dependabot-hex 0.146.0 → 0.148.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 47b8dfd81ddb298f043879935481ef33df46312d1db035bab1ee8d440765f0f9
-  data.tar.gz: 36b54dadf9820dd725540af55236402e9c58c340e3240540e4d87822f43ccfaa
+  metadata.gz: 7ad611e93716e8f12853841a96452772eb6f7263194a5d972749538c17a9bdb2
+  data.tar.gz: 38574b6a658f74b06e90d72d904b6a142a44f72ac50143b585d541a41e4abd97
 SHA512:
-  metadata.gz: 6b3ca819b6efbc4d1e73afed96da69ec1fc80b3e21884521dcc4b5d357645e3fc80802e569865a635dd7d9584e573730622bb09d62ece8cffe32aee5b82f337c
-  data.tar.gz: caa2185c9755003333753d660cf60d1e9676a34a3ef586e148ab5ce8e455fab869fe68b31ec2348f3e8dbef39147b4a539d8eabc5405bf5062db415ced999da7
+  metadata.gz: b3e92bdc0a2a1018d03bd4c182d0f05c17bc6777cd4887c0e7ea411ff2eba8ba8a98018d424cb62a4baab776f2cbaf95c6276e951b53318cb62f02b4470d9e5e
+  data.tar.gz: 6da26c4e813d72151c2104e32981f7991013f5f8d6af522b94a0dfbcfa88689dace587d6841a6bf575997787d9d4d115a75f0bd57fd3e31207920f3fb9bed5eb

data/lib/dependabot/hex/update_checker/version_resolver.rb

@@ -74,8 +74,10 @@ module Dependabot
             raise Dependabot::PrivateSourceAuthenticationFailure, org if org
           end
 
-          # TODO: This isn't pretty. It would be much nicer to catch the
-          # warnings as part of the Elixir module.
+          # TODO: Catch the warnings as part of the Elixir module. This happens
+          # when elixir throws warnings from the manifest files that end up in
+          # stdout and cause run_helper_subprocess to fail parsing the result as
+          # JSON.
           return error_result(error) if includes_result?(error)
 
           # Ignore dependencies which don't resolve due to mis-matching
@@ -101,8 +103,7 @@ module Dependabot
           result = error.message&.split("\n")&.last
           return false unless result
 
-          JSON.parse(error.message&.split("\n")&.last)["result"]
-          true
+          JSON.parse(error.message&.split("\n")&.last).key?("result")
         rescue JSON::ParserError
           false
         end
@@ -122,6 +123,12 @@ module Dependabot
 
           true
         rescue SharedHelpers::HelperSubprocessFailed => e
+          # TODO: Catch the warnings as part of the Elixir module. This happens
+          # when elixir throws warnings from the manifest files that end up in
+          # stdout and cause run_helper_subprocess to fail parsing the result as
+          # JSON.
+          return error_result(e) if includes_result?(e)
+
           raise Dependabot::DependencyFileNotResolvable, e.message
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.146.0
+  version: 0.148.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-11 00:00:00.000000000 Z
+date: 2021-05-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.146.0
+        version: 0.148.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.146.0
+        version: 0.148.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.14.0
+        version: 1.15.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.14.0
+        version: 1.15.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement