dependabot-core 0.76.1

data/lib/dependabot/utils/ruby/requirement.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+
+module Dependabot
+  module Utils
+    module Ruby
+      class Requirement < Gem::Requirement
+        # For consistency with other langauges, we define a requirements array.
+        # Ruby doesn't have an `OR` separator for requirements, so it always
+        # contains a single element.
+        def self.requirements_array(requirement_string)
+          [new(requirement_string)]
+        end
+
+        # Patches Gem::Requirement to make it accept requirement strings like
+        # "~> 4.2.5, >= 4.2.5.1" without first needing to split them.
+        def initialize(*requirements)
+          requirements = requirements.flatten.flat_map do |req_string|
+            req_string.split(",")
+          end
+
+          super(requirements)
+        end
+      end
+    end
+  end
+end

data/lib/dependabot/utils/rust/requirement.rb

@@ -0,0 +1,108 @@
+# frozen_string_literal: true
+
+################################################################################
+# For more details on rust version constraints, see:                           #
+# - https://doc.rust-lang.org/cargo/reference/specifying-dependencies.html     #
+# - https://steveklabnik.github.io/semver/semver/index.html                    #
+################################################################################
+
+require "dependabot/utils/rust/version"
+
+module Dependabot
+  module Utils
+    module Rust
+      class Requirement < Gem::Requirement
+        quoted = OPS.keys.map { |k| Regexp.quote(k) }.join("|")
+        version_pattern = Utils::Rust::Version::VERSION_PATTERN
+
+        PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*"
+        PATTERN = /\A#{PATTERN_RAW}\z/.freeze
+
+        # Use Utils::Rust::Version rather than Gem::Version to ensure that
+        # pre-release versions aren't transformed.
+        def self.parse(obj)
+          if obj.is_a?(Gem::Version)
+            return ["=", Utils::Rust::Version.new(obj.to_s)]
+          end
+
+          unless (matches = PATTERN.match(obj.to_s))
+            msg = "Illformed requirement [#{obj.inspect}]"
+            raise BadRequirementError, msg
+          end
+
+          return DefaultRequirement if matches[1] == ">=" && matches[2] == "0"
+
+          [matches[1] || "=", Utils::Rust::Version.new(matches[2])]
+        end
+
+        # For consistency with other langauges, we define a requirements array.
+        # Rust doesn't have an `OR` separator for requirements, so it always
+        # contains a single element.
+        def self.requirements_array(requirement_string)
+          [new(requirement_string)]
+        end
+
+        def initialize(*requirements)
+          requirements = requirements.flatten.flat_map do |req_string|
+            req_string.split(",").map do |r|
+              convert_rust_constraint_to_ruby_constraint(r.strip)
+            end
+          end
+
+          super(requirements)
+        end
+
+        private
+
+        def convert_rust_constraint_to_ruby_constraint(req_string)
+          req_string = req_string
+
+          if req_string.include?("*")
+            ruby_range(req_string.gsub(/(?:\.|^)[*]/, "").gsub(/^[^\d]/, ""))
+          elsif req_string.match?(/^~[^>]/) then convert_tilde_req(req_string)
+          elsif req_string.match?(/^[\d^]/) then convert_caret_req(req_string)
+          elsif req_string.match?(/[<=>]/) then req_string
+          else ruby_range(req_string)
+          end
+        end
+
+        def convert_tilde_req(req_string)
+          version = req_string.gsub(/^~/, "")
+          parts = version.split(".")
+          parts << "0" if parts.count < 3
+          "~> #{parts.join('.')}"
+        end
+
+        def ruby_range(req_string)
+          parts = req_string.split(".")
+
+          # If we have three or more parts then this is an exact match
+          return req_string if parts.count >= 3
+
+          # If we have no parts then the version is completely unlocked
+          return ">= 0" if parts.count.zero?
+
+          # If we have fewer than three parts we do a partial match
+          parts << "0"
+          "~> #{parts.join('.')}"
+        end
+
+        def convert_caret_req(req_string)
+          version = req_string.gsub(/^\^/, "")
+          parts = version.split(".")
+          first_non_zero = parts.find { |d| d != "0" }
+          first_non_zero_index =
+            first_non_zero ? parts.index(first_non_zero) : parts.count - 1
+          upper_bound = parts.map.with_index do |part, i|
+            if i < first_non_zero_index then part
+            elsif i == first_non_zero_index then (part.to_i + 1).to_s
+            else 0
+            end
+          end.join(".")
+
+          [">= #{version}", "< #{upper_bound}"]
+        end
+      end
+    end
+  end
+end

data/lib/dependabot/utils/rust/version.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+# Rust pre-release versions use 1.0.1-rc1 syntax, which Gem::Version
+# converts into 1.0.1.pre.rc1. We override the `to_s` method to stop that
+# alteration.
+
+module Dependabot
+  module Utils
+    module Rust
+      class Version < Gem::Version
+        VERSION_PATTERN = '[0-9]+[0-9a-zA-Z]*(?>\.[0-9a-zA-Z]+)*' \
+                          '(-[0-9A-Za-z-]+(\.[0-9a-zA-Z-]+)*)?' \
+                          '(\+[0-9a-zA-Z]+(\.[0-9a-zA-Z]+)*)?'
+        ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/.freeze
+
+        def initialize(version)
+          @version_string = version.to_s
+          version, @build_version = version&.to_s&.split("+")
+          super
+        end
+
+        def to_s
+          @version_string
+        end
+
+        def inspect # :nodoc:
+          "#<#{self.class} #{@version_string}>"
+        end
+      end
+    end
+  end
+end

data/lib/dependabot/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module Dependabot
+  VERSION = "0.76.1"
+end

data/lib/python_requirement_parser.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+
+class PythonRequirementParser
+  NAME = /[a-zA-Z0-9\-_\.]+/.freeze
+  EXTRA = /[a-zA-Z0-9\-_\.]+/.freeze
+  COMPARISON = /===|==|>=|<=|<|>|~=|!=/.freeze
+  VERSION = /[0-9]+[a-zA-Z0-9\-_\.*]*(\+[0-9a-zA-Z]+(\.[0-9a-zA-Z]+)*)?/.freeze
+  REQUIREMENT =
+    /(?<comparison>#{COMPARISON})\s*\\?\s*(?<version>#{VERSION})/.freeze
+  HASH = /--hash=(?<algorithm>.*?):(?<hash>.*?)(?=\s|$)/.freeze
+  REQUIREMENTS = /#{REQUIREMENT}(\s*,\s*\\?\s*#{REQUIREMENT})*/.freeze
+  HASHES = /#{HASH}(\s*\\?\s*#{HASH})*/.freeze
+
+  INSTALL_REQ_WITH_REQUIREMENT =
+    /\s*\\?\s*(?<name>#{NAME})
+      \s*\\?\s*(\[\s*(?<extras>#{EXTRA}(\s*,\s*#{EXTRA})*)\s*\])?
+      \s*\\?\s*(?<requirements>#{REQUIREMENTS})
+      \s*\\?\s*(?<hashes>#{HASHES})?
+      \s*#*\s*(?<comment>.+)?
+    /x.freeze
+
+  INSTALL_REQ_WITHOUT_REQUIREMENT =
+    /^\s*\\?\s*(?<name>#{NAME})
+      \s*\\?\s*(\[\s*(?<extras>#{EXTRA}(\s*,\s*#{EXTRA})*)\s*\])?
+      \s*\\?\s*(?<hashes>#{HASHES})?
+      \s*#*\s*(?<comment>.+)?$
+    /x.freeze
+
+  NAME_WITH_EXTRAS =
+    /\s*\\?\s*(?<name>#{NAME})
+      (\s*\\?\s*\[\s*(?<extras>#{EXTRA}(\s*,\s*#{EXTRA})*)\s*\])?
+    /x.freeze
+end

data/lib/python_versions.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module PythonVersions
+  # Poetry doesn't handle Python versions, so we have to do so manually
+  # (checking from a list of versions Poetry supports).
+  # This list gets iterated through to find a valid version, so we have
+  # the two pre-installed versions listed first.
+  PYTHON_VERSIONS = %w(
+    3.6.7 2.7.15
+    3.7.1 3.7.0
+    3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
+    3.5.6 3.5.5 3.5.4 3.5.3 3.5.2 3.5.1 3.5.0
+    3.4.9 3.4.8 3.4.7 3.4.6 3.4.5 3.4.4 3.4.3 3.4.2 3.4.1 3.4.0
+    2.7.15 2.7.14 2.7.13 2.7.12 2.7.11 2.7.10 2.7.9 2.7.8 2.7.7 2.7.6 2.7.5
+    2.7.4 2.7.3 2.7.2 2.7.1 2.7
+  ).freeze
+
+  PRE_INSTALLED_PYTHON_VERSIONS = %w(
+    3.6.7 2.7.15
+  ).freeze
+end

metadata

@@ -0,0 +1,641 @@
+--- !ruby/object:Gem::Specification
+name: dependabot-core
+version: !ruby/object:Gem::Version
+  version: 0.76.1
+platform: ruby
+authors:
+- Dependabot
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2018-12-06 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: aws-sdk-ecr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.16'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.16'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 3.0.0
+- !ruby/object:Gem::Dependency
+  name: docker_registry2
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.4'
+- !ruby/object:Gem::Dependency
+  name: excon
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.55'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.55'
+- !ruby/object:Gem::Dependency
+  name: gitlab
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.1'
+- !ruby/object:Gem::Dependency
+  name: gpgme
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.8'
+- !ruby/object:Gem::Dependency
+  name: octokit
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.6'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.6'
+- !ruby/object:Gem::Dependency
+  name: parseconfig
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.0'
+- !ruby/object:Gem::Dependency
+  name: parser
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.5'
+- !ruby/object:Gem::Dependency
+  name: toml-rb
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.2
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.1'
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.1.2
+- !ruby/object:Gem::Dependency
+  name: byebug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '10.0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '12'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.8'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.8'
+- !ruby/object:Gem::Dependency
+  name: rspec-its
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.2'
+- !ruby/object:Gem::Dependency
+  name: rspec_junit_formatter
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.61'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.61'
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '4.0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.4'
+description: Automated dependency management for Ruby, JavaScript, Python, PHP, Elixir,
+  Rust, Java, .NET, Elm and Go
+email: support@dependabot.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CHANGELOG.md
+- LICENSE
+- README.md
+- helpers/elixir/bin/check_update.exs
+- helpers/elixir/bin/do_update.exs
+- helpers/elixir/bin/parse_deps.exs
+- helpers/elixir/bin/run.exs
+- helpers/elixir/mix.exs
+- helpers/elixir/mix.lock
+- helpers/go/Makefile
+- helpers/go/go.mod
+- helpers/go/go.sum
+- helpers/go/importresolver/main.go
+- helpers/go/main.go
+- helpers/go/updatechecker/main.go
+- helpers/go/updater/go.mod
+- helpers/go/updater/go.sum
+- helpers/go/updater/helpers.go
+- helpers/go/updater/main.go
+- helpers/npm/.agignore
+- helpers/npm/.envrc
+- helpers/npm/.eslintrc
+- helpers/npm/.nvimrc
+- helpers/npm/bin/run.js
+- helpers/npm/lib/helpers.js
+- helpers/npm/lib/peer-dependency-checker.js
+- helpers/npm/lib/subdependency-updater.js
+- helpers/npm/lib/updater.js
+- helpers/npm/package.json
+- helpers/npm/test/fixtures/npm-left-pad.json
+- helpers/npm/test/fixtures/updater/original/package-lock.json
+- helpers/npm/test/fixtures/updater/original/package.json
+- helpers/npm/test/fixtures/updater/updated/package-lock.json
+- helpers/npm/test/helpers.js
+- helpers/npm/test/updater.test.js
+- helpers/npm/yarn.lock
+- helpers/php/.php_cs
+- helpers/php/bin/run.php
+- helpers/php/composer.json
+- helpers/php/composer.lock
+- helpers/php/composer.phar
+- helpers/php/setup.sh
+- helpers/php/src/DependabotInstallationManager.php
+- helpers/php/src/DependabotPluginManager.php
+- helpers/php/src/ExceptionIO.php
+- helpers/php/src/Hasher.php
+- helpers/php/src/UpdateChecker.php
+- helpers/php/src/Updater.php
+- helpers/python/lib/__init__.py
+- helpers/python/lib/hasher.py
+- helpers/python/lib/parser.py
+- helpers/python/requirements.txt
+- helpers/python/run.py
+- helpers/test/run.rb
+- helpers/utils/git-credential-store-immutable
+- helpers/yarn/.agignore
+- helpers/yarn/.envrc
+- helpers/yarn/.eslintrc
+- helpers/yarn/.nvimrc
+- helpers/yarn/bin/run.js
+- helpers/yarn/lib/fix-duplicates.js
+- helpers/yarn/lib/helpers.js
+- helpers/yarn/lib/lockfile-parser.js
+- helpers/yarn/lib/peer-dependency-checker.js
+- helpers/yarn/lib/replace-lockfile-declaration.js
+- helpers/yarn/lib/subdependency-updater.js
+- helpers/yarn/lib/updater.js
+- helpers/yarn/package.json
+- helpers/yarn/test/fixtures/updater/original/package.json
+- helpers/yarn/test/fixtures/updater/original/yarn.lock
+- helpers/yarn/test/fixtures/updater/updated/yarn.lock
+- helpers/yarn/test/fixtures/updater/with-version-comments/package.json
+- helpers/yarn/test/fixtures/updater/with-version-comments/yarn.lock
+- helpers/yarn/test/fixtures/yarnpkg-is-positive.json
+- helpers/yarn/test/fixtures/yarnpkg-left-pad.json
+- helpers/yarn/test/helpers.js
+- helpers/yarn/test/updater.test.js
+- helpers/yarn/yarn.lock
+- lib/bundler_definition_bundler_version_patch.rb
+- lib/bundler_definition_ruby_version_patch.rb
+- lib/bundler_git_source_patch.rb
+- lib/dependabot.rb
+- lib/dependabot/clients/bitbucket.rb
+- lib/dependabot/clients/github_with_retries.rb
+- lib/dependabot/clients/gitlab.rb
+- lib/dependabot/dependency.rb
+- lib/dependabot/dependency_file.rb
+- lib/dependabot/errors.rb
+- lib/dependabot/file_fetchers.rb
+- lib/dependabot/file_fetchers/README.md
+- lib/dependabot/file_fetchers/base.rb
+- lib/dependabot/file_fetchers/docker/docker.rb
+- lib/dependabot/file_fetchers/dotnet/nuget.rb
+- lib/dependabot/file_fetchers/dotnet/nuget/import_paths_finder.rb
+- lib/dependabot/file_fetchers/dotnet/nuget/sln_project_paths_finder.rb
+- lib/dependabot/file_fetchers/elixir/hex.rb
+- lib/dependabot/file_fetchers/elm/elm_package.rb
+- lib/dependabot/file_fetchers/git/submodules.rb
+- lib/dependabot/file_fetchers/go/dep.rb
+- lib/dependabot/file_fetchers/go/modules.rb
+- lib/dependabot/file_fetchers/java/gradle.rb
+- lib/dependabot/file_fetchers/java/gradle/settings_file_parser.rb
+- lib/dependabot/file_fetchers/java/maven.rb
+- lib/dependabot/file_fetchers/java_script/npm_and_yarn.rb
+- lib/dependabot/file_fetchers/java_script/npm_and_yarn/path_dependency_builder.rb
+- lib/dependabot/file_fetchers/php/composer.rb
+- lib/dependabot/file_fetchers/python/pip.rb
+- lib/dependabot/file_fetchers/ruby/bundler.rb
+- lib/dependabot/file_fetchers/ruby/bundler/child_gemfile_finder.rb
+- lib/dependabot/file_fetchers/ruby/bundler/path_gemspec_finder.rb
+- lib/dependabot/file_fetchers/ruby/bundler/require_relative_finder.rb
+- lib/dependabot/file_fetchers/rust/cargo.rb
+- lib/dependabot/file_parsers.rb
+- lib/dependabot/file_parsers/README.md
+- lib/dependabot/file_parsers/base.rb
+- lib/dependabot/file_parsers/base/dependency_set.rb
+- lib/dependabot/file_parsers/docker/docker.rb
+- lib/dependabot/file_parsers/dotnet/nuget.rb
+- lib/dependabot/file_parsers/dotnet/nuget/packages_config_parser.rb
+- lib/dependabot/file_parsers/dotnet/nuget/project_file_parser.rb
+- lib/dependabot/file_parsers/dotnet/nuget/property_value_finder.rb
+- lib/dependabot/file_parsers/elixir/hex.rb
+- lib/dependabot/file_parsers/elm/elm_package.rb
+- lib/dependabot/file_parsers/git/submodules.rb
+- lib/dependabot/file_parsers/go/dep.rb
+- lib/dependabot/file_parsers/go/modules.rb
+- lib/dependabot/file_parsers/go/modules/go_mod_parser.rb
+- lib/dependabot/file_parsers/java/gradle.rb
+- lib/dependabot/file_parsers/java/gradle/property_value_finder.rb
+- lib/dependabot/file_parsers/java/gradle/repositories_finder.rb
+- lib/dependabot/file_parsers/java/maven.rb
+- lib/dependabot/file_parsers/java/maven/property_value_finder.rb
+- lib/dependabot/file_parsers/java/maven/repositories_finder.rb
+- lib/dependabot/file_parsers/java_script/npm_and_yarn.rb
+- lib/dependabot/file_parsers/php/composer.rb
+- lib/dependabot/file_parsers/python/pip.rb
+- lib/dependabot/file_parsers/python/pip/pipfile_files_parser.rb
+- lib/dependabot/file_parsers/python/pip/poetry_files_parser.rb
+- lib/dependabot/file_parsers/python/pip/setup_file_parser.rb
+- lib/dependabot/file_parsers/ruby/bundler.rb
+- lib/dependabot/file_parsers/ruby/bundler/file_preparer.rb
+- lib/dependabot/file_parsers/ruby/bundler/gemfile_checker.rb
+- lib/dependabot/file_parsers/rust/cargo.rb
+- lib/dependabot/file_updaters.rb
+- lib/dependabot/file_updaters/README.md
+- lib/dependabot/file_updaters/base.rb
+- lib/dependabot/file_updaters/docker/docker.rb
+- lib/dependabot/file_updaters/dotnet/nuget.rb
+- lib/dependabot/file_updaters/dotnet/nuget/packages_config_declaration_finder.rb
+- lib/dependabot/file_updaters/dotnet/nuget/project_file_declaration_finder.rb
+- lib/dependabot/file_updaters/dotnet/nuget/property_value_updater.rb
+- lib/dependabot/file_updaters/elixir/hex.rb
+- lib/dependabot/file_updaters/elixir/hex/lockfile_updater.rb
+- lib/dependabot/file_updaters/elixir/hex/mixfile_git_pin_updater.rb
+- lib/dependabot/file_updaters/elixir/hex/mixfile_requirement_updater.rb
+- lib/dependabot/file_updaters/elixir/hex/mixfile_sanitizer.rb
+- lib/dependabot/file_updaters/elixir/hex/mixfile_updater.rb
+- lib/dependabot/file_updaters/elm/elm_package.rb
+- lib/dependabot/file_updaters/elm/elm_package/elm_json_updater.rb
+- lib/dependabot/file_updaters/elm/elm_package/elm_package_updater.rb
+- lib/dependabot/file_updaters/git/submodules.rb
+- lib/dependabot/file_updaters/go/dep.rb
+- lib/dependabot/file_updaters/go/dep/lockfile_updater.rb
+- lib/dependabot/file_updaters/go/dep/manifest_updater.rb
+- lib/dependabot/file_updaters/go/modules.rb
+- lib/dependabot/file_updaters/go/modules/go_mod_updater.rb
+- lib/dependabot/file_updaters/java/gradle.rb
+- lib/dependabot/file_updaters/java/gradle/dependency_set_updater.rb
+- lib/dependabot/file_updaters/java/gradle/property_value_updater.rb
+- lib/dependabot/file_updaters/java/maven.rb
+- lib/dependabot/file_updaters/java/maven/declaration_finder.rb
+- lib/dependabot/file_updaters/java/maven/property_value_updater.rb
+- lib/dependabot/file_updaters/java_script/npm_and_yarn.rb
+- lib/dependabot/file_updaters/java_script/npm_and_yarn/npm_lockfile_updater.rb
+- lib/dependabot/file_updaters/java_script/npm_and_yarn/npmrc_builder.rb
+- lib/dependabot/file_updaters/java_script/npm_and_yarn/package_json_preparer.rb
+- lib/dependabot/file_updaters/java_script/npm_and_yarn/package_json_updater.rb
+- lib/dependabot/file_updaters/java_script/npm_and_yarn/yarn_lockfile_updater.rb
+- lib/dependabot/file_updaters/php/composer.rb
+- lib/dependabot/file_updaters/php/composer/lockfile_updater.rb
+- lib/dependabot/file_updaters/php/composer/manifest_updater.rb
+- lib/dependabot/file_updaters/python/pip.rb
+- lib/dependabot/file_updaters/python/pip/pip_compile_file_updater.rb
+- lib/dependabot/file_updaters/python/pip/pipfile_file_updater.rb
+- lib/dependabot/file_updaters/python/pip/pipfile_preparer.rb
+- lib/dependabot/file_updaters/python/pip/poetry_file_updater.rb
+- lib/dependabot/file_updaters/python/pip/pyproject_preparer.rb
+- lib/dependabot/file_updaters/python/pip/requirement_file_updater.rb
+- lib/dependabot/file_updaters/python/pip/requirement_replacer.rb
+- lib/dependabot/file_updaters/python/pip/setup_file_sanitizer.rb
+- lib/dependabot/file_updaters/ruby/bundler.rb
+- lib/dependabot/file_updaters/ruby/bundler/gemfile_updater.rb
+- lib/dependabot/file_updaters/ruby/bundler/gemspec_dependency_name_finder.rb
+- lib/dependabot/file_updaters/ruby/bundler/gemspec_sanitizer.rb
+- lib/dependabot/file_updaters/ruby/bundler/gemspec_updater.rb
+- lib/dependabot/file_updaters/ruby/bundler/git_pin_replacer.rb
+- lib/dependabot/file_updaters/ruby/bundler/git_source_remover.rb
+- lib/dependabot/file_updaters/ruby/bundler/lockfile_updater.rb
+- lib/dependabot/file_updaters/ruby/bundler/requirement_replacer.rb
+- lib/dependabot/file_updaters/rust/cargo.rb
+- lib/dependabot/file_updaters/rust/cargo/lockfile_updater.rb
+- lib/dependabot/file_updaters/rust/cargo/manifest_updater.rb
+- lib/dependabot/git_commit_checker.rb
+- lib/dependabot/metadata_finders.rb
+- lib/dependabot/metadata_finders/README.md
+- lib/dependabot/metadata_finders/base.rb
+- lib/dependabot/metadata_finders/base/changelog_finder.rb
+- lib/dependabot/metadata_finders/base/changelog_pruner.rb
+- lib/dependabot/metadata_finders/base/commits_finder.rb
+- lib/dependabot/metadata_finders/base/release_finder.rb
+- lib/dependabot/metadata_finders/docker/docker.rb
+- lib/dependabot/metadata_finders/dotnet/nuget.rb
+- lib/dependabot/metadata_finders/elixir/hex.rb
+- lib/dependabot/metadata_finders/elm/elm_package.rb
+- lib/dependabot/metadata_finders/git/submodules.rb
+- lib/dependabot/metadata_finders/go/dep.rb
+- lib/dependabot/metadata_finders/java/maven.rb
+- lib/dependabot/metadata_finders/java_script/npm_and_yarn.rb
+- lib/dependabot/metadata_finders/php/composer.rb
+- lib/dependabot/metadata_finders/python/pip.rb
+- lib/dependabot/metadata_finders/ruby/bundler.rb
+- lib/dependabot/metadata_finders/rust/cargo.rb
+- lib/dependabot/pull_request_creator.rb
+- lib/dependabot/pull_request_creator/branch_namer.rb
+- lib/dependabot/pull_request_creator/commit_signer.rb
+- lib/dependabot/pull_request_creator/github.rb
+- lib/dependabot/pull_request_creator/gitlab.rb
+- lib/dependabot/pull_request_creator/labeler.rb
+- lib/dependabot/pull_request_creator/message_builder.rb
+- lib/dependabot/pull_request_updater.rb
+- lib/dependabot/pull_request_updater/github.rb
+- lib/dependabot/shared_helpers.rb
+- lib/dependabot/source.rb
+- lib/dependabot/update_checkers.rb
+- lib/dependabot/update_checkers/README.md
+- lib/dependabot/update_checkers/base.rb
+- lib/dependabot/update_checkers/docker/docker.rb
+- lib/dependabot/update_checkers/dotnet/nuget.rb
+- lib/dependabot/update_checkers/dotnet/nuget/property_updater.rb
+- lib/dependabot/update_checkers/dotnet/nuget/repository_finder.rb
+- lib/dependabot/update_checkers/dotnet/nuget/requirements_updater.rb
+- lib/dependabot/update_checkers/dotnet/nuget/version_finder.rb
+- lib/dependabot/update_checkers/elixir/hex.rb
+- lib/dependabot/update_checkers/elixir/hex/file_preparer.rb
+- lib/dependabot/update_checkers/elixir/hex/requirements_updater.rb
+- lib/dependabot/update_checkers/elixir/hex/version_resolver.rb
+- lib/dependabot/update_checkers/elm/elm_package.rb
+- lib/dependabot/update_checkers/elm/elm_package/cli_parser.rb
+- lib/dependabot/update_checkers/elm/elm_package/elm_18_version_resolver.rb
+- lib/dependabot/update_checkers/elm/elm_package/elm_19_version_resolver.rb
+- lib/dependabot/update_checkers/elm/elm_package/requirements_updater.rb
+- lib/dependabot/update_checkers/git/submodules.rb
+- lib/dependabot/update_checkers/go/dep.rb
+- lib/dependabot/update_checkers/go/dep/file_preparer.rb
+- lib/dependabot/update_checkers/go/dep/latest_version_finder.rb
+- lib/dependabot/update_checkers/go/dep/requirements_updater.rb
+- lib/dependabot/update_checkers/go/dep/version_resolver.rb
+- lib/dependabot/update_checkers/go/modules.rb
+- lib/dependabot/update_checkers/java/gradle.rb
+- lib/dependabot/update_checkers/java/gradle/multi_dependency_updater.rb
+- lib/dependabot/update_checkers/java/gradle/version_finder.rb
+- lib/dependabot/update_checkers/java/maven.rb
+- lib/dependabot/update_checkers/java/maven/property_updater.rb
+- lib/dependabot/update_checkers/java/maven/requirements_updater.rb
+- lib/dependabot/update_checkers/java/maven/version_finder.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn/latest_version_finder.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn/library_detector.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn/registry_finder.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn/requirements_updater.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn/subdependency_version_resolver.rb
+- lib/dependabot/update_checkers/java_script/npm_and_yarn/version_resolver.rb
+- lib/dependabot/update_checkers/php/composer.rb
+- lib/dependabot/update_checkers/php/composer/requirements_updater.rb
+- lib/dependabot/update_checkers/php/composer/version_resolver.rb
+- lib/dependabot/update_checkers/python/pip.rb
+- lib/dependabot/update_checkers/python/pip/latest_version_finder.rb
+- lib/dependabot/update_checkers/python/pip/pip_compile_version_resolver.rb
+- lib/dependabot/update_checkers/python/pip/pipfile_version_resolver.rb
+- lib/dependabot/update_checkers/python/pip/poetry_version_resolver.rb
+- lib/dependabot/update_checkers/python/pip/requirements_updater.rb
+- lib/dependabot/update_checkers/ruby/bundler.rb
+- lib/dependabot/update_checkers/ruby/bundler/file_preparer.rb
+- lib/dependabot/update_checkers/ruby/bundler/force_updater.rb
+- lib/dependabot/update_checkers/ruby/bundler/latest_version_finder.rb
+- lib/dependabot/update_checkers/ruby/bundler/requirements_updater.rb
+- lib/dependabot/update_checkers/ruby/bundler/ruby_requirement_setter.rb
+- lib/dependabot/update_checkers/ruby/bundler/shared_bundler_helpers.rb
+- lib/dependabot/update_checkers/ruby/bundler/version_resolver.rb
+- lib/dependabot/update_checkers/rust/cargo.rb
+- lib/dependabot/update_checkers/rust/cargo/file_preparer.rb
+- lib/dependabot/update_checkers/rust/cargo/requirements_updater.rb
+- lib/dependabot/update_checkers/rust/cargo/version_resolver.rb
+- lib/dependabot/utils.rb
+- lib/dependabot/utils/docker/credentials_finder.rb
+- lib/dependabot/utils/dotnet/requirement.rb
+- lib/dependabot/utils/dotnet/version.rb
+- lib/dependabot/utils/elixir/requirement.rb
+- lib/dependabot/utils/elixir/version.rb
+- lib/dependabot/utils/elm/requirement.rb
+- lib/dependabot/utils/elm/version.rb
+- lib/dependabot/utils/go/path_converter.rb
+- lib/dependabot/utils/go/requirement.rb
+- lib/dependabot/utils/go/shared_helper.rb
+- lib/dependabot/utils/go/version.rb
+- lib/dependabot/utils/java/requirement.rb
+- lib/dependabot/utils/java/version.rb
+- lib/dependabot/utils/java_script/requirement.rb
+- lib/dependabot/utils/java_script/version.rb
+- lib/dependabot/utils/php/requirement.rb
+- lib/dependabot/utils/php/version.rb
+- lib/dependabot/utils/python/requirement.rb
+- lib/dependabot/utils/python/version.rb
+- lib/dependabot/utils/ruby/requirement.rb
+- lib/dependabot/utils/rust/requirement.rb
+- lib/dependabot/utils/rust/version.rb
+- lib/dependabot/version.rb
+- lib/python_requirement_parser.rb
+- lib/python_versions.rb
+homepage: https://github.com/dependabot/dependabot-core
+licenses:
+- Nonstandard
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.5.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.3
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.7.6
+signing_key: 
+specification_version: 4
+summary: Automated dependency management
+test_files: []