dependabot-maven 0.130.1 → 0.131.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d03ff0e953dc81143823ef9c9abfb4ed99e70032c554f68a1465e07e2e78abcd
-  data.tar.gz: b6c6ca6090e9e553671261e502ffadf16fd929328f1b0cf5a779ba4175e0fe17
+  metadata.gz: 02ece2d6401e0ad388e7b8397a34b2b611ded737e61682b07d2ce4217836912d
+  data.tar.gz: '0783854aab31ba872ae45ae81fc0058377b77a238af55ce7caabd97b126ddfea'
 SHA512:
-  metadata.gz: c4cb7a6c7efdcbc2bb26c93d52ca4aa485ff4cde41a43674c6e0c915f0c9295e248e43f01bdcd1460cc8f658da45a27e181b5f2e046176e7d606a45a9fca1d24
-  data.tar.gz: 0a16d44dde8ddd0bc4e3e3e2be3e357ae116fd04c76df1f33bfa36cfb5758a67e47abf850502bb092691efa42b024218c3eb0902a50160ab260e621df07b645d
+  metadata.gz: 4b454ea124809f7e06952019b3a2173e95444679afb2f58baf8aa2d6a4fcde91282f7a4d8459039de656b484dd9c7f9f3fb93326a6b84dbb96895d57f8aa82d5
+  data.tar.gz: dffd60e42647f6655e6aef0d95bb8b8d045cfe93976a2f7167d9a28a3d3311c0f588f9a77b1314ea9911c9c3e26d8b2f0aab7b8b1a7d445df79a7035fb9cd706

data/lib/dependabot/maven/file_parser/property_value_finder.rb

@@ -39,6 +39,9 @@ module Dependabot
               break unless nm.match?(DOT_SEPARATOR_REGEX)
 
               nm = nm.sub(DOT_SEPARATOR_REGEX, "/")
+
+            rescue Nokogiri::XML::XPath::SyntaxError => e
+              raise DependencyFileNotEvaluatable, e.message
             end
 
           # If we found a property, return it

data/lib/dependabot/maven/update_checker/version_finder.rb

@@ -162,6 +162,8 @@ module Dependabot
             rescue Excon::Error::Socket, Excon::Error::Timeout,
                    Excon::Error::TooManyRedirects
               false
+            rescue URI::InvalidURIError => e
+              raise DependencyFileNotResolvable, e.message
             end
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.130.1
+  version: 0.131.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-14 00:00:00.000000000 Z
+date: 2021-02-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.130.1
+        version: 0.131.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.130.1
+        version: 0.131.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.8.0
+        version: 1.9.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.8.0
+        version: 1.9.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.1
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement