
55
  - !ruby/object:Gem::Dependency
42
56
  name: debug
43
57
  requirement: !ruby/object:Gem::Requirement
@@ -114,14 +128,14 @@ dependencies:
114
128
  requirements:
115
129
  - - "~>"
116
130
  - !ruby/object:Gem::Version
117
- version: 1.27.0
131
+ version: 1.28.2
118
132
  type: :development
119
133
  prerelease: false
120
134
  version_requirements: !ruby/object:Gem::Requirement
121
135
  requirements:
122
136
  - - "~>"
123
137
  - !ruby/object:Gem::Version
124
- version: 1.27.0
138
+ version: 1.28.2
125
139
  - !ruby/object:Gem::Dependency
126
140
  name: ruby-debug-ide
127
141
  requirement: !ruby/object:Gem::Requirement