dependabot-maven 0.117.9 → 0.118.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 41e12c50cbfce76f08b2a651f00e822e99d9102f14819c67171c1d408801a6db
-  data.tar.gz: db3f3ec198f61adaf3946d4aa3f763d4bc512f7d098e2f45c4e2917d5fad8964
+  metadata.gz: 20d9d7ca26cf564b8df6b29a37331afb1fbba8705bfb642fc96b207072e3a13f
+  data.tar.gz: b997886f406166a162116e0e9c9518bc09d52960930fc5808e15f77ea9fa4066
 SHA512:
-  metadata.gz: 67a7a47cbe27a008e28d42ccd2a00dcffe570cb3fdbdaf971ba284e94b5b96e6b53255a7dea7418b9ed961438dfe85b520d5647cd964c060df1b73a239b0f593
-  data.tar.gz: cb437e953f18279ef06aae4f931b6d79f1d70bed9b4d3787991afd6cf4186c00e4f428bd1313f6f8863aa017495e91542edea9226e919c8c49684365071f2833
+  metadata.gz: 15eec530a6de04b8228faad5592d27c899f157cada785842fb84b6d5e20594509f09769e8cebb06783a7117cba637a394eba01f926137ff85c85d8cdf4eaa960
+  data.tar.gz: e5f9236bdda3dd577ab79b2481ff44fcf919761015331b942db9ec5d3002fdf8e248d209918664fbdca6a1af78889ad8c353a1c400325fc8eabd907bf5b578d2

data/lib/dependabot/maven/update_checker.rb

@@ -117,6 +117,7 @@ module Dependabot
             dependency_files: dependency_files,
             credentials: credentials,
             ignored_versions: ignored_versions,
+            raise_on_ignored: raise_on_ignored,
             security_advisories: security_advisories
           )
       end

data/lib/dependabot/maven/update_checker/version_finder.rb

@@ -14,11 +14,13 @@ module Dependabot
         TYPE_SUFFICES = %w(jre android java).freeze
 
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, security_advisories:,
+                       raise_on_ignored: false)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
           @forbidden_urls      = []
         end
@@ -40,8 +42,8 @@ module Dependabot
           possible_versions = filter_prereleases(possible_versions)
           possible_versions = filter_date_based_versions(possible_versions)
           possible_versions = filter_version_types(possible_versions)
-          possible_versions = filter_ignored_versions(possible_versions)
           possible_versions = filter_vulnerable_versions(possible_versions)
+          possible_versions = filter_ignored_versions(possible_versions)
           possible_versions = filter_lower_versions(possible_versions)
 
           possible_versions.find { |v| released?(v.fetch(:version)) }
@@ -89,16 +91,20 @@ module Dependabot
         end
 
         def filter_ignored_versions(possible_versions)
-          versions_array = possible_versions
+          filtered = possible_versions
 
           ignored_versions.each do |req|
             ignore_req = Maven::Requirement.new(req.split(","))
-            versions_array =
-              versions_array.
+            filtered =
+              filtered.
               reject { |v| ignore_req.satisfied_by?(v.fetch(:version)) }
           end
 
-          versions_array
+          if @raise_on_ignored && filtered.empty? && possible_versions.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(possible_versions)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.117.9
+  version: 0.118.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-19 00:00:00.000000000 Z
+date: 2020-06-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.9
+        version: 0.118.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.9
+        version: 0.118.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement