dependabot-go_modules 0.302.0 → 0.303.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1291fd4dccacd84da831fe27e0373c977d54032f8563881ef4e9260e9fca3ba5
-  data.tar.gz: e4a603e231967f75a7882b660c344c6f96cfc143e2da09210fcaf7fd4c172835
+  metadata.gz: 5b46529c88dfd3351ec93e343d10e3aadedf06a5db1859745c23f2f802d34816
+  data.tar.gz: 3b50d4d614f301498623941d0bdbfb672197b2adf0fb7314dd976495b0fe3ec3
 SHA512:
-  metadata.gz: d8d653a2a47b2735310ebec587deca94ceb7d96df72a64c29eda7ed1484ff11555f8312847ee947f9cca6ea04535d7df2c134363210eee8748a1bc72336656f8
-  data.tar.gz: 44e976940d33792353a0dcbf2b22a0c224bcb8b6f68a1b0d55118aa5e52c4e83fb795db388a504a336fa9ac78796e51b74bb1c05a03aec0333d0551192c81528
+  metadata.gz: ff675afaa3ea251c9ad798aeaf652bfde77869a6931de61565f6c7c8ed3a45d6faa7ed659b2858f901ebaa1cf2bb4603bb77d28c3b9abcb51b3948dc78bd216e
+  data.tar.gz: 269977d379c0bb991118fa3e555e66930cbd8e04f9cda98d006e1dda56c3b12ef61f993189fe6397de98988e53354009b19a112017e371922a997dd67dab197a

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -200,6 +200,21 @@ module Dependabot
         def run_go_mod_tidy
           return unless tidy?
 
+          # Extract the Go version from the go.mod file (assuming the format is 'go 1.23.0')
+          go_version = `grep '^go ' go.mod`.strip.split.last
+
+          # Extract the major and minor version (e.g., "1.23") from the full version
+          formatted_version = T.must(go_version).split(".").first(2).join(".")
+
+          # Apply the sed commands to fix go.mod before running `go mod tidy`
+          sed_command_go = "sed -i 's/go #{go_version}/go #{formatted_version}/' go.mod"
+          Dependabot.logger.info "Running: #{sed_command_go}"
+          Open3.capture3(environment, sed_command_go)
+
+          sed_command_toolchain = "sed -i '/toolchain/d' go.mod"
+          Dependabot.logger.info "Running: #{sed_command_toolchain}"
+          Open3.capture3(environment, sed_command_toolchain)
+
           command = "go mod tidy -e"
 
           # we explicitly don't raise an error for 'go mod tidy' and silently

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.302.0
+  version: 0.303.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-20 00:00:00.000000000 Z
+date: 2025-03-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.302.0
+        version: 0.303.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.302.0
+        version: 0.303.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -156,14 +156,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.5
+        version: 0.8.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.5
+        version: 0.8.7
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -271,7 +271,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.302.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.303.0
 post_install_message:
 rdoc_options: []
 require_paths: