dependabot-gradle 0.401.0 → 0.403.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/gradle/file_fetcher.rb +7 -3
  3. data/lib/dependabot/gradle/file_parser/repositories_finder.rb +4 -4
  4. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1a2962474caa0703d22741525dbca66a6d24a43ad004cdb2fdc205c2ae214082
4
- data.tar.gz: 1a0620950d708fb832b8e66f816be1b45eb8cb9c88e726fca3ebfb2fa7ba6b62
3
+ metadata.gz: 4e690e7997df40047063e3d4959a23a3ace20a68086116470933a19823955edc
4
+ data.tar.gz: 0713bcd3034a64e93ade1f7598632ba5d3b081a392c631e7b6f0afe71f90de54
5
5
  SHA512:
6
- metadata.gz: 9675dbcfd52f0eabedad7cbf65c947641fffd2ddd50854f86efec1bc365637f2fc6cf78aa59f4c277a1f58c541beb21ff350860483b2989211ccdcba6eeac3a5
7
- data.tar.gz: 1c937e242e9b1f677fbd093c340cf98bee580407d3254a81f383e0abdd2a771376f8e869181a96492c80397ad5922338602dfa3724a0a0300847d157eea47214
6
+ metadata.gz: 47cb5e87c367cad398aefe29cc337321902ea7b2efe06fe6c6adf65ff1b79d9ad186d7d66797dd56ab6785fe3e9309e6b29e25317bf874a55b7024790cef173f
7
+ data.tar.gz: 5e9da8492fc2fb8c540829c1c10ff7a3e1689f5bba13be4dace1f9f5a664b17a358448e98aeb7456fd198e8f482be8c1c07f93596bea2e5dc90b753ded32f682
data/lib/dependabot/gradle/file_fetcher.rb CHANGED
@@ -82,8 +82,12 @@ module Dependabot
82
82
 
83
83
  private
84
84
 
85
- sig { params(root_dir: String).returns(T::Array[DependencyFile]) }
86
- def all_buildfiles_in_build(root_dir)
85
+ # Builds can include themselves or each other (e.g. `includeBuild(".")` or a child build
86
+ # that includes its parent with `includeBuild("..")`), so each build is only visited once.
87
+ sig { params(root_dir: String, visited: T::Set[String]).returns(T::Array[DependencyFile]) }
88
+ def all_buildfiles_in_build(root_dir, visited = Set.new)
89
+ return [] unless visited.add?(root_dir)
90
+
87
91
  files = [buildfile(root_dir), settings_file(root_dir), version_catalog_file(root_dir), lockfile(root_dir),
88
92
  properties_file(root_dir)]
89
93
  .compact
@@ -94,7 +98,7 @@ module Dependabot
94
98
  files += convention_plugin_source_files(files, root_dir)
95
99
 
96
100
  files + included_builds(root_dir)
97
- .flat_map { |dir| all_buildfiles_in_build(dir) }
101
+ .flat_map { |dir| all_buildfiles_in_build(dir, visited) }
98
102
  end
99
103
 
100
104
  # Only fetch source trees for *nested* project directories (e.g. "build-logic/convention"
data/lib/dependabot/gradle/file_parser/repositories_finder.rb CHANGED
@@ -146,13 +146,13 @@ module Dependabot
146
146
  end
147
147
 
148
148
  repository_blocks.each do |block|
149
- repository_urls << GOOGLE_MAVEN_REPO if block.match?(/\sgoogle\(/)
149
+ repository_urls << GOOGLE_MAVEN_REPO if block.match?(/\sgoogle(?:\(|\s*\{)/)
150
150
 
151
- repository_urls << central_repo_url if block.match?(/\smavenCentral\(/)
151
+ repository_urls << central_repo_url if block.match?(/\smavenCentral(?:\(|\s*\{)/)
152
152
 
153
- repository_urls << "https://jcenter.bintray.com/" if block.match?(/\sjcenter\(/)
153
+ repository_urls << "https://jcenter.bintray.com/" if block.match?(/\sjcenter(?:\(|\s*\{)/)
154
154
 
155
- repository_urls << GRADLE_PLUGINS_REPO if block.match?(/\sgradlePluginPortal\(/)
155
+ repository_urls << GRADLE_PLUGINS_REPO if block.match?(/\sgradlePluginPortal(?:\(|\s*\{)/)
156
156
 
157
157
  block.scan(MAVEN_REPO_REGEX) do
158
158
  repository_urls << T.must(T.must(Regexp.last_match).named_captures.fetch("url"))
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-gradle
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.401.0
4
+ version: 0.403.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,28 +15,28 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.401.0
18
+ version: 0.403.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.401.0
25
+ version: 0.403.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: dependabot-maven
28
28
  requirement: !ruby/object:Gem::Requirement
29
29
  requirements:
30
30
  - - '='
31
31
  - !ruby/object:Gem::Version
32
- version: 0.401.0
32
+ version: 0.403.0
33
33
  type: :runtime
34
34
  prerelease: false
35
35
  version_requirements: !ruby/object:Gem::Requirement
36
36
  requirements:
37
37
  - - '='
38
38
  - !ruby/object:Gem::Version
39
- version: 0.401.0
39
+ version: 0.403.0
40
40
  - !ruby/object:Gem::Dependency
41
41
  name: debug
42
42
  requirement: !ruby/object:Gem::Requirement
@@ -291,7 +291,7 @@ licenses:
291
291
  - MIT
292
292
  metadata:
293
293
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
294
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.401.0
294
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.403.0
295
295
  rdoc_options: []
296
296
  require_paths:
297
297
  - lib