dependabot-composer 0.117.10 → 0.117.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a7d6c336511da03d53275a2aa9e5acd570d7e6b56de675b8d2ced1b86f32e596
-  data.tar.gz: e9d59cabec3ed4203bdbda12d55323de7ec307a3cecbd966901d10738425e48d
+  metadata.gz: c87f0556952c8baab0e3469f8a5d2d08de39fa1559e07e868fdae452688fc369
+  data.tar.gz: 8a4762c7eeb64e9af67aa9d8248d15a29dc390c843a5503491c171d3f2e51a88
 SHA512:
-  metadata.gz: 47943cd43596d81630e30b07643469b7eb5f07096c70b6e46c97682ad454ad94ec9ac64f16e67f17bb566fd013cf4a9dcaadf55af3ab80559644529648cc8692
-  data.tar.gz: 389ad78a7b690929f716b595ecde9ae0f7d37da3e26f873dac220de1082c7b280084e14c95da4e1e6d01194a82a35e68ef3aef38fb6a106723f4aeb118613e53
+  metadata.gz: 9edd3151a6df388c5c03698d0951a46636a1a9e6b8d2137540fdf28548e1eeb1856260957ae3e1256c9a05724634242962378178dc1f11ad846dfcd8171bbe97
+  data.tar.gz: 9c2cfe616ab20320f49c427a3ae945e814154fb4225854bc38d0b81006008fd1657839895c17dacbaed237670f31598fc0760ccf593b598ec4b9381e1abb2fbd

data/lib/dependabot/composer/update_checker.rb

@@ -97,6 +97,7 @@ module Dependabot
           dependency_files: dependency_files,
           credentials: credentials,
           ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored,
           security_advisories: security_advisories
         )
       end
@@ -166,7 +167,8 @@ module Dependabot
         @git_commit_checker ||= Dependabot::GitCommitChecker.new(
           dependency: dependency,
           credentials: credentials,
-          ignored_versions: ignored_versions
+          ignored_versions: ignored_versions,
+          raise_on_ignored: raise_on_ignored
         )
       end
     end

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -12,11 +12,13 @@ module Dependabot
     class UpdateChecker
       class LatestVersionFinder
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -43,8 +45,8 @@ module Dependabot
         def fetch_lowest_security_fix_version
           versions = available_versions
           versions = filter_prerelease_versions(versions)
-          versions = filter_ignored_versions(versions)
           versions = filter_vulnerable_versions(versions)
+          versions = filter_ignored_versions(versions)
           versions = filter_lower_versions(versions)
           versions.min
         end
@@ -56,8 +58,15 @@ module Dependabot
         end
 
         def filter_ignored_versions(versions_array)
-          versions_array.
+          filtered =
+            versions_array.
             reject { |v| ignore_reqs.any? { |r| r.satisfied_by?(v) } }
+
+          if @raise_on_ignored && filtered.empty? && versions_array.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(versions_array)

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -288,7 +288,8 @@ module Dependabot
 
             source = url.gsub(%r{/packages.json$}, "")
             raise Dependabot::PrivateSourceTimedOut, source
-          elsif error.message.start_with?("Allowed memory size")
+          elsif error.message.start_with?("Allowed memory size") ||
+                error.message.start_with?("Out of memory")
             raise Dependabot::OutOfMemory
           elsif error.message.start_with?("Package not found in updated") &&
                 !dependency.top_level?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.117.10
+  version: 0.117.11
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-21 00:00:00.000000000 Z
+date: 2020-05-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.117.11
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.117.11
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement