dependabot-hex 0.155.0 → 0.156.3
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/hex/file_fetcher.rb +16 -5
- metadata +6 -6
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: ab4f3d7151e7c3662e3555b809045699d03b0f5185a6d4a3d444df78d670b399
|
4
|
+
data.tar.gz: a5d2b218f48e1fb408874a1d367b84897c2e2b9438b99d125383325517066cae
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 5f13dd1dcdc8382e47bae7573892666d649b17769a787943ed6e2fde3f5e2cd8f3fa42541f4bfce05311500ecda17ae15347ed9fa74fe09d605a2aebb994a066
|
7
|
+
data.tar.gz: de381102110e8a79266436ff2cbeabd77f21a493dce686e3a56fbfad481515c1ad2dd0e69e67a29f9142ba89fffc30e5e05fe3ffee09aa21ddff7f1171c79126
|
@@ -11,6 +11,7 @@ module Dependabot
|
|
11
11
|
SUPPORTED_METHODS = %w(eval_file require_file).join("|").freeze
|
12
12
|
SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/.
|
13
13
|
freeze
|
14
|
+
PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/.freeze
|
14
15
|
|
15
16
|
def self.required_files_in?(filenames)
|
16
17
|
filenames.include?("mix.exs")
|
@@ -44,16 +45,26 @@ module Dependabot
|
|
44
45
|
nil
|
45
46
|
end
|
46
47
|
|
47
|
-
def
|
48
|
+
def umbrella_app_directories
|
48
49
|
apps_path = mixfile.content.match(APPS_PATH_REGEX)&.
|
49
50
|
named_captures&.fetch("path")
|
50
51
|
return [] unless apps_path
|
51
52
|
|
52
|
-
|
53
|
-
|
54
|
-
|
53
|
+
repo_contents(dir: apps_path).
|
54
|
+
select { |f| f.type == "dir" }.
|
55
|
+
map { |f| File.join(apps_path, f.name) }
|
56
|
+
end
|
57
|
+
|
58
|
+
def sub_project_directories
|
59
|
+
mixfile.content.scan(PATH_DEPS_REGEX).flatten
|
60
|
+
end
|
61
|
+
|
62
|
+
def subapp_mixfiles
|
63
|
+
subapp_directories = []
|
64
|
+
subapp_directories += umbrella_app_directories
|
65
|
+
subapp_directories += sub_project_directories
|
55
66
|
|
56
|
-
|
67
|
+
subapp_directories.map do |dir|
|
57
68
|
fetch_file_from_host("#{dir}/mix.exs")
|
58
69
|
rescue Dependabot::DependencyFileNotFound
|
59
70
|
# If the folder doesn't have a mix.exs it *might* be because it's
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-hex
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.156.3
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2021-06-
|
11
|
+
date: 2021-06-29 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.156.3
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.156.3
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: byebug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -100,14 +100,14 @@ dependencies:
|
|
100
100
|
requirements:
|
101
101
|
- - "~>"
|
102
102
|
- !ruby/object:Gem::Version
|
103
|
-
version: 1.
|
103
|
+
version: 1.17.0
|
104
104
|
type: :development
|
105
105
|
prerelease: false
|
106
106
|
version_requirements: !ruby/object:Gem::Requirement
|
107
107
|
requirements:
|
108
108
|
- - "~>"
|
109
109
|
- !ruby/object:Gem::Version
|
110
|
-
version: 1.
|
110
|
+
version: 1.17.0
|
111
111
|
- !ruby/object:Gem::Dependency
|
112
112
|
name: simplecov
|
113
113
|
requirement: !ruby/object:Gem::Requirement
|