dependabot-devcontainers 0.396.0 → 0.397.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 4d5b3f28363cd552e379189170641ed56bc476a9075f5c81a22b8206afed3f75
|
|
4
|
+
data.tar.gz: e08697a8825b1ada99ef9b2988ee4e7333d24ca63e11ef0fa0c2253a18a010a1
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 57ab56957a9ee1d084b712e9f44c36dfc636c01665dab344bb4c4e399ca8b0a503eb6e56c0d5bd0a912e5010992b0d7bcfb91fe9570888057c86293a1ce9aafd
|
|
7
|
+
data.tar.gz: 7b0ccdde1888282fdc517fa017f39c620163a065c4290dd9a5e7eec1c6d1d66963a960ad93b5ab85d088389e8f346dc9c0da0f6b3c390b7e2c066c1933739a55
|
|
@@ -70,6 +70,10 @@ module Dependabot
|
|
|
70
70
|
name, requirement = feature.split(":")
|
|
71
71
|
next if name.nil?
|
|
72
72
|
|
|
73
|
+
# Skip features referenced without a version tag (e.g. "ghcr.io/owner/feature"
|
|
74
|
+
# instead of ".../feature:1"): there is no pinned requirement to update.
|
|
75
|
+
next if requirement.nil? || requirement.empty?
|
|
76
|
+
|
|
73
77
|
# Skip sha pinned tags for now. Ideally the devcontainers CLI would give us updated SHA info
|
|
74
78
|
next if name.end_with?("@sha256")
|
|
75
79
|
|
|
@@ -34,7 +34,12 @@ module Dependabot
|
|
|
34
34
|
sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
|
|
35
35
|
def updated_requirements
|
|
36
36
|
dependency.requirements.map do |requirement|
|
|
37
|
-
original_requirement =
|
|
37
|
+
original_requirement = requirement.requirement_string
|
|
38
|
+
# Features referenced without a version tag (e.g. "ghcr.io/owner/feature"
|
|
39
|
+
# instead of ".../feature:1") carry no pinned requirement to bump, so leave
|
|
40
|
+
# them unchanged rather than dereferencing a nil pin.
|
|
41
|
+
next requirement if original_requirement.nil?
|
|
42
|
+
|
|
38
43
|
required_version = T.cast(version_class.new(original_requirement), Dependabot::Devcontainers::Version)
|
|
39
44
|
versions = T.cast(release_versions, T::Array[Dependabot::Devcontainers::Version])
|
|
40
45
|
precision_matches = remove_precision_changes(versions, required_version)
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-devcontainers
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.397.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.397.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.397.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: debug
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -260,7 +260,7 @@ licenses:
|
|
|
260
260
|
- MIT
|
|
261
261
|
metadata:
|
|
262
262
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
263
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
263
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.397.0
|
|
264
264
|
rdoc_options: []
|
|
265
265
|
require_paths:
|
|
266
266
|
- lib
|