dependabot-composer 0.216.2 → 0.218.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 43f186a7bfae794013122c8d8a9342da38aee33841bdee313ee744ae11420752
-  data.tar.gz: 60716448db3ce3aaaabc08d5100d9cf01a546e4b1d042be56ad693cbff497dcf
+  metadata.gz: 8537cebd27bab72fa0b41db995090924622a83190146d6af26dcd46f1cccec10
+  data.tar.gz: 0df46b3b3bdfea3575a0486dfd0e92d0732963e2cf8c95e2b5dde16cda036b42
 SHA512:
-  metadata.gz: aa68bbd4eface56834d3dfc19235f9f7760a840d76e659063191c9c60cf94def3dc798f4d37b9a6ac8e3571b5671ee354f521ec8dcd3e1c27040e2d38fdb7d94
-  data.tar.gz: 846a76a85fbff4569d094b12525444e1d398933d3ec15099f558eb03bccf63ee1f27eef4b2f2a9786e732aab74bc82063d2623a76bfd553d89a883683b4c306e
+  metadata.gz: 5493362d779c9a162749d7bcb3909c3fa43012d331084717ac806a0ef57ec8f07329336cf51c41c63667ee21b2d955266af2b9c18ae43d27ac81af32d5482c3a
+  data.tar.gz: 1af6c13d9f8918070b55850530a951893f0176a7d1ef33415b640f960bc58d7ae312e3b820597a869fc51c47a3cb0c089009fd6a0f7564e442e81d964cbbd8f0

data/helpers/v1/composer.lock

@@ -1920,16 +1920,16 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "1.10.13",
+            "version": "1.10.14",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpstan.git",
-                "reference": "f07bf8c6980b81bf9e49d44bd0caf2e737614a70"
+                "reference": "d232901b09e67538e5c86a724be841bea5768a7c"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/f07bf8c6980b81bf9e49d44bd0caf2e737614a70",
-                "reference": "f07bf8c6980b81bf9e49d44bd0caf2e737614a70",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/d232901b09e67538e5c86a724be841bea5768a7c",
+                "reference": "d232901b09e67538e5c86a724be841bea5768a7c",
                 "shasum": ""
             },
             "require": {
@@ -1971,7 +1971,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2023-04-12T19:29:52+00:00"
+            "time": "2023-04-19T13:47:27+00:00"
         },
         {
             "name": "psr/cache",

data/helpers/v1/src/UpdateChecker.php

@@ -82,7 +82,7 @@ final class UpdateChecker
 
         // We found the package in the list of updated packages. Return its version.
         if ($updatedPackage instanceof PackageInterface) {
-            return preg_replace('/^([v])/', '', $updatedPackage->getPrettyVersion());
+            return ltrim($updatedPackage->getPrettyVersion(), 'v');
         }
 
         // We didn't find the package in the list of updated packages. Check if
@@ -104,14 +104,14 @@ final class UpdateChecker
         // Similarly, check if the package was provided by any other package.
         foreach ($composer->getPackage()->getProvides() as $link) {
             if ($link->getTarget() === $dependencyName) {
-                return preg_replace('/^([v])/', '', $link->getPrettyConstraint());
+                return ltrim($link->getPrettyConstraint(), 'v');
             }
         }
 
         foreach ($installedPackages as $package) {
             foreach ($package->getProvides() as $link) {
                 if ($link->getTarget() === $dependencyName) {
-                    return preg_replace('/^([v])/', '', $link->getPrettyConstraint());
+                    return ltrim($link->getPrettyConstraint(), 'v');
                 }
             }
         }

data/helpers/v2/composer.lock

@@ -2444,16 +2444,16 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "1.10.13",
+            "version": "1.10.14",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpstan.git",
-                "reference": "f07bf8c6980b81bf9e49d44bd0caf2e737614a70"
+                "reference": "d232901b09e67538e5c86a724be841bea5768a7c"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/f07bf8c6980b81bf9e49d44bd0caf2e737614a70",
-                "reference": "f07bf8c6980b81bf9e49d44bd0caf2e737614a70",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/d232901b09e67538e5c86a724be841bea5768a7c",
+                "reference": "d232901b09e67538e5c86a724be841bea5768a7c",
                 "shasum": ""
             },
             "require": {
@@ -2502,7 +2502,7 @@
                     "type": "tidelift"
                 }
             ],
-            "time": "2023-04-12T19:29:52+00:00"
+            "time": "2023-04-19T13:47:27+00:00"
         },
         {
             "name": "psr/cache",

data/helpers/v2/src/UpdateChecker.php

@@ -88,7 +88,7 @@ final class UpdateChecker
 
         // We found the package in the list of updated packages. Return its version.
         if ($updatedPackage instanceof PackageInterface) {
-            return preg_replace('/^([v])/', '', $updatedPackage->getPrettyVersion());
+            return ltrim($updatedPackage->getPrettyVersion(), 'v');
         }
 
         // We didn't find the package in the list of updated packages. Check if
@@ -110,14 +110,14 @@ final class UpdateChecker
         // Similarly, check if the package was provided by any other package.
         foreach ($composer->getPackage()->getProvides() as $link) {
             if ($link->getTarget() === $dependencyName) {
-                return preg_replace('/^([v])/', '', $link->getPrettyConstraint());
+                return ltrim($link->getPrettyConstraint(), 'v');
             }
         }
 
         foreach ($installedPackages as $package) {
             foreach ($package->getProvides() as $link) {
                 if ($link->getTarget() === $dependencyName) {
-                    return preg_replace('/^([v])/', '', $link->getPrettyConstraint());
+                    return ltrim($link->getPrettyConstraint(), 'v');
                 }
             }
         }

data/lib/dependabot/composer/update_checker/requirements_updater.rb

@@ -19,7 +19,7 @@ module Dependabot
         OR_SEPARATOR = /(?<=[a-zA-Z0-9*])[\s,]*\|\|?\s*/
         SEPARATOR = /(?:#{AND_SEPARATOR})|(?:#{OR_SEPARATOR})/
         ALLOWED_UPDATE_STRATEGIES =
-          %i(widen_ranges bump_versions bump_versions_if_necessary).freeze
+          %i(lockfile_only widen_ranges bump_versions bump_versions_if_necessary).freeze
 
         def initialize(requirements:, update_strategy:,
                        latest_resolvable_version:)
@@ -35,6 +35,7 @@ module Dependabot
         end
 
         def updated_requirements
+          return requirements if update_strategy == :lockfile_only
           return requirements unless latest_resolvable_version
 
           requirements.map { |req| updated_requirement(req) }

data/lib/dependabot/composer/update_checker.rb

@@ -68,6 +68,10 @@ module Dependabot
         ).updated_requirements
       end
 
+      def requirements_unlocked_or_can_be?
+        requirements_update_strategy != :lockfile_only
+      end
+
       def requirements_update_strategy
         # If passed in as an option (in the base class) honour that option
         return @requirements_update_strategy.to_sym if @requirements_update_strategy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.216.2
+  version: 0.218.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-20 00:00:00.000000000 Z
+date: 2023-05-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.2
+        version: 0.218.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.2
+        version: 0.218.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -257,8 +257,8 @@ homepage: https://github.com/dependabot/dependabot-core
 licenses:
 - Nonstandard
 metadata:
-  issue_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.218.0
 post_install_message: 
 rdoc_options: []
 require_paths: