dependabot-composer 0.292.0 → 0.293.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/helpers/v1/build +34 -0
- data/helpers/v1/composer.json +26 -0
- data/helpers/v1/composer.lock +2649 -0
- data/helpers/v1/src/UpdateChecker.php +129 -0
- data/helpers/v2/composer.json +1 -1
- data/helpers/v2/composer.lock +436 -806
- metadata +9 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: '08680dcd9df3a6148d176aa760464878c1ae7c304c81a6db4b4cc5b8476a0e41'
|
|
4
|
+
data.tar.gz: ede189a9b070d5c29dd643a5db5e4aa759cc323e36ecc9521c4bf7b4693a4260
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: fce1fc8e1b2c49b838a796616423f43aefa0ad643d52ad10d84131e4db0fab370d77e6ec321e43e2555e26865d46dc4f374f72e1879dfebc4790c68180039026
|
|
7
|
+
data.tar.gz: f7375e89331aa7ad502d44033ac121fff0580ca58f84e09549a62bb13b7a12ed9defc62360dc7ab2228dea0bee823386783e0c2f65291847f9092c8416fff60a
|
data/helpers/v1/build
ADDED
|
@@ -0,0 +1,34 @@
|
|
|
1
|
+
#!/bin/bash
|
|
2
|
+
|
|
3
|
+
set -e
|
|
4
|
+
|
|
5
|
+
if [ -z "$DEPENDABOT_NATIVE_HELPERS_PATH" ]; then
|
|
6
|
+
echo "Unable to build, DEPENDABOT_NATIVE_HELPERS_PATH is not set"
|
|
7
|
+
exit 1
|
|
8
|
+
fi
|
|
9
|
+
|
|
10
|
+
install_dir="$DEPENDABOT_NATIVE_HELPERS_PATH/composer/v1"
|
|
11
|
+
mkdir -p "$install_dir"
|
|
12
|
+
|
|
13
|
+
helpers_dir="$(dirname "${BASH_SOURCE[0]}")"
|
|
14
|
+
cp -r \
|
|
15
|
+
"$helpers_dir/bin" \
|
|
16
|
+
"$helpers_dir/src" \
|
|
17
|
+
"$helpers_dir/.php-cs-fixer.dist.php" \
|
|
18
|
+
"$helpers_dir/composer.json" \
|
|
19
|
+
"$helpers_dir/composer.lock" \
|
|
20
|
+
"$helpers_dir/phpstan.dist.neon" \
|
|
21
|
+
"$install_dir"
|
|
22
|
+
|
|
23
|
+
cd "$install_dir"
|
|
24
|
+
|
|
25
|
+
composer1 validate --no-check-publish
|
|
26
|
+
composer1 install
|
|
27
|
+
# php-cs-fixer 3.15 added support for PHP 8.2, but also requires composer/semver ^3.3, which conflicts with composer1.
|
|
28
|
+
# So the older version of php-cs-fixer errors that it doesn't know about PHP 8.2 syntax which breaks the build.
|
|
29
|
+
# So PHP_CS_FIXER_IGNORE_ENV disables that error until we get around to deprecating composer 1 support.
|
|
30
|
+
PHP_CS_FIXER_IGNORE_ENV=true composer1 run lint -- --dry-run
|
|
31
|
+
composer1 run stan
|
|
32
|
+
|
|
33
|
+
# Composer caches source zips and repo metadata, none of which is useful. Save space in this layer
|
|
34
|
+
rm -Rf ~/.composer/cache
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "dependabot/composer-v1-helper",
|
|
3
|
+
"description": "A helper package for Dependabot to perform updates using Composer",
|
|
4
|
+
"license": "The Prosperity Public License 2.0.0",
|
|
5
|
+
"require": {
|
|
6
|
+
"php": "^8.2",
|
|
7
|
+
"ext-json": "*",
|
|
8
|
+
"composer/composer": "^1"
|
|
9
|
+
},
|
|
10
|
+
"require-dev": {
|
|
11
|
+
"friendsofphp/php-cs-fixer": "^2.9",
|
|
12
|
+
"phpstan/phpstan": "~1.10.3"
|
|
13
|
+
},
|
|
14
|
+
"autoload": {
|
|
15
|
+
"psr-4": {
|
|
16
|
+
"Dependabot\\Composer\\": "src/"
|
|
17
|
+
}
|
|
18
|
+
},
|
|
19
|
+
"scripts": {
|
|
20
|
+
"lint": "php-cs-fixer fix --diff --verbose",
|
|
21
|
+
"stan": "phpstan analyse"
|
|
22
|
+
},
|
|
23
|
+
"config": {
|
|
24
|
+
"sort-packages": true
|
|
25
|
+
}
|
|
26
|
+
}
|