dependabot-dep 0.124.7 → 0.125.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ced298a792df4944d08a8093b4a6f754c4db331889a6a53648eface4f6a86992
-  data.tar.gz: a66bc0a71a242175eb449efed9063531f51321769a14a5c7aaca3cf268ab337a
+  metadata.gz: 22540b152c2c296d98dc6f2d4275b3de0ae07965f2fe693c9a371b939532b4af
+  data.tar.gz: 5a069fb63e4b2fab0fcf1014fb670b64183887c4ca6f882be55804307cfab152
 SHA512:
-  metadata.gz: f78cdaad0b659efaf141d2ca1b87ee92f07ff0ba0804f93271edc0e30e663d590ca7489f4a3b1111e51d901b31c7e05c579ad41d354ca288d53230000dce9b6c
-  data.tar.gz: 8d9fb3855354bfb9d61cbc4d8ae78f777d599348cc88ead51525f7f327e1614e4ef054948320a8053d48a1b5e8ddfc190844d43a0e5e57c02adb3b13843ea266
+  metadata.gz: c3574dfe13566efbf479669c401484bc2cea619e0a878ed9f1f30062ee98d62b9a9c26a54d4083d67df224f320a14df6bda410e83cb87df9f38791f3b8e0c9b0
+  data.tar.gz: 74a6d92714198dfca21dd5a7d6fb30d4ba1afad0963c4363c051fc0bcf81fbcb61bd8e3a516f9f7bce06369d6b9c0b57a8948b38573d699b8a8d60d9d6448f0b

data/lib/dependabot/dep/file_parser.rb

@@ -76,9 +76,7 @@ module Dependabot
       end
 
       def requirement_from_declaration(declaration)
-        unless declaration.is_a?(Hash)
-          raise "Unexpected dependency declaration: #{declaration}"
-        end
+        raise "Unexpected dependency declaration: #{declaration}" unless declaration.is_a?(Hash)
 
         return if git_declaration?(declaration)
 

data/lib/dependabot/dep/file_updater/lockfile_updater.rb

@@ -137,9 +137,7 @@ module Dependabot
             parsed_file(lockfile).fetch("projects").
             find { |p| p["name"] == dep.name }
 
-          if original_details["source"]
-            details["source"] = original_details["source"]
-          end
+          details["source"] = original_details["source"] if original_details["source"]
 
           if original_details["version"]
             details["version"] = dep.version
@@ -162,9 +160,7 @@ module Dependabot
             overrides << override
           end
 
-          unless override["source"]
-            override["source"] = "gopkg.in/fsnotify/fsnotify.v1"
-          end
+          override["source"] = "gopkg.in/fsnotify/fsnotify.v1" unless override["source"]
 
           overrides
         end

data/lib/dependabot/dep/requirement.rb

@@ -91,9 +91,7 @@ module Dependabot
       def replace_wildcard_in_lower_bound(req_string)
         after_wildcard = false
 
-        if req_string.start_with?("~")
-          req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "")
-        end
+        req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "") if req_string.start_with?("~")
 
         req_string.split(".").
           map do |part|

data/lib/dependabot/dep/update_checker.rb

@@ -61,9 +61,7 @@ module Dependabot
 
       def requirements_update_strategy
         # If passed in as an option (in the base class) honour that option
-        if @requirements_update_strategy
-          return @requirements_update_strategy.to_sym
-        end
+        return @requirements_update_strategy.to_sym if @requirements_update_strategy
 
         # Otherwise, widen ranges for libraries and bump versions for apps
         library? ? :widen_ranges : :bump_versions
@@ -109,9 +107,7 @@ module Dependabot
 
         # Otherwise, if the gem isn't pinned, the latest version is just the
         # latest commit for the specified branch.
-        unless git_commit_checker.pinned?
-          return latest_resolvable_commit_with_unchanged_git_source
-        end
+        return latest_resolvable_commit_with_unchanged_git_source unless git_commit_checker.pinned?
 
         # If the dependency is pinned to a tag that looks like a version then
         # we want to update that tag.
@@ -129,17 +125,13 @@ module Dependabot
       def version_from_tag(tag)
         # To compare with the current version we either use the commit SHA
         # (if that's what the parser picked up) of the tag name.
-        if dependency.version&.match?(/^[0-9a-f]{40}$/)
-          return tag&.fetch(:commit_sha)
-        end
+        return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
 
         tag&.fetch(:tag)
       end
 
       def latest_resolvable_commit_with_unchanged_git_source
-        if @commit_lookup_attempted
-          return @latest_resolvable_commit_with_unchanged_git_source
-        end
+        return @latest_resolvable_commit_with_unchanged_git_source if @commit_lookup_attempted
 
         @commit_lookup_attempted = true
         @latest_resolvable_commit_with_unchanged_git_source ||=
@@ -269,9 +261,7 @@ module Dependabot
       end
 
       def default_source
-        if modules_dependency?
-          return { type: "default", source: dependency.name }
-        end
+        return { type: "default", source: dependency.name } if modules_dependency?
 
         original_declaration =
           parsed_file(manifest).

data/lib/dependabot/dep/update_checker/file_preparer.rb

@@ -138,9 +138,7 @@ module Dependabot
             overrides << override
           end
 
-          unless override["source"]
-            override["source"] = "gopkg.in/fsnotify/fsnotify.v1"
-          end
+          override["source"] = "gopkg.in/fsnotify/fsnotify.v1" unless override["source"]
 
           parsed_manifest["override"] = overrides
           TomlRB.dump(parsed_manifest)

data/lib/dependabot/dep/update_checker/latest_version_finder.rb

@@ -33,9 +33,7 @@ module Dependabot
                     :ignored_versions
 
         def latest_release_tag_version
-          if @latest_release_tag_lookup_attempted
-            return @latest_release_tag_version
-          end
+          return @latest_release_tag_version if @latest_release_tag_lookup_attempted
 
           @latest_release_tag_lookup_attempted = true
 
@@ -90,9 +88,7 @@ module Dependabot
 
           # Otherwise, if the gem isn't pinned, the latest version is just the
           # latest commit for the specified branch.
-          unless git_commit_checker.pinned?
-            return git_commit_checker.head_commit_for_current_branch
-          end
+          return git_commit_checker.head_commit_for_current_branch unless git_commit_checker.pinned?
 
           # If the dependency is pinned to a tag that looks like a version
           # then we want to update that tag.
@@ -113,9 +109,7 @@ module Dependabot
         def version_from_tag(tag)
           # To compare with the current version we either use the commit SHA
           # (if that's what the parser picked up) of the tag name.
-          if dependency.version&.match?(/^[0-9a-f]{40}$/)
-            return tag&.fetch(:commit_sha)
-          end
+          return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
 
           tag&.fetch(:tag)
         end

data/lib/dependabot/dep/update_checker/version_resolver.rb

@@ -22,9 +22,7 @@ module Dependabot
         end
 
         def latest_resolvable_version
-          if defined?(@latest_resolvable_version)
-            return @latest_resolvable_version
-          end
+          return @latest_resolvable_version if defined?(@latest_resolvable_version)
 
           @latest_resolvable_version = fetch_latest_resolvable_version
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-dep
 version: !ruby/object:Gem::Version
-  version: 0.124.7
+  version: 0.125.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-03 00:00:00.000000000 Z
+date: 2020-11-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.124.7
+        version: 0.125.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.124.7
+        version: 0.125.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.2
+        version: 0.8.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.2
+        version: 0.8.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement