dependabot-hex 0.147.0 → 0.147.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7b95a853bb51f28f9b7d8f474265d4921bf90f14ba19f3bdd547df3e21c94ed0
-  data.tar.gz: df8fed446ef2a8e991bdfb4991cb70bf1d1711f60011040897e61ddcead15103
+  metadata.gz: f8b9ddd90611eeb715844a4fc68a28f5357ed9f69055b20429d2faafa864b23f
+  data.tar.gz: cf218f5b7cfdb184e73f41f40bb960382e1b8abb66987f9dd96f9fb6f0b4a606
 SHA512:
-  metadata.gz: 16c5d31de85aef87d9f43947c169f592792d5cfcb975f649c72e34e2fb3b41d1abef5e83e2619266988ef629e739d4181a81bae7f88ba4558e4a8c6cc1a006f8
-  data.tar.gz: 5ff7f352d7c1bc4839d1e9acdd4576aa7ad0c18e7904e8e8fe9a3e619c3f90069e404418dc904637fedec3c745dab4a31021b2fb1778e149dd2a6459c83b230e
+  metadata.gz: 5b97ff9710a8e33190c920dbb6aef08f7a16e0481e3a4b08cf0e1460b8125b242d1fc611ed98f127bba70184bd8f17f273d195c4c56c25c420e7894d26804e4f
+  data.tar.gz: 88a318074fe68f8d402b2289987e314e66b4164d94e405b056eda90db64a58117ab344403e3f79bdb730524ec24042bf625a7d354d97412cd78d9b7cd9e4dea2

data/lib/dependabot/hex/update_checker/version_resolver.rb

@@ -74,8 +74,10 @@ module Dependabot
             raise Dependabot::PrivateSourceAuthenticationFailure, org if org
           end
 
-          # TODO: This isn't pretty. It would be much nicer to catch the
-          # warnings as part of the Elixir module.
+          # TODO: Catch the warnings as part of the Elixir module. This happens
+          # when elixir throws warnings from the manifest files that end up in
+          # stdout and cause run_helper_subprocess to fail parsing the result as
+          # JSON.
           return error_result(error) if includes_result?(error)
 
           # Ignore dependencies which don't resolve due to mis-matching
@@ -101,8 +103,7 @@ module Dependabot
           result = error.message&.split("\n")&.last
           return false unless result
 
-          JSON.parse(error.message&.split("\n")&.last)["result"]
-          true
+          JSON.parse(error.message&.split("\n")&.last).key?("result")
         rescue JSON::ParserError
           false
         end
@@ -122,6 +123,12 @@ module Dependabot
 
           true
         rescue SharedHelpers::HelperSubprocessFailed => e
+          # TODO: Catch the warnings as part of the Elixir module. This happens
+          # when elixir throws warnings from the manifest files that end up in
+          # stdout and cause run_helper_subprocess to fail parsing the result as
+          # JSON.
+          return error_result(e) if includes_result?(e)
+
           raise Dependabot::DependencyFileNotResolvable, e.message
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.147.0
+  version: 0.147.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-13 00:00:00.000000000 Z
+date: 2021-05-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.147.0
+        version: 0.147.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.147.0
+        version: 0.147.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.14.0
+        version: 1.15.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.14.0
+        version: 1.15.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement