dependabot-core 0.86.11 → 0.86.12

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a823a69ede90ac8ad982e3d4c981c85cbc62e33507397879ea479b2e0bf00984
-  data.tar.gz: a6a9dccfe89393ae011b349ba920805d73624ad85dc2bbbd39297f40ac67276b
+  metadata.gz: 2819732750e0dd0c1bd1b8d7eac30c029b058b3d408a9938a880ac3fec165df7
+  data.tar.gz: cbea227565c62312c2c91d661335c11b8bc8aa75580d6323a5c1fc7eb2f448fb
 SHA512:
-  metadata.gz: 96475ab54827e805d29e052e3baf27575e14fcad264453fcc35f115770219a2f607faec7563de0e0698ed80cd75d034ed3c506ba9435836259fc361e1d5fb0cf
-  data.tar.gz: 1a719919ce887458492c70a5f447d044c13d71fc313a57a618d8bb79f8a95a3c91104bd634ddcae2e8157bb294756481c7080ce739bb46d6d361b91e0b97494f
+  metadata.gz: 966924c3e22cf820ece70c901f0d71f53cd647a006bdb41b992884a3cee0f03dcf2c1ce37401aa19b40c3d722eb899fec6af0b3f25dc82ec4bc1390b58ed6890
+  data.tar.gz: 96e9ec715a08cd8766bb68c6bcc8a01961b345b393d19cd000c371e8cfd932b19a48fa3354a2ff9a26d553db3d89d297811058696477a8c9fa4de4cc9aeaf81a

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## v0.86.12, 26 December 2018
+
+- Opt in to Rubygems 4 behaviour through monkey patch
+
 ## v0.86.11, 25 December 2018
 
 - Ruby: Ensure gemspec paths are always pathnames

data/lib/dependabot/dependency.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "rubygems_version_patch"
+
 module Dependabot
   class Dependency
     attr_reader :name, :version, :requirements, :package_manager,

data/lib/dependabot/utils/elixir/requirement.rb

@@ -10,7 +10,7 @@ module Dependabot
         OR_SEPARATOR = /\s+or\s+/.freeze
 
         # Add the double-equality matcher to the list of allowed operations
-        OPS["=="] = ->(v, r) { v == r }
+        OPS = OPS.merge("==" => ->(v, r) { v == r })
 
         # Override the version pattern to allow local versions
         quoted = OPS.keys.map { |k| Regexp.quote k }.join "|"
@@ -45,7 +45,8 @@ module Dependabot
 
         def satisfied_by?(version)
           version = Utils::Elixir::Version.new(version.to_s)
-          super
+
+          requirements.all? { |op, rv| (OPS[op] || OPS["="]).call(version, rv) }
         end
       end
     end

data/lib/dependabot/utils/elixir/version.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "rubygems_version_patch"
+
 # Elixir versions can include build information, which Ruby can't parse.
 # This class augments Gem::Version with build information.
 # See https://hexdocs.pm/elixir/Version.html for details.

data/lib/dependabot/utils/go/version.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "rubygems_version_patch"
+
 # Go pre-release versions use 1.0.1-rc1 syntax, which Gem::Version
 # converts into 1.0.1.pre.rc1. We override the `to_s` method to stop that
 # alteration.

data/lib/dependabot/utils/java_script/version.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "rubygems_version_patch"
+
 # JavaScript pre-release versions use 1.0.1-rc1 syntax, which Gem::Version
 # converts into 1.0.1.pre.rc1. We override the `to_s` method to stop that
 # alteration.

data/lib/dependabot/utils/php/version.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "rubygems_version_patch"
+
 # PHP pre-release versions use 1.0.1-rc1 syntax, which Gem::Version
 # converts into 1.0.1.pre.rc1. We override the `to_s` method to stop that
 # alteration.

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.86.11"
+  VERSION = "0.86.12"
 end

data/lib/rubygems_version_patch.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+
+require "rubygems/version"
+
+# Opt in to Rubygems 4 behaviour
+module Gem
+  class Version
+    def self.correct?(version)
+      return false if version.nil?
+
+      version.to_s.match?(ANCHORED_VERSION_PATTERN)
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-core
 version: !ruby/object:Gem::Version
-  version: 0.86.11
+  version: 0.86.12
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-12-25 00:00:00.000000000 Z
+date: 2018-12-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-ecr
@@ -498,6 +498,7 @@ files:
 - lib/dependabot/utils/php/version.rb
 - lib/dependabot/utils/ruby/requirement.rb
 - lib/dependabot/version.rb
+- lib/rubygems_version_patch.rb
 homepage: https://github.com/dependabot/dependabot-core
 licenses:
 - Nonstandard