dependabot-core 0.86.18 → 0.86.19
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/lib/dependabot/dependency.rb +1 -0
- data/lib/dependabot/file_updaters/ruby/bundler/lockfile_updater.rb +1 -0
- data/lib/dependabot/update_checkers/ruby/bundler/force_updater.rb +1 -0
- data/lib/dependabot/update_checkers/ruby/bundler/latest_version_finder.rb +1 -0
- data/lib/dependabot/update_checkers/ruby/bundler/shared_bundler_helpers.rb +1 -0
- data/lib/dependabot/update_checkers/ruby/bundler/version_resolver.rb +1 -0
- data/lib/dependabot/utils/elixir/requirement.rb +1 -0
- data/lib/dependabot/utils/go/requirement.rb +1 -0
- data/lib/dependabot/utils/java_script/requirement.rb +4 -0
- data/lib/dependabot/utils/php/requirement.rb +1 -0
- data/lib/dependabot/utils/ruby/requirement.rb +2 -0
- data/lib/dependabot/version.rb +1 -1
- data/lib/rubygems_requirement_patch.rb +30 -0
- metadata +3 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 6e7da9e8f60558ab04eb91b6165116d63d09ea25a728266b37a55bb76bd18f8e
|
|
4
|
+
data.tar.gz: 6d190e57fe9bafeda84f348050b2b8419fa1e97954ca502706ff19c927d06c5d
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9315e59ad69ba147d6dc343c652dd54b21ccd00347b3aa385c38b9d36eeddf717a3faf800ee7a0a8ff8b4fe3176d070cc364dd1c298277e2bfcca0bcef039ed9
|
|
7
|
+
data.tar.gz: 2ccee77f7135e92436ce684607c5474acd742a43f255812c46683d12b72546b527a658d2365854225f277ebfc8dcb0405c1c547c0ad5e065e8d00f8fe5fb539e
|
data/CHANGELOG.md
CHANGED
|
@@ -3,6 +3,7 @@
|
|
|
3
3
|
require "bundler_definition_ruby_version_patch"
|
|
4
4
|
require "bundler_definition_bundler_version_patch"
|
|
5
5
|
require "bundler_git_source_patch"
|
|
6
|
+
require "rubygems_requirement_patch"
|
|
6
7
|
|
|
7
8
|
require "dependabot/update_checkers/ruby/bundler"
|
|
8
9
|
require "dependabot/update_checkers/ruby/bundler/requirements_updater"
|
|
@@ -1,6 +1,7 @@
|
|
|
1
1
|
# frozen_string_literal: true
|
|
2
2
|
|
|
3
3
|
require "dependabot/utils/java_script/version"
|
|
4
|
+
require "rubygems_requirement_patch"
|
|
4
5
|
|
|
5
6
|
module Dependabot
|
|
6
7
|
module Utils
|
|
@@ -57,12 +58,14 @@ module Dependabot
|
|
|
57
58
|
private
|
|
58
59
|
|
|
59
60
|
# rubocop:disable Metrics/PerceivedComplexity
|
|
61
|
+
# rubocop:disable Metrics/CyclomaticComplexity
|
|
60
62
|
def convert_js_constraint_to_ruby_constraint(req_string)
|
|
61
63
|
return req_string if req_string.match?(/^([A-Za-uw-z]|v[^\d])/)
|
|
62
64
|
|
|
63
65
|
req_string = req_string.gsub(/(?:\.|^)[xX*]/, "")
|
|
64
66
|
|
|
65
67
|
if req_string.empty? then ">= 0"
|
|
68
|
+
elsif req_string.start_with?("~>") then req_string
|
|
66
69
|
elsif req_string.start_with?("~") then convert_tilde_req(req_string)
|
|
67
70
|
elsif req_string.start_with?("^") then convert_caret_req(req_string)
|
|
68
71
|
elsif req_string.include?(" - ") then convert_hyphen_req(req_string)
|
|
@@ -71,6 +74,7 @@ module Dependabot
|
|
|
71
74
|
end
|
|
72
75
|
end
|
|
73
76
|
# rubocop:enable Metrics/PerceivedComplexity
|
|
77
|
+
# rubocop:enable Metrics/CyclomaticComplexity
|
|
74
78
|
|
|
75
79
|
def convert_tilde_req(req_string)
|
|
76
80
|
version = req_string.gsub(/^~\>?/, "")
|
data/lib/dependabot/version.rb
CHANGED
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
# frozen_string_literal: true
|
|
2
|
+
|
|
3
|
+
require "rubygems/requirement"
|
|
4
|
+
|
|
5
|
+
# See https://github.com/rubygems/rubygems/pull/2554
|
|
6
|
+
module Gem
|
|
7
|
+
class Requirement
|
|
8
|
+
# rubocop:disable Style/CaseEquality
|
|
9
|
+
def ==(other)
|
|
10
|
+
return unless Gem::Requirement === other
|
|
11
|
+
|
|
12
|
+
# An == check is always necessary
|
|
13
|
+
return false unless requirements == other.requirements
|
|
14
|
+
|
|
15
|
+
# An == check is sufficient unless any requirements use ~>
|
|
16
|
+
return true unless _tilde_requirements.any?
|
|
17
|
+
|
|
18
|
+
# If any requirements use ~> we use the stricter `#eql?` that also checks
|
|
19
|
+
# that version precision is the same
|
|
20
|
+
_tilde_requirements.eql?(other._tilde_requirements)
|
|
21
|
+
end
|
|
22
|
+
# rubocop:enable Style/CaseEquality
|
|
23
|
+
|
|
24
|
+
protected
|
|
25
|
+
|
|
26
|
+
def _tilde_requirements
|
|
27
|
+
requirements.select { |r| r.first == "~>" }
|
|
28
|
+
end
|
|
29
|
+
end
|
|
30
|
+
end
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-core
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.86.
|
|
4
|
+
version: 0.86.19
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2018-12-
|
|
11
|
+
date: 2018-12-31 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: aws-sdk-ecr
|
|
@@ -498,6 +498,7 @@ files:
|
|
|
498
498
|
- lib/dependabot/utils/php/version.rb
|
|
499
499
|
- lib/dependabot/utils/ruby/requirement.rb
|
|
500
500
|
- lib/dependabot/version.rb
|
|
501
|
+
- lib/rubygems_requirement_patch.rb
|
|
501
502
|
- lib/rubygems_version_patch.rb
|
|
502
503
|
homepage: https://github.com/dependabot/dependabot-core
|
|
503
504
|
licenses:
|