dependabot-go_modules 0.205.1 → 0.208.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: baf0111ac94ec9cb73652540efe766a77736d5e2c89c293dec699d44e25db675
-  data.tar.gz: 7a31b636c64a55d22a881a44e231e30ded808e2f3a742366f0e9a3b7b5b397c3
+  metadata.gz: 7e2533847e50617fe2d1db1a69276e268022f4a0fedde619a6f3494bc001556a
+  data.tar.gz: ae3c822249db054fbe95b990f8fd6b26d720b31fdccdbcc60647933176595266
 SHA512:
-  metadata.gz: a70dc4925577872c9ef6215031ea960503b8061257209e1f59183f63baa98bfb7cb8693edc652160267c334a0a9ce2bb425e75ab561d1933ff422ea65e309799
-  data.tar.gz: 9a6f7706b23da7bfce13cbafbe02f8409f3bc529e5fccd8489ca08573648f98042a696a94f676426c5f21e0af44dc1616b3ce38dfc06fb0c9cc99b48b2ed4af8
+  metadata.gz: d07ec14c5eee96c843ac1c98b82873f2dbdd4ada2e40ed8594afbab24ba06a1a839ec9293d7243c3ed808da94bb4019020f824905a4e708747580e86567e7d8c
+  data.tar.gz: e531bb11b041e79edb5116ec29c235d98e774adb644fe00a4153eca6f6841dea5b9f2084670b4523c63059cd89ba1aea2cebb8aea5050861ee816142372a0c5c

data/helpers/go.mod

@@ -1,5 +1,5 @@
 module github.com/dependabot/dependabot-core/go_modules/helpers
 
-go 1.18
+go 1.19
 
 require github.com/Masterminds/vcs v1.13.3

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -154,13 +154,15 @@ module Dependabot
         end
 
         def run_go_get(dependencies = [])
+          # `go get` will fail if there are no go files in the directory.
+          # For example, if a `//go:build` tag excludes all files when run
+          # on a particular architecture. However, dropping a go file with
+          # a `package ...` line in it will always make `go get` succeed...
+          # Even when the package name doesn't match the rest of the files
+          # in the directory! I assume this is because it doesn't actually
+          # compile anything when it runs.
           tmp_go_file = "#{SecureRandom.hex}.go"
-
-          package = Dir.glob("[^\._]*.go").any? do |path|
-            !File.read(path).include?("// +build")
-          end
-
-          File.write(tmp_go_file, "package dummypkg\n") unless package
+          File.write(tmp_go_file, "package dummypkg\n")
 
           command = +"go get"
           # `go get` accepts multiple packages, each separated by a space

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.205.1
+  version: 0.208.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-08 00:00:00.000000000 Z
+date: 2022-08-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.1
+        version: 0.208.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.1
+        version: 0.208.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement