dependabot-maven 0.138.6 → 0.140.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fdc3b16b2080476fe92f5457af1a09ade5858e3cf2393a3f316ee10b309417cf
-  data.tar.gz: a281b61c7f6d73f7b9ed5483e3ec38ca26477c0c1dd1e26a43353c7a2720ad98
+  metadata.gz: 032f65402bd8c2354d1053333399b130b0752262df47fb6c40af8d0c8603d0f8
+  data.tar.gz: 19fc4b70b4d4d9127c56f0f56527333f03b4dbb26a4de8abbc52f6b04c317f7c
 SHA512:
-  metadata.gz: be565756cf91621bf62b444f3c90e0f3c32e81ad44e6f1db38acf7f90c939eae6f6dba204cc33a530b6d807c87e4cb66fa8a0a2552ad1f114f8e04b4d78acd95
-  data.tar.gz: fee0d11f5c4b593fe1a031b443c40406b8d6f97416704ac0bc4f1797725fb9ecabf0fd6bd462cd43244bc97e32a062d377844273723e479bf5a25ef7ef8ef5f0
+  metadata.gz: 0f5354f423db0616be3e944b5ae16e8f206d85d82b017565ab481007a6e4aea4ec4695d6b91b4791ca6ba71a1ae901757674317e1d3b9674900480a9e8bea673
+  data.tar.gz: 745c225b89beb7016ee2259f82402d1b7b61b5706d5fb6ec50aaadbfb73cb21d00e3ed35b88af843d33613a57909b1a4a3c38b2a152f6d880d59d82869803411

data/lib/dependabot/maven/file_updater.rb

@@ -125,13 +125,11 @@ module Dependabot
       def declaration_finder(dependency, requirement)
         @declaration_finders ||= {}
         @declaration_finders[dependency.hash + requirement.hash] ||=
-          begin
-            DeclarationFinder.new(
-              dependency: dependency,
-              declaring_requirement: requirement,
-              dependency_files: dependency_files
-            )
-          end
+          DeclarationFinder.new(
+            dependency: dependency,
+            declaring_requirement: requirement,
+            dependency_files: dependency_files
+          )
       end
 
       def updated_pom_declaration(old_declaration, previous_req, requirement)

data/lib/dependabot/maven/version.rb

@@ -175,8 +175,11 @@ module Dependabot
 
         return 1 if NAMED_QUALIFIERS_HIERARCHY[other_token]
 
-        token = token.to_i if token.match?(/^\d+$/)
-        other_token = other_token.to_i if other_token.match?(/^\d+$/)
+        if token.match?(/\A\d+\z/) && other_token.match?(/\A\d+\z/)
+          token = token.to_i
+          other_token = other_token.to_i
+        end
+
         token <=> other_token
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.138.6
+  version: 0.140.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-29 00:00:00.000000000 Z
+date: 2021-04-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.6
+        version: 0.140.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.138.6
+        version: 0.140.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.11.0
+        version: 1.12.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement