dependabot-hex 0.233.0 → 0.235.0
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 60bb7a52674086d7dcc227937b3a89a0f60e2b9c2b3d5f0d3ded70e8e4ee49fa
|
4
|
+
data.tar.gz: 3924702da7a84400582b70f6e4a5adcbfd6b5cc19a3542d9584875e00092431a
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 7127102b7d5b35b52f54fd0efb80dc336ac07bb14644df751c801b36580a376575b8e495637b1620d0af0c48b57dd8f585d92593e3c6b93606aea387825dbb97
|
7
|
+
data.tar.gz: 1006ead7e775759110f93546b0c709135e34f48eb80bb5733994525fe1492079bf453b20783eb8c3f5e73b130a1ad18ab969f10e0403ef615e3a528c4eed9a84
|
@@ -72,12 +72,12 @@ module Dependabot
|
|
72
72
|
def update_git_pin(content:, filename:, dependency:)
|
73
73
|
updated_pin =
|
74
74
|
dependency.requirements.find { |r| r[:file] == filename }
|
75
|
-
|
75
|
+
&.dig(:source, :ref)
|
76
76
|
|
77
77
|
old_pin =
|
78
78
|
dependency.previous_requirements
|
79
79
|
.find { |r| r[:file] == filename }
|
80
|
-
|
80
|
+
&.dig(:source, :ref)
|
81
81
|
|
82
82
|
return content unless old_pin
|
83
83
|
return content if old_pin == updated_pin
|
@@ -93,7 +93,7 @@ module Dependabot
|
|
93
93
|
def updated_version_req_lower_bound(filename)
|
94
94
|
original_req = dependency.requirements
|
95
95
|
.find { |r| r.fetch(:file) == filename }
|
96
|
-
|
96
|
+
&.fetch(:requirement)
|
97
97
|
|
98
98
|
if original_req && !unlock_requirement? then original_req
|
99
99
|
elsif dependency.version&.match?(/^[0-9a-f]{40}$/) then ">= 0"
|
@@ -123,7 +123,7 @@ module Dependabot
|
|
123
123
|
def replace_git_pin(content, filename:)
|
124
124
|
old_pin =
|
125
125
|
dependency.requirements.find { |r| r.fetch(:file) == filename }
|
126
|
-
|
126
|
+
&.dig(:source, :ref)
|
127
127
|
|
128
128
|
return content unless old_pin
|
129
129
|
return content if old_pin == replacement_git_pin
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-hex
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.235.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-10-
|
11
|
+
date: 2023-10-19 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.235.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.235.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -230,7 +230,7 @@ licenses:
|
|
230
230
|
- Nonstandard
|
231
231
|
metadata:
|
232
232
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
233
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
233
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.235.0
|
234
234
|
post_install_message:
|
235
235
|
rdoc_options: []
|
236
236
|
require_paths:
|