dependabot-gradle 0.265.0 → 0.267.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d0fc61d351f3a8383749a79c08ee71678d78442ff7edb3538ccfd2ad15ca414b
-  data.tar.gz: ff7f1194ffbf904f20529dcc0498536bc0dd848a3fd21c1e3c04996ff8780f82
+  metadata.gz: 1346290099592256e39b2cd611ff649d841ab10f04d5bf88576591f7f7f4bab2
+  data.tar.gz: e7ad97b5780c7541240916df2bb08fbf14f2b569f3ee628d0fd6231da196ff8b
 SHA512:
-  metadata.gz: f2206ad2b7353fb69259091341093c06139ba98f760ad90356d128ffabe06ebde7dbd35c9d303305df91ce737563585045423efb34d84f060cc0303cbec530df
-  data.tar.gz: e97691808b349179c8a3ff8f39c574904ee39f24cbed749cf5f5f064b26fccf76c1ba667d23a2a6fd9a1a21bd5b892b277a6ebab66b57bc273878cf9f18faff0
+  metadata.gz: 32634209817fda63e8a8b7f39addf4878146a5bc1ec0536ade28156f797b307ad4d0aacd6ac5a92e4c9614116c6beaea6d983dbb73b354c4a60917810bd945b8
+  data.tar.gz: a93fe84388d96ef9947892098de97cfc55a77af55bcf9391d1ac580b348370b29ce97e7e3ea28273f0dd8c38668a5c58a04f7aec384858d85de428e17483afd3

data/lib/dependabot/gradle/file_updater.rb

@@ -56,6 +56,7 @@ module Dependabot
 
       def update_buildfiles_for_dependency(buildfiles:, dependency:)
         files = buildfiles.dup
+
         # The UpdateChecker ensures the order of requirements is preserved
         # when updating, so we can zip them together in new/old pairs.
         reqs = dependency.requirements.zip(dependency.previous_requirements)
@@ -68,10 +69,12 @@ module Dependabot
 
           buildfile = files.find { |f| f.name == new_req.fetch(:file) }
 
-          # Exception raised to handle issue that arises when buildfiles function (see this file)
-          # removes the build file that contains the dependency itself. So no build file exists to
-          # update dependency, This behaviour is evident for extremely small number of users
-          # that have added separate repos as sub-modules in parent projects
+          # Currently, Dependabot assumes that Gradle projects using Gradle submodules are all in a single
+          # repo. However, some projects are actually using git submodule references for the Gradle submodules.
+          # When this happens, Dependabot's FileFetcher thinks the Gradle submodules are eligible for update,
+          # but then the FileUpdater filters out the git submodule reference from the build file. So we end up
+          # with no relevant build file, leaving us with no way to update that dependency.
+          # TODO: Figure out a way to actually navigate this rather than throwing an exception.
 
           raise DependencyFileNotResolvable, "No build file found to update the dependency" if buildfile.nil?
 

data/lib/dependabot/gradle/version.rb

@@ -22,7 +22,7 @@ module Dependabot
         "a" => 1, "alpha"     => 1,
         "b" => 2, "beta"      => 2,
         "m" => 3, "milestone" => 3,
-        "rc" => 4, "cr" => 4, "pr" => 4,
+        "rc" => 4, "cr" => 4, "pr" => 4, "pre" => 4,
         "snapshot" => 5, "dev" => 5,
         "ga" => 6, "" => 6, "final" => 6,
         "sp" => 7

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-gradle
 version: !ruby/object:Gem::Version
-  version: 0.265.0
+  version: 0.267.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-07-11 00:00:00.000000000 Z
+date: 2024-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.265.0
+        version: 0.267.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.265.0
+        version: 0.267.0
 - !ruby/object:Gem::Dependency
   name: dependabot-maven
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.265.0
+        version: 0.267.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.265.0
+        version: 0.267.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.63.2
+        version: 1.65.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.63.2
+        version: 1.65.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -277,7 +277,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.265.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.267.0
 post_install_message: 
 rdoc_options: []
 require_paths: