dependabot-hex 0.221.0 → 0.223.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bc54bf3538419fd8ad7dd49f6f8a06600278ebf18ab7866dcaf2727c18e53c82
4
- data.tar.gz: 5bdad1ddd9e61ff314d10d519284cb83eb3e68947836ac9227078ee6d54bdcee
3
+ metadata.gz: 9e72e7a127d9dd84ddfc75debeb401b8c5d7ce66ca50440b107664a28da280a4
4
+ data.tar.gz: ab41682686f7b02418d1584e5f026fc002a4313bd3bb4a5b825cae6cad1c9246
5
5
  SHA512:
6
- metadata.gz: '08b4768f5996dd25b186d6201da4e338a81748219ae74aa9c87d13162f757cecd8dbb06a286585baa6687be1a655530be18cf32610ceb4be0b23fe36c27262c5'
7
- data.tar.gz: 44f1d823aee8225b063083e83578523e2b55220fc32b71c7ec1683424cd428d21fb9cb73bc92be059885b106bb4bd9c53073fd1820bf2b0924ed0473c3b5e498
6
+ metadata.gz: '08237144612c8ece12513c27f80185f6dd10a4d6c75aef127d68d009ecee3c5267bfd554e83823570af3cf618cd600ca75787760b087eaf885075a2f15e49716'
7
+ data.tar.gz: 4f0c82e91664ed3c5fb1bdce89ab2328ce6bf7631da2ee12549b2f284c997874037d2e63cbf7a8a018268a8cdd747e5761d493d9e383a5b8bfed7d71bb932aeb
@@ -26,13 +26,7 @@ module Dependabot
26
26
  end
27
27
 
28
28
  def new_source_type
29
- sources =
30
- dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
31
-
32
- return "default" if sources.empty?
33
- raise "Multiple sources! #{sources.join(', ')}" if sources.count > 1
34
-
35
- sources.first[:type] || sources.first.fetch("type")
29
+ dependency.source_type
36
30
  end
37
31
 
38
32
  def find_source_from_hex_listing
@@ -14,7 +14,7 @@ module Dependabot
14
14
 
15
15
  # Override the version pattern to allow local versions
16
16
  quoted = OPS.keys.map { |k| Regexp.quote k }.join "|"
17
- PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{Hex::Version::VERSION_PATTERN})\\s*"
17
+ PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{Hex::Version::VERSION_PATTERN})\\s*".freeze
18
18
  PATTERN = /\A#{PATTERN_RAW}\z/
19
19
 
20
20
  # Returns an array of requirements. At least one requirement from the
@@ -162,12 +162,7 @@ module Dependabot
162
162
  end
163
163
 
164
164
  def dependency_source_details
165
- sources =
166
- dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
167
-
168
- raise "Multiple sources! #{sources.join(', ')}" if sources.count > 1
169
-
170
- sources.first
165
+ dependency.source_details
171
166
  end
172
167
 
173
168
  def fetch_latest_resolvable_version(unlock_requirement:)
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-hex
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.221.0
4
+ version: 0.223.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-07-13 00:00:00.000000000 Z
11
+ date: 2023-07-25 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.221.0
19
+ version: 0.223.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.221.0
26
+ version: 0.223.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -216,7 +216,7 @@ licenses:
216
216
  - Nonstandard
217
217
  metadata:
218
218
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
219
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
219
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.223.0
220
220
  post_install_message:
221
221
  rdoc_options: []
222
222
  require_paths: