dependabot-composer 0.248.0 → 0.250.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/composer/file_fetcher/path_dependency_builder.rb +3 -1
- data/lib/dependabot/composer/file_updater/lockfile_updater.rb +4 -2
- data/lib/dependabot/composer/file_updater/manifest_updater.rb +2 -1
- data/lib/dependabot/composer/update_checker/latest_version_finder.rb +5 -2
- data/lib/dependabot/composer/update_checker/requirements_updater.rb +3 -2
- data/lib/dependabot/composer/update_checker/version_resolver.rb +6 -3
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 5311d1ab2e533138e3821c082a3d6669060c0b45b06ca9132e7dd81e3ab4df4b
|
|
4
|
+
data.tar.gz: 86759ea61986457856942148936b62c3ca8070be29c6f6f3478e5b8e572bd8ef
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 6932afa6812de8feb057133db629101f7c37d302e5915d90d4b6ac546d30219cbc7bd6092f55d0d4e27a3c4df8970990f7a3e292cb4afaa36c9be97c85c7de95
|
|
7
|
+
data.tar.gz: 9bcda1a828173cce76a0105d0b1b6cf4a27ba32127684f05a911e10cc96045ed761d745c6cea9a30f036f524784b2dd4722c5b951e07d75a10594c9d4ae60412
|
|
@@ -58,8 +58,10 @@ module Dependabot
|
|
|
58
58
|
|
|
59
59
|
private
|
|
60
60
|
|
|
61
|
-
attr_reader :dependencies
|
|
62
|
-
|
|
61
|
+
attr_reader :dependencies
|
|
62
|
+
attr_reader :dependency_files
|
|
63
|
+
attr_reader :credentials
|
|
64
|
+
attr_reader :composer_platform_extensions
|
|
63
65
|
|
|
64
66
|
def generate_updated_lockfile_content
|
|
65
67
|
base_directory = dependency_files.first.directory
|
|
@@ -34,8 +34,11 @@ module Dependabot
|
|
|
34
34
|
|
|
35
35
|
private
|
|
36
36
|
|
|
37
|
-
attr_reader :dependency
|
|
38
|
-
|
|
37
|
+
attr_reader :dependency
|
|
38
|
+
attr_reader :dependency_files
|
|
39
|
+
attr_reader :credentials
|
|
40
|
+
attr_reader :ignored_versions
|
|
41
|
+
attr_reader :security_advisories
|
|
39
42
|
|
|
40
43
|
def fetch_latest_version
|
|
41
44
|
versions = available_versions
|
|
@@ -56,8 +56,9 @@ module Dependabot
|
|
|
56
56
|
|
|
57
57
|
private
|
|
58
58
|
|
|
59
|
-
attr_reader :requirements
|
|
60
|
-
|
|
59
|
+
attr_reader :requirements
|
|
60
|
+
attr_reader :update_strategy
|
|
61
|
+
attr_reader :latest_resolvable_version
|
|
61
62
|
|
|
62
63
|
def check_update_strategy
|
|
63
64
|
return if ALLOWED_UPDATE_STRATEGIES.include?(update_strategy)
|
|
@@ -57,9 +57,12 @@ module Dependabot
|
|
|
57
57
|
|
|
58
58
|
private
|
|
59
59
|
|
|
60
|
-
attr_reader :credentials
|
|
61
|
-
|
|
62
|
-
|
|
60
|
+
attr_reader :credentials
|
|
61
|
+
attr_reader :dependency
|
|
62
|
+
attr_reader :dependency_files
|
|
63
|
+
attr_reader :requirements_to_unlock
|
|
64
|
+
attr_reader :latest_allowable_version
|
|
65
|
+
attr_reader :composer_platform_extensions
|
|
63
66
|
|
|
64
67
|
def fetch_latest_resolvable_version
|
|
65
68
|
version = fetch_latest_resolvable_version_string
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-composer
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.250.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2024-
|
|
11
|
+
date: 2024-04-02 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dependabot-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.
|
|
19
|
+
version: 0.250.0
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.
|
|
26
|
+
version: 0.250.0
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: debug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -286,7 +286,7 @@ licenses:
|
|
|
286
286
|
- Nonstandard
|
|
287
287
|
metadata:
|
|
288
288
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
289
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
289
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.250.0
|
|
290
290
|
post_install_message:
|
|
291
291
|
rdoc_options: []
|
|
292
292
|
require_paths:
|