dependabot-dep 0.98.20 → 0.98.21

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 25d9fbd5ca13697bcf844da93ff2c8b6bf07b137f3dc2f080de4f99b495e8f08
4
- data.tar.gz: 19b88d89426783a2af49d481a29597f66f3fee2e5e61a00a4e996ef53ed38550
3
+ metadata.gz: '00096e0b4071e0de6ff0834999f8be1490a94c61dc3877c1792fd6c1043b053a'
4
+ data.tar.gz: ebbfb8f1d243ab660d2ca2363f3f9dc62949ed9518b18c485010fd84f6ed8f08
5
5
  SHA512:
6
- metadata.gz: 58b7776865e9603e6295d77fd4211224186269ffa305ad7a894444aa5c794adeee0c463ca8543e5460a2faf88f76ef2de99cfd1c27d177aa8345e8c9eaf2c974
7
- data.tar.gz: b87634b68eefcdb85f8dd55716c761d63582fc2cd40586f2bda86d29c562a82cca661a6e124b477929a176b18bd62db71a2a29eb36a7b325d69c7692a390e3c7
6
+ metadata.gz: 58b7be5c81a8dae12e91b07aad57a7c3a9b414a5160fe0fc53c01d053ad9e66c9ff029bbde0eeb630633a1be27cfab74430e5b79aa0825bed9ff27ba91957d17
7
+ data.tar.gz: bed06fccc861a585d907d992cf090121537630be948151bd3d123cd0e77b01b891782e0df1268e0d0a5728517bc2cd7772107787f907b2406f01dffe1204d477
@@ -2,7 +2,6 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
- require "shellwords"
6
5
  require "dependabot/shared_helpers"
7
6
  require "dependabot/dependency_file"
8
7
  require "dependabot/dep/file_updater"
@@ -34,8 +33,7 @@ module Dependabot
34
33
  # Note: We are currently doing a full install here (we're not
35
34
  # passing no-vendor) because dep needs to generate the digests
36
35
  # for each project.
37
- cmd_parts = ["dep", "ensure", "-update"] + deps.map(&:name)
38
- command = Shellwords.join(cmd_parts)
36
+ command = "dep ensure -update #{deps.map(&:name).join(' ')}"
39
37
  dir_parts = dir.realpath.to_s.split("/")
40
38
  gopath = File.join(dir_parts[0..-(base_parts + 1)])
41
39
  run_shell_command(command, "GOPATH" => gopath)
@@ -53,6 +51,7 @@ module Dependabot
53
51
 
54
52
  def run_shell_command(command, env = {})
55
53
  start = Time.now
54
+ command = SharedHelpers.escape_command(command)
56
55
  stdout, process = Open3.capture2e(env, command)
57
56
  time_taken = Time.now - start
58
57
 
@@ -2,7 +2,6 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
- require "shellwords"
6
5
  require "dependabot/shared_helpers"
7
6
  require "dependabot/dep/update_checker"
8
7
  require "dependabot/errors"
@@ -45,10 +44,7 @@ module Dependabot
45
44
  SharedHelpers.with_git_configured(credentials: credentials) do
46
45
  # Shell out to dep, which handles everything for us, and does
47
46
  # so without doing an install (so it's fast).
48
- cmd_parts = ["dep", "ensure", "-update", "--no-vendor",
49
- dependency.name]
50
- command = Shellwords.join(cmd_parts)
51
-
47
+ command = "dep ensure -update --no-vendor #{dependency.name}"
52
48
  dir_parts = dir.realpath.to_s.split("/")
53
49
  gopath = File.join(dir_parts[0..-(base_parts + 1)])
54
50
  run_shell_command(command, "GOPATH" => gopath)
@@ -99,6 +95,7 @@ module Dependabot
99
95
 
100
96
  def run_shell_command(command, env = {})
101
97
  start = Time.now
98
+ command = SharedHelpers.escape_command(command)
102
99
  stdout, process = Open3.capture2e(env, command)
103
100
  time_taken = Time.now - start
104
101
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-dep
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.98.20
4
+ version: 0.98.21
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.98.20
19
+ version: 0.98.21
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.98.20
26
+ version: 0.98.21
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement