dependabot-dep 0.97.3 → 0.97.4

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/dep/file_updater/lockfile_updater.rb +3 -1
  3. data/lib/dependabot/dep/update_checker/version_resolver.rb +5 -1
  4. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 20420f7665e756a47528337f137e51f44a7cef8c2ca3f67196a6c37923b37b0e
4
- data.tar.gz: a87f0381eb7bf85c5fb232fd8809a27f5459d491473f7854da3a1d715c52232d
3
+ metadata.gz: e27de42d29afd0c97f157e2c33ef9c70d2f10da0e9794c8f875f6168a8a996c2
4
+ data.tar.gz: 768089a3a11623509e7706caf9414607d9ec8058f6505eb75e05dbf433a17925
5
5
  SHA512:
6
- metadata.gz: cfeeb57baca56a38b9142b63b0158af0fe1ec9dc8c7ad6f1ea33688c660999ae6e3ce60c91a7b744c20b6034cad3dc46e7d8e90a4b3d2edbc90b8ceeaff4f514
7
- data.tar.gz: 01c240c64fe42b08f74db99c215788dda9586c4ee7a7516e0816f1864705c0b92cd14fc1cc8815062495d1ed7e722fbec6869cabe1d3a58594c3a415e30e4e61
6
+ metadata.gz: 3fae6f0befcd69d3b4eb21f33231dd4a69cc7186bac0c5e1afabb3dd95adcff835973cef5c6eaf86d67dcf811272264476296e81b40ac84726108fc67f5e8d5e
7
+ data.tar.gz: 7c7c02356e90ec41badebad1449f789935419aa3fda3b06051fde1c209e4839a3e13a3a1a33b1a15074e3da84da4839f004783186915d09f5a001890cc8a46ce
data/lib/dependabot/dep/file_updater/lockfile_updater.rb CHANGED
@@ -2,6 +2,7 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
+ require "shellwords"
5
6
  require "dependabot/shared_helpers"
6
7
  require "dependabot/dependency_file"
7
8
  require "dependabot/dep/file_updater"
@@ -33,7 +34,8 @@ module Dependabot
33
34
  # Note: We are currently doing a full install here (we're not
34
35
  # passing no-vendor) because dep needs to generate the digests
35
36
  # for each project.
36
- command = "dep ensure -update #{deps.map(&:name).join(' ')}"
37
+ cmd_parts = ["dep", "ensure", "-update"] + deps.map(&:name)
38
+ command = Shellwords.join(cmd_parts)
37
39
  dir_parts = dir.realpath.to_s.split("/")
38
40
  gopath = File.join(dir_parts[0..-(base_parts + 1)])
39
41
  run_shell_command(command, "GOPATH" => gopath)
data/lib/dependabot/dep/update_checker/version_resolver.rb CHANGED
@@ -2,6 +2,7 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
+ require "shellwords"
5
6
  require "dependabot/shared_helpers"
6
7
  require "dependabot/dep/update_checker"
7
8
  require "dependabot/errors"
@@ -44,7 +45,10 @@ module Dependabot
44
45
  SharedHelpers.with_git_configured(credentials: credentials) do
45
46
  # Shell out to dep, which handles everything for us, and does
46
47
  # so without doing an install (so it's fast).
47
- command = "dep ensure -update --no-vendor #{dependency.name}"
48
+ cmd_parts = ["dep", "ensure", "-update", "--no-vendor",
49
+ dependency.name]
50
+ command = Shellwords.join(cmd_parts)
51
+
48
52
  dir_parts = dir.realpath.to_s.split("/")
49
53
  gopath = File.join(dir_parts[0..-(base_parts + 1)])
50
54
  run_shell_command(command, "GOPATH" => gopath)
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-dep
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.97.3
4
+ version: 0.97.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-03-10 00:00:00.000000000 Z
11
+ date: 2019-03-12 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.97.3
19
+ version: 0.97.4
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.97.3
26
+ version: 0.97.4
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement