dependabot-composer 0.320.0 → 0.321.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- metadata +4 -8
- data/helpers/v1/build +0 -34
- data/helpers/v1/composer.json +0 -26
- data/helpers/v1/composer.lock +0 -2649
- data/helpers/v1/src/UpdateChecker.php +0 -129
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: cde4dca1df19c3d1d26bc81b0a906153ce559a7d5bdba845b9e67131627c1a3e
|
4
|
+
data.tar.gz: fbefcc1bdde76a563a2e744dad1ad1d5ee272eaf48df0cc8d1918a26c552659e
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: d621dd5254678979cd18f48311bca05351559ef360d8018b1f08f4dafeac2f3335d31fd84b3084acf4ae22dee40bb422eca055f3d5b7f78e83e91fca3b4b809c
|
7
|
+
data.tar.gz: 0e4e6a3c645912bd58a12c3fced47a7730d3fe8a891af617ccbd8a7240d4f358bf520734f5eab2b6642a8e4d3daf9f90ccdc45f248cc8945df4784b696be74f9
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-composer
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.321.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
@@ -15,14 +15,14 @@ dependencies:
|
|
15
15
|
requirements:
|
16
16
|
- - '='
|
17
17
|
- !ruby/object:Gem::Version
|
18
|
-
version: 0.
|
18
|
+
version: 0.321.0
|
19
19
|
type: :runtime
|
20
20
|
prerelease: false
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
22
22
|
requirements:
|
23
23
|
- - '='
|
24
24
|
- !ruby/object:Gem::Version
|
25
|
-
version: 0.
|
25
|
+
version: 0.321.0
|
26
26
|
- !ruby/object:Gem::Dependency
|
27
27
|
name: debug
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
@@ -241,10 +241,6 @@ executables: []
|
|
241
241
|
extensions: []
|
242
242
|
extra_rdoc_files: []
|
243
243
|
files:
|
244
|
-
- helpers/v1/build
|
245
|
-
- helpers/v1/composer.json
|
246
|
-
- helpers/v1/composer.lock
|
247
|
-
- helpers/v1/src/UpdateChecker.php
|
248
244
|
- helpers/v2/.php-cs-fixer.php
|
249
245
|
- helpers/v2/bin/run
|
250
246
|
- helpers/v2/build
|
@@ -280,7 +276,7 @@ licenses:
|
|
280
276
|
- MIT
|
281
277
|
metadata:
|
282
278
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
283
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
279
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.321.0
|
284
280
|
rdoc_options: []
|
285
281
|
require_paths:
|
286
282
|
- lib
|
data/helpers/v1/build
DELETED
@@ -1,34 +0,0 @@
|
|
1
|
-
#!/bin/bash
|
2
|
-
|
3
|
-
set -e
|
4
|
-
|
5
|
-
if [ -z "$DEPENDABOT_NATIVE_HELPERS_PATH" ]; then
|
6
|
-
echo "Unable to build, DEPENDABOT_NATIVE_HELPERS_PATH is not set"
|
7
|
-
exit 1
|
8
|
-
fi
|
9
|
-
|
10
|
-
install_dir="$DEPENDABOT_NATIVE_HELPERS_PATH/composer/v1"
|
11
|
-
mkdir -p "$install_dir"
|
12
|
-
|
13
|
-
helpers_dir="$(dirname "${BASH_SOURCE[0]}")"
|
14
|
-
cp -r \
|
15
|
-
"$helpers_dir/bin" \
|
16
|
-
"$helpers_dir/src" \
|
17
|
-
"$helpers_dir/.php-cs-fixer.dist.php" \
|
18
|
-
"$helpers_dir/composer.json" \
|
19
|
-
"$helpers_dir/composer.lock" \
|
20
|
-
"$helpers_dir/phpstan.dist.neon" \
|
21
|
-
"$install_dir"
|
22
|
-
|
23
|
-
cd "$install_dir"
|
24
|
-
|
25
|
-
composer1 validate --no-check-publish
|
26
|
-
composer1 install
|
27
|
-
# php-cs-fixer 3.15 added support for PHP 8.2, but also requires composer/semver ^3.3, which conflicts with composer1.
|
28
|
-
# So the older version of php-cs-fixer errors that it doesn't know about PHP 8.2 syntax which breaks the build.
|
29
|
-
# So PHP_CS_FIXER_IGNORE_ENV disables that error until we get around to deprecating composer 1 support.
|
30
|
-
PHP_CS_FIXER_IGNORE_ENV=true composer1 run lint -- --dry-run
|
31
|
-
composer1 run stan
|
32
|
-
|
33
|
-
# Composer caches source zips and repo metadata, none of which is useful. Save space in this layer
|
34
|
-
rm -Rf ~/.composer/cache
|
data/helpers/v1/composer.json
DELETED
@@ -1,26 +0,0 @@
|
|
1
|
-
{
|
2
|
-
"name": "dependabot/composer-v1-helper",
|
3
|
-
"description": "A helper package for Dependabot to perform updates using Composer",
|
4
|
-
"license": "The Prosperity Public License 2.0.0",
|
5
|
-
"require": {
|
6
|
-
"php": "^8.2",
|
7
|
-
"ext-json": "*",
|
8
|
-
"composer/composer": "^1"
|
9
|
-
},
|
10
|
-
"require-dev": {
|
11
|
-
"friendsofphp/php-cs-fixer": "^2.9",
|
12
|
-
"phpstan/phpstan": "~1.10.3"
|
13
|
-
},
|
14
|
-
"autoload": {
|
15
|
-
"psr-4": {
|
16
|
-
"Dependabot\\Composer\\": "src/"
|
17
|
-
}
|
18
|
-
},
|
19
|
-
"scripts": {
|
20
|
-
"lint": "php-cs-fixer fix --diff --verbose",
|
21
|
-
"stan": "phpstan analyse"
|
22
|
-
},
|
23
|
-
"config": {
|
24
|
-
"sort-packages": true
|
25
|
-
}
|
26
|
-
}
|