dependabot-gradle 0.366.0 → 0.367.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/gradle/metadata_finder.rb +12 -1
- metadata +6 -6
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: bc48d762c4d4fb0f7f96b4025d52c55dfb5f2f45a6018a8b832b642c21ad7711
|
|
4
|
+
data.tar.gz: c279d970af05c53c7212257ea6d78f9c5de6a89f5cea57c862b2621aa0d86f08
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: ffff46d8e6296799c80a63e9b13399b71b9dc71c91a3cefa4fcf69c44a5124ac6b665886a263bf3100a6c83fae5045dea37d0dfc556e72c4196172c83547e253
|
|
7
|
+
data.tar.gz: f8a38bde2b299a95e8e920e5537c91680f72fcd5efaab4fd604634bfe534e2e576f057768b3d9bb2ab0b4e99ace3d7fe70f36e87657002f9168633013f705764
|
|
@@ -26,7 +26,7 @@ module Dependabot
|
|
|
26
26
|
|
|
27
27
|
sig { override.returns(T.nilable(Dependabot::Source)) }
|
|
28
28
|
def look_up_source
|
|
29
|
-
return
|
|
29
|
+
return distributions_source if Distributions.distribution_requirements?(dependency.requirements)
|
|
30
30
|
|
|
31
31
|
tmp_source = look_up_source_in_pom(dependency_pom_file)
|
|
32
32
|
return tmp_source if tmp_source
|
|
@@ -42,6 +42,17 @@ module Dependabot
|
|
|
42
42
|
tmp_source if repo_has_subdir_for_dep?(tmp_source)
|
|
43
43
|
end
|
|
44
44
|
|
|
45
|
+
# The Gradle Wrapper does not have its own release notes.
|
|
46
|
+
# Instead, it shares the release notes of the matching Gradle version.
|
|
47
|
+
sig { returns(Dependabot::Source) }
|
|
48
|
+
def distributions_source
|
|
49
|
+
Source.new(
|
|
50
|
+
provider: "github",
|
|
51
|
+
repo: "gradle/gradle",
|
|
52
|
+
directory: "/"
|
|
53
|
+
)
|
|
54
|
+
end
|
|
55
|
+
|
|
45
56
|
sig { params(tmp_source: Dependabot::Source).returns(T::Boolean) }
|
|
46
57
|
def repo_has_subdir_for_dep?(tmp_source)
|
|
47
58
|
@repo_has_subdir_for_dep ||= T.let({}, T.nilable(T::Hash[Dependabot::Source, T::Boolean]))
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-gradle
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.367.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,28 +15,28 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.367.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.367.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: dependabot-maven
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
29
29
|
requirements:
|
|
30
30
|
- - '='
|
|
31
31
|
- !ruby/object:Gem::Version
|
|
32
|
-
version: 0.
|
|
32
|
+
version: 0.367.0
|
|
33
33
|
type: :runtime
|
|
34
34
|
prerelease: false
|
|
35
35
|
version_requirements: !ruby/object:Gem::Requirement
|
|
36
36
|
requirements:
|
|
37
37
|
- - '='
|
|
38
38
|
- !ruby/object:Gem::Version
|
|
39
|
-
version: 0.
|
|
39
|
+
version: 0.367.0
|
|
40
40
|
- !ruby/object:Gem::Dependency
|
|
41
41
|
name: debug
|
|
42
42
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -285,7 +285,7 @@ licenses:
|
|
|
285
285
|
- MIT
|
|
286
286
|
metadata:
|
|
287
287
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
288
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
288
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.367.0
|
|
289
289
|
rdoc_options: []
|
|
290
290
|
require_paths:
|
|
291
291
|
- lib
|