dependabot-go_modules 0.230.0 → 0.231.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/go_modules/file_fetcher.rb +5 -4
- data/lib/dependabot/go_modules/file_parser.rb +3 -2
- data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb +5 -4
- data/lib/dependabot/go_modules/file_updater.rb +5 -4
- data/lib/dependabot/go_modules/metadata_finder.rb +3 -2
- data/lib/dependabot/go_modules/native_helpers.rb +1 -0
- data/lib/dependabot/go_modules/path_converter.rb +1 -0
- data/lib/dependabot/go_modules/replace_stubber.rb +5 -4
- data/lib/dependabot/go_modules/requirement.rb +14 -13
- data/lib/dependabot/go_modules/resolvability_errors.rb +1 -0
- data/lib/dependabot/go_modules/update_checker/latest_version_finder.rb +7 -6
- data/lib/dependabot/go_modules/update_checker.rb +3 -2
- data/lib/dependabot/go_modules/version.rb +3 -2
- data/lib/dependabot/go_modules.rb +5 -4
- metadata +19 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 3998df520e4c8ba84d58cc3a9ccf1ce87809e27256d93cf36dcabb55db340e56
|
4
|
+
data.tar.gz: cc51a82458c5dc84472b177708746642448a82050f864c695e74cc083e6caa59
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 0beb9c74310a693bf8538e7eaef4926b8782a9fc200739991a394eacc0970bcd23b94590cb34fb2333dcfa42b5e1aa3f03bc3dbd99dda6a357664e9ba05e8bc5
|
7
|
+
data.tar.gz: 33926850c6c08999c16e7ee79556ff204c5abeba6181aee2be532249695a7522002715bf44d53b5defd5f0829201ead25701f7acece2dc536685b0ff60b92970
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/file_fetchers"
|
@@ -36,8 +37,8 @@ module Dependabot
|
|
36
37
|
unless go_mod
|
37
38
|
raise(
|
38
39
|
Dependabot::DependencyFileNotFound,
|
39
|
-
Pathname.new(File.join(directory, "go.mod"))
|
40
|
-
cleanpath.to_path
|
40
|
+
Pathname.new(File.join(directory, "go.mod"))
|
41
|
+
.cleanpath.to_path
|
41
42
|
)
|
42
43
|
end
|
43
44
|
|
@@ -67,5 +68,5 @@ module Dependabot
|
|
67
68
|
end
|
68
69
|
end
|
69
70
|
|
70
|
-
Dependabot::FileFetchers
|
71
|
-
register("go_modules", Dependabot::GoModules::FileFetcher)
|
71
|
+
Dependabot::FileFetchers
|
72
|
+
.register("go_modules", Dependabot::GoModules::FileFetcher)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "open3"
|
@@ -139,5 +140,5 @@ module Dependabot
|
|
139
140
|
end
|
140
141
|
end
|
141
142
|
|
142
|
-
Dependabot::FileParsers
|
143
|
-
register("go_modules", Dependabot::GoModules::FileParser)
|
143
|
+
Dependabot::FileParsers
|
144
|
+
.register("go_modules", Dependabot::GoModules::FileParser)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/shared_helpers"
|
@@ -237,8 +238,8 @@ module Dependabot
|
|
237
238
|
# process afterwards.
|
238
239
|
def replace_directive_substitutions(manifest)
|
239
240
|
@replace_directive_substitutions ||=
|
240
|
-
Dependabot::GoModules::ReplaceStubber.new(repo_contents_path)
|
241
|
-
|
241
|
+
Dependabot::GoModules::ReplaceStubber.new(repo_contents_path)
|
242
|
+
.stub_paths(manifest, directory)
|
242
243
|
end
|
243
244
|
|
244
245
|
def substitute_all(substitutions)
|
@@ -272,8 +273,8 @@ module Dependabot
|
|
272
273
|
path_regex = MODULE_PATH_MISMATCH_REGEXES.find { |r| stderr =~ r }
|
273
274
|
if path_regex
|
274
275
|
match = path_regex.match(stderr)
|
275
|
-
raise Dependabot::GoModulePathMismatch
|
276
|
-
new(go_mod_path, match[1], match[2])
|
276
|
+
raise Dependabot::GoModulePathMismatch
|
277
|
+
.new(go_mod_path, match[1], match[2])
|
277
278
|
end
|
278
279
|
|
279
280
|
out_of_disk_regex = OUT_OF_DISK_REGEXES.find { |r| stderr =~ r }
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/shared_helpers"
|
@@ -43,8 +44,8 @@ module Dependabot
|
|
43
44
|
)
|
44
45
|
end
|
45
46
|
|
46
|
-
vendor_updater.updated_vendor_cache_files(base_directory: directory)
|
47
|
-
|
47
|
+
vendor_updater.updated_vendor_cache_files(base_directory: directory)
|
48
|
+
.each do |file|
|
48
49
|
updated_files << file
|
49
50
|
end
|
50
51
|
end
|
@@ -136,5 +137,5 @@ module Dependabot
|
|
136
137
|
end
|
137
138
|
end
|
138
139
|
|
139
|
-
Dependabot::FileUpdaters
|
140
|
-
register("go_modules", Dependabot::GoModules::FileUpdater)
|
140
|
+
Dependabot::FileUpdaters
|
141
|
+
.register("go_modules", Dependabot::GoModules::FileUpdater)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/metadata_finders"
|
@@ -17,5 +18,5 @@ module Dependabot
|
|
17
18
|
end
|
18
19
|
end
|
19
20
|
|
20
|
-
Dependabot::MetadataFinders
|
21
|
-
register("go_modules", Dependabot::GoModules::MetadataFinder)
|
21
|
+
Dependabot::MetadataFinders
|
22
|
+
.register("go_modules", Dependabot::GoModules::MetadataFinder)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
module Dependabot
|
@@ -16,10 +17,10 @@ module Dependabot
|
|
16
17
|
end
|
17
18
|
|
18
19
|
def stub_paths(manifest, directory)
|
19
|
-
(manifest["Replace"] || [])
|
20
|
-
filter_map { |r| r["New"]["Path"] }
|
21
|
-
select { |p| stub_replace_path?(p, directory) }
|
22
|
-
to_h { |p| [p, "./" + Digest::SHA2.hexdigest(p)] }
|
20
|
+
(manifest["Replace"] || [])
|
21
|
+
.filter_map { |r| r["New"]["Path"] }
|
22
|
+
.select { |p| stub_replace_path?(p, directory) }
|
23
|
+
.to_h { |p| [p, "./" + Digest::SHA2.hexdigest(p)] }
|
23
24
|
end
|
24
25
|
|
25
26
|
private
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
################################################################################
|
@@ -94,17 +95,17 @@ module Dependabot
|
|
94
95
|
|
95
96
|
req_string = req_string.gsub(/(?:(?:\.|^)[xX*])(\.[xX*])+/, "") if req_string.start_with?("~")
|
96
97
|
|
97
|
-
req_string.split(".")
|
98
|
-
|
99
|
-
|
100
|
-
|
101
|
-
|
102
|
-
|
103
|
-
|
104
|
-
|
105
|
-
|
106
|
-
|
107
|
-
|
98
|
+
req_string.split(".")
|
99
|
+
.map do |part|
|
100
|
+
part.split("-").map.with_index do |p, i|
|
101
|
+
# Before we hit a wildcard we just return the existing part
|
102
|
+
next p unless p.match?(WILDCARD_REGEX) || after_wildcard
|
103
|
+
|
104
|
+
# On or after a wildcard we replace the version part with zero
|
105
|
+
after_wildcard = true
|
106
|
+
i.zero? ? "0" : "a"
|
107
|
+
end.join("-")
|
108
|
+
end.join(".")
|
108
109
|
end
|
109
110
|
|
110
111
|
def convert_tilde_req(req_string)
|
@@ -146,5 +147,5 @@ module Dependabot
|
|
146
147
|
end
|
147
148
|
end
|
148
149
|
|
149
|
-
Dependabot::Utils
|
150
|
-
register_requirement_class("go_modules", Dependabot::GoModules::Requirement)
|
150
|
+
Dependabot::Utils
|
151
|
+
.register_requirement_class("go_modules", Dependabot::GoModules::Requirement)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "excon"
|
@@ -101,8 +102,8 @@ module Dependabot
|
|
101
102
|
|
102
103
|
return [version_class.new(dependency.version)] if version_strings.nil?
|
103
104
|
|
104
|
-
version_strings.select { |v| version_class.correct?(v) }
|
105
|
-
|
105
|
+
version_strings.select { |v| version_class.correct?(v) }
|
106
|
+
.map { |v| version_class.new(v) }
|
106
107
|
end
|
107
108
|
end
|
108
109
|
rescue SharedHelpers::HelperSubprocessFailed => e
|
@@ -151,13 +152,13 @@ module Dependabot
|
|
151
152
|
def filter_lower_versions(versions_array)
|
152
153
|
return versions_array unless dependency.numeric_version
|
153
154
|
|
154
|
-
versions_array
|
155
|
-
select { |version| version > dependency.numeric_version }
|
155
|
+
versions_array
|
156
|
+
.select { |version| version > dependency.numeric_version }
|
156
157
|
end
|
157
158
|
|
158
159
|
def filter_ignored_versions(versions_array)
|
159
|
-
filtered = versions_array
|
160
|
-
reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
|
160
|
+
filtered = versions_array
|
161
|
+
.reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
|
161
162
|
if @raise_on_ignored && filter_lower_versions(filtered).empty? && filter_lower_versions(versions_array).any?
|
162
163
|
raise AllVersionsIgnored
|
163
164
|
end
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/update_checkers"
|
@@ -88,5 +89,5 @@ module Dependabot
|
|
88
89
|
end
|
89
90
|
end
|
90
91
|
|
91
|
-
Dependabot::UpdateCheckers
|
92
|
-
register("go_modules", Dependabot::GoModules::UpdateChecker)
|
92
|
+
Dependabot::UpdateCheckers
|
93
|
+
.register("go_modules", Dependabot::GoModules::UpdateChecker)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
# Go pre-release versions use 1.0.1-rc1 syntax, which Gem::Version
|
@@ -42,5 +43,5 @@ module Dependabot
|
|
42
43
|
end
|
43
44
|
end
|
44
45
|
|
45
|
-
Dependabot::Utils
|
46
|
-
register_version_class("go_modules", Dependabot::GoModules::Version)
|
46
|
+
Dependabot::Utils
|
47
|
+
.register_version_class("go_modules", Dependabot::GoModules::Version)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
# These all need to be required so the various classes can be registered in a
|
@@ -11,12 +12,12 @@ require "dependabot/go_modules/requirement"
|
|
11
12
|
require "dependabot/go_modules/version"
|
12
13
|
|
13
14
|
require "dependabot/pull_request_creator/labeler"
|
14
|
-
Dependabot::PullRequestCreator::Labeler
|
15
|
-
register_label_details("go_modules", name: "go", colour: "16e2e2")
|
15
|
+
Dependabot::PullRequestCreator::Labeler
|
16
|
+
.register_label_details("go_modules", name: "go", colour: "16e2e2")
|
16
17
|
|
17
18
|
require "dependabot/dependency"
|
18
|
-
Dependabot::Dependency
|
19
|
-
register_production_check("go_modules", ->(_) { true })
|
19
|
+
Dependabot::Dependency
|
20
|
+
.register_production_check("go_modules", ->(_) { true })
|
20
21
|
|
21
22
|
require "dependabot/utils"
|
22
23
|
Dependabot::Utils.register_always_clone("go_modules")
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-go_modules
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.231.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-09-
|
11
|
+
date: 2023-09-12 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.231.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.231.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -136,6 +136,20 @@ dependencies:
|
|
136
136
|
- - "~>"
|
137
137
|
- !ruby/object:Gem::Version
|
138
138
|
version: 1.19.0
|
139
|
+
- !ruby/object:Gem::Dependency
|
140
|
+
name: rubocop-sorbet
|
141
|
+
requirement: !ruby/object:Gem::Requirement
|
142
|
+
requirements:
|
143
|
+
- - "~>"
|
144
|
+
- !ruby/object:Gem::Version
|
145
|
+
version: 0.7.3
|
146
|
+
type: :development
|
147
|
+
prerelease: false
|
148
|
+
version_requirements: !ruby/object:Gem::Requirement
|
149
|
+
requirements:
|
150
|
+
- - "~>"
|
151
|
+
- !ruby/object:Gem::Version
|
152
|
+
version: 0.7.3
|
139
153
|
- !ruby/object:Gem::Dependency
|
140
154
|
name: stackprof
|
141
155
|
requirement: !ruby/object:Gem::Requirement
|
@@ -211,7 +225,7 @@ licenses:
|
|
211
225
|
- Nonstandard
|
212
226
|
metadata:
|
213
227
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
214
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
228
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.231.0
|
215
229
|
post_install_message:
|
216
230
|
rdoc_options: []
|
217
231
|
require_paths:
|