dependabot-hex 0.211.0 → 0.213.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 792c6e5bc3147e5dc696b3af5cfed5524f72b3f2f1ba9d7c70223322978ced81
-  data.tar.gz: 974ea19b8d504785c6dc809fa5464a6d234a1c208bb95d857be607df3acad1df
+  metadata.gz: 30d16ac35f7e452a754f78329c9ef9ba1fd65758264be8220338a721e66dbcb6
+  data.tar.gz: 94a09051bf06589fe462aa33ab4440d1c5207069a23d8d45aea8517aeb16427e
 SHA512:
-  metadata.gz: 57d891615c5620a6eb2fd4f597ae7a90ce4bf0e107688a30a228e30d3ab3bc0ecc2b1638f49d5c53904f7b671d961f807149f2a1d8c558891b4f116cc24e6eee
-  data.tar.gz: eb8e2a724fbea394f9880d657787b96c96292e8b7413105a361fa439a33f1dc7818b19c41ef106df682ba5b70afea2fc3f9edfd04489184cd4c2825273e42a4a
+  metadata.gz: b9461aa63f1f9a7f6184b29659bbf2a006642fb70eb402787ecbe9a747251c6ae2bf0dd6b484f4e80fa9a0b4b5db42fc2d9eb838aa84c8277a261ce8c03113c8
+  data.tar.gz: 4a9453c6d17e8af0037c637041726c0c5e12fdcb9e061eaf208051fecf644ac6a54b2d6dcfbed7ed423b6593f6d7ad1c331a1cba796a113c89c0f4570ceb16c4

data/helpers/mix.lock

@@ -1,3 +1,3 @@
 %{
-  "jason": {:hex, :jason, "1.3.0", "fa6b82a934feb176263ad2df0dbd91bf633d4a46ebfdffea0c8ae82953714946", [:mix], [{:decimal, "~> 1.0 or ~> 2.0", [hex: :decimal, repo: "hexpm", optional: true]}], "hexpm", "53fc1f51255390e0ec7e50f9cb41e751c260d065dcba2bf0d08dc51a4002c2ac"},
+  "jason": {:hex, :jason, "1.4.0", "e855647bc964a44e2f67df589ccf49105ae039d4179db7f6271dfd3843dc27e6", [:mix], [{:decimal, "~> 1.0 or ~> 2.0", [hex: :decimal, repo: "hexpm", optional: true]}], "hexpm", "79a3791085b2a0f743ca04cec0f7be26443738779d09302e01318f97bdb82121"},
 }

data/lib/dependabot/hex/file_fetcher.rb

@@ -6,12 +6,11 @@ require "dependabot/file_fetchers/base"
 module Dependabot
   module Hex
     class FileFetcher < Dependabot::FileFetchers::Base
-      APPS_PATH_REGEX = /apps_path:\s*"(?<path>.*?)"/m.freeze
+      APPS_PATH_REGEX = /apps_path:\s*"(?<path>.*?)"/m
       STRING_ARG = %{(?:["'](.*?)["'])}
       SUPPORTED_METHODS = %w(eval_file require_file).join("|").freeze
-      SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/.
-                     freeze
-      PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/.freeze
+      SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/
+      PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/
 
       def self.required_files_in?(filenames)
         filenames.include?("mix.exs")
@@ -64,14 +63,14 @@ module Dependabot
         subapp_directories += umbrella_app_directories
         subapp_directories += sub_project_directories
 
-        subapp_directories.map do |dir|
+        subapp_directories.filter_map do |dir|
           fetch_file_from_host("#{dir}/mix.exs")
         rescue Dependabot::DependencyFileNotFound
           # If the folder doesn't have a mix.exs it *might* be because it's
           # not an app. Ignore the fact we couldn't fetch one and proceed with
           # updating (it will blow up later if there are problems)
           nil
-        end.compact
+        end
       rescue Octokit::NotFound, Gitlab::Error::NotFound
         # If the path specified in apps_path doesn't exist then it's not being
         # used. We can just return an empty array of subapp files.
@@ -82,7 +81,7 @@ module Dependabot
         mixfiles = [mixfile] + subapp_mixfiles
 
         mixfiles.flat_map do |mixfile|
-          mixfile_dir = mixfile.path.sub("/mix.exs", "").delete_prefix("/")
+          mixfile_dir = mixfile.path.to_s.delete_prefix("/").delete_suffix("/mix.exs")
 
           mixfile.content.gsub(/__DIR__/, "\"#{mixfile_dir}\"").scan(SUPPORT_FILE).map do |support_file_args|
             path = Pathname.new(File.join(*support_file_args.compact.reverse)).

data/lib/dependabot/hex/file_parser.rb

@@ -112,7 +112,7 @@ module Dependabot
       end
 
       def symbolize_keys(hash)
-        hash.keys.map { |k| [k.to_sym, hash[k]] }.to_h
+        hash.keys.to_h { |k| [k.to_sym, hash[k]] }
       end
 
       def mixfiles

data/lib/dependabot/hex/file_updater/mixfile_sanitizer.rb

@@ -11,23 +11,23 @@ module Dependabot
           @mixfile_content = mixfile_content
         end
 
-        FILE_READ      = /File.read\(.*?\)/.freeze
-        FILE_READ_BANG = /File.read!\(.*?\)/.freeze
+        FILE_READ      = /File.read\(.*?\)/
+        FILE_READ_BANG = /File.read!\(.*?\)/
         PIPE           = Regexp.escape("|>").freeze
-        VERSION_FILE   = /"VERSION"/i.freeze
+        VERSION_FILE   = /"VERSION"/i
 
-        NESTED_VERSION_FILE_READ = /String\.trim\(#{FILE_READ}\)/.freeze
-        NESTED_VERSION_FILE_READ_BANG = /String\.trim\(#{FILE_READ_BANG}\)/.freeze
-        PIPED_VERSION_FILE_READ =
-          /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ}/.freeze
-        PIPED_VERSION_FILE_READ_BANG =
-          /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ_BANG}/.freeze
+        NESTED_VERSION_FILE_READ = /String\.trim\(#{FILE_READ}\)/
+        NESTED_VERSION_FILE_READ_BANG = /String\.trim\(#{FILE_READ_BANG}\)/
+        PIPED_VERSION_FILE_READ = /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ}/
+        PIPED_VERSION_FILE_READ_BANG = /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ_BANG}/
 
+        # rubocop:disable Performance/MethodObjectAsBlock
         def sanitized_content
           mixfile_content.
-            yield_self(&method(:prevent_version_file_loading)).
-            yield_self(&method(:prevent_config_path_loading))
+            then(&method(:prevent_version_file_loading)).
+            then(&method(:prevent_config_path_loading))
         end
+        # rubocop:enable Performance/MethodObjectAsBlock
 
         private
 

data/lib/dependabot/hex/metadata_finder.rb

@@ -38,15 +38,14 @@ module Dependabot
       def find_source_from_hex_listing
         potential_source_urls =
           SOURCE_KEYS.
-          map { |key| hex_listing.dig("meta", "links", key) }.
-          compact
+          filter_map { |key| hex_listing.dig("meta", "links", key) }
 
         source_url = potential_source_urls.find { |url| Source.from_url(url) }
         Source.from_url(source_url)
       end
 
       def find_source_from_git_url
-        info = dependency.requirements.map { |r| r[:source] }.compact.first
+        info = dependency.requirements.filter_map { |r| r[:source] }.first
 
         url = info[:url] || info.fetch("url")
         Source.from_url(url)

data/lib/dependabot/hex/native_helpers.rb

@@ -4,7 +4,7 @@ module Dependabot
   module Hex
     module NativeHelpers
       def self.hex_helpers_dir
-        helpers_root = ENV["DEPENDABOT_NATIVE_HELPERS_PATH"]
+        helpers_root = ENV.fetch("DEPENDABOT_NATIVE_HELPERS_PATH", nil)
         return File.join(helpers_root, "hex") unless helpers_root.nil?
 
         File.join(__dir__, "../../../../hex/helpers")

data/lib/dependabot/hex/requirement.rb

@@ -6,8 +6,8 @@ require "dependabot/hex/version"
 module Dependabot
   module Hex
     class Requirement < Gem::Requirement
-      AND_SEPARATOR = /\s+and\s+/.freeze
-      OR_SEPARATOR = /\s+or\s+/.freeze
+      AND_SEPARATOR = /\s+and\s+/
+      OR_SEPARATOR = /\s+or\s+/
 
       # Add the double-equality matcher to the list of allowed operations
       OPS = OPS.merge("==" => ->(v, r) { v == r })
@@ -15,7 +15,7 @@ module Dependabot
       # Override the version pattern to allow local versions
       quoted = OPS.keys.map { |k| Regexp.quote k }.join "|"
       PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{Hex::Version::VERSION_PATTERN})\\s*"
-      PATTERN = /\A#{PATTERN_RAW}\z/.freeze
+      PATTERN = /\A#{PATTERN_RAW}\z/
 
       # Returns an array of requirements. At least one requirement from the
       # returned array must be satisfied for a version to be valid.

data/lib/dependabot/hex/update_checker/file_preparer.rb

@@ -99,7 +99,7 @@ module Dependabot
           elsif dependency.version then ">= #{dependency.version}"
           else
             version_for_requirement =
-              dependency.requirements.map { |r| r[:requirement] }.compact.
+              dependency.requirements.filter_map { |r| r[:requirement] }.
               reject { |req_string| req_string.start_with?("<") }.
               select { |req_string| req_string.match?(version_regex) }.
               map { |req_string| req_string.match(version_regex) }.
@@ -115,9 +115,9 @@ module Dependabot
             ">= #{parts.join('.')}"
           end
         end
+        # rubocop:enable Metrics/PerceivedComplexity
         # rubocop:enable Metrics/CyclomaticComplexity
         # rubocop:enable Metrics/AbcSize
-        # rubocop:enable Metrics/PerceivedComplexity
 
         def replace_git_pin(content, filename:)
           old_pin =

data/lib/dependabot/hex/update_checker/requirements_updater.rb

@@ -8,10 +8,10 @@ module Dependabot
   module Hex
     class UpdateChecker
       class RequirementsUpdater
-        OPERATORS = />=|<=|>|<|==|~>/.freeze
-        AND_SEPARATOR = /\s+and\s+/.freeze
-        OR_SEPARATOR = /\s+or\s+/.freeze
-        SEPARATOR = /#{AND_SEPARATOR}|#{OR_SEPARATOR}/.freeze
+        OPERATORS = />=|<=|>|<|==|~>/
+        AND_SEPARATOR = /\s+and\s+/
+        OR_SEPARATOR = /\s+or\s+/
+        SEPARATOR = /#{AND_SEPARATOR}|#{OR_SEPARATOR}/
 
         def initialize(requirements:, latest_resolvable_version:,
                        updated_source:)
@@ -105,7 +105,7 @@ module Dependabot
               when "!="
                 []
               else
-                raise "Unexpected operation for unsatisfied Gemfile "\
+                raise "Unexpected operation for unsatisfied Gemfile " \
                       "requirement: #{op}"
               end
             end

data/lib/dependabot/hex/version.rb

@@ -13,7 +13,7 @@ module Dependabot
       attr_reader :build_info
 
       VERSION_PATTERN = Gem::Version::VERSION_PATTERN + '(\+[0-9a-zA-Z\-.]+)?'
-      ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/.freeze
+      ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/
 
       def self.correct?(version)
         return false if version.nil?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.211.0
+  version: 0.213.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-23 00:00:00.000000000 Z
+date: 2022-10-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,42 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.211.0
+        version: 0.213.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.211.0
-- !ruby/object:Gem::Dependency
-  name: debase
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.2.3
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.2.3
-- !ruby/object:Gem::Dependency
-  name: debase-ruby_core_source
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.10.16
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.10.16
+        version: 0.213.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -86,14 +58,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.11.1
+        version: 3.13.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.11.1
+        version: 3.13.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -142,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.35.1
+        version: 1.37.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.35.1
+        version: 1.37.1
 - !ruby/object:Gem::Dependency
-  name: ruby-debug-ide
+  name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.3
+        version: 1.15.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.3
+        version: 1.15.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -277,14 +249,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.7.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.7.0
+      version: 3.1.0
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.3.7
 signing_key: 
 specification_version: 4
 summary: Elixir (Hex) support for dependabot