dependabot-core 0.76.8 → 0.76.9
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/lib/dependabot/file_fetchers/java_script/npm_and_yarn/path_dependency_builder.rb +1 -1
- data/lib/dependabot/update_checkers/python/pip.rb +1 -1
- data/lib/dependabot/update_checkers/python/pip/requirements_updater.rb +1 -1
- data/lib/dependabot/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8263437314badd3211ef9b05a237001109779594a212dd43647aaa4a3540f024
|
|
4
|
+
data.tar.gz: dea9808860771764d44ecf99ad672a02534f35d1aab936bb80a7e6e46de180be
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 3dc45b44c8463d94a5cb93dd78ab74daa46edcaf4299f3b072e8c37ee62daec83eccd02b3d0eaa64d1d11df91f11405797e0c31b855dfeb7af96c7e508e25269
|
|
7
|
+
data.tar.gz: fa949117d4e16394d55b6027dfc72aa58321508ebf84828c946b810c273fe54a0321ee66552134c64bb3507a9a1199c92270b77b4335e833a88ea6fb6df861e2
|
data/CHANGELOG.md
CHANGED
|
@@ -79,7 +79,7 @@ module Dependabot
|
|
|
79
79
|
end
|
|
80
80
|
|
|
81
81
|
# If an unfetchable path dependency itself has path dependencies
|
|
82
|
-
#
|
|
82
|
+
# then the paths in the yarn.lock for them will be absolute, not
|
|
83
83
|
# relative. Worse, they may point to the user's local cache.
|
|
84
84
|
# We work around this by constructing a relative path to the
|
|
85
85
|
# (second-level) path dependencies.
|
|
@@ -78,7 +78,7 @@ module Dependabot
|
|
|
78
78
|
latest_version: latest_version&.to_s,
|
|
79
79
|
latest_resolvable_version: latest_resolvable_version&.to_s,
|
|
80
80
|
update_strategy: requirements_update_strategy,
|
|
81
|
-
has_lockfile: pipfile_lock || poetry_lock || pyproject_lock
|
|
81
|
+
has_lockfile: !(pipfile_lock || poetry_lock || pyproject_lock).nil?
|
|
82
82
|
).updated_requirements
|
|
83
83
|
end
|
|
84
84
|
|
|
@@ -194,7 +194,7 @@ module Dependabot
|
|
|
194
194
|
requirement_strings = req[:requirement].split(",").map(&:strip)
|
|
195
195
|
|
|
196
196
|
new_requirement =
|
|
197
|
-
if requirement_strings.any? { |r| r.
|
|
197
|
+
if requirement_strings.any? { |r| r.match?(/^[=\d]/) }
|
|
198
198
|
find_and_update_equality_match(requirement_strings)
|
|
199
199
|
elsif requirement_strings.any? { |r| r.start_with?("~=") }
|
|
200
200
|
tw_req = requirement_strings.find { |r| r.start_with?("~=") }
|
data/lib/dependabot/version.rb
CHANGED