dependabot-hex 0.106.46 → 0.106.47

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9f03aec7f7cade1982e13fcdfbe6053f9ab038f2addfc542c7c73f54f3cc6ace
-  data.tar.gz: 18accba6a9a55baaa808c1c9deaea4e71e793a9d35670ac5d06ae38a383d82d9
+  metadata.gz: 941a5e39bf8d90e0e502b56e10ec92e93e7bbd2166f25d872c6c306882af5d5c
+  data.tar.gz: 4e967842ec266f75098d7d102aa8be37706a7db3529d63c9ea6feca76bee9278
 SHA512:
-  metadata.gz: 6cf8fa9dbcd2fe8e64329abbca478baf3b125716cc4341795538f95bf95b1348a1f190095165c927519b855aa857abaff103aa68b99c6731d5598900696e7b2b
-  data.tar.gz: 6128633522a8408a1d5d4823ac240e311ef8a18ea8ed26ac1487c152ea1cf303d48db5ba3a50b254a052b897bb5814400b21e360ece0b38531f289e089a86b0f
+  metadata.gz: d974eb6ab5d89d217a84ad8fbeb2bbdac3322df0ba89b8d957d27b56e6f63fc4f893f5b9a62cb3c65c9efce70a0923b9a5bbf50702010aa70b413077cba948d0
+  data.tar.gz: 5b4f8012c0c03923d03ad2a1a112c211fc89953c959198dc4f50a9eb0ad093afdb16ca085ba710ec572e672cf46511f2d234b3f89cb6d94acdbaf924cd9c6cef

data/lib/dependabot/hex/file_parser.rb

@@ -3,6 +3,7 @@
 require "dependabot/dependency"
 require "dependabot/file_parsers"
 require "dependabot/file_parsers/base"
+require "dependabot/hex/file_updater/mixfile_sanitizer"
 require "dependabot/hex/native_helpers"
 require "dependabot/shared_helpers"
 require "dependabot/errors"
@@ -81,9 +82,9 @@ module Dependabot
       end
 
       def sanitize_mixfile(content)
-        content.
-          gsub(/File\.read!\(.*?\)/, '"0.0.1"').
-          gsub(/File\.read\(.*?\)/, '{:ok, "0.0.1"}')
+        Hex::FileUpdater::MixfileSanitizer.new(
+          mixfile_content: content
+        ).sanitized_content
       end
 
       def mix_env

data/lib/dependabot/hex/file_updater/mixfile_sanitizer.rb

@@ -14,7 +14,8 @@ module Dependabot
         def sanitized_content
           mixfile_content.
             gsub(/File\.read!\(.*?\)/, '"0.0.1"').
-            gsub(/File\.read\(.*?\)/, '{:ok, "0.0.1"}')
+            gsub(/File\.read\(.*?\)/, '{:ok, "0.0.1"}').
+            gsub(/config_path:.*(?:,|$)/, "")
         end
 
         private

data/lib/dependabot/hex/update_checker/version_resolver.rb

@@ -3,6 +3,7 @@
 require "dependabot/hex/version"
 require "dependabot/hex/update_checker"
 require "dependabot/hex/native_helpers"
+require "dependabot/hex/file_updater/mixfile_sanitizer"
 require "dependabot/shared_helpers"
 require "dependabot/errors"
 
@@ -134,10 +135,21 @@ module Dependabot
           files.each do |file|
             path = file.name
             FileUtils.mkdir_p(Pathname.new(path).dirname)
-            File.write(path, file.content)
+
+            if file.name.end_with?("mix.exs")
+              File.write(path, sanitize_mixfile(file.content))
+            else
+              File.write(path, file.content)
+            end
           end
         end
 
+        def sanitize_mixfile(content)
+          Hex::FileUpdater::MixfileSanitizer.new(
+            mixfile_content: content
+          ).sanitized_content
+        end
+
         def version_class
           Hex::Version
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.106.46
+  version: 0.106.47
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-05-10 00:00:00.000000000 Z
+date: 2019-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.46
+        version: 0.106.47
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.106.46
+        version: 0.106.47
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement