dependabot-composer 0.217.0 → 0.218.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 58fab26f005642998855fadcd2f42d7c33ca524f108ddb58f256ccff56d4ced6
4
- data.tar.gz: 71700449e68659c7f2648e70cf502ff1bc98a5a16cc25a68c3e1a975437d8766
3
+ metadata.gz: 8537cebd27bab72fa0b41db995090924622a83190146d6af26dcd46f1cccec10
4
+ data.tar.gz: 0df46b3b3bdfea3575a0486dfd0e92d0732963e2cf8c95e2b5dde16cda036b42
5
5
  SHA512:
6
- metadata.gz: de9f0444f9e5b04a601ce03ded042816aa0615b277eece9337f3c580cd764dd024f58c57d07408cefae29d085370b0a3f5d4ea8a651ad4eec49ca8ba8ea02abb
7
- data.tar.gz: 898230d0f3e03813316c52a4905c39455a0dff1bbef086ed74eab9077cdf55d2e88149c142e56d580a4fabfa790f112a87c1e1f8d1b904004e56bbc0cb0acd43
6
+ metadata.gz: 5493362d779c9a162749d7bcb3909c3fa43012d331084717ac806a0ef57ec8f07329336cf51c41c63667ee21b2d955266af2b9c18ae43d27ac81af32d5482c3a
7
+ data.tar.gz: 1af6c13d9f8918070b55850530a951893f0176a7d1ef33415b640f960bc58d7ae312e3b820597a869fc51c47a3cb0c089009fd6a0f7564e442e81d964cbbd8f0
@@ -19,7 +19,7 @@ module Dependabot
19
19
  OR_SEPARATOR = /(?<=[a-zA-Z0-9*])[\s,]*\|\|?\s*/
20
20
  SEPARATOR = /(?:#{AND_SEPARATOR})|(?:#{OR_SEPARATOR})/
21
21
  ALLOWED_UPDATE_STRATEGIES =
22
- %i(widen_ranges bump_versions bump_versions_if_necessary).freeze
22
+ %i(lockfile_only widen_ranges bump_versions bump_versions_if_necessary).freeze
23
23
 
24
24
  def initialize(requirements:, update_strategy:,
25
25
  latest_resolvable_version:)
@@ -35,6 +35,7 @@ module Dependabot
35
35
  end
36
36
 
37
37
  def updated_requirements
38
+ return requirements if update_strategy == :lockfile_only
38
39
  return requirements unless latest_resolvable_version
39
40
 
40
41
  requirements.map { |req| updated_requirement(req) }
@@ -68,6 +68,10 @@ module Dependabot
68
68
  ).updated_requirements
69
69
  end
70
70
 
71
+ def requirements_unlocked_or_can_be?
72
+ requirements_update_strategy != :lockfile_only
73
+ end
74
+
71
75
  def requirements_update_strategy
72
76
  # If passed in as an option (in the base class) honour that option
73
77
  return @requirements_update_strategy.to_sym if @requirements_update_strategy
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.217.0
4
+ version: 0.218.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-04-24 00:00:00.000000000 Z
11
+ date: 2023-05-22 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.217.0
19
+ version: 0.218.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.217.0
26
+ version: 0.218.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -257,8 +257,8 @@ homepage: https://github.com/dependabot/dependabot-core
257
257
  licenses:
258
258
  - Nonstandard
259
259
  metadata:
260
- issue_tracker_uri: https://github.com/dependabot/dependabot-core/issues
261
- changelog_uri: https://github.com/dependabot/dependabot-core/blob/main/CHANGELOG.md
260
+ bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
261
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.218.0
262
262
  post_install_message:
263
263
  rdoc_options: []
264
264
  require_paths: