dependabot-go_modules 0.204.0 → 0.206.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a1dfe8cbe4628e0996b77ebbbb58f5383467a660336255c1c727ae748f0db61d
-  data.tar.gz: 945369071685baf2aa4e7ce1acc58b69fbd64dd5b29c81ca95d107466dacb46d
+  metadata.gz: 48155e8023c5043a2f292efe0959ed2592af51b60795999e1c958329185d91f5
+  data.tar.gz: ec86d1b8604288eac67b175ba5c949178ae7538e654387a56746ea111d9227d2
 SHA512:
-  metadata.gz: 3ad549479f81bc8111124ca4c3692d9762626f50909f7e2616cec9126dc92ebc44bbb2c537d6b43378094b8605b15db531c7d34657583ab9e52777ec00c4e9cd
-  data.tar.gz: 1416f8a4224bf84fc037911f6bc60fc5b9342e473d5fad56efa10304dd968e639fe05b6b0db77fc668406641caff6d77024a98ddd0561859209c00b4a2d6e059
+  metadata.gz: dd4672429b642ecceb7207e20029c9e6a2fbc47b811e9b490aad9ecad2a76a6b3c866e2d751aba08b17b89362a4ae2eaca3eb6ef648ca1fd4f7747a0ff7418bf
+  data.tar.gz: dd90f413fa3e2d614481e07c91c4f163af320354354af830d22f04604f274ed917a28261e43b9e9c8e92a2168e2bfaf848090c1e19b85b4e37c451fbd8b232e2

data/helpers/go.mod

@@ -1,5 +1,5 @@
 module github.com/dependabot/dependabot-core/go_modules/helpers
 
-go 1.18
+go 1.19
 
 require github.com/Masterminds/vcs v1.13.3

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -154,13 +154,15 @@ module Dependabot
         end
 
         def run_go_get(dependencies = [])
+          # `go get` will fail if there are no go files in the directory.
+          # For example, if a `//go:build` tag excludes all files when run
+          # on a particular architecture. However, dropping a go file with
+          # a `package ...` line in it will always make `go get` succeed...
+          # Even when the package name doesn't match the rest of the files
+          # in the directory! I assume this is because it doesn't actually
+          # compile anything when it runs.
           tmp_go_file = "#{SecureRandom.hex}.go"
-
-          package = Dir.glob("[^\._]*.go").any? do |path|
-            !File.read(path).include?("// +build")
-          end
-
-          File.write(tmp_go_file, "package dummypkg\n") unless package
+          File.write(tmp_go_file, "package dummypkg\n")
 
           command = +"go get"
           # `go get` accepts multiple packages, each separated by a space

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.204.0
+  version: 0.206.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-03 00:00:00.000000000 Z
+date: 2022-08-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.204.0
+        version: 0.206.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.204.0
+        version: 0.206.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement
@@ -266,7 +266,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.0
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: Go modules support for dependabot