dependabot-devcontainers 0.242.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: bcfeb30425ec7f1f8d1c65ae2f3640b4e9448f95c1e45f8b48f40b57bc99d2a9
+  data.tar.gz: b031b0d36b8cc9102b8b27ea79217132caf4f4f37922b97479222528a483ce06
+SHA512:
+  metadata.gz: b9875fd79c9ead1bd13008967af50ebade976a937ac2f964de80e87bb768a3ee490f49de8738b81b6aef43cd38c8d89869ebe82e2fdffb3f8a667f0fa63339f2
+  data.tar.gz: 63c9c39203c2187262bf05f1a637cfbd475f1d05f50d5f5e7ab5469011aa7fdba4de5dce9109d81dd573799282f623b283624dafad9c5ffb4f11bd13e5a508d1

data/lib/dependabot/devcontainers/file_fetcher.rb

@@ -0,0 +1,84 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/file_fetchers"
+require "dependabot/file_fetchers/base"
+require "dependabot/devcontainers/utils"
+
+module Dependabot
+  module Devcontainers
+    class FileFetcher < Dependabot::FileFetchers::Base
+      def self.required_files_in?(filenames)
+        # There's several other places a devcontainer.json can be checked into
+        # See: https://containers.dev/implementors/spec/#devcontainerjson
+        filenames.any? { |f| f.end_with?("devcontainer.json") }
+      end
+
+      def self.required_files_message
+        "Repo must contain a dev container configuration file."
+      end
+
+      def fetch_files
+        fetched_files = []
+        fetched_files += root_files
+        fetched_files += scoped_files
+        fetched_files += custom_directory_files
+        return fetched_files if fetched_files.any?
+
+        raise Dependabot::DependencyFileNotFound.new(
+          nil,
+          "Neither .devcontainer.json nor .devcontainer/devcontainer.json nor " \
+          ".devcontainer/<anything>/devcontainer.json found in #{directory}"
+        )
+      end
+
+      private
+
+      def root_files
+        fetch_config_and_lockfile_from(".")
+      end
+
+      def scoped_files
+        return [] unless devcontainer_directory
+
+        fetch_config_and_lockfile_from(".devcontainer")
+      end
+
+      def custom_directory_files
+        return [] unless devcontainer_directory
+
+        custom_directories.flat_map do |directory|
+          fetch_config_and_lockfile_from(directory.path)
+        end
+      end
+
+      def custom_directories
+        repo_contents(dir: ".devcontainer").select { |f| f.type == "dir" && f.name != ".devcontainer" }
+      end
+
+      def devcontainer_directory
+        return @devcontainer_directory if defined?(@devcontainer_directory)
+
+        @devcontainer_directory = repo_contents.find { |f| f.type == "dir" && f.name == ".devcontainer" }
+      end
+
+      def fetch_config_and_lockfile_from(directory)
+        files = []
+
+        config_name = Utils.expected_config_basename(directory)
+        config_file = fetch_file_if_present(File.join(directory, config_name))
+        return files unless config_file
+
+        files << config_file
+
+        lockfile_name = Utils.expected_lockfile_name(File.basename(config_file.name))
+        lockfile = fetch_support_file(File.join(directory, lockfile_name))
+        files << lockfile if lockfile
+
+        files
+      end
+    end
+  end
+end
+
+Dependabot::FileFetchers.register("devcontainers", Dependabot::Devcontainers::FileFetcher)

data/lib/dependabot/devcontainers/file_parser/feature_dependency_parser.rb

@@ -0,0 +1,97 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/devcontainers/requirement"
+require "dependabot/file_parsers/base"
+require "dependabot/shared_helpers"
+require "dependabot/dependency"
+require "json"
+require "uri"
+
+module Dependabot
+  module Devcontainers
+    class FileParser < Dependabot::FileParsers::Base
+      class FeatureDependencyParser
+        def initialize(config_dependency_file:, repo_contents_path:, credentials:)
+          @config_dependency_file = config_dependency_file
+          @repo_contents_path = repo_contents_path
+          @credentials = credentials
+        end
+
+        def parse
+          SharedHelpers.in_a_temporary_repo_directory(base_dir, repo_contents_path) do
+            SharedHelpers.with_git_configured(credentials: credentials) do
+              parse_cli_json(evaluate_with_cli)
+            end
+          end
+        end
+
+        private
+
+        def base_dir
+          File.dirname(config_dependency_file.path)
+        end
+
+        def config_name
+          File.basename(config_dependency_file.path)
+        end
+
+        def config_contents
+          config_dependency_file.content
+        end
+
+        # https://github.com/devcontainers/cli/blob/9444540283b236298c28f397dea879e7ec222ca1/src/spec-node/devContainersSpecCLI.ts#L1072
+        def evaluate_with_cli
+          raise "config_name must be a string" unless config_name.is_a?(String) && !config_name.empty?
+
+          cmd = "devcontainer outdated --workspace-folder . --config #{config_name} --output-format json"
+          Dependabot.logger.info("Running command: #{cmd}")
+
+          json = SharedHelpers.run_shell_command(
+            cmd,
+            stderr_to_stdout: false
+          )
+
+          JSON.parse(json)
+        end
+
+        def parse_cli_json(json)
+          dependencies = []
+
+          features = json["features"]
+          features.each do |feature, versions_object|
+            name, requirement = feature.split(":")
+
+            # Skip sha pinned tags for now. Ideally the devcontainers CLI would give us updated SHA info
+            next if name.end_with?("@sha256")
+
+            # Skip deprecated features until `devcontainer features info tag`
+            # and `devcontainer upgrade` work with them. See https://github.com/devcontainers/cli/issues/712
+            next unless name.include?("/")
+
+            current = versions_object["current"]
+
+            dep = Dependency.new(
+              name: name,
+              version: current,
+              package_manager: "devcontainers",
+              requirements: [
+                {
+                  requirement: requirement,
+                  file: config_dependency_file.name,
+                  groups: ["feature"],
+                  source: nil
+                }
+              ]
+            )
+
+            dependencies << dep
+          end
+          dependencies
+        end
+
+        attr_reader :config_dependency_file, :repo_contents_path, :credentials
+      end
+    end
+  end
+end

data/lib/dependabot/devcontainers/file_parser.rb

@@ -0,0 +1,51 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/file_parsers"
+require "dependabot/file_parsers/base"
+require "dependabot/devcontainers/version"
+require "dependabot/devcontainers/file_parser/feature_dependency_parser"
+
+module Dependabot
+  module Devcontainers
+    class FileParser < Dependabot::FileParsers::Base
+      require "dependabot/file_parsers/base/dependency_set"
+
+      def parse
+        dependency_set = DependencySet.new
+
+        config_dependency_files.each do |config_dependency_file|
+          parse_features(config_dependency_file).each do |dep|
+            dependency_set << dep
+          end
+        end
+
+        dependency_set.dependencies
+      end
+
+      private
+
+      def check_required_files
+        return if config_dependency_files.any?
+
+        raise "No dev container configuration!"
+      end
+
+      def parse_features(config_dependency_file)
+        FeatureDependencyParser.new(
+          config_dependency_file: config_dependency_file,
+          repo_contents_path: repo_contents_path,
+          credentials: credentials
+        ).parse
+      end
+
+      def config_dependency_files
+        @config_dependency_files ||= dependency_files.select do |f|
+          f.name.end_with?("devcontainer.json")
+        end
+      end
+    end
+  end
+end
+
+Dependabot::FileParsers.register("devcontainers", Dependabot::Devcontainers::FileParser)

data/lib/dependabot/devcontainers/file_updater/config_updater.rb

@@ -0,0 +1,78 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/file_updaters/base"
+require "dependabot/shared_helpers"
+require "dependabot/logger"
+require "dependabot/devcontainers/utils"
+
+module Dependabot
+  module Devcontainers
+    class FileUpdater < Dependabot::FileUpdaters::Base
+      class ConfigUpdater
+        def initialize(feature:, requirement:, version:, manifest:, repo_contents_path:, credentials:)
+          @feature = feature
+          @requirement = requirement
+          @version = version
+          @manifest = manifest
+          @repo_contents_path = repo_contents_path
+          @credentials = credentials
+        end
+
+        def update
+          SharedHelpers.in_a_temporary_repo_directory(base_dir, repo_contents_path) do
+            SharedHelpers.with_git_configured(credentials: credentials) do
+              update_manifests(
+                target_requirement: requirement,
+                target_version: version
+              )
+
+              [File.read(manifest_name), File.read(lockfile_name)].compact
+            end
+          end
+        end
+
+        private
+
+        def base_dir
+          File.dirname(manifest.path)
+        end
+
+        def manifest_name
+          File.basename(manifest.path)
+        end
+
+        def lockfile_name
+          Utils.expected_lockfile_name(manifest_name)
+        end
+
+        def update_manifests(target_requirement:, target_version:)
+          # First force target version to upgrade lockfile.
+          run_devcontainer_upgrade(target_version)
+
+          # Now replace specific version back with target requirement
+          force_target_requirement(manifest_name, from: target_version, to: target_requirement)
+          force_target_requirement(lockfile_name, from: target_version, to: target_requirement)
+        end
+
+        def force_target_requirement(file_name, from:, to:)
+          File.write(file_name, File.read(file_name).gsub("#{feature}:#{from}", "#{feature}:#{to}"))
+        end
+
+        def run_devcontainer_upgrade(target_version)
+          cmd = "devcontainer upgrade " \
+                "--workspace-folder . " \
+                "--feature #{feature} " \
+                "--config #{manifest_name} " \
+                "--target-version #{target_version}"
+
+          Dependabot.logger.info("Running command: `#{cmd}`")
+
+          SharedHelpers.run_shell_command(cmd, stderr_to_stdout: false)
+        end
+
+        attr_reader :feature, :requirement, :version, :manifest, :repo_contents_path, :credentials
+      end
+    end
+  end
+end

data/lib/dependabot/devcontainers/file_updater.rb

@@ -0,0 +1,85 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/file_updaters"
+require "dependabot/file_updaters/base"
+require "dependabot/devcontainers/file_updater/config_updater"
+
+module Dependabot
+  module Devcontainers
+    class FileUpdater < Dependabot::FileUpdaters::Base
+      def self.updated_files_regex
+        [
+          /^\.?devcontainer\.json$/,
+          /^\.?devcontainer-lock\.json$/
+        ]
+      end
+
+      def updated_dependency_files
+        updated_files = []
+
+        manifests.each do |manifest|
+          requirement = dependency.requirements.find { |req| req[:file] == manifest.name }
+          next unless requirement
+
+          config_contents, lockfile_contents = update(manifest, requirement)
+
+          updated_files << updated_file(file: manifest, content: config_contents) if file_changed?(manifest)
+
+          lockfile = lockfile_for(manifest)
+
+          updated_files << updated_file(file: lockfile, content: lockfile_contents) if lockfile && lockfile_contents
+        end
+
+        updated_files
+      end
+
+      private
+
+      def dependency
+        # TODO: Handle one dependency at a time
+        dependencies.first
+      end
+
+      def check_required_files
+        return if dependency_files.any?
+
+        raise "No dev container configuration!"
+      end
+
+      def manifests
+        @manifests ||= dependency_files.select do |f|
+          f.name.end_with?("devcontainer.json")
+        end
+      end
+
+      def lockfile_for(manifest)
+        lockfile_name = lockfile_name_for(manifest)
+
+        dependency_files.find do |f|
+          f.name == lockfile_name
+        end
+      end
+
+      def lockfile_name_for(manifest)
+        basename = File.basename(manifest.name)
+        lockfile_name = Utils.expected_lockfile_name(basename)
+
+        manifest.name.delete_suffix(basename).concat(lockfile_name)
+      end
+
+      def update(manifest, requirement)
+        ConfigUpdater.new(
+          feature: dependency.name,
+          requirement: requirement[:requirement],
+          version: dependency.version,
+          manifest: manifest,
+          repo_contents_path: repo_contents_path,
+          credentials: credentials
+        ).update
+      end
+    end
+  end
+end
+
+Dependabot::FileUpdaters.register("devcontainers", Dependabot::Devcontainers::FileUpdater)

data/lib/dependabot/devcontainers/metadata_finder.rb

@@ -0,0 +1,21 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/metadata_finders"
+require "dependabot/metadata_finders/base"
+
+module Dependabot
+  module Devcontainers
+    class MetadataFinder < Dependabot::MetadataFinders::Base
+      private
+
+      def look_up_source
+        # TODO: Make upstream changes to dev container CLI to point to docs.
+        #       Specifically, 'devcontainers features info' can be augmented to expose documentationUrl
+        nil
+      end
+    end
+  end
+end
+
+Dependabot::MetadataFinders.register("devcontainers", Dependabot::Devcontainers::MetadataFinder)

data/lib/dependabot/devcontainers/requirement.rb

@@ -0,0 +1,35 @@
+# typed: true
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+
+require "dependabot/requirement"
+require "dependabot/utils"
+
+module Dependabot
+  module Devcontainers
+    class Requirement < Dependabot::Requirement
+      extend T::Sig
+
+      # For consistency with other languages, we define a requirements array.
+      # Devcontainers don't have an `OR` separator for requirements, so it
+      # always contains a single element.
+      sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }
+      def self.requirements_array(requirement_string)
+        [new(requirement_string)]
+      end
+
+      # Patches Gem::Requirement to make it accept requirement strings like
+      # "~> 4.2.5, >= 4.2.5.1" without first needing to split them.
+      def initialize(*requirements)
+        requirements = requirements.flatten.flat_map do |req_string|
+          req_string.split(",").map(&:strip)
+        end
+
+        super(requirements)
+      end
+    end
+  end
+end
+
+Dependabot::Utils.register_requirement_class("devcontainers", Dependabot::Devcontainers::Requirement)

data/lib/dependabot/devcontainers/update_checker.rb

@@ -0,0 +1,115 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/update_checkers"
+require "dependabot/update_checkers/base"
+require "dependabot/devcontainers/version"
+require "dependabot/update_checkers/version_filters"
+require "dependabot/devcontainers/requirement"
+
+module Dependabot
+  module Devcontainers
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
+      def latest_version
+        @latest_version ||= fetch_latest_version
+      end
+
+      def latest_resolvable_version
+        latest_version # TODO
+      end
+
+      def updated_requirements
+        dependency.requirements.map do |requirement|
+          required_version = version_class.new(requirement[:requirement])
+          updated_requirement = remove_precision_changes(viable_candidates, required_version).last
+
+          {
+            file: requirement[:file],
+            requirement: updated_requirement,
+            groups: requirement[:groups],
+            source: requirement[:source]
+          }
+        end
+      end
+
+      def latest_resolvable_version_with_no_unlock
+        raise NotImplementedError
+      end
+
+      private
+
+      def viable_candidates
+        @viable_candidates ||= fetch_viable_candidates
+      end
+
+      def fetch_viable_candidates
+        candidates = comparable_versions_from_registry
+        candidates = filter_ignored(candidates)
+        candidates.sort
+      end
+
+      def fetch_latest_version
+        return current_version unless viable_candidates.any?
+
+        viable_candidates.last
+      end
+
+      def remove_precision_changes(versions, required_version)
+        versions.select do |version|
+          version.same_precision?(required_version)
+        end
+      end
+
+      def filter_ignored(versions)
+        filtered =
+          versions.reject do |version|
+            ignore_requirements.any? { |r| version.satisfies?(r) }
+          end
+
+        if @raise_on_ignored &&
+           filter_lower_versions(filtered).empty? &&
+           filter_lower_versions(versions).any?
+          raise AllVersionsIgnored
+        end
+
+        filtered
+      end
+
+      def comparable_versions_from_registry
+        tags_from_registry.filter_map do |tag|
+          version_class.correct?(tag) && version_class.new(tag)
+        end
+      end
+
+      def tags_from_registry
+        @tags_from_registry ||= fetch_tags_from_registry
+      end
+
+      def fetch_tags_from_registry
+        cmd = "devcontainer features info tags #{dependency.name} --output-format json"
+
+        Dependabot.logger.info("Running command: `#{cmd}`")
+
+        output = SharedHelpers.run_shell_command(cmd, stderr_to_stdout: false)
+
+        JSON.parse(output).fetch("publishedTags")
+      end
+
+      def filter_lower_versions(versions)
+        versions.select do |version|
+          version > current_version
+        end
+      end
+
+      def latest_version_resolvable_with_full_unlock?
+        false # TODO
+      end
+
+      def updated_dependencies_after_full_unlock
+        raise NotImplementedError
+      end
+    end
+  end
+end
+
+Dependabot::UpdateCheckers.register("devcontainers", Dependabot::Devcontainers::UpdateChecker)

data/lib/dependabot/devcontainers/utils.rb

@@ -0,0 +1,24 @@
+# typed: true
+# frozen_string_literal: true
+
+module Dependabot
+  module Devcontainers
+    module Utils
+      def self.expected_config_basename(directory)
+        root_directory?(directory) ? ".devcontainer.json" : "devcontainer.json"
+      end
+
+      def self.root_directory?(directory)
+        Pathname.new(directory).cleanpath.to_path == Pathname.new(".").cleanpath.to_path
+      end
+
+      def self.expected_lockfile_name(config_file_name)
+        if config_file_name.start_with?(".")
+          ".devcontainer-lock.json"
+        else
+          "devcontainer-lock.json"
+        end
+      end
+    end
+  end
+end

data/lib/dependabot/devcontainers/version.rb

@@ -0,0 +1,35 @@
+# typed: true
+# frozen_string_literal: true
+
+require "dependabot/version"
+require "dependabot/utils"
+
+module Dependabot
+  module Devcontainers
+    class Version < Dependabot::Version
+      def same_precision?(other)
+        precision == other.precision
+      end
+
+      def satisfies?(requirement)
+        requirement.satisfied_by?(self)
+      end
+
+      def <=>(other)
+        if self == other
+          precision <=> other.precision
+        else
+          super
+        end
+      end
+
+      protected
+
+      def precision
+        segments.size
+      end
+    end
+  end
+end
+
+Dependabot::Utils.register_version_class("devcontainers", Dependabot::Devcontainers::Version)

data/lib/dependabot/devcontainers.rb

@@ -0,0 +1,23 @@
+# typed: strong
+# frozen_string_literal: true
+
+# These all need to be required so the various classes can be registered in a
+# lookup table of package manager names to concrete classes.
+require "dependabot/devcontainers/file_fetcher"
+require "dependabot/devcontainers/file_parser"
+require "dependabot/devcontainers/update_checker"
+require "dependabot/devcontainers/file_updater"
+require "dependabot/devcontainers/metadata_finder"
+require "dependabot/devcontainers/requirement"
+require "dependabot/devcontainers/version"
+
+require "dependabot/pull_request_creator/labeler"
+Dependabot::PullRequestCreator::Labeler
+  .register_label_details("devcontainers", name: "devcontainers_package_manager", colour: "2753E3")
+
+require "dependabot/dependency"
+Dependabot::Dependency
+  .register_production_check("devcontainers", ->(_) { true })
+
+require "dependabot/utils"
+Dependabot::Utils.register_always_clone("devcontainers")

metadata

@@ -0,0 +1,266 @@
+--- !ruby/object:Gem::Specification
+name: dependabot-devcontainers
+version: !ruby/object:Gem::Version
+  version: 0.242.0
+platform: ruby
+authors:
+- Dependabot
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2024-01-22 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: dependabot-common
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.242.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '='
+      - !ruby/object:Gem::Version
+        version: 0.242.0
+- !ruby/object:Gem::Dependency
+  name: debug
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
+- !ruby/object:Gem::Dependency
+  name: gpgme
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '13'
+- !ruby/object:Gem::Dependency
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.12'
+- !ruby/object:Gem::Dependency
+  name: rspec-its
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: rspec-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.2
+- !ruby/object:Gem::Dependency
+  name: rubocop
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.58.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.58.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-performance
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.19.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+- !ruby/object:Gem::Dependency
+  name: stackprof
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.16
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.16
+- !ruby/object:Gem::Dependency
+  name: turbo_tests
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.2.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.2.0
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.1'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '6.1'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.18'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+description: Dependabot-Devcontainers provides support for managing dev container
+  versioning via Dependabot.
+email: opensource@github.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/dependabot/devcontainers.rb
+- lib/dependabot/devcontainers/file_fetcher.rb
+- lib/dependabot/devcontainers/file_parser.rb
+- lib/dependabot/devcontainers/file_parser/feature_dependency_parser.rb
+- lib/dependabot/devcontainers/file_updater.rb
+- lib/dependabot/devcontainers/file_updater/config_updater.rb
+- lib/dependabot/devcontainers/metadata_finder.rb
+- lib/dependabot/devcontainers/requirement.rb
+- lib/dependabot/devcontainers/update_checker.rb
+- lib/dependabot/devcontainers/utils.rb
+- lib/dependabot/devcontainers/version.rb
+homepage: https://github.com/dependabot/dependabot-core
+licenses:
+- Nonstandard
+metadata:
+  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.242.0
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.1.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.1.0
+requirements: []
+rubygems_version: 3.3.26
+signing_key: 
+specification_version: 4
+summary: Provides Dependabot support for Dev Containers
+test_files: []