dependabot-gradle 0.117.10 → 0.117.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e475e381f97935fb26d36131a8b10122710adeda0406e8eed179e6b3c9f45196
-  data.tar.gz: '088c8e52679d887a0c0388814391152be8dd4c55f475622a5d77a93586281cc5'
+  metadata.gz: 73ceddef50730fd232ebcd9f8b65169f61820834347053bacb74da4251237ba7
+  data.tar.gz: f10977319651772a0218e9d86fce12963e3e5f45d46e8b566de84f19f59c772e
 SHA512:
-  metadata.gz: 5567d6463c69264079ef97fe30c7c95e228fc4b562566443b5e29edd550d3c40b15e3701ee713da7e033371b7e36d75798ebd3904830d0d396be0a2c0bf0e30c
-  data.tar.gz: 1de33ebcbde672e50368153bf4152b125c118a68d7641524613da9da31f8441cfc525ff7e487f2392c96f4a84ffcc1a074e38349aa18654a0b123308b607fb8d
+  metadata.gz: 0dec625a3618186fa8eedb97e007772e9d6a48dac9b12d49e01b18909959fd364b60f26cd4575ff1ec2932d6b5b021c9050d377b9715b9a488bccb1996467580
+  data.tar.gz: 271fa52f45a9a38115a12ee081d4ed916b7689b06a824a43ae44a4b6bd9c081799ec2150245140dd76132ce18b3403adb74405a46dd903b2c56a6bfab9ec8ddb

data/lib/dependabot/gradle/update_checker.rb

@@ -117,6 +117,7 @@ module Dependabot
             dependency_files: dependency_files,
             credentials: credentials,
             ignored_versions: ignored_versions,
+            raise_on_ignored: raise_on_ignored,
             security_advisories: security_advisories
           )
       end
@@ -128,7 +129,8 @@ module Dependabot
             dependency_files: dependency_files,
             credentials: credentials,
             target_version_details: latest_version_details,
-            ignored_versions: ignored_versions
+            ignored_versions: ignored_versions,
+            raise_on_ignored: raise_on_ignored
           )
       end
 

data/lib/dependabot/gradle/update_checker/multi_dependency_updater.rb

@@ -11,13 +11,15 @@ module Dependabot
         require_relative "requirements_updater"
 
         def initialize(dependency:, dependency_files:, credentials:,
-                       target_version_details:, ignored_versions:)
+                       target_version_details:, ignored_versions:,
+                       raise_on_ignored: false)
           @dependency       = dependency
           @dependency_files = dependency_files
           @credentials      = credentials
           @target_version   = target_version_details&.fetch(:version)
           @source_url       = target_version_details&.fetch(:source_url)
           @ignored_versions = ignored_versions
+          @raise_on_ignored = raise_on_ignored
         end
 
         def update_possible?
@@ -30,6 +32,7 @@ module Dependabot
                 dependency_files: dependency_files,
                 credentials: credentials,
                 ignored_versions: ignored_versions,
+                raise_on_ignored: @raise_on_ignored,
                 security_advisories: []
               ).versions.
                 map { |v| v.fetch(:version) }.

data/lib/dependabot/gradle/update_checker/version_finder.rb

@@ -16,11 +16,13 @@ module Dependabot
         TYPE_SUFFICES = %w(jre android java).freeze
 
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
           @forbidden_urls      = []
         end
@@ -42,8 +44,8 @@ module Dependabot
           possible_versions = filter_prereleases(possible_versions)
           possible_versions = filter_date_based_versions(possible_versions)
           possible_versions = filter_version_types(possible_versions)
-          possible_versions = filter_ignored_versions(possible_versions)
           possible_versions = filter_vulnerable_versions(possible_versions)
+          possible_versions = filter_ignored_versions(possible_versions)
           possible_versions = filter_lower_versions(possible_versions)
 
           possible_versions.first
@@ -92,16 +94,20 @@ module Dependabot
         end
 
         def filter_ignored_versions(possible_versions)
-          versions_array = possible_versions
+          filtered = possible_versions
 
           ignored_versions.each do |req|
             ignore_req = Gradle::Requirement.new(req.split(","))
-            versions_array =
-              versions_array.
+            filtered =
+              filtered.
               reject { |v| ignore_req.satisfied_by?(v.fetch(:version)) }
           end
 
-          versions_array
+          if @raise_on_ignored && filtered.empty? && possible_versions.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(possible_versions)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-gradle
 version: !ruby/object:Gem::Version
-  version: 0.117.10
+  version: 0.117.11
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-21 00:00:00.000000000 Z
+date: 2020-05-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.117.11
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.10
+        version: 0.117.11
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement