dependabot-dep 0.98.20 → 0.98.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 25d9fbd5ca13697bcf844da93ff2c8b6bf07b137f3dc2f080de4f99b495e8f08
4
- data.tar.gz: 19b88d89426783a2af49d481a29597f66f3fee2e5e61a00a4e996ef53ed38550
3
+ metadata.gz: '00096e0b4071e0de6ff0834999f8be1490a94c61dc3877c1792fd6c1043b053a'
4
+ data.tar.gz: ebbfb8f1d243ab660d2ca2363f3f9dc62949ed9518b18c485010fd84f6ed8f08
5
5
  SHA512:
6
- metadata.gz: 58b7776865e9603e6295d77fd4211224186269ffa305ad7a894444aa5c794adeee0c463ca8543e5460a2faf88f76ef2de99cfd1c27d177aa8345e8c9eaf2c974
7
- data.tar.gz: b87634b68eefcdb85f8dd55716c761d63582fc2cd40586f2bda86d29c562a82cca661a6e124b477929a176b18bd62db71a2a29eb36a7b325d69c7692a390e3c7
6
+ metadata.gz: 58b7be5c81a8dae12e91b07aad57a7c3a9b414a5160fe0fc53c01d053ad9e66c9ff029bbde0eeb630633a1be27cfab74430e5b79aa0825bed9ff27ba91957d17
7
+ data.tar.gz: bed06fccc861a585d907d992cf090121537630be948151bd3d123cd0e77b01b891782e0df1268e0d0a5728517bc2cd7772107787f907b2406f01dffe1204d477
@@ -2,7 +2,6 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
- require "shellwords"
6
5
  require "dependabot/shared_helpers"
7
6
  require "dependabot/dependency_file"
8
7
  require "dependabot/dep/file_updater"
@@ -34,8 +33,7 @@ module Dependabot
34
33
  # Note: We are currently doing a full install here (we're not
35
34
  # passing no-vendor) because dep needs to generate the digests
36
35
  # for each project.
37
- cmd_parts = ["dep", "ensure", "-update"] + deps.map(&:name)
38
- command = Shellwords.join(cmd_parts)
36
+ command = "dep ensure -update #{deps.map(&:name).join(' ')}"
39
37
  dir_parts = dir.realpath.to_s.split("/")
40
38
  gopath = File.join(dir_parts[0..-(base_parts + 1)])
41
39
  run_shell_command(command, "GOPATH" => gopath)
@@ -53,6 +51,7 @@ module Dependabot
53
51
 
54
52
  def run_shell_command(command, env = {})
55
53
  start = Time.now
54
+ command = SharedHelpers.escape_command(command)
56
55
  stdout, process = Open3.capture2e(env, command)
57
56
  time_taken = Time.now - start
58
57
 
@@ -2,7 +2,6 @@
2
2
 
3
3
  require "toml-rb"
4
4
  require "open3"
5
- require "shellwords"
6
5
  require "dependabot/shared_helpers"
7
6
  require "dependabot/dep/update_checker"
8
7
  require "dependabot/errors"
@@ -45,10 +44,7 @@ module Dependabot
45
44
  SharedHelpers.with_git_configured(credentials: credentials) do
46
45
  # Shell out to dep, which handles everything for us, and does
47
46
  # so without doing an install (so it's fast).
48
- cmd_parts = ["dep", "ensure", "-update", "--no-vendor",
49
- dependency.name]
50
- command = Shellwords.join(cmd_parts)
51
-
47
+ command = "dep ensure -update --no-vendor #{dependency.name}"
52
48
  dir_parts = dir.realpath.to_s.split("/")
53
49
  gopath = File.join(dir_parts[0..-(base_parts + 1)])
54
50
  run_shell_command(command, "GOPATH" => gopath)
@@ -99,6 +95,7 @@ module Dependabot
99
95
 
100
96
  def run_shell_command(command, env = {})
101
97
  start = Time.now
98
+ command = SharedHelpers.escape_command(command)
102
99
  stdout, process = Open3.capture2e(env, command)
103
100
  time_taken = Time.now - start
104
101
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-dep
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.98.20
4
+ version: 0.98.21
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.98.20
19
+ version: 0.98.21
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.98.20
26
+ version: 0.98.21
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement