dependabot-maven 0.131.0 → 0.133.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/maven/file_parser/property_value_finder.rb +3 -0
  3. data/lib/dependabot/maven/update_checker/version_finder.rb +2 -0
  4. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 31ec47c00dafa359aa263b689c0686c9d43b95a6fb122f95f1d70268bb7053b0
4
- data.tar.gz: c7b73dd732bdd53a6255c5c7fd8f67f5605e4b4f78411447a6f3ffa4c9c6c4dd
3
+ metadata.gz: c449c3c3762f2b0fdb31679956cffef1c645bbd7481f7ca5e63fb3581503b8a2
4
+ data.tar.gz: dbf3d613adaaaecdbfda8899e04436148263280120e6f5f6e9358d8c33d33395
5
5
  SHA512:
6
- metadata.gz: 53a3e6f3713da578ed9ed3edc65c1b5a5fc54d27a7f16652ee4d5e823b6456e38644a38b746ab088f63eca203673238c2b4ee6a914f5dfedda7ef4ba91d3f585
7
- data.tar.gz: c7efbe69af3ca533d4d25416172bb42f89887c8eb0a181d3a24e695aa667ed36df38c7c826462baa87c227a0ae532aa8727e309745a6eee4a03c01d1c2aace5b
6
+ metadata.gz: f200b1718433e5562317759f4192cb84056ea28537a57933151ae6c0b584dd76e5c635f2034698bfad1c309b4b05f8b11220f1859727ea4db6b5511b8fdfc74f
7
+ data.tar.gz: e962717e367ae62feb4fcc1186ed512c41f92b8bd91be59924ac55dc0feb278acef269d8689acff0474a59eb04343d2c046b891538400043453f4df6639155ef
data/lib/dependabot/maven/file_parser/property_value_finder.rb CHANGED
@@ -39,6 +39,9 @@ module Dependabot
39
39
  break unless nm.match?(DOT_SEPARATOR_REGEX)
40
40
 
41
41
  nm = nm.sub(DOT_SEPARATOR_REGEX, "/")
42
+
43
+ rescue Nokogiri::XML::XPath::SyntaxError => e
44
+ raise DependencyFileNotEvaluatable, e.message
42
45
  end
43
46
 
44
47
  # If we found a property, return it
data/lib/dependabot/maven/update_checker/version_finder.rb CHANGED
@@ -162,6 +162,8 @@ module Dependabot
162
162
  rescue Excon::Error::Socket, Excon::Error::Timeout,
163
163
  Excon::Error::TooManyRedirects
164
164
  false
165
+ rescue URI::InvalidURIError => e
166
+ raise DependencyFileNotResolvable, e.message
165
167
  end
166
168
  end
167
169
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-maven
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.131.0
4
+ version: 0.133.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-02-04 00:00:00.000000000 Z
11
+ date: 2021-02-09 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.131.0
19
+ version: 0.133.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.131.0
26
+ version: 0.133.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement