dependabot-composer 0.217.0 → 0.219.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 58fab26f005642998855fadcd2f42d7c33ca524f108ddb58f256ccff56d4ced6
4
- data.tar.gz: 71700449e68659c7f2648e70cf502ff1bc98a5a16cc25a68c3e1a975437d8766
3
+ metadata.gz: 4fb9cf9e2b6181816b768b068fc245dab82ca563e02c41455df902e513c41bf7
4
+ data.tar.gz: 887e1813e9cde69861d80db8cec277f962efcabf5d1b6fdf9a84fe0b4d04cbef
5
5
  SHA512:
6
- metadata.gz: de9f0444f9e5b04a601ce03ded042816aa0615b277eece9337f3c580cd764dd024f58c57d07408cefae29d085370b0a3f5d4ea8a651ad4eec49ca8ba8ea02abb
7
- data.tar.gz: 898230d0f3e03813316c52a4905c39455a0dff1bbef086ed74eab9077cdf55d2e88149c142e56d580a4fabfa790f112a87c1e1f8d1b904004e56bbc0cb0acd43
6
+ metadata.gz: a37248e75203eda2d55d9606afc7e7b0b3f05d5b3dc44836638384cb1e6cc96de887cadcaca963da81be0c452f0f47f1799ba67a2ce34a1faaac0705c0a7e4b1
7
+ data.tar.gz: 2b45b2bf6e777cd40f952131faceb37d0d5c957489539ad3947759b81ae5d8c1aac59bbf0579fafb9aa4f2f41e04d00491a32b71245df48128c25b775df891d9
@@ -19,7 +19,7 @@ module Dependabot
19
19
  OR_SEPARATOR = /(?<=[a-zA-Z0-9*])[\s,]*\|\|?\s*/
20
20
  SEPARATOR = /(?:#{AND_SEPARATOR})|(?:#{OR_SEPARATOR})/
21
21
  ALLOWED_UPDATE_STRATEGIES =
22
- %i(widen_ranges bump_versions bump_versions_if_necessary).freeze
22
+ %i(lockfile_only widen_ranges bump_versions bump_versions_if_necessary).freeze
23
23
 
24
24
  def initialize(requirements:, update_strategy:,
25
25
  latest_resolvable_version:)
@@ -35,6 +35,7 @@ module Dependabot
35
35
  end
36
36
 
37
37
  def updated_requirements
38
+ return requirements if update_strategy == :lockfile_only
38
39
  return requirements unless latest_resolvable_version
39
40
 
40
41
  requirements.map { |req| updated_requirement(req) }
@@ -68,6 +68,10 @@ module Dependabot
68
68
  ).updated_requirements
69
69
  end
70
70
 
71
+ def requirements_unlocked_or_can_be?
72
+ requirements_update_strategy != :lockfile_only
73
+ end
74
+
71
75
  def requirements_update_strategy
72
76
  # If passed in as an option (in the base class) honour that option
73
77
  return @requirements_update_strategy.to_sym if @requirements_update_strategy
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.217.0
4
+ version: 0.219.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-04-24 00:00:00.000000000 Z
11
+ date: 2023-06-12 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.217.0
19
+ version: 0.219.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.217.0
26
+ version: 0.219.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -257,8 +257,8 @@ homepage: https://github.com/dependabot/dependabot-core
257
257
  licenses:
258
258
  - Nonstandard
259
259
  metadata:
260
- issue_tracker_uri: https://github.com/dependabot/dependabot-core/issues
261
- changelog_uri: https://github.com/dependabot/dependabot-core/blob/main/CHANGELOG.md
260
+ bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
261
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.219.0
262
262
  post_install_message:
263
263
  rdoc_options: []
264
264
  require_paths: