dependabot-composer 0.261.0 → 0.261.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ad3c2bf542a453e6dd583bcf447762569b5a652828023d2546dba347892320c2
4
- data.tar.gz: edb2cee7203bbf98f8170e4dc7cf1569c9ccc1ee03a0692f3ee9872bfa59f646
3
+ metadata.gz: efb142c3437b34406ab4ffaa5160178455517f3e5a61fb5a28a5816d7482a3ea
4
+ data.tar.gz: 74eebf7e4709322b4d552de107976f16940fb45d9b433335af16ab0f7790b505
5
5
  SHA512:
6
- metadata.gz: 4c1ea090f9355a605c2880eb3ce466550db51c25df3427a004edd6a333be3b9f46bb75940dcac2b7a917bdc6ea8376f87e0c4c6cea897c39a5c215f071781064
7
- data.tar.gz: 209468410090a35cf5b44106682bdc6f80d612eb593e941196d37f2ca48c832f6ce1ea67779c01862b1c6830fd9498af64f62073af47e9e9f08d76b11ceaf3ea
6
+ metadata.gz: 67ab56fadc1dc462a6c339cc0228045ba148f298b7537b37dbced79657f8e92bbcbfb3c82846517f6d4af9104d909ac66008622b2bb123664e2555711e63414d
7
+ data.tar.gz: 412ccd7fa638feaf8604abb83e7fe268b4814de76975ecad03d0d5c33e5446cc7d23039a8f0ea0c9499154fdc2de666a8911303d3b34427457ecc7ff6b0bd0be
@@ -8,13 +8,15 @@ use Composer\DependencyResolver\Request;
8
8
  use Composer\Factory;
9
9
  use Composer\Filter\PlatformRequirementFilter\PlatformRequirementFilterFactory;
10
10
  use Composer\Installer;
11
+ use Composer\Package\Link;
11
12
  use Composer\Package\PackageInterface;
13
+ use Composer\Package\Version\VersionParser;
12
14
 
13
15
  final class UpdateChecker
14
16
  {
15
17
  public static function getLatestResolvableVersion(array $args): ?string
16
18
  {
17
- [$workingDirectory, $dependencyName, $gitCredentials, $registryCredentials] = $args;
19
+ [$workingDirectory, $dependencyName, $gitCredentials, $registryCredentials, $latestAllowableVersion] = $args;
18
20
 
19
21
  $httpBasicCredentials = [];
20
22
 
@@ -48,10 +50,22 @@ final class UpdateChecker
48
50
  $io->loadConfiguration($config);
49
51
  }
50
52
 
53
+ $package = $composer->getPackage();
54
+
55
+ $versionParser = new VersionParser();
56
+
57
+ $constraint = $versionParser->parseConstraints($latestAllowableVersion); // your version constraint
58
+ $packageLink = new Link($package->getName(), $dependencyName, $constraint);
59
+
60
+ $requires = $package->getRequires();
61
+ $requires[$dependencyName] = $packageLink;
62
+
63
+ $package->setRequires($requires);
64
+
51
65
  $install = new Installer(
52
66
  $io,
53
67
  $config,
54
- $composer->getPackage(), // @phpstan-ignore-line
68
+ $package, // @phpstan-ignore-line
55
69
  $composer->getDownloadManager(),
56
70
  $composer->getRepositoryManager(),
57
71
  $composer->getLocker(),
@@ -148,7 +148,8 @@ module Dependabot
148
148
  Dir.pwd,
149
149
  dependency.name.downcase,
150
150
  git_credentials,
151
- registry_credentials
151
+ registry_credentials,
152
+ @latest_allowable_version.to_s
152
153
  ]
153
154
  )
154
155
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.261.0
4
+ version: 0.261.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-06-13 00:00:00.000000000 Z
11
+ date: 2024-06-17 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.261.0
19
+ version: 0.261.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.261.0
26
+ version: 0.261.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -286,7 +286,7 @@ licenses:
286
286
  - MIT
287
287
  metadata:
288
288
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
289
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.261.0
289
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.261.1
290
290
  post_install_message:
291
291
  rdoc_options: []
292
292
  require_paths: