dependabot-dep 0.90.6 → 0.90.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ca9ef50e1eb3188ab54264f5694aed38c121f0cf828bcc2318fcbe302ea9e48c
-  data.tar.gz: 9c460c9bfb2eabbe5e52e46f106110fbbbe7e07f94c068d9d4e2543e404b23f2
+  metadata.gz: db50722142d304d00f8e723c09364dcdda41d517fb458404995c2bcc2b2a621a
+  data.tar.gz: ce27b479f6a04630ed1973b5c7f14ba43d147d86277d2b5b8a95e7a7d5491227
 SHA512:
-  metadata.gz: e175061a7d0bda50202ba80ec0841bcad4e8a5dcadbaad482dc5845c3af0a10054dcf87018ccd37f27ce7f7cfcc1f7557f825345e7dbf13c148b419bdd50bca6
-  data.tar.gz: c8895a794a8eac8693017b30cebaf30c11c7da9d106dfc44bd675ddd80df0f8c86e581b89d8480f52e9e25282341055610945102df10ae7b61d43b53ab4ea409
+  metadata.gz: a6aca463327071ef9f6f66c842248105524028bed7edaeb68bc16ac56eccdddac0b75e08ad8cd1d63c6b9947726856136a4e2bc14848cc7c1002e007f8fa90b5
+  data.tar.gz: 04f727c54cbd291543656e7f267b87090e3213c569796ceb90520cccc8d8d5de8b8abb109273c5c5566874ece9a896fd1e764787298d411d3b737fe038df1213

data/lib/dependabot/dep/file_updater.rb

@@ -13,9 +13,7 @@ module Dependabot
       def self.updated_files_regex
         [
           /^Gopkg\.toml$/,
-          /^Gopkg\.lock$/,
-          /^go\.mod$/,
-          /^go\.sum$/
+          /^Gopkg\.lock$/
         ]
       end
 
@@ -44,9 +42,8 @@ module Dependabot
 
       def check_required_files
         return if get_original_file("Gopkg.toml")
-        return if get_original_file("go.mod")
 
-        raise "No Gopkg.toml or go.mod!"
+        raise "No Gopkg.toml!"
       end
 
       def manifest

data/lib/dependabot/dep/update_checker.rb

@@ -23,6 +23,9 @@ module Dependabot
       end
 
       def latest_resolvable_version
+        # We don't yet support updating indirect dependencies for dep
+        return dependency.version unless dependency.top_level?
+
         @latest_resolvable_version ||=
           if modules_dependency?
             latest_version
@@ -78,7 +81,9 @@ module Dependabot
       # since not all dep git dependencies have a SHA version (sometimes their
       # version is the tag)
       def existing_version_is_sha?
-        git_dependency?
+        return git_dependency? if dependency.top_level?
+
+        super
       end
 
       def library?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-dep
 version: !ruby/object:Gem::Version
-  version: 0.90.6
+  version: 0.90.7
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-01-14 00:00:00.000000000 Z
+date: 2019-01-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.90.6
+        version: 0.90.7
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.90.6
+        version: 0.90.7
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement