dependabot-composer 0.111.27 → 0.111.28

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90f25003e8e16f86d5bf78e56ad9dd394182a80364777ad4c0c70629863c6204
-  data.tar.gz: 2441b6c3557dffb9dcdab85f7e8b9eb76bf415ef3184a693ac9c75f43b9ec368
+  metadata.gz: d8709cd35c5c9c5eac5f14879462e6d03c5c19b3c7cd2d6add5b593e201f81aa
+  data.tar.gz: d362d94205d2b9fa3e43c2f11276bc89fa14130169113c893e71ff3842499080
 SHA512:
-  metadata.gz: f469bedb505576db74f2d8fe278ffb251b23d00e2c86aa1945be59eebb3de2ea288c6ad437426ed1ea6b86b8fbdae89a26c7efc8eddbd3765294cbcbb4d3c308
-  data.tar.gz: ec47592618322fcea9be32503f383b97fd182768e4cef0e0f608412e9fbe85c9b489204f5a211683a39285c5ce25ed260c1c2e99fee32af9fc8c33fe6ba44af8
+  metadata.gz: '0921a7ec3317035b793dba3a1e64b21865d61ae3dabf4ca2f4621f8c3342f399318fe1ef45335bb36ec5f8c147348b44c9238b4026eb68ba4cefa77c2bd9afff'
+  data.tar.gz: 23438bc30a516bdd2824d6bff2472ba8eed44c4cddb346a0f11abefddc42a929c883d5ce6f4badfb572e355498560abc42c91bc66b83f86c76f0945d751020b4

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -133,8 +133,8 @@ module Dependabot
                 reject { |req_string| req_string.start_with?("<") }.
                 select { |req_string| req_string.match?(VERSION_REGEX) }.
                 map { |req_string| req_string.match(VERSION_REGEX) }.
-                select { |version| Gem::Version.correct?(version) }.
-                max_by { |version| Gem::Version.new(version) }
+                select { |version| requirement_valid?(">= #{version}") }.
+                max_by { |version| Composer::Version.new(version) }
 
               ">= #{version_for_requirement || 0}"
             end
@@ -305,6 +305,13 @@ module Dependabot
           @auth_json ||= dependency_files.find { |f| f.name == "auth.json" }
         end
 
+        def requirement_valid?(req_string)
+          Composer::Requirement.requirements_array(req_string)
+          true
+        rescue Gem::Requirement::BadRequirementError
+          false
+        end
+
         def git_credentials
           credentials.
             select { |cred| cred["type"] == "git_source" }.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.111.27
+  version: 0.111.28
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-07-24 00:00:00.000000000 Z
+date: 2019-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.27
+        version: 0.111.28
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.111.27
+        version: 0.111.28
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement