dependabot-composer 0.332.0 → 0.333.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9cd77468fb2d8e5fe7ca109cb457c47e9e1b669b9fadc9d3b5a8e513aacb1524
-  data.tar.gz: a62b1e64866d0441045da2a3c6cdca4cc340a7c27205ae0a31015ee04c6d9184
+  metadata.gz: be321196254da513baf770dc8054408d47aa3e7c0138508aee6199a028f08603
+  data.tar.gz: b83412521e3ac415989585422374d85e0d8db86172816dda4703ef11dfa56e6b
 SHA512:
-  metadata.gz: e4e2e254940fde9509d56b13b45c6c643e8253f78b20311218b8ffa14d8b0cab6637469a3ab2d639245699ebcc9fc102712ffa064b36b07e76bad8df8f69a519
-  data.tar.gz: 83392688bfe4c0727ad84aa9d2dd286917c9fede2f2d62d30a0df4164b39825e47de38a99b8f0fba97a48c49fd03b4c908144bb90af0e22a3e7e684f40004730
+  metadata.gz: fb283c45e85b866d678be92b3781bbe367b66544314f775d7347c0e33aa9e75dd06041b5e8af2b6203357b80ef8e7b108ba8e7aaa9a477c951f33a7326fbebc2
+  data.tar.gz: 912331741a6f9a37ae3704e70461eb2d8257d6604f845eea25a17ec04a024ac79d0bc37e01fc293a7c643fea289f9ead5f4fc901388ce7538fcbdd366007d70d

data/lib/dependabot/composer/file_fetcher.rb

@@ -5,6 +5,7 @@ require "json"
 require "sorbet-runtime"
 require "dependabot/file_fetchers"
 require "dependabot/file_fetchers/base"
+require "dependabot/file_filtering"
 
 module Dependabot
   module Composer
@@ -42,7 +43,13 @@ module Dependabot
         fetched_files << auth_json if auth_json
         fetched_files += artifact_dependencies
         fetched_files += path_dependencies
-        fetched_files
+
+        # Filter excluded files from final collection
+        filtered_files = fetched_files.reject do |file|
+          Dependabot::FileFiltering.should_exclude_path?(file.name, "file from final collection", @exclude_paths)
+        end
+
+        filtered_files
       end
 
       private
@@ -121,6 +128,8 @@ module Dependabot
               directories.each do |dir|
                 file = File.join(dir, PackageManager::MANIFEST_FILENAME)
 
+                next if Dependabot::FileFiltering.should_exclude_path?(file, "path dependency file", @exclude_paths)
+
                 begin
                   composer_json_files << fetch_file_with_root_fallback(file)
                 rescue Dependabot::DependencyFileNotFound
@@ -158,7 +167,7 @@ module Dependabot
             repos = parsed_composer_json.fetch("repositories", [])
             if repos.is_a?(Hash) || repos.is_a?(Array)
               repos = repos.values if repos.is_a?(Hash)
-              repos = repos.select { |r| r.is_a?(Hash) }
+              repos = repos.grep(Hash)
 
               repos
                 .select { |details| details["type"] == "path" || details["type"] == "artifact" }

data/lib/dependabot/composer/file_updater/lockfile_updater.rb

@@ -195,7 +195,7 @@ module Dependabot
               version_for_reqs(existing_reqs + [hash[:requirement]])
             end
 
-            raise MissingExtensions, (T.must(missing_extension).then { |ext| [ext] })
+            raise(MissingExtensions, T.must(missing_extension).then { |ext| [ext] })
           end
 
           git_dependency_reference_error(error) if error.message.start_with?("Failed to execute git checkout")

data/lib/dependabot/composer/package/package_details_fetcher.rb

@@ -104,8 +104,7 @@ module Dependabot
 
           repositories =
             JSON.parse(T.must(composer_file.content))
-                .fetch("repositories", [])
-                .select { |r| r.is_a?(Hash) }
+                .fetch("repositories", []).grep(Hash)
 
           urls = repositories
                  .select { |h| h["type"] == PackageManager::NAME }

data/lib/dependabot/composer/update_checker/requirements_updater.rb

@@ -252,7 +252,7 @@ module Dependabot
           range_requirements =
             req_string.split(SEPARATOR).select { |r| r.match?(/<|(\s+-\s+)/) }
 
-          if range_requirements.count == 1
+          if range_requirements.one?
             range_requirement = T.must(range_requirements.first)
             versions = range_requirement.scan(VERSION_REGEX)
             # Convert version strings to Version objects and find the maximum

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.332.0
+  version: 0.333.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.332.0
+        version: 0.333.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.332.0
+        version: 0.333.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -211,14 +211,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.18'
+        version: '3.25'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.18'
+        version: '3.25'
 - !ruby/object:Gem::Dependency
   name: webrick
   requirement: !ruby/object:Gem::Requirement
@@ -276,7 +276,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.332.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.333.0
 rdoc_options: []
 require_paths:
 - lib