dependabot-hex 0.141.1 → 0.143.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '08266d2f4b9d52cc95ca9a2d3cf534c2a894ceeb0eed9588b82863da230f48ba'
-  data.tar.gz: 878e095fed0cb5f6598b33e52b33eb445cbae116fba0bb81992632d29ad81100
+  metadata.gz: e69ff7d5d52a7dc50845069798441ce8f51999e35e6d32193e926e5785be4829
+  data.tar.gz: fb99af7a0e8ad32693cb1e8b6bf94ee48c83849a3da217a1b6d7e0fc9353117f
 SHA512:
-  metadata.gz: c6d7c299ce7ab169169ef6966177cc94b30606b0531ee756c0b3f4608a88ab713a6a6a4578ffb4892046cfccbb9b1ddfe0fdcd89458d9a672b86ad557ff7a9f6
-  data.tar.gz: 8aa00f2e786628317c38d7e4ff45a1b7d9b418f3e030cf7b2e892397d72295b7c090f682a4aac145d8289c7870d41cfbdc941d4af034ad7ec425e527df4f00ec
+  metadata.gz: 9636f5d53ad2b000fb176c67cbcabc7856732fd2fae1a44c37b7aacfe066ed9ad32856ba8174b081f1aa12f2709007c9a27420c49779514fa0f0fcef3c6abc9c
+  data.tar.gz: c6b76d685bca65eefd98d9dbb5e2f19a504c6985bc55eeae483f9d312b27e9d8a50dfc97f3958cfda6c98e8ad9ae6bbc9e22f64699a5e2e236d62ffdcbaae00b

data/lib/dependabot/hex/requirement.rb

@@ -26,6 +26,16 @@ module Dependabot
         end
       end
 
+      # Patches Gem::Requirement to make it accept requirement strings like
+      # "~> 4.2.5, >= 4.2.5.1" without first needing to split them.
+      def initialize(*requirements)
+        requirements = requirements.flatten.flat_map do |req_string|
+          req_string.split(",").map(&:strip)
+        end
+
+        super(requirements)
+      end
+
       # Override the parser to create Hex::Versions
       def self.parse(obj)
         return ["=", Hex::Version.new(obj.to_s)] if obj.is_a?(Gem::Version)

data/lib/dependabot/hex/update_checker.rb

@@ -218,7 +218,7 @@ module Dependabot
             versions.reject!(&:prerelease?) unless wants_prerelease?
 
             filtered = versions.reject do |v|
-              ignore_reqs.any? { |r| r.satisfied_by?(v) }
+              ignore_requirements.any? { |r| r.satisfied_by?(v) }
             end
 
             raise AllVersionsIgnored if @raise_on_ignored && filtered.empty? && versions.any?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.141.1
+  version: 0.143.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-04-13 00:00:00.000000000 Z
+date: 2021-04-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.141.1
+        version: 0.143.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.141.1
+        version: 0.143.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.12.0
+        version: 1.13.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.12.0
+        version: 1.13.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -228,7 +228,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.2.3
+rubygems_version: 3.2.15
 signing_key: 
 specification_version: 4
 summary: Elixir (Hex) support for dependabot