dependabot-hex 0.233.0 → 0.234.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 460cf736bb49c73d3332b0950971872903a4225939b0853871ea7cd180eaf51d
|
4
|
+
data.tar.gz: a527f4c80dd64a9270ba8248f0ed603ec5dc2155f117ce15df60927d66be421c
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: f3013d06edd430fbe7693fe7f7536d8269e961dfed19e5322d25186e923fe4f4e42d3e4aa4ef4d84c14b518fe28ba98e6e5b28cd1670487edb8fc607131079f9
|
7
|
+
data.tar.gz: 1f99959dfe135a2e7d4f82fd4c33ec2ef93c64f99f6df241a6cee324d12dd6fdf80dda150cb2e398094a8b7a3d1562e6a371724a44034a61e9d0dc62b2888b06
|
@@ -72,12 +72,12 @@ module Dependabot
|
|
72
72
|
def update_git_pin(content:, filename:, dependency:)
|
73
73
|
updated_pin =
|
74
74
|
dependency.requirements.find { |r| r[:file] == filename }
|
75
|
-
|
75
|
+
&.dig(:source, :ref)
|
76
76
|
|
77
77
|
old_pin =
|
78
78
|
dependency.previous_requirements
|
79
79
|
.find { |r| r[:file] == filename }
|
80
|
-
|
80
|
+
&.dig(:source, :ref)
|
81
81
|
|
82
82
|
return content unless old_pin
|
83
83
|
return content if old_pin == updated_pin
|
@@ -93,7 +93,7 @@ module Dependabot
|
|
93
93
|
def updated_version_req_lower_bound(filename)
|
94
94
|
original_req = dependency.requirements
|
95
95
|
.find { |r| r.fetch(:file) == filename }
|
96
|
-
|
96
|
+
&.fetch(:requirement)
|
97
97
|
|
98
98
|
if original_req && !unlock_requirement? then original_req
|
99
99
|
elsif dependency.version&.match?(/^[0-9a-f]{40}$/) then ">= 0"
|
@@ -123,7 +123,7 @@ module Dependabot
|
|
123
123
|
def replace_git_pin(content, filename:)
|
124
124
|
old_pin =
|
125
125
|
dependency.requirements.find { |r| r.fetch(:file) == filename }
|
126
|
-
|
126
|
+
&.dig(:source, :ref)
|
127
127
|
|
128
128
|
return content unless old_pin
|
129
129
|
return content if old_pin == replacement_git_pin
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-hex
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.234.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-10-
|
11
|
+
date: 2023-10-12 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.234.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.234.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -230,7 +230,7 @@ licenses:
|
|
230
230
|
- Nonstandard
|
231
231
|
metadata:
|
232
232
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
233
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
233
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.234.0
|
234
234
|
post_install_message:
|
235
235
|
rdoc_options: []
|
236
236
|
require_paths:
|