dependabot-composer 0.220.0 → 0.222.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 4bd37f08a4b7936349801d5b6a87fd76290a05b1fb79796713f146b75261cdd9
|
4
|
+
data.tar.gz: be5bc6fcff10d879ce0c8bc90547991c09e481a2b46313f02d4f3671ebb56cea
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 005ca65d3a5f836f999456b49f5935c880c8b851b53b044752be8e9f7a8fb9c4ad5b36a9cc63631b329f2f53b2839c7289ee87b99ace3e085f76a993d3c88cec
|
7
|
+
data.tar.gz: 6600d7999ec6518236dcd4368ebe705fa8df40190fcc352dcc5144e44263720d7264957b709ef200f80759af885cee504ef1001f8632af2e8a6a47498237770d
|
@@ -17,6 +17,14 @@ module Dependabot
|
|
17
17
|
"Repo must contain a composer.json."
|
18
18
|
end
|
19
19
|
|
20
|
+
def ecosystem_versions
|
21
|
+
{
|
22
|
+
package_managers: {
|
23
|
+
"composer" => Helpers.composer_version(parsed_composer_json, parsed_lockfile) || "unknown"
|
24
|
+
}
|
25
|
+
}
|
26
|
+
end
|
27
|
+
|
20
28
|
private
|
21
29
|
|
22
30
|
def fetch_files
|
@@ -16,13 +16,13 @@ module Dependabot
|
|
16
16
|
def self.composer_version(composer_json, parsed_lockfile = nil)
|
17
17
|
if parsed_lockfile && parsed_lockfile["plugin-api-version"]
|
18
18
|
version = Composer::Version.new(parsed_lockfile["plugin-api-version"])
|
19
|
-
return version.canonical_segments.first == 1 ? "
|
19
|
+
return version.canonical_segments.first == 1 ? "1" : "2"
|
20
20
|
else
|
21
|
-
return "
|
22
|
-
return "
|
21
|
+
return "1" if composer_json["name"] && composer_json["name"] !~ COMPOSER_V2_NAME_REGEX
|
22
|
+
return "1" if invalid_v2_requirement?(composer_json)
|
23
23
|
end
|
24
24
|
|
25
|
-
"
|
25
|
+
"2"
|
26
26
|
end
|
27
27
|
|
28
28
|
def self.invalid_v2_requirement?(composer_json)
|
@@ -3,8 +3,8 @@
|
|
3
3
|
module Dependabot
|
4
4
|
module Composer
|
5
5
|
module NativeHelpers
|
6
|
-
def self.composer_helper_path(composer_version: "
|
7
|
-
File.join(composer_helpers_dir, composer_version, "bin/run")
|
6
|
+
def self.composer_helper_path(composer_version: "2")
|
7
|
+
File.join(composer_helpers_dir, "v#{composer_version}", "bin/run")
|
8
8
|
end
|
9
9
|
|
10
10
|
def self.composer_helpers_dir
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-composer
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.222.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-
|
11
|
+
date: 2023-07-25 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,28 +16,28 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.222.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.222.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
30
30
|
requirements:
|
31
31
|
- - "~>"
|
32
32
|
- !ruby/object:Gem::Version
|
33
|
-
version: 1.
|
33
|
+
version: 1.8.0
|
34
34
|
type: :development
|
35
35
|
prerelease: false
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
37
37
|
requirements:
|
38
38
|
- - "~>"
|
39
39
|
- !ruby/object:Gem::Version
|
40
|
-
version: 1.
|
40
|
+
version: 1.8.0
|
41
41
|
- !ruby/object:Gem::Dependency
|
42
42
|
name: gpgme
|
43
43
|
requirement: !ruby/object:Gem::Requirement
|
@@ -136,34 +136,6 @@ dependencies:
|
|
136
136
|
- - "~>"
|
137
137
|
- !ruby/object:Gem::Version
|
138
138
|
version: 1.17.1
|
139
|
-
- !ruby/object:Gem::Dependency
|
140
|
-
name: simplecov
|
141
|
-
requirement: !ruby/object:Gem::Requirement
|
142
|
-
requirements:
|
143
|
-
- - "~>"
|
144
|
-
- !ruby/object:Gem::Version
|
145
|
-
version: 0.22.0
|
146
|
-
type: :development
|
147
|
-
prerelease: false
|
148
|
-
version_requirements: !ruby/object:Gem::Requirement
|
149
|
-
requirements:
|
150
|
-
- - "~>"
|
151
|
-
- !ruby/object:Gem::Version
|
152
|
-
version: 0.22.0
|
153
|
-
- !ruby/object:Gem::Dependency
|
154
|
-
name: simplecov-console
|
155
|
-
requirement: !ruby/object:Gem::Requirement
|
156
|
-
requirements:
|
157
|
-
- - "~>"
|
158
|
-
- !ruby/object:Gem::Version
|
159
|
-
version: 0.9.1
|
160
|
-
type: :development
|
161
|
-
prerelease: false
|
162
|
-
version_requirements: !ruby/object:Gem::Requirement
|
163
|
-
requirements:
|
164
|
-
- - "~>"
|
165
|
-
- !ruby/object:Gem::Version
|
166
|
-
version: 0.9.1
|
167
139
|
- !ruby/object:Gem::Dependency
|
168
140
|
name: stackprof
|
169
141
|
requirement: !ruby/object:Gem::Requirement
|
@@ -258,7 +230,7 @@ licenses:
|
|
258
230
|
- Nonstandard
|
259
231
|
metadata:
|
260
232
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
261
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
233
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.222.0
|
262
234
|
post_install_message:
|
263
235
|
rdoc_options: []
|
264
236
|
require_paths:
|