dependabot-maven 0.138.5 → 0.139.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5f96262a7f4a03933e0a51ca2985d5dde01c55f1bc47929a48e42eea77adb718
-  data.tar.gz: 1602508222adf726f6b800c103a8a008c383aae7748d9a59ad2e12916a6b5a79
+  metadata.gz: e48c762490564bcb210645a92dcbe853bd05b200aa43c80e05c9445c89595f56
+  data.tar.gz: d9f0ed2cbcae3d899630670a64e2640530b748c3cf3b624596849ce49c74104f
 SHA512:
-  metadata.gz: 8f126e36d0028cdb758188e2d550972d0e596954bc455f45fc06a867ba17e1ef9858ef22d962f24ceb903bec709ba9977cad8fc360263282d0528f8230a7ad65
-  data.tar.gz: 5fa925156baf16b65dd05726be39f98c9b5b7a8b1a5248013853c04c989a3055cac7ffe56c90caf6b69e4272afd5a59245c922047f538f549fda8fe9c4982156
+  metadata.gz: 367fce9c1696faaa54abf721e8f271fdd31cdd97e9bf1d567caf444122b433484b95ef05911a0d31cca7e9f63cc50e7273e69543d15b61bc2739321b1be496fc
+  data.tar.gz: 88287de392d9ecacc6ba09e19e18160039dcfcbbc627d0b5a41b5652bae103b43fd7671323ec0923f784364c1494bda5619834259babd6b48fc593a6bd2a38c2

data/lib/dependabot/maven/file_updater.rb

@@ -125,13 +125,11 @@ module Dependabot
       def declaration_finder(dependency, requirement)
         @declaration_finders ||= {}
         @declaration_finders[dependency.hash + requirement.hash] ||=
-          begin
-            DeclarationFinder.new(
-              dependency: dependency,
-              declaring_requirement: requirement,
-              dependency_files: dependency_files
-            )
-          end
+          DeclarationFinder.new(
+            dependency: dependency,
+            declaring_requirement: requirement,
+            dependency_files: dependency_files
+          )
       end
 
       def updated_pom_declaration(old_declaration, previous_req, requirement)

data/lib/dependabot/maven/version.rb

@@ -175,8 +175,11 @@ module Dependabot
 
         return 1 if NAMED_QUALIFIERS_HIERARCHY[other_token]
 
-        token = token.to_i if token.match?(/^\d+$/)
-        other_token = other_token.to_i if other_token.match?(/^\d+$/)
+        if token.match?(/\A\d+\z/) && other_token.match?(/\A\d+\z/)
+          token = token.to_i
+          other_token = other_token.to_i
+        end
+
         token <=> other_token
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.138.5
+  version: 0.139.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-26 00:00:00.000000000 Z
+date: 2021-04-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.5
+        version: 0.139.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.5
+        version: 0.139.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement