dependabot-core 0.81.1 → 0.82.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 92db7a446ed4825255573765a75739cb426697d4fdccc4ab2ad68b473474ddff
-  data.tar.gz: 71e3d41a1328b272ffd76bbf0e747a4d5296fdcfb25920d464799f29bc95f1f2
+  metadata.gz: 683111bd6931aea6db310ecf42b1b153bd73ddef17a87d3764b29ad37480860b
+  data.tar.gz: 1ac644258b3d6ff8b41ca6c516eaa2cb443ea11079f1164abadba94379987fa7
 SHA512:
-  metadata.gz: 89f3870c1d23a3ec5f42b3cc00ab47fc0b5b6db086ed737d209c6aadd0bbd388eb54b3f48ba7d3b5ab8121d062ca1f902ebf95ba7ff2bf32be66f5174105755f
-  data.tar.gz: fb2d4eac1cd75e10eee5b50483224a0be82444d1b61b9d8cab8ad449f7d5d1a36b930625732550a74d779e3a40f3723e612ec6511db31b084e3dbafac0673cea
+  metadata.gz: c2140be05a504ef8929e1f50eeb5c2f4ae02683eda7379a1a3c194932e5bb15ee60f619c63a1b8e9bd491e60820364b4d8cf96f0e0dc72d5dabf52858186a49a
+  data.tar.gz: b282586b69aede50baa6c5139f38d0425b48bab6e85bf9b7cfa8ab62f2021ac68754e2022f45658607634f0899cec2e0a8d3114fb4c867d779ec112d2f1e636a

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## v0.82.0, 11 December 2018
+
+- Reorg Elm
+- Python: Make helpers build file executable
+- Handle spaces in GitHub file paths
+- Python: Test that python version error is for updating this dependency
+- Python: Ignore upgrades that break Python compatibility quietly
+
 ## v0.81.1, 10 December 2018
 
 - Rust: Register cargo metadata finder

data/lib/dependabot/file_fetchers.rb

@@ -8,7 +8,6 @@ require "dependabot/file_fetchers/php/composer"
 require "dependabot/file_fetchers/elixir/hex"
 require "dependabot/file_fetchers/go/dep"
 require "dependabot/file_fetchers/go/modules"
-require "dependabot/file_fetchers/elm/elm_package"
 
 module Dependabot
   module FileFetchers
@@ -20,8 +19,7 @@ module Dependabot
       "composer" => FileFetchers::Php::Composer,
       "hex" => FileFetchers::Elixir::Hex,
       "dep" => FileFetchers::Go::Dep,
-      "go_modules" => FileFetchers::Go::Modules,
-      "elm-package" => FileFetchers::Elm::ElmPackage
+      "go_modules" => FileFetchers::Go::Modules
     }
 
     def self.for_package_manager(package_manager)

data/lib/dependabot/file_fetchers/base.rb

@@ -141,6 +141,7 @@ module Dependabot
       end
 
       def github_repo_contents(path)
+        path = path.gsub(" ", "%20")
         github_response = github_client_for_source.
                           contents(repo, path: path, ref: commit)
 

data/lib/dependabot/file_parsers.rb

@@ -8,7 +8,6 @@ require "dependabot/file_parsers/php/composer"
 require "dependabot/file_parsers/elixir/hex"
 require "dependabot/file_parsers/go/dep"
 require "dependabot/file_parsers/go/modules"
-require "dependabot/file_parsers/elm/elm_package"
 
 module Dependabot
   module FileParsers
@@ -20,8 +19,7 @@ module Dependabot
       "composer" => FileParsers::Php::Composer,
       "hex" => FileParsers::Elixir::Hex,
       "dep" => FileParsers::Go::Dep,
-      "go_modules" => FileParsers::Go::Modules,
-      "elm-package" => FileParsers::Elm::ElmPackage
+      "go_modules" => FileParsers::Go::Modules
     }
 
     def self.for_package_manager(package_manager)

data/lib/dependabot/file_updaters.rb

@@ -8,7 +8,6 @@ require "dependabot/file_updaters/php/composer"
 require "dependabot/file_updaters/elixir/hex"
 require "dependabot/file_updaters/go/dep"
 require "dependabot/file_updaters/go/modules"
-require "dependabot/file_updaters/elm/elm_package"
 
 module Dependabot
   module FileUpdaters
@@ -20,8 +19,7 @@ module Dependabot
       "composer" => FileUpdaters::Php::Composer,
       "hex" => FileUpdaters::Elixir::Hex,
       "dep" => FileUpdaters::Go::Dep,
-      "go_modules" => FileUpdaters::Go::Modules,
-      "elm-package" => FileUpdaters::Elm::ElmPackage
+      "go_modules" => FileUpdaters::Go::Modules
     }
 
     def self.for_package_manager(package_manager)

data/lib/dependabot/metadata_finders.rb

@@ -6,7 +6,6 @@ require "dependabot/metadata_finders/java/maven"
 require "dependabot/metadata_finders/php/composer"
 require "dependabot/metadata_finders/elixir/hex"
 require "dependabot/metadata_finders/go/dep"
-require "dependabot/metadata_finders/elm/elm_package"
 
 module Dependabot
   module MetadataFinders
@@ -18,8 +17,7 @@ module Dependabot
       "composer" => MetadataFinders::Php::Composer,
       "hex" => MetadataFinders::Elixir::Hex,
       "dep" => MetadataFinders::Go::Dep,
-      "go_modules" => MetadataFinders::Go::Dep,
-      "elm-package" => MetadataFinders::Elm::ElmPackage
+      "go_modules" => MetadataFinders::Go::Dep
     }
 
     def self.for_package_manager(package_manager)

data/lib/dependabot/update_checkers.rb

@@ -8,7 +8,6 @@ require "dependabot/update_checkers/php/composer"
 require "dependabot/update_checkers/elixir/hex"
 require "dependabot/update_checkers/go/dep"
 require "dependabot/update_checkers/go/modules"
-require "dependabot/update_checkers/elm/elm_package"
 
 module Dependabot
   module UpdateCheckers
@@ -20,8 +19,7 @@ module Dependabot
       "composer" => UpdateCheckers::Php::Composer,
       "hex" => UpdateCheckers::Elixir::Hex,
       "dep" => UpdateCheckers::Go::Dep,
-      "go_modules" => UpdateCheckers::Go::Modules,
-      "elm-package" => UpdateCheckers::Elm::ElmPackage
+      "go_modules" => UpdateCheckers::Go::Modules
     }
 
     def self.for_package_manager(package_manager)

data/lib/dependabot/utils.rb

@@ -5,7 +5,6 @@ require "dependabot/utils/java/version"
 require "dependabot/utils/java_script/version"
 require "dependabot/utils/php/version"
 require "dependabot/utils/go/version"
-require "dependabot/utils/elm/version"
 
 require "dependabot/utils/elixir/requirement"
 require "dependabot/utils/java/requirement"
@@ -13,7 +12,6 @@ require "dependabot/utils/java_script/requirement"
 require "dependabot/utils/php/requirement"
 require "dependabot/utils/ruby/requirement"
 require "dependabot/utils/go/requirement"
-require "dependabot/utils/elm/requirement"
 
 # TODO: in due course, these "registries" should live in a wrapper gem, not
 #       dependabot-core.
@@ -29,8 +27,7 @@ module Dependabot
       "composer" => Utils::Php::Version,
       "hex" => Utils::Elixir::Version,
       "dep" => Utils::Go::Version,
-      "go_modules" => Utils::Go::Version,
-      "elm-package" => Utils::Elm::Version
+      "go_modules" => Utils::Go::Version
     }
 
     def self.version_class_for_package_manager(package_manager)
@@ -54,8 +51,7 @@ module Dependabot
       "composer" => Utils::Php::Requirement,
       "hex" => Utils::Elixir::Requirement,
       "dep" => Utils::Go::Requirement,
-      "go_modules" => Utils::Go::Requirement,
-      "elm-package" => Utils::Elm::Requirement
+      "go_modules" => Utils::Go::Requirement
     }
 
     def self.requirement_class_for_package_manager(package_manager)

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.81.1"
+  VERSION = "0.82.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-core
 version: !ruby/object:Gem::Version
-  version: 0.81.1
+  version: 0.82.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-12-10 00:00:00.000000000 Z
+date: 2018-12-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-ecr
@@ -376,7 +376,6 @@ files:
 - lib/dependabot/file_fetchers/README.md
 - lib/dependabot/file_fetchers/base.rb
 - lib/dependabot/file_fetchers/elixir/hex.rb
-- lib/dependabot/file_fetchers/elm/elm_package.rb
 - lib/dependabot/file_fetchers/go/dep.rb
 - lib/dependabot/file_fetchers/go/modules.rb
 - lib/dependabot/file_fetchers/java/gradle.rb
@@ -394,7 +393,6 @@ files:
 - lib/dependabot/file_parsers/base.rb
 - lib/dependabot/file_parsers/base/dependency_set.rb
 - lib/dependabot/file_parsers/elixir/hex.rb
-- lib/dependabot/file_parsers/elm/elm_package.rb
 - lib/dependabot/file_parsers/go/dep.rb
 - lib/dependabot/file_parsers/go/modules.rb
 - lib/dependabot/file_parsers/go/modules/go_mod_parser.rb
@@ -418,9 +416,6 @@ files:
 - lib/dependabot/file_updaters/elixir/hex/mixfile_requirement_updater.rb
 - lib/dependabot/file_updaters/elixir/hex/mixfile_sanitizer.rb
 - lib/dependabot/file_updaters/elixir/hex/mixfile_updater.rb
-- lib/dependabot/file_updaters/elm/elm_package.rb
-- lib/dependabot/file_updaters/elm/elm_package/elm_json_updater.rb
-- lib/dependabot/file_updaters/elm/elm_package/elm_package_updater.rb
 - lib/dependabot/file_updaters/go/dep.rb
 - lib/dependabot/file_updaters/go/dep/lockfile_updater.rb
 - lib/dependabot/file_updaters/go/dep/manifest_updater.rb
@@ -441,6 +436,7 @@ files:
 - lib/dependabot/file_updaters/php/composer.rb
 - lib/dependabot/file_updaters/php/composer/lockfile_updater.rb
 - lib/dependabot/file_updaters/php/composer/manifest_updater.rb
+- lib/dependabot/file_updaters/ruby/.DS_Store
 - lib/dependabot/file_updaters/ruby/bundler.rb
 - lib/dependabot/file_updaters/ruby/bundler/gemfile_updater.rb
 - lib/dependabot/file_updaters/ruby/bundler/gemspec_dependency_name_finder.rb
@@ -459,7 +455,6 @@ files:
 - lib/dependabot/metadata_finders/base/commits_finder.rb
 - lib/dependabot/metadata_finders/base/release_finder.rb
 - lib/dependabot/metadata_finders/elixir/hex.rb
-- lib/dependabot/metadata_finders/elm/elm_package.rb
 - lib/dependabot/metadata_finders/go/dep.rb
 - lib/dependabot/metadata_finders/java/maven.rb
 - lib/dependabot/metadata_finders/java_script/npm_and_yarn.rb
@@ -483,11 +478,6 @@ files:
 - lib/dependabot/update_checkers/elixir/hex/file_preparer.rb
 - lib/dependabot/update_checkers/elixir/hex/requirements_updater.rb
 - lib/dependabot/update_checkers/elixir/hex/version_resolver.rb
-- lib/dependabot/update_checkers/elm/elm_package.rb
-- lib/dependabot/update_checkers/elm/elm_package/cli_parser.rb
-- lib/dependabot/update_checkers/elm/elm_package/elm_18_version_resolver.rb
-- lib/dependabot/update_checkers/elm/elm_package/elm_19_version_resolver.rb
-- lib/dependabot/update_checkers/elm/elm_package/requirements_updater.rb
 - lib/dependabot/update_checkers/go/dep.rb
 - lib/dependabot/update_checkers/go/dep/file_preparer.rb
 - lib/dependabot/update_checkers/go/dep/latest_version_finder.rb
@@ -522,8 +512,6 @@ files:
 - lib/dependabot/utils.rb
 - lib/dependabot/utils/elixir/requirement.rb
 - lib/dependabot/utils/elixir/version.rb
-- lib/dependabot/utils/elm/requirement.rb
-- lib/dependabot/utils/elm/version.rb
 - lib/dependabot/utils/go/path_converter.rb
 - lib/dependabot/utils/go/requirement.rb
 - lib/dependabot/utils/go/shared_helper.rb
@@ -556,7 +544,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 2.7.3
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.7.7
+rubygems_version: 2.7.6
 signing_key: 
 specification_version: 4
 summary: Automated dependency management

data/lib/dependabot/file_fetchers/elm/elm_package.rb

@@ -1,52 +0,0 @@
-# frozen_string_literal: true
-
-require "dependabot/file_fetchers/base"
-
-module Dependabot
-  module FileFetchers
-    module Elm
-      class ElmPackage < Dependabot::FileFetchers::Base
-        def self.required_files_in?(filenames)
-          return true if filenames.include?("elm-package.json")
-
-          filenames.include?("elm.json")
-        end
-
-        def self.required_files_message
-          "Repo must contain an elm-package.json or an elm.json"
-        end
-
-        private
-
-        def fetch_files
-          fetched_files = []
-
-          fetched_files << elm_package if elm_package
-          fetched_files << elm_json if elm_json
-
-          # Note: We *do not* fetch the exact-dependencies.json file, as it is
-          # recommended that this is not committed
-
-          check_required_files_present
-          fetched_files
-        end
-
-        def check_required_files_present
-          return if elm_package || elm_json
-
-          path = Pathname.new(File.join(directory, "elm.json")).
-                 cleanpath.to_path
-          raise Dependabot::DependencyFileNotFound, path
-        end
-
-        def elm_package
-          @elm_package ||= fetch_file_if_present("elm-package.json")
-        end
-
-        def elm_json
-          @elm_json ||= fetch_file_if_present("elm.json")
-        end
-      end
-    end
-  end
-end

data/lib/dependabot/file_parsers/elm/elm_package.rb

@@ -1,136 +0,0 @@
-# frozen_string_literal: true
-
-require "dependabot/dependency"
-require "dependabot/errors"
-require "dependabot/file_parsers/base"
-require "dependabot/utils/elm/requirement"
-
-module Dependabot
-  module FileParsers
-    module Elm
-      class ElmPackage < Dependabot::FileParsers::Base
-        require "dependabot/file_parsers/base/dependency_set"
-
-        DEPENDENCY_TYPES = %w(dependencies test-dependencies).freeze
-
-        def parse
-          dependency_set = DependencySet.new
-
-          dependency_set += elm_package_dependencies if elm_package
-          dependency_set += elm_json_dependencies if elm_json
-
-          dependency_set.dependencies.sort_by(&:name)
-        end
-
-        private
-
-        def elm_package_dependencies
-          dependency_set = DependencySet.new
-
-          parsed_package_file.fetch("dependencies").each do |name, req|
-            dependency_set <<
-              Dependency.new(
-                name: name,
-                version: version_for(req)&.to_s,
-                requirements: [{
-                  requirement: req, # 4.0 <= v <= 4.0
-                  groups: [], # we don't have this (its dev vs non-dev)
-                  source: nil, # elm-package only has elm-package sources
-                  file: "elm-package.json"
-                }],
-                package_manager: "elm-package"
-              )
-          end
-
-          dependency_set
-        end
-
-        # For docs on elm.json, see:
-        # https://github.com/elm/compiler/blob/master/docs/elm.json/application.md
-        # https://github.com/elm/compiler/blob/master/docs/elm.json/package.md
-        def elm_json_dependencies
-          dependency_set = DependencySet.new
-
-          DEPENDENCY_TYPES.each do |dep_type|
-            if repo_type == "application"
-              dependencies_hash = parsed_elm_json.fetch(dep_type, {})
-              dependencies_hash.fetch("direct", {}).each do |name, req|
-                dependency_set << build_elm_json_dependency(
-                  name: name, group: dep_type, requirement: req, direct: true
-                )
-              end
-              dependencies_hash.fetch("indirect", {}).each do |name, req|
-                dependency_set << build_elm_json_dependency(
-                  name: name, group: dep_type, requirement: req, direct: false
-                )
-              end
-            elsif repo_type == "package"
-              parsed_elm_json.fetch(dep_type, {}).each do |name, req|
-                dependency_set << build_elm_json_dependency(
-                  name: name, group: dep_type, requirement: req, direct: true
-                )
-              end
-            else raise "Unexpected repo type for Elm repo: #{repo_type}"
-            end
-          end
-
-          dependency_set
-        end
-
-        def build_elm_json_dependency(name:, group:, requirement:, direct:)
-          requirements = [{
-            requirement: requirement,
-            groups: [group],
-            source: nil,
-            file: "elm.json"
-          }]
-
-          Dependency.new(
-            name: name,
-            version: version_for(requirement)&.to_s,
-            requirements: direct ? requirements : [],
-            package_manager: "elm-package"
-          )
-        end
-
-        def repo_type
-          parsed_elm_json.fetch("type")
-        end
-
-        def check_required_files
-          return if elm_json || elm_package
-
-          raise "No elm.json or elm-package.json!"
-        end
-
-        def version_for(version_requirement)
-          req = Dependabot::Utils::Elm::Requirement.new(version_requirement)
-
-          return unless req.exact?
-
-          req.requirements.first.last
-        end
-
-        def parsed_package_file
-          @parsed_package_file ||= JSON.parse(elm_package.content)
-        rescue JSON::ParserError
-          raise Dependabot::DependencyFileNotParseable, elm_package.path
-        end
-
-        def parsed_elm_json
-          @parsed_elm_json ||= JSON.parse(elm_json.content)
-        rescue JSON::ParserError
-          raise Dependabot::DependencyFileNotParseable, elm_json.path
-        end
-
-        def elm_package
-          @elm_package ||= get_original_file("elm-package.json")
-        end
-
-        def elm_json
-          @elm_json ||= get_original_file("elm.json")
-        end
-      end
-    end
-  end
-end