dependabot-docker 0.402.0 → 0.403.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ecf24df33e44c8d3f2d9e53184192de6fc71ca362ec6e943e83afdf9944cbe1f
4
- data.tar.gz: 4341b63bd9a2e1f4ff7c00bc2a837981ed47ac98a0bb436987740e2cad55588f
3
+ metadata.gz: f86ee242d46aad5d1701f87ecd64ac35240b21eae858ab7cdeba000fb770c18f
4
+ data.tar.gz: 055e52a76533b7ba940c249d1f0734379911d253639873df694a769433b1ecb4
5
5
  SHA512:
6
- metadata.gz: baee04791b9d10b688f35fa9bfed6ccbb4e90f461548797a12c3f68bea4b59911e4fee3d3e02b50684bca4d2979687eef936043f31a7fef0a33d135c400134e2
7
- data.tar.gz: 281b7c27917e4a91d837265785203566620e888e26f5687d4745b6a5b2d648ec2214ce8522076b1f8cb06930f28ae1d2c33a7fd4515caa270660c15931b2b346
6
+ metadata.gz: 2b630c676ae9169ad86b9bfaa6cfbe0bd9b5f04616490a7a49ff57810b6de0609229520707e83d26e137ace06844bb8663b8fc38815e1287cfa663457bbd7d18
7
+ data.tar.gz: 480fdc571980393bdb0137a468e82c36f7fc0533a524642004be60d8cb8e3474b7f2f4390eae99bc87b359326bc61e719d30cb1dee94af338d21ccf884060cee
@@ -30,9 +30,16 @@ module Dependabot
30
30
  release_part = Tag.new(T.must(release_part).chomp(".").chomp("-").chomp("_")).numeric_version
31
31
 
32
32
  @release_part = T.let(Dependabot::Version.new(T.must(release_part).tr("-", ".")), Dependabot::Version)
33
- @update_part = T.let(
34
- Dependabot::Version.new(update_part&.start_with?(/[0-9]/) ? update_part : 0),
35
- Dependabot::Version
33
+ # Everything after the first underscore is the "update" part. It can itself contain further
34
+ # underscore-separated groups (for example 17.0.4_1.7.1_3.2.0), and each group is compared in order.
35
+ # A negative limit is used so that a trailing underscore (for example "17.0.4_8_") is preserved as an
36
+ # explicit empty group instead of being silently dropped by String#split, which would otherwise make
37
+ # "17.0.4_8" and "17.0.4_8_" compare as equal.
38
+ update_groups = update_part.to_s.split("_", -1)
39
+ @update_part = T.let(update_group_version(update_groups.first), Dependabot::Version)
40
+ @extra_update_parts = T.let(
41
+ update_groups.drop(1).map { |group| update_group_version(group) },
42
+ T::Array[Dependabot::Version]
36
43
  )
37
44
 
38
45
  super(@release_part)
@@ -77,7 +84,17 @@ module Dependabot
77
84
 
78
85
  sig { returns(T::Array[Dependabot::Version]) }
79
86
  def sort_criteria
80
- [@release_part, @update_part]
87
+ [@release_part, @update_part, *@extra_update_parts]
88
+ end
89
+
90
+ private
91
+
92
+ # Groups that are not valid versions (for example a commit hash, or an empty group from a trailing
93
+ # underscore) count as 0.
94
+ sig { params(group: T.nilable(String)).returns(Dependabot::Version) }
95
+ def update_group_version(group)
96
+ valid = group&.start_with?(/[0-9]/) && Dependabot::Version.correct?(group)
97
+ Dependabot::Version.new(valid ? group : 0)
81
98
  end
82
99
  end
83
100
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-docker
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.402.0
4
+ version: 0.403.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.402.0
18
+ version: 0.403.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.402.0
25
+ version: 0.403.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -266,7 +266,7 @@ licenses:
266
266
  - MIT
267
267
  metadata:
268
268
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
269
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.402.0
269
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.403.0
270
270
  rdoc_options: []
271
271
  require_paths:
272
272
  - lib