dependabot-hex 0.169.0 → 0.169.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 84722f2526059659baee26c9b7e4c50b10531176f666b5c798331baaa04ebb44
-  data.tar.gz: 0da96bb6e797a8971ea702715e24051ab84477ec5346081fd4621239ac8b0e9d
+  metadata.gz: d7363de8342f13c44bd2fde793125dd9f08be9712f7eaef1bd11f78842bd526e
+  data.tar.gz: f2d88ca3898c272c2c8327f5b222162c3aeaff7ebc88bc874714535722b96e6e
 SHA512:
-  metadata.gz: aeb420be711580b7d38d449b0101858e49620128a501212b599ede7e35780c27120cb21ebced799a32868beffbbbfa17160a22a86b76c5c5ba35b1239adc6a08
-  data.tar.gz: 92114b5625031adfa7114d3362ab7864e70047116cd667eafff30a11b75b94e5fc00475366edd377c9d038377fac913ab727a4911a28f44a904d2ff595646f4a
+  metadata.gz: ae6159767ece6ea9ba19ba63a8d74fea253637480af254e8fef547cbca17f5ef49127ab88d891f52c10c10bc66459ef752ea762b1e011f361cdd1684f1c077b6
+  data.tar.gz: a93af985a8b4fc778610e687a8a093380a0d20a721cb9b71a3176e4e77d19ce10b866fe4289ee9217ccc37355ece72e156ff6a33a0ce21bec7843ddc9f8b2e4c

data/lib/dependabot/hex/file_updater/mixfile_sanitizer.rb

@@ -11,16 +11,40 @@ module Dependabot
           @mixfile_content = mixfile_content
         end
 
+        FILE_READ      = /File.read\(.*?\)/.freeze
+        FILE_READ_BANG = /File.read!\(.*?\)/.freeze
+        PIPE           = Regexp.escape("|>").freeze
+        VERSION_FILE   = /"VERSION"/i.freeze
+
+        NESTED_VERSION_FILE_READ = /String\.trim\(#{FILE_READ}\)/.freeze
+        NESTED_VERSION_FILE_READ_BANG = /String\.trim\(#{FILE_READ_BANG}\)/.freeze
+        PIPED_VERSION_FILE_READ =
+          /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ}/.freeze
+        PIPED_VERSION_FILE_READ_BANG =
+          /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ_BANG}/.freeze
+
         def sanitized_content
           mixfile_content.
-            gsub(/File\.read!\(.*?\)/, '"0.0.1"').
-            gsub(/File\.read\(.*?\)/, '{:ok, "0.0.1"}').
-            gsub(/^\s*config_path:.*(?:,|$)/, "")
+            yield_self(&method(:prevent_version_file_loading)).
+            yield_self(&method(:prevent_config_path_loading))
         end
 
         private
 
         attr_reader :mixfile_content
+
+        def prevent_version_file_loading(configuration)
+          configuration.
+            gsub(NESTED_VERSION_FILE_READ_BANG, 'String.trim("0.0.1")').
+            gsub(NESTED_VERSION_FILE_READ, 'String.trim({:ok, "0.0.1"})').
+            gsub(PIPED_VERSION_FILE_READ, '{:ok, "0.0.1"}').
+            gsub(PIPED_VERSION_FILE_READ_BANG, '"0.0.1"')
+        end
+
+        def prevent_config_path_loading(configuration)
+          configuration.
+            gsub(/^\s*config_path:.*(?:,|$)/, "")
+        end
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.169.0
+  version: 0.169.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-23 00:00:00.000000000 Z
+date: 2021-12-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.0
+        version: 0.169.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.0
+        version: 0.169.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -228,7 +228,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.2.22
+rubygems_version: 3.2.32
 signing_key: 
 specification_version: 4
 summary: Elixir (Hex) support for dependabot