dependabot-hex 0.169.1 → 0.169.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 584a8467d4817fba890ad17a7fbaa00642d80fa82f1dcc848ceace76d5b55781
-  data.tar.gz: 8a6e92e9ca46b8a66f1dec3ab71eab60b6c902bd9bfd6ef132669298f5134c6a
+  metadata.gz: '06469d7bfe04fc0121a7a5c7fbe2a552b2310aa964b3c8dc777eb0991a88b493'
+  data.tar.gz: b18cd48d4fa934e490bc730264b864f2f70c6480aee96712a9deab8b264e43e0
 SHA512:
-  metadata.gz: 4846fd156ee69159b57f699b2e72144063bba32319e24491eabbeae11018ebf0493abcda3dc60b33e601149eb5bebf8817d78796954402ac91ff7ba97aff6a73
-  data.tar.gz: 8822c6cf5e5babd13191e05eeb7730b37ba0919715c4e38b6956347d26458b72a89f8144c6ea33995a6afed70f45d26328636f83a6f879ca71cc74b8ee85b29e
+  metadata.gz: 9f194b63d2b0784455d4204b752c469129293e912d4b3bd7e0a517e37d543bc6b9746421ec6f69c6b8038adaaa0ba329822d9981ce6d5a1693f14b788ddcca7f
+  data.tar.gz: 81457740bfefd80ee677e946aa83ece90342b2e802d47c74a89c7d72dbed73cec532469c7e2d653129ab449ac3dcc604f91ccc7efef71c2608a59be0cd936709

data/lib/dependabot/hex/file_updater/mixfile_sanitizer.rb

@@ -11,16 +11,40 @@ module Dependabot
           @mixfile_content = mixfile_content
         end
 
+        FILE_READ      = /File.read\(.*?\)/.freeze
+        FILE_READ_BANG = /File.read!\(.*?\)/.freeze
+        PIPE           = Regexp.escape("|>").freeze
+        VERSION_FILE   = /"VERSION"/i.freeze
+
+        NESTED_VERSION_FILE_READ = /String\.trim\(#{FILE_READ}\)/.freeze
+        NESTED_VERSION_FILE_READ_BANG = /String\.trim\(#{FILE_READ_BANG}\)/.freeze
+        PIPED_VERSION_FILE_READ =
+          /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ}/.freeze
+        PIPED_VERSION_FILE_READ_BANG =
+          /#{VERSION_FILE}[[:space:]]+#{PIPE}[[:space:]]+#{FILE_READ_BANG}/.freeze
+
         def sanitized_content
           mixfile_content.
-            gsub(/File\.read!\(.*?\)/, '"0.0.1"').
-            gsub(/File\.read\(.*?\)/, '{:ok, "0.0.1"}').
-            gsub(/^\s*config_path:.*(?:,|$)/, "")
+            yield_self(&method(:prevent_version_file_loading)).
+            yield_self(&method(:prevent_config_path_loading))
         end
 
         private
 
         attr_reader :mixfile_content
+
+        def prevent_version_file_loading(configuration)
+          configuration.
+            gsub(NESTED_VERSION_FILE_READ_BANG, 'String.trim("0.0.1")').
+            gsub(NESTED_VERSION_FILE_READ, 'String.trim({:ok, "0.0.1"})').
+            gsub(PIPED_VERSION_FILE_READ, '{:ok, "0.0.1"}').
+            gsub(PIPED_VERSION_FILE_READ_BANG, '"0.0.1"')
+        end
+
+        def prevent_config_path_loading(configuration)
+          configuration.
+            gsub(/^\s*config_path:.*(?:,|$)/, "")
+        end
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.169.1
+  version: 0.169.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-29 00:00:00.000000000 Z
+date: 2021-11-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.1
+        version: 0.169.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.1
+        version: 0.169.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement