dependabot-dep 0.124.6 → 0.125.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 28c64d66e63d6c9bf95c11ad67cf30d0c1680278a567f8a69503b77106c89779
-  data.tar.gz: f7ab8e14eb0421cb23bb836bca17e54e5f33afb99197083f3b2bc9c2c09fa627
+  metadata.gz: adc03f9f662cce77104c35a05ffe16d5ba9e26bbe72f0ba526553c282d80dab0
+  data.tar.gz: 6d6eb9bc9f2c6fba3e9880ba6dd1630f6f764e4a8e38704f6fabae995c124e75
 SHA512:
-  metadata.gz: 62f1bf81847aa355204ef3c07a4d20580ed931d31a8eace291b7028b4c5e349a27e380dcbdde29591030195507c61d7cafd24b10378106deaf769fdf3b2d3e45
-  data.tar.gz: 6a446d1b9e7d1ef04f73a2117207a77f49bc75ac2dd4521c00eff26d1d117f3a4a76b5b4b7bc5ee21f43868a52b60b19b40fe90b83ac3db80835894e12b429da
+  metadata.gz: 67d7d43b41531b120e50abc495ebcb3835e470dbcb9ce1d1191f2a781abf30a6ec2ff40058f7a11b24d24d332d1f468845ca82a1781763c23d7e77e136b28a94
+  data.tar.gz: a1db3a2973a18087f0d45e93cc6a2f2484eae97488426012658f0cf9f158a634f8fe4a7d70d18ffbe8c14d8679c2a897518c18e11659d73e9dabeb339c7bda1d

data/lib/dependabot/dep/file_parser.rb

@@ -76,9 +76,7 @@ module Dependabot
       end
 
       def requirement_from_declaration(declaration)
-        unless declaration.is_a?(Hash)
-          raise "Unexpected dependency declaration: #{declaration}"
-        end
+        raise "Unexpected dependency declaration: #{declaration}" unless declaration.is_a?(Hash)
 
         return if git_declaration?(declaration)
 

data/lib/dependabot/dep/file_updater/lockfile_updater.rb

@@ -137,9 +137,7 @@ module Dependabot
             parsed_file(lockfile).fetch("projects").
             find { |p| p["name"] == dep.name }
 
-          if original_details["source"]
-            details["source"] = original_details["source"]
-          end
+          details["source"] = original_details["source"] if original_details["source"]
 
           if original_details["version"]
             details["version"] = dep.version
@@ -162,9 +160,7 @@ module Dependabot
             overrides << override
           end
 
-          unless override["source"]
-            override["source"] = "gopkg.in/fsnotify/fsnotify.v1"
-          end
+          override["source"] = "gopkg.in/fsnotify/fsnotify.v1" unless override["source"]
 
           overrides
         end

data/lib/dependabot/dep/requirement.rb

@@ -91,9 +91,7 @@ module Dependabot
       def replace_wildcard_in_lower_bound(req_string)
         after_wildcard = false
 
-        if req_string.start_with?("~")
-          req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "")
-        end
+        req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "") if req_string.start_with?("~")
 
         req_string.split(".").
           map do |part|

data/lib/dependabot/dep/update_checker.rb

@@ -61,9 +61,7 @@ module Dependabot
 
       def requirements_update_strategy
         # If passed in as an option (in the base class) honour that option
-        if @requirements_update_strategy
-          return @requirements_update_strategy.to_sym
-        end
+        return @requirements_update_strategy.to_sym if @requirements_update_strategy
 
         # Otherwise, widen ranges for libraries and bump versions for apps
         library? ? :widen_ranges : :bump_versions
@@ -109,9 +107,7 @@ module Dependabot
 
         # Otherwise, if the gem isn't pinned, the latest version is just the
         # latest commit for the specified branch.
-        unless git_commit_checker.pinned?
-          return latest_resolvable_commit_with_unchanged_git_source
-        end
+        return latest_resolvable_commit_with_unchanged_git_source unless git_commit_checker.pinned?
 
         # If the dependency is pinned to a tag that looks like a version then
         # we want to update that tag.
@@ -129,17 +125,13 @@ module Dependabot
       def version_from_tag(tag)
         # To compare with the current version we either use the commit SHA
         # (if that's what the parser picked up) of the tag name.
-        if dependency.version&.match?(/^[0-9a-f]{40}$/)
-          return tag&.fetch(:commit_sha)
-        end
+        return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
 
         tag&.fetch(:tag)
       end
 
       def latest_resolvable_commit_with_unchanged_git_source
-        if @commit_lookup_attempted
-          return @latest_resolvable_commit_with_unchanged_git_source
-        end
+        return @latest_resolvable_commit_with_unchanged_git_source if @commit_lookup_attempted
 
         @commit_lookup_attempted = true
         @latest_resolvable_commit_with_unchanged_git_source ||=
@@ -269,9 +261,7 @@ module Dependabot
       end
 
       def default_source
-        if modules_dependency?
-          return { type: "default", source: dependency.name }
-        end
+        return { type: "default", source: dependency.name } if modules_dependency?
 
         original_declaration =
           parsed_file(manifest).

data/lib/dependabot/dep/update_checker/file_preparer.rb

@@ -138,9 +138,7 @@ module Dependabot
             overrides << override
           end
 
-          unless override["source"]
-            override["source"] = "gopkg.in/fsnotify/fsnotify.v1"
-          end
+          override["source"] = "gopkg.in/fsnotify/fsnotify.v1" unless override["source"]
 
           parsed_manifest["override"] = overrides
           TomlRB.dump(parsed_manifest)

data/lib/dependabot/dep/update_checker/latest_version_finder.rb

@@ -33,9 +33,7 @@ module Dependabot
                     :ignored_versions
 
         def latest_release_tag_version
-          if @latest_release_tag_lookup_attempted
-            return @latest_release_tag_version
-          end
+          return @latest_release_tag_version if @latest_release_tag_lookup_attempted
 
           @latest_release_tag_lookup_attempted = true
 
@@ -90,9 +88,7 @@ module Dependabot
 
           # Otherwise, if the gem isn't pinned, the latest version is just the
           # latest commit for the specified branch.
-          unless git_commit_checker.pinned?
-            return git_commit_checker.head_commit_for_current_branch
-          end
+          return git_commit_checker.head_commit_for_current_branch unless git_commit_checker.pinned?
 
           # If the dependency is pinned to a tag that looks like a version
           # then we want to update that tag.
@@ -113,9 +109,7 @@ module Dependabot
         def version_from_tag(tag)
           # To compare with the current version we either use the commit SHA
           # (if that's what the parser picked up) of the tag name.
-          if dependency.version&.match?(/^[0-9a-f]{40}$/)
-            return tag&.fetch(:commit_sha)
-          end
+          return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
 
           tag&.fetch(:tag)
         end

data/lib/dependabot/dep/update_checker/version_resolver.rb

@@ -22,9 +22,7 @@ module Dependabot
         end
 
         def latest_resolvable_version
-          if defined?(@latest_resolvable_version)
-            return @latest_resolvable_version
-          end
+          return @latest_resolvable_version if defined?(@latest_resolvable_version)
 
           @latest_resolvable_version = fetch_latest_resolvable_version
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-dep
 version: !ruby/object:Gem::Version
-  version: 0.124.6
+  version: 0.125.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-02 00:00:00.000000000 Z
+date: 2020-11-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.124.6
+        version: 0.125.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.124.6
+        version: 0.125.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement