dependabot-composer 0.221.0 → 0.223.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d4964526a2725144d8d2fdb24163ffc1130067bc2d7d3ac8b419750898ee4eb4
-  data.tar.gz: a9163185fb45e9e3ae4609c0b855377e1ce2b2834132f4c1c349dea4c7433910
+  metadata.gz: 2ad34119ae69f66e9accee69ae18a00dec736a62ee26b68609f50e405c795e79
+  data.tar.gz: f9d269cbac5695fb4c8d0f4e0951e2b73098b700aa5a34a6ae432915bec8f09f
 SHA512:
-  metadata.gz: ca0fe34b4fc7d4bb93b80405db1cb6003825c602024c6ae9729e595dd8507126c4ce3dd3e60a931798aa4d96956d63cab887259f48848aa8a13e1ddff8b50c9f
-  data.tar.gz: 2006057f41d4c75a0581185ee95468b14f01cff66b8417a12b31cbf61e623a69885e04b77a87c3e7f231720823f21bcd402d9d755d110e79ce5ed452361847d1
+  metadata.gz: cd82721ea3b5caf1caf19c9af79381076a0bfcbfe8d60c33e7f0cf89a6a24c4ec1f2213b72e1da4ed1303b48dba573408fca5f0a0c680637574026e032c916b3
+  data.tar.gz: 0c5a9212c7ff4841fb617eb0b6c454455c154156dabd6e036edb66f68e30dfe2f035585d1f4e90384cc018504a19940f0c74b141f1fe0741feab198f1b171bb3

data/lib/dependabot/composer/file_fetcher.rb

@@ -17,6 +17,14 @@ module Dependabot
         "Repo must contain a composer.json."
       end
 
+      def ecosystem_versions
+        {
+          package_managers: {
+            "composer" => Helpers.composer_version(parsed_composer_json, parsed_lockfile) || "unknown"
+          }
+        }
+      end
+
       private
 
       def fetch_files

data/lib/dependabot/composer/helpers.rb

@@ -16,13 +16,13 @@ module Dependabot
       def self.composer_version(composer_json, parsed_lockfile = nil)
         if parsed_lockfile && parsed_lockfile["plugin-api-version"]
           version = Composer::Version.new(parsed_lockfile["plugin-api-version"])
-          return version.canonical_segments.first == 1 ? "v1" : "v2"
+          return version.canonical_segments.first == 1 ? "1" : "2"
         else
-          return "v1" if composer_json["name"] && composer_json["name"] !~ COMPOSER_V2_NAME_REGEX
-          return "v1" if invalid_v2_requirement?(composer_json)
+          return "1" if composer_json["name"] && composer_json["name"] !~ COMPOSER_V2_NAME_REGEX
+          return "1" if invalid_v2_requirement?(composer_json)
         end
 
-        "v2"
+        "2"
       end
 
       def self.invalid_v2_requirement?(composer_json)

data/lib/dependabot/composer/native_helpers.rb

@@ -3,8 +3,8 @@
 module Dependabot
   module Composer
     module NativeHelpers
-      def self.composer_helper_path(composer_version: "v2")
-        File.join(composer_helpers_dir, composer_version, "bin/run")
+      def self.composer_helper_path(composer_version: "2")
+        File.join(composer_helpers_dir, "v#{composer_version}", "bin/run")
       end
 
       def self.composer_helpers_dir

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.221.0
+  version: 0.223.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-13 00:00:00.000000000 Z
+date: 2023-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.223.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.223.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -230,7 +230,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.223.0
 post_install_message: 
 rdoc_options: []
 require_paths: