dependabot-composer 0.291.0 → 0.292.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: edae6f8e4365e6a276d3092efcf5c9d99d7f903a648e6c2d5d04538cb4900d3a
-  data.tar.gz: b14037982ab9801b7c7acbac1d392171f8b077c170581233d1d1af511a065f02
+  metadata.gz: a5b18f569628d859443c19310162b313bd37341928d2e287b1ee9c33b8c7186a
+  data.tar.gz: a5c9a4e5e08b3d00d6f9970c535b61682151a2acb5bfd54d5056531b4a747893
 SHA512:
-  metadata.gz: 2943faf6cc4a0f43f0f36bf4f11ccd6b1f9cf94102cb2947f63902155d9821ee588bd2dbf83ece8f5c95bd410166371d040d4b3f38db090ed02e231a3a5ce609
-  data.tar.gz: 037bab6d8baaec1b1f32130d66e7f6e1fbd75ebbe727f374d057a0f241bfc40c63512ab80df0b4f817b905cb62e3b57eeb1028c50e279ec84075495db8768ad5
+  metadata.gz: a9186f5abde9f582f32d2c70603ebe2fde54ed14534ace2f58d0ac1cfbb3b5f784a2385fb76418ae8bed75abe6754835d3d9f2a9e805abe6c622d97ce8aa9d1c
+  data.tar.gz: bde562d186042da9b0011ecdc062104fa6bcca82417ca61f51d3d7b199fceec59977005f86b64e7b657d4331f86481bcc5f20289b85a58e8428903c5ebeb4dcd

data/helpers/v2/composer.json

@@ -9,7 +9,7 @@
     },
     "require-dev": {
         "friendsofphp/php-cs-fixer": "^3.0",
-        "phpstan/phpstan": "~1.10.1"
+        "phpstan/phpstan": "~2.0.4"
     },
     "autoload": {
         "psr-4": {

data/helpers/v2/composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "3d95b9d5c8e044c188482b1336200a14",
+    "content-hash": "f4796b6b337d1572402dac1f9c94c69b",
     "packages": [
         {
             "name": "composer/ca-bundle",
@@ -2406,20 +2406,20 @@
         },
         {
             "name": "phpstan/phpstan",
-            "version": "1.10.67",
+            "version": "2.0.4",
             "source": {
                 "type": "git",
                 "url": "https://github.com/phpstan/phpstan.git",
-                "reference": "16ddbe776f10da6a95ebd25de7c1dbed397dc493"
+                "reference": "50d276fc3bf1430ec315f2f109bbde2769821524"
             },
             "dist": {
                 "type": "zip",
-                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/16ddbe776f10da6a95ebd25de7c1dbed397dc493",
-                "reference": "16ddbe776f10da6a95ebd25de7c1dbed397dc493",
+                "url": "https://api.github.com/repos/phpstan/phpstan/zipball/50d276fc3bf1430ec315f2f109bbde2769821524",
+                "reference": "50d276fc3bf1430ec315f2f109bbde2769821524",
                 "shasum": ""
             },
             "require": {
-                "php": "^7.2|^8.0"
+                "php": "^7.4|^8.0"
             },
             "conflict": {
                 "phpstan/phpstan-shim": "*"
@@ -2460,7 +2460,7 @@
                     "type": "github"
                 }
             ],
-            "time": "2024-04-16T07:22:02+00:00"
+            "time": "2024-12-17T17:14:01+00:00"
         },
         {
             "name": "psr/event-dispatcher",

data/lib/dependabot/composer/file_parser.rb

@@ -59,11 +59,12 @@ module Dependabot
       def package_manager
         if composer_version == Helpers::V1
           return PackageManager.new(
-            composer_version
+            detected_version: composer_version
           )
         end
         PackageManager.new(
-          env_versions[:composer] || composer_version
+          detected_version: composer_version,
+          raw_version: env_versions[:composer]
         )
       end
 

data/lib/dependabot/composer/file_updater/lockfile_updater.rb

@@ -204,14 +204,6 @@ module Dependabot
             raise PrivateSourceAuthenticationFailure, source
           end
 
-          # NOTE: This error is raised by composer v1
-          if error.message.include?("Argument 1 passed to Composer")
-            msg = "One of your Composer plugins is not compatible with the " \
-                  "latest version of Composer. Please update Composer and " \
-                  "try running `composer update` to debug further."
-            raise DependencyFileNotResolvable, msg
-          end
-
           # NOTE: This error is raised by composer v2 and includes helpful
           # information about which plugins or dependencies are not compatible
           if error.message.include?("Your requirements could not be resolved")

data/lib/dependabot/composer/language.rb

@@ -16,11 +16,9 @@ module Dependabot
       sig { params(raw_version: String, requirement: T.nilable(Requirement)).void }
       def initialize(raw_version, requirement: nil)
         super(
-          NAME,
-          Version.new(raw_version),
-          [],
-          [],
-          requirement
+          name: NAME,
+          version: Version.new(raw_version),
+          requirement: requirement
        )
       end
 

data/lib/dependabot/composer/package_manager.rb

@@ -33,13 +33,19 @@ module Dependabot
       # DEPRECATED_COMPOSER_VERSIONS = T.let([Version.new("1")].freeze, T::Array[Dependabot::Version])
       DEPRECATED_COMPOSER_VERSIONS = T.let([].freeze, T::Array[Dependabot::Version])
 
-      sig { params(raw_version: String).void }
-      def initialize(raw_version)
+      sig do
+        params(
+          detected_version: String,
+          raw_version: T.nilable(String)
+        ).void
+      end
+      def initialize(detected_version:, raw_version: nil)
         super(
-          NAME,
-          Version.new(raw_version),
-          DEPRECATED_COMPOSER_VERSIONS,
-          SUPPORTED_COMPOSER_VERSIONS,
+          name: NAME,
+          detected_version: Version.new(detected_version),
+          version: raw_version ? Version.new(raw_version) : nil,
+          deprecated_versions: DEPRECATED_COMPOSER_VERSIONS,
+          supported_versions: SUPPORTED_COMPOSER_VERSIONS
        )
       end
     end

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -34,7 +34,6 @@ module Dependabot
         MISSING_IMPLICIT_PLATFORM_REQ_REGEX =
           %r{
             (?<!with|for|by)\sext\-[^\s\/]+\s.*?\s(?=->)|
-            (?<=requires\s)php(?:\-[^\s\/]+)?\s.*?\s(?=->)| # composer v1
             (?<=require\s)php(?:\-[^\s\/]+)?\s.*?\s(?=->) # composer v2
           }x
         VERSION_REGEX = /[0-9]+(?:\.[A-Za-z0-9\-_]+)*/

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.291.0
+  version: 0.292.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-12-19 00:00:00.000000000 Z
+date: 2025-01-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.291.0
+        version: 0.292.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.291.0
+        version: 0.292.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -276,7 +276,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.291.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.292.0
 post_install_message:
 rdoc_options: []
 require_paths:
@@ -292,7 +292,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 3.1.0
 requirements: []
-rubygems_version: 3.5.9
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Provides Dependabot support for PHP (composer)