dependabot-maven 0.168.0 → 0.169.3

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/maven/file_updater/declaration_finder.rb +5 -8
  3. data/lib/dependabot/maven/update_checker/property_updater.rb +1 -1
  4. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 8865292feaa9734831d427c331bfcc669479bb393ac292e78fa00b78f8cc678a
4
- data.tar.gz: d46fd3e1e484249f9bb15928ee53f609ac98e318d343058a67b95b12bb5426f9
3
+ metadata.gz: 43295a7637163d2719dcdf314778b3e89421d1db8b31df4828690b945ee57da9
4
+ data.tar.gz: 2e8ad71c58119af6f3ece95ee92f777116f174c0e11503c04734d74835118be9
5
5
  SHA512:
6
- metadata.gz: d74edc83f714040b78deb1a033d2e5debda11cea15aacb5835121f73737316ea04399cb4e7d9007a45ef3c5df5811b6934dbe1c3fb7fc76bde098ad091ab3a82
7
- data.tar.gz: c6db02dde791813fa864e35cf647243e5dc56e402bbeeb49e0aeca44c0ff66505d9527859d1b1a26275b3f735a072e82837cff3c72e5f83207d107a5a220be30
6
+ metadata.gz: 4a05217d833f7de15e1143ea144a7654f58616173abad6dbb867e418aa358105527b19294eb0c085ed83dd5b7ea59b4069c03fb0bb9b33e6fbfc9dc6eeca7246
7
+ data.tar.gz: 989df4dd17f1e7afff383238fa815f44ff3f0a938fd778d199fa4aaaec213716f33237c8de1a001eea6d45eaadf825bd789a0a2ae5c651573686c765a9a9dc7e
data/lib/dependabot/maven/file_updater/declaration_finder.rb CHANGED
@@ -9,7 +9,9 @@ module Dependabot
9
9
  module Maven
10
10
  class FileUpdater
11
11
  class DeclarationFinder
12
- DECLARATION_TYPES = %w(parent dependency plugin extension).freeze
12
+ DECLARATION_REGEX =
13
+ %r{<parent>.*?</parent>|<dependency>.*?</dependency>|
14
+ <plugin>.*?</plugin>|<extension>.*?</extension>}mx.freeze
13
15
 
14
16
  attr_reader :dependency, :declaring_requirement, :dependency_files
15
17
 
@@ -76,14 +78,9 @@ module Dependabot
76
78
  end
77
79
 
78
80
  def deep_find_declarations(string)
79
- pom = Nokogiri::XML(string)
80
- nodes = []
81
- pom.traverse do |node|
82
- next unless DECLARATION_TYPES.include?(node.node_name)
83
-
84
- nodes << node.to_s
81
+ string.scan(DECLARATION_REGEX).flat_map do |matching_node|
82
+ [matching_node, *deep_find_declarations(matching_node[1..-1])]
85
83
  end
86
- nodes
87
84
  end
88
85
 
89
86
  def declaring_requirement_matches?(node)
data/lib/dependabot/maven/update_checker/property_updater.rb CHANGED
@@ -105,7 +105,7 @@ module Dependabot
105
105
  dependency: dep,
106
106
  declaring_requirement: declaring_requirement,
107
107
  dependency_files: dependency_files
108
- ).declaration_nodes.first.at_xpath("./*/version")&.content
108
+ ).declaration_nodes.first.at_css("version")&.content
109
109
  end
110
110
 
111
111
  def pom
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-maven
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.168.0
4
+ version: 0.169.3
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-11-23 00:00:00.000000000 Z
11
+ date: 2021-12-02 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.168.0
19
+ version: 0.169.3
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.168.0
26
+ version: 0.169.3
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -220,7 +220,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
220
220
  - !ruby/object:Gem::Version
221
221
  version: 2.5.0
222
222
  requirements: []
223
- rubygems_version: 3.2.22
223
+ rubygems_version: 3.2.32
224
224
  signing_key:
225
225
  specification_version: 4
226
226
  summary: Maven support for dependabot