dependabot-composer 0.233.0 → 0.234.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/helpers/v1/composer.lock +5 -5
- data/helpers/v2/composer.lock +17 -17
- data/lib/dependabot/composer/file_updater/lockfile_updater.rb +2 -2
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: e5508d565de64d8bd30ae217eaeae7df4d97f1f541c27bb626248cecd45ea78d
|
|
4
|
+
data.tar.gz: 898026433a53468c7786ffa42e9bdcc40124e3864c47bc2276f8181e84ecd940
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 3a5807355dbffe69759fb74559d3a894456b3654fff8be1936d801a824e2cf9200cb0bcdddaa0f16169a713388f30b4a25eb8fb313bd9efdb93671f26ed785c9
|
|
7
|
+
data.tar.gz: b78bd91d2f39f2240fe0733c1e9f8de018dac47efe10f4e59f3fbdea2cd26e61c65a25ca073478392f6509fc68ba909e607a66012689da32ee5130c7187ae085
|
data/helpers/v1/composer.lock
CHANGED
|
@@ -1920,16 +1920,16 @@
|
|
|
1920
1920
|
},
|
|
1921
1921
|
{
|
|
1922
1922
|
"name": "phpstan/phpstan",
|
|
1923
|
-
"version": "1.10.
|
|
1923
|
+
"version": "1.10.38",
|
|
1924
1924
|
"source": {
|
|
1925
1925
|
"type": "git",
|
|
1926
1926
|
"url": "https://github.com/phpstan/phpstan.git",
|
|
1927
|
-
"reference": "
|
|
1927
|
+
"reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691"
|
|
1928
1928
|
},
|
|
1929
1929
|
"dist": {
|
|
1930
1930
|
"type": "zip",
|
|
1931
|
-
"url": "https://api.github.com/repos/phpstan/phpstan/zipball/
|
|
1932
|
-
"reference": "
|
|
1931
|
+
"url": "https://api.github.com/repos/phpstan/phpstan/zipball/5302bb402c57f00fb3c2c015bac86e0827e4b691",
|
|
1932
|
+
"reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691",
|
|
1933
1933
|
"shasum": ""
|
|
1934
1934
|
},
|
|
1935
1935
|
"require": {
|
|
@@ -1971,7 +1971,7 @@
|
|
|
1971
1971
|
"type": "tidelift"
|
|
1972
1972
|
}
|
|
1973
1973
|
],
|
|
1974
|
-
"time": "2023-
|
|
1974
|
+
"time": "2023-10-06T14:19:14+00:00"
|
|
1975
1975
|
},
|
|
1976
1976
|
{
|
|
1977
1977
|
"name": "psr/cache",
|
data/helpers/v2/composer.lock
CHANGED
|
@@ -2059,16 +2059,16 @@
|
|
|
2059
2059
|
},
|
|
2060
2060
|
{
|
|
2061
2061
|
"name": "symfony/string",
|
|
2062
|
-
"version": "v5.4.
|
|
2062
|
+
"version": "v5.4.29",
|
|
2063
2063
|
"source": {
|
|
2064
2064
|
"type": "git",
|
|
2065
2065
|
"url": "https://github.com/symfony/string.git",
|
|
2066
|
-
"reference": "
|
|
2066
|
+
"reference": "e41bdc93def20eaf3bfc1537c4e0a2b0680a152d"
|
|
2067
2067
|
},
|
|
2068
2068
|
"dist": {
|
|
2069
2069
|
"type": "zip",
|
|
2070
|
-
"url": "https://api.github.com/repos/symfony/string/zipball/
|
|
2071
|
-
"reference": "
|
|
2070
|
+
"url": "https://api.github.com/repos/symfony/string/zipball/e41bdc93def20eaf3bfc1537c4e0a2b0680a152d",
|
|
2071
|
+
"reference": "e41bdc93def20eaf3bfc1537c4e0a2b0680a152d",
|
|
2072
2072
|
"shasum": ""
|
|
2073
2073
|
},
|
|
2074
2074
|
"require": {
|
|
@@ -2125,7 +2125,7 @@
|
|
|
2125
2125
|
"utf8"
|
|
2126
2126
|
],
|
|
2127
2127
|
"support": {
|
|
2128
|
-
"source": "https://github.com/symfony/string/tree/v5.4.
|
|
2128
|
+
"source": "https://github.com/symfony/string/tree/v5.4.29"
|
|
2129
2129
|
},
|
|
2130
2130
|
"funding": [
|
|
2131
2131
|
{
|
|
@@ -2141,22 +2141,22 @@
|
|
|
2141
2141
|
"type": "tidelift"
|
|
2142
2142
|
}
|
|
2143
2143
|
],
|
|
2144
|
-
"time": "2023-
|
|
2144
|
+
"time": "2023-09-13T11:47:41+00:00"
|
|
2145
2145
|
}
|
|
2146
2146
|
],
|
|
2147
2147
|
"packages-dev": [
|
|
2148
2148
|
{
|
|
2149
2149
|
"name": "friendsofphp/php-cs-fixer",
|
|
2150
|
-
"version": "v3.
|
|
2150
|
+
"version": "v3.34.1",
|
|
2151
2151
|
"source": {
|
|
2152
2152
|
"type": "git",
|
|
2153
2153
|
"url": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer.git",
|
|
2154
|
-
"reference": "
|
|
2154
|
+
"reference": "98bf1b1068b4ceddbbc2a2b70b67a5e380add9e3"
|
|
2155
2155
|
},
|
|
2156
2156
|
"dist": {
|
|
2157
2157
|
"type": "zip",
|
|
2158
|
-
"url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/
|
|
2159
|
-
"reference": "
|
|
2158
|
+
"url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/98bf1b1068b4ceddbbc2a2b70b67a5e380add9e3",
|
|
2159
|
+
"reference": "98bf1b1068b4ceddbbc2a2b70b67a5e380add9e3",
|
|
2160
2160
|
"shasum": ""
|
|
2161
2161
|
},
|
|
2162
2162
|
"require": {
|
|
@@ -2230,7 +2230,7 @@
|
|
|
2230
2230
|
],
|
|
2231
2231
|
"support": {
|
|
2232
2232
|
"issues": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues",
|
|
2233
|
-
"source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.
|
|
2233
|
+
"source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.34.1"
|
|
2234
2234
|
},
|
|
2235
2235
|
"funding": [
|
|
2236
2236
|
{
|
|
@@ -2238,20 +2238,20 @@
|
|
|
2238
2238
|
"type": "github"
|
|
2239
2239
|
}
|
|
2240
2240
|
],
|
|
2241
|
-
"time": "2023-
|
|
2241
|
+
"time": "2023-10-03T23:51:05+00:00"
|
|
2242
2242
|
},
|
|
2243
2243
|
{
|
|
2244
2244
|
"name": "phpstan/phpstan",
|
|
2245
|
-
"version": "1.10.
|
|
2245
|
+
"version": "1.10.38",
|
|
2246
2246
|
"source": {
|
|
2247
2247
|
"type": "git",
|
|
2248
2248
|
"url": "https://github.com/phpstan/phpstan.git",
|
|
2249
|
-
"reference": "
|
|
2249
|
+
"reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691"
|
|
2250
2250
|
},
|
|
2251
2251
|
"dist": {
|
|
2252
2252
|
"type": "zip",
|
|
2253
|
-
"url": "https://api.github.com/repos/phpstan/phpstan/zipball/
|
|
2254
|
-
"reference": "
|
|
2253
|
+
"url": "https://api.github.com/repos/phpstan/phpstan/zipball/5302bb402c57f00fb3c2c015bac86e0827e4b691",
|
|
2254
|
+
"reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691",
|
|
2255
2255
|
"shasum": ""
|
|
2256
2256
|
},
|
|
2257
2257
|
"require": {
|
|
@@ -2300,7 +2300,7 @@
|
|
|
2300
2300
|
"type": "tidelift"
|
|
2301
2301
|
}
|
|
2302
2302
|
],
|
|
2303
|
-
"time": "2023-
|
|
2303
|
+
"time": "2023-10-06T14:19:14+00:00"
|
|
2304
2304
|
},
|
|
2305
2305
|
{
|
|
2306
2306
|
"name": "psr/event-dispatcher",
|
|
@@ -290,7 +290,7 @@ module Dependabot
|
|
|
290
290
|
|
|
291
291
|
old_req =
|
|
292
292
|
dep.requirements.find { |r| r[:file] == "composer.json" }
|
|
293
|
-
|
|
293
|
+
&.fetch(:requirement)
|
|
294
294
|
|
|
295
295
|
# When updating a subdep there won't be an old requirement
|
|
296
296
|
next content unless old_req
|
|
@@ -337,7 +337,7 @@ module Dependabot
|
|
|
337
337
|
JSON.parse(lockfile.content)
|
|
338
338
|
.values_at("packages", "packages-dev").flatten(1)
|
|
339
339
|
.find { |dep| dep.dig("source", "reference") == ref }
|
|
340
|
-
|
|
340
|
+
&.fetch("name")
|
|
341
341
|
|
|
342
342
|
raise unless dependency_name
|
|
343
343
|
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-composer
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.234.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2023-10-
|
|
11
|
+
date: 2023-10-12 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dependabot-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.
|
|
19
|
+
version: 0.234.0
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.
|
|
26
|
+
version: 0.234.0
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: debug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -244,7 +244,7 @@ licenses:
|
|
|
244
244
|
- Nonstandard
|
|
245
245
|
metadata:
|
|
246
246
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
247
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
247
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.234.0
|
|
248
248
|
post_install_message:
|
|
249
249
|
rdoc_options: []
|
|
250
250
|
require_paths:
|