dependabot-composer 0.292.0 → 0.294.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a5b18f569628d859443c19310162b313bd37341928d2e287b1ee9c33b8c7186a
-  data.tar.gz: a5c9a4e5e08b3d00d6f9970c535b61682151a2acb5bfd54d5056531b4a747893
+  metadata.gz: 4f30f0782de230703a63f19bd2b1e4388d7b1324fa839c560339b549a7e3909e
+  data.tar.gz: be53992037a356dec982399fbd7f7675161ba7e2f8cd2988c75fe8a2e275d744
 SHA512:
-  metadata.gz: a9186f5abde9f582f32d2c70603ebe2fde54ed14534ace2f58d0ac1cfbb3b5f784a2385fb76418ae8bed75abe6754835d3d9f2a9e805abe6c622d97ce8aa9d1c
-  data.tar.gz: bde562d186042da9b0011ecdc062104fa6bcca82417ca61f51d3d7b199fceec59977005f86b64e7b657d4331f86481bcc5f20289b85a58e8428903c5ebeb4dcd
+  metadata.gz: '0369213b2a744990438aedf4c92ec02b78d9b9067962598f508a8e349a14430588fd37a1ee0124bd18cb9a99b724cfb27f6f33bb8feeaa9e2bddaf8d17f73b6b'
+  data.tar.gz: 0eef23954c97ac778b27c02024ddeeaca3a946836ce4a1eed58b78359edfacb9759f4eb5ec576aaf12cd175a960acba14a1f2ce590170bc418dc61c3bc5e260a

data/helpers/v1/build

@@ -0,0 +1,34 @@
+#!/bin/bash
+
+set -e
+
+if [ -z "$DEPENDABOT_NATIVE_HELPERS_PATH" ]; then
+  echo "Unable to build, DEPENDABOT_NATIVE_HELPERS_PATH is not set"
+  exit 1
+fi
+
+install_dir="$DEPENDABOT_NATIVE_HELPERS_PATH/composer/v1"
+mkdir -p "$install_dir"
+
+helpers_dir="$(dirname "${BASH_SOURCE[0]}")"
+cp -r \
+  "$helpers_dir/bin" \
+  "$helpers_dir/src" \
+  "$helpers_dir/.php-cs-fixer.dist.php" \
+  "$helpers_dir/composer.json" \
+  "$helpers_dir/composer.lock" \
+  "$helpers_dir/phpstan.dist.neon" \
+  "$install_dir"
+
+cd "$install_dir"
+
+composer1 validate --no-check-publish
+composer1 install
+# php-cs-fixer 3.15 added support for PHP 8.2, but also requires composer/semver ^3.3, which conflicts with composer1.
+# So the older version of php-cs-fixer errors that it doesn't know about PHP 8.2 syntax which breaks the build.
+# So PHP_CS_FIXER_IGNORE_ENV disables that error until we get around to deprecating composer 1 support.
+PHP_CS_FIXER_IGNORE_ENV=true composer1 run lint -- --dry-run
+composer1 run stan
+
+# Composer caches source zips and repo metadata, none of which is useful. Save space in this layer
+rm -Rf ~/.composer/cache

data/helpers/v1/composer.json

@@ -0,0 +1,26 @@
+{
+    "name": "dependabot/composer-v1-helper",
+    "description": "A helper package for Dependabot to perform updates using Composer",
+    "license": "The Prosperity Public License 2.0.0",
+    "require": {
+        "php": "^8.2",
+        "ext-json": "*",
+        "composer/composer": "^1"
+    },
+    "require-dev": {
+        "friendsofphp/php-cs-fixer": "^2.9",
+        "phpstan/phpstan": "~1.10.3"
+    },
+    "autoload": {
+        "psr-4": {
+            "Dependabot\\Composer\\": "src/"
+        }
+    },
+    "scripts": {
+        "lint": "php-cs-fixer fix --diff --verbose",
+        "stan": "phpstan analyse"
+    },
+    "config": {
+        "sort-packages": true
+    }
+}