dependabot-gradle 0.380.0 → 0.381.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/gradle/package/package_details_fetcher.rb +27 -3
  3. data/lib/dependabot/gradle/version.rb +6 -3
  4. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 6119b8ddfc9e47a3eba2ab95c17bb4628106a525375a8b04762a459d3ce1ace2
4
- data.tar.gz: 746d406e83069c13be3aa0a987273f0d216e8811c7766a023b83ce492a5e9fc3
3
+ metadata.gz: 47a95a22f6928d61384fbdcad6a0f380e947cde49bb5e2b441fc30e9f878ea30
4
+ data.tar.gz: c2fbefa823a3cac3888e0a3976d0d17ae79a23501f124db73f344c73788ab42e
5
5
  SHA512:
6
- metadata.gz: 1d9a9e288365c57bc44bdc85a17c2bec109df607585b266a3872f7b2c4d81e7f48bbea0cab3d16cfa575698c3736ebb89bccee274ccb7b87edccf93330d09027
7
- data.tar.gz: 3849e2484105ca53b3c39ff4d2410f343d000dd0d8106c78dbb320a70867829e2a3653501139a5170b4e104ea7878e86ddf1df8a02afefaa1ab699dc91ab9c10
6
+ metadata.gz: 92d0bfb78cfaf20469a27f89908bf0e1552d84f04b9a88dfe417529518be7773ed60e44851697885fb92f728d21055d21b95653d754161c8df607e4b516fe0e5
7
+ data.tar.gz: b046a8c623cf05a6375db35f3a6bbb983b4fb94ae764cddd925bf0a66a32df5af0546128bae318496dbbd3654027bd571f219e5d77fc08de9077cfd57860ee34
data/lib/dependabot/gradle/package/package_details_fetcher.rb CHANGED
@@ -19,13 +19,37 @@ require "dependabot/gradle/package/version_release_date_fallback_fetcher"
19
19
  module Dependabot
20
20
  module Gradle
21
21
  module Package
22
+ module EofRetry
23
+ extend T::Sig
24
+
25
+ EOF_RETRY_COUNT = 2
26
+
27
+ sig do
28
+ params(
29
+ url: String,
30
+ headers: T::Hash[T.any(String, Symbol), T.untyped]
31
+ ).returns(Excon::Response)
32
+ end
33
+ def self.get(url:, headers:)
34
+ retries_remaining = EOF_RETRY_COUNT
35
+
36
+ begin
37
+ Dependabot::RegistryClient.get(url: url, headers: headers)
38
+ rescue Excon::Error::Socket => e
39
+ raise e unless e.socket_error.is_a?(EOFError) && retries_remaining.positive?
40
+
41
+ retries_remaining -= 1
42
+ retry
43
+ end
44
+ end
45
+ end
46
+
22
47
  class PackageDetailsFetcher
23
48
  extend T::Sig
24
49
 
25
50
  CENTRAL_REPO_URL = "https://repo.maven.apache.org/maven2"
26
51
  KOTLIN_PLUGIN_REPO_PREFIX = "org.jetbrains.kotlin"
27
52
  TYPE_SUFFICES = %w(jre android java native_mt agp).freeze
28
-
29
53
  sig do
30
54
  params(
31
55
  dependency: Dependabot::Dependency,
@@ -225,7 +249,7 @@ module Dependabot
225
249
  @dependency_metadata ||= T.let({}, T.nilable(T::Hash[T.untyped, T.untyped]))
226
250
  @dependency_metadata[repository_details.hash] ||=
227
251
  begin
228
- response = Dependabot::RegistryClient.get(
252
+ response = EofRetry.get(
229
253
  url: dependency_metadata_url(repository_details.fetch("url")),
230
254
  headers: repository_details.fetch("auth_headers")
231
255
  )
@@ -247,7 +271,7 @@ module Dependabot
247
271
  @release_info_metadata ||= T.let({}, T.nilable(T::Hash[Integer, T.untyped]))
248
272
  @release_info_metadata[repository_details.hash] ||=
249
273
  begin
250
- response = Dependabot::RegistryClient.get(
274
+ response = EofRetry.get(
251
275
  url: dependency_metadata_url(repository_details.fetch("url")).gsub("maven-metadata.xml", ""),
252
276
  headers: repository_details.fetch("auth_headers")
253
277
  )
data/lib/dependabot/gradle/version.rb CHANGED
@@ -25,12 +25,15 @@ module Dependabot
25
25
  T::Hash[String, T::Hash[Symbol, Integer]]
26
26
  )
27
27
  NAMED_QUALIFIERS_HIERARCHY = T.let(
28
+ # Pragmatic (not spec-exact) ranking; preview≈rc, experimental/unstable≈alpha.
28
29
  {
30
+ "dev" => 0,
29
31
  "a" => 1, "alpha" => 1,
30
- "b" => 2, "beta" => 2,
32
+ "experimental" => 1, "unstable" => 1,
33
+ "b" => 2, "beta" => 2,
31
34
  "m" => 3, "milestone" => 3,
32
- "rc" => 4, "cr" => 4, "pr" => 4, "pre" => 4,
33
- "snapshot" => 5, "dev" => 5,
35
+ "rc" => 4, "cr" => 4, "pr" => 4, "pre" => 4, "preview" => 4,
36
+ "snapshot" => 5,
34
37
  "ga" => 6, "" => 6, "final" => 6,
35
38
  "sp" => 7
36
39
  }.freeze,
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-gradle
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.380.0
4
+ version: 0.381.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,28 +15,28 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.380.0
18
+ version: 0.381.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.380.0
25
+ version: 0.381.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: dependabot-maven
28
28
  requirement: !ruby/object:Gem::Requirement
29
29
  requirements:
30
30
  - - '='
31
31
  - !ruby/object:Gem::Version
32
- version: 0.380.0
32
+ version: 0.381.0
33
33
  type: :runtime
34
34
  prerelease: false
35
35
  version_requirements: !ruby/object:Gem::Requirement
36
36
  requirements:
37
37
  - - '='
38
38
  - !ruby/object:Gem::Version
39
- version: 0.380.0
39
+ version: 0.381.0
40
40
  - !ruby/object:Gem::Dependency
41
41
  name: debug
42
42
  requirement: !ruby/object:Gem::Requirement
@@ -286,7 +286,7 @@ licenses:
286
286
  - MIT
287
287
  metadata:
288
288
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
289
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.380.0
289
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.381.0
290
290
  rdoc_options: []
291
291
  require_paths:
292
292
  - lib