dependabot-dep 0.124.8 → 0.125.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77f1fec6c16035c58dafb4c2a9d1774b5156645f92ed25bb41e4c849293a7fa7
-  data.tar.gz: 1b3e6cfb5057333fee86f4a2c3d46d2b6a75040cc6a0ba6b1a93710a142e5422
+  metadata.gz: b730c844d283c6f1a26916e3187582074918cd1ab7d7a7de5fa99987d4c49a3c
+  data.tar.gz: b8cd699d6aef0992561892789b2b10e75d7fac18272700b6cf75952da3b397a6
 SHA512:
-  metadata.gz: '008425d40ff5c5ea6a22c8cd4e67a31f9c6c8ecad0852fccc297962359a0847b0044286d98335f918f36fda6664bb6f14048d89087e9550d0d620463b74f32f9'
-  data.tar.gz: b872d8aba3c8c88677842332c0111652f880c3b507f12ebd3dc0db1869b7455c15312fd1a894795ace95c6eb660be30744acfd24d1319c5b8cff14ae5eff7631
+  metadata.gz: 95a5ae7abae1a238dd1e3c4037723619046a891836a551b70acd79c7f0f1938efca731a6319657704076f28765053847d10702abe2619f9bb4523cf57bf14a0a
+  data.tar.gz: 3d2e175c424982f397186b29e732b0a7a91751266794448a353ec033df935207eb712bc3a7c5f00a8e5c3f3f3346e307ed53642abbe13c2a4f323a5c3e12bb5d

data/lib/dependabot/dep/file_parser.rb

@@ -76,9 +76,7 @@ module Dependabot
       end
 
       def requirement_from_declaration(declaration)
-        unless declaration.is_a?(Hash)
-          raise "Unexpected dependency declaration: #{declaration}"
-        end
+        raise "Unexpected dependency declaration: #{declaration}" unless declaration.is_a?(Hash)
 
         return if git_declaration?(declaration)
 

data/lib/dependabot/dep/file_updater/lockfile_updater.rb

@@ -137,9 +137,7 @@ module Dependabot
             parsed_file(lockfile).fetch("projects").
             find { |p| p["name"] == dep.name }
 
-          if original_details["source"]
-            details["source"] = original_details["source"]
-          end
+          details["source"] = original_details["source"] if original_details["source"]
 
           if original_details["version"]
             details["version"] = dep.version
@@ -162,9 +160,7 @@ module Dependabot
             overrides << override
           end
 
-          unless override["source"]
-            override["source"] = "gopkg.in/fsnotify/fsnotify.v1"
-          end
+          override["source"] = "gopkg.in/fsnotify/fsnotify.v1" unless override["source"]
 
           overrides
         end

data/lib/dependabot/dep/requirement.rb

@@ -91,9 +91,7 @@ module Dependabot
       def replace_wildcard_in_lower_bound(req_string)
         after_wildcard = false
 
-        if req_string.start_with?("~")
-          req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "")
-        end
+        req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "") if req_string.start_with?("~")
 
         req_string.split(".").
           map do |part|

data/lib/dependabot/dep/update_checker.rb

@@ -61,9 +61,7 @@ module Dependabot
 
       def requirements_update_strategy
         # If passed in as an option (in the base class) honour that option
-        if @requirements_update_strategy
-          return @requirements_update_strategy.to_sym
-        end
+        return @requirements_update_strategy.to_sym if @requirements_update_strategy
 
         # Otherwise, widen ranges for libraries and bump versions for apps
         library? ? :widen_ranges : :bump_versions
@@ -109,9 +107,7 @@ module Dependabot
 
         # Otherwise, if the gem isn't pinned, the latest version is just the
         # latest commit for the specified branch.
-        unless git_commit_checker.pinned?
-          return latest_resolvable_commit_with_unchanged_git_source
-        end
+        return latest_resolvable_commit_with_unchanged_git_source unless git_commit_checker.pinned?
 
         # If the dependency is pinned to a tag that looks like a version then
         # we want to update that tag.
@@ -129,17 +125,13 @@ module Dependabot
       def version_from_tag(tag)
         # To compare with the current version we either use the commit SHA
         # (if that's what the parser picked up) of the tag name.
-        if dependency.version&.match?(/^[0-9a-f]{40}$/)
-          return tag&.fetch(:commit_sha)
-        end
+        return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
 
         tag&.fetch(:tag)
       end
 
       def latest_resolvable_commit_with_unchanged_git_source
-        if @commit_lookup_attempted
-          return @latest_resolvable_commit_with_unchanged_git_source
-        end
+        return @latest_resolvable_commit_with_unchanged_git_source if @commit_lookup_attempted
 
         @commit_lookup_attempted = true
         @latest_resolvable_commit_with_unchanged_git_source ||=
@@ -269,9 +261,7 @@ module Dependabot
       end
 
       def default_source
-        if modules_dependency?
-          return { type: "default", source: dependency.name }
-        end
+        return { type: "default", source: dependency.name } if modules_dependency?
 
         original_declaration =
           parsed_file(manifest).

data/lib/dependabot/dep/update_checker/file_preparer.rb

@@ -138,9 +138,7 @@ module Dependabot
             overrides << override
           end
 
-          unless override["source"]
-            override["source"] = "gopkg.in/fsnotify/fsnotify.v1"
-          end
+          override["source"] = "gopkg.in/fsnotify/fsnotify.v1" unless override["source"]
 
           parsed_manifest["override"] = overrides
           TomlRB.dump(parsed_manifest)

data/lib/dependabot/dep/update_checker/latest_version_finder.rb

@@ -33,9 +33,7 @@ module Dependabot
                     :ignored_versions
 
         def latest_release_tag_version
-          if @latest_release_tag_lookup_attempted
-            return @latest_release_tag_version
-          end
+          return @latest_release_tag_version if @latest_release_tag_lookup_attempted
 
           @latest_release_tag_lookup_attempted = true
 
@@ -90,9 +88,7 @@ module Dependabot
 
           # Otherwise, if the gem isn't pinned, the latest version is just the
           # latest commit for the specified branch.
-          unless git_commit_checker.pinned?
-            return git_commit_checker.head_commit_for_current_branch
-          end
+          return git_commit_checker.head_commit_for_current_branch unless git_commit_checker.pinned?
 
           # If the dependency is pinned to a tag that looks like a version
           # then we want to update that tag.
@@ -113,9 +109,7 @@ module Dependabot
         def version_from_tag(tag)
           # To compare with the current version we either use the commit SHA
           # (if that's what the parser picked up) of the tag name.
-          if dependency.version&.match?(/^[0-9a-f]{40}$/)
-            return tag&.fetch(:commit_sha)
-          end
+          return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
 
           tag&.fetch(:tag)
         end

data/lib/dependabot/dep/update_checker/version_resolver.rb

@@ -22,9 +22,7 @@ module Dependabot
         end
 
         def latest_resolvable_version
-          if defined?(@latest_resolvable_version)
-            return @latest_resolvable_version
-          end
+          return @latest_resolvable_version if defined?(@latest_resolvable_version)
 
           @latest_resolvable_version = fetch_latest_resolvable_version
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-dep
 version: !ruby/object:Gem::Version
-  version: 0.124.8
+  version: 0.125.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-11-04 00:00:00.000000000 Z
+date: 2020-11-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.124.8
+        version: 0.125.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.124.8
+        version: 0.125.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.2
+        version: 0.8.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.2
+        version: 0.8.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement