dependabot-composer 0.262.0 → 0.263.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cef627bd53c4b51bad2f11380088be6de740186425f3e0789a59bb2984fa116d
-  data.tar.gz: 8c3c28b458966d465b562bbe54bedeec36c620eabe957be6ce509578b3b1aa6e
+  metadata.gz: cc1b677773598233bd12f90869d359813e98b093a1d336650a9ce89f0634d6f8
+  data.tar.gz: 94e9eb154525ec00a398ab2b5dada42fbc4d2b4204e73181c2b68b593d4c665a
 SHA512:
-  metadata.gz: 047460f1a9404841034df7d2ff0dacb32d81ac71dc4bd8b562c69c44e62ffcede7804345770dc2f0652be74f0a80418a8b4c647ff128d05675bfad53556ee5da
-  data.tar.gz: 2f5c24197c84632f64fc749de6d7350281ada80ad98d31730f98d70352ab6db4fcfac57a7070ef0669643d9ff0fd447ea29c8c2bdb0b4b48800e3a276013cdb3
+  metadata.gz: 719cc3d71298c92113f891f42d237c91e0868805d6d333c7c3752e1dfaba059b1e339dfc0196dc82e4e4f5b0febf277d8d9474f60e24ce70ed91402a917836b8
+  data.tar.gz: 8532ee672a1006ce3c8931872f9fec108a7da83446d0e0ac945ed3d70970180699ccfe6cd54088eb401373a460b9ad9516b4489c28e6b3b4c2484eafcef59044

data/helpers/v2/src/UpdateChecker.php

@@ -8,15 +8,13 @@ use Composer\DependencyResolver\Request;
 use Composer\Factory;
 use Composer\Filter\PlatformRequirementFilter\PlatformRequirementFilterFactory;
 use Composer\Installer;
-use Composer\Package\Link;
 use Composer\Package\PackageInterface;
-use Composer\Package\Version\VersionParser;
 
 final class UpdateChecker
 {
     public static function getLatestResolvableVersion(array $args): ?string
     {
-        [$workingDirectory, $dependencyName, $gitCredentials, $registryCredentials, $latestAllowableVersion] = $args;
+        [$workingDirectory, $dependencyName, $gitCredentials, $registryCredentials] = $args;
 
         $httpBasicCredentials = [];
 
@@ -50,22 +48,10 @@ final class UpdateChecker
             $io->loadConfiguration($config);
         }
 
-        $package = $composer->getPackage();
-
-        $versionParser = new VersionParser();
-
-        $constraint = $versionParser->parseConstraints($latestAllowableVersion); // your version constraint
-        $packageLink = new Link($package->getName(), $dependencyName, $constraint);
-
-        $requires = $package->getRequires();
-        $requires[$dependencyName] = $packageLink;
-
-        $package->setRequires($requires);
-
         $install = new Installer(
             $io,
             $config,
-            $package,  // @phpstan-ignore-line
+            $composer->getPackage(),  // @phpstan-ignore-line
             $composer->getDownloadManager(),
             $composer->getRepositoryManager(),
             $composer->getLocker(),

data/lib/dependabot/composer/update_checker/requirements_updater.rb

@@ -48,7 +48,7 @@ module Dependabot
         end
 
         def updated_requirements
-          return requirements if update_strategy == RequirementsUpdateStrategy::LockfileOnly
+          return requirements if update_strategy.lockfile_only?
           return requirements unless latest_resolvable_version
 
           requirements.map { |req| updated_requirement(req) }

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -148,8 +148,7 @@ module Dependabot
                 Dir.pwd,
                 dependency.name.downcase,
                 git_credentials,
-                registry_credentials,
-                @latest_allowable_version.to_s
+                registry_credentials
               ]
             )
           end

data/lib/dependabot/composer/update_checker.rb

@@ -72,7 +72,7 @@ module Dependabot
       end
 
       def requirements_unlocked_or_can_be?
-        requirements_update_strategy != RequirementsUpdateStrategy::LockfileOnly
+        !requirements_update_strategy.lockfile_only?
       end
 
       def requirements_update_strategy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.262.0
+  version: 0.263.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-20 00:00:00.000000000 Z
+date: 2024-06-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.262.0
+        version: 0.263.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.262.0
+        version: 0.263.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -286,7 +286,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.262.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.263.0
 post_install_message: 
 rdoc_options: []
 require_paths: