dependabot-maven 0.246.0 → 0.247.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/update_checker/version_finder.rb +31 -5
- metadata +19 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 58cc478873723eb907ec6398b4bfaf16ab3953a57da21ab41a2327bdee1eac62
|
4
|
+
data.tar.gz: 94b060f025725093420a7ffacef5fe835204edbdf9e2d7e0b4c21ed653d19f40
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 2434b607af6c6c7f4c419e92fc8bc2527867fa8504f1433698423cbad2e9a0e38ce24daf5a57689d299db340040a7b577da71c00b4643c1f7dbfc3dbd04df6cb
|
7
|
+
data.tar.gz: 86909082850d1ec8607d4bad1a20f84c5b7148f3138a9c7559fe2a7faecda3626179cc6be43025def39fb2445e4dd77a027bc010b14fa1b80a8c279adf52a659
|
@@ -9,11 +9,14 @@ require "dependabot/maven/version"
|
|
9
9
|
require "dependabot/maven/requirement"
|
10
10
|
require "dependabot/maven/utils/auth_headers_finder"
|
11
11
|
require "dependabot/registry_client"
|
12
|
+
require "sorbet-runtime"
|
12
13
|
|
13
14
|
module Dependabot
|
14
15
|
module Maven
|
15
16
|
class UpdateChecker
|
16
17
|
class VersionFinder
|
18
|
+
extend T::Sig
|
19
|
+
|
17
20
|
TYPE_SUFFICES = %w(jre android java native_mt agp).freeze
|
18
21
|
|
19
22
|
def initialize(dependency:, dependency_files:, credentials:,
|
@@ -54,6 +57,7 @@ module Dependabot
|
|
54
57
|
possible_versions.find { |v| released?(v.fetch(:version)) }
|
55
58
|
end
|
56
59
|
|
60
|
+
sig { returns(T::Array[T.untyped]) }
|
57
61
|
def versions
|
58
62
|
version_details =
|
59
63
|
repositories.map do |repository_details|
|
@@ -77,24 +81,40 @@ module Dependabot
|
|
77
81
|
attr_reader :dependency, :dependency_files, :credentials,
|
78
82
|
:ignored_versions, :forbidden_urls, :security_advisories
|
79
83
|
|
84
|
+
sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
|
80
85
|
def filter_prereleases(possible_versions)
|
81
86
|
return possible_versions if wants_prerelease?
|
82
87
|
|
83
|
-
possible_versions.reject { |v| v.fetch(:version).prerelease? }
|
88
|
+
filtered = possible_versions.reject { |v| v.fetch(:version).prerelease? }
|
89
|
+
if possible_versions.count > filtered.count
|
90
|
+
Dependabot.logger.info("Filtered out #{possible_versions.count - filtered.count} pre-release versions")
|
91
|
+
end
|
92
|
+
filtered
|
84
93
|
end
|
85
94
|
|
95
|
+
sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
|
86
96
|
def filter_date_based_versions(possible_versions)
|
87
97
|
return possible_versions if wants_date_based_version?
|
88
98
|
|
89
|
-
possible_versions
|
90
|
-
|
99
|
+
filtered = possible_versions.reject { |v| v.fetch(:version) > version_class.new(1900) }
|
100
|
+
if possible_versions.count > filtered.count
|
101
|
+
Dependabot.logger.info("Filtered out #{possible_versions.count - filtered.count} date-based versions")
|
102
|
+
end
|
103
|
+
filtered
|
91
104
|
end
|
92
105
|
|
106
|
+
sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
|
93
107
|
def filter_version_types(possible_versions)
|
94
|
-
possible_versions
|
95
|
-
|
108
|
+
filtered = possible_versions.select { |v| matches_dependency_version_type?(v.fetch(:version)) }
|
109
|
+
if possible_versions.count > filtered.count
|
110
|
+
diff = possible_versions.count - filtered.count
|
111
|
+
classifier = dependency.version.split(/[.\-]/).last
|
112
|
+
Dependabot.logger.info("Filtered out #{diff} non-#{classifier} classifier versions")
|
113
|
+
end
|
114
|
+
filtered
|
96
115
|
end
|
97
116
|
|
117
|
+
sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
|
98
118
|
def filter_ignored_versions(possible_versions)
|
99
119
|
filtered = possible_versions
|
100
120
|
|
@@ -110,9 +130,15 @@ module Dependabot
|
|
110
130
|
raise AllVersionsIgnored
|
111
131
|
end
|
112
132
|
|
133
|
+
if possible_versions.count > filtered.count
|
134
|
+
diff = possible_versions.count - filtered.count
|
135
|
+
Dependabot.logger.info("Filtered out #{diff} ignored versions")
|
136
|
+
end
|
137
|
+
|
113
138
|
filtered
|
114
139
|
end
|
115
140
|
|
141
|
+
sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
|
116
142
|
def filter_lower_versions(possible_versions)
|
117
143
|
return possible_versions unless dependency.numeric_version
|
118
144
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-maven
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.247.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-03-
|
11
|
+
date: 2024-03-14 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.247.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.247.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -136,6 +136,20 @@ dependencies:
|
|
136
136
|
- - "~>"
|
137
137
|
- !ruby/object:Gem::Version
|
138
138
|
version: 1.19.0
|
139
|
+
- !ruby/object:Gem::Dependency
|
140
|
+
name: rubocop-rspec
|
141
|
+
requirement: !ruby/object:Gem::Requirement
|
142
|
+
requirements:
|
143
|
+
- - "~>"
|
144
|
+
- !ruby/object:Gem::Version
|
145
|
+
version: 2.27.1
|
146
|
+
type: :development
|
147
|
+
prerelease: false
|
148
|
+
version_requirements: !ruby/object:Gem::Requirement
|
149
|
+
requirements:
|
150
|
+
- - "~>"
|
151
|
+
- !ruby/object:Gem::Version
|
152
|
+
version: 2.27.1
|
139
153
|
- !ruby/object:Gem::Dependency
|
140
154
|
name: rubocop-sorbet
|
141
155
|
requirement: !ruby/object:Gem::Requirement
|
@@ -250,7 +264,7 @@ licenses:
|
|
250
264
|
- Nonstandard
|
251
265
|
metadata:
|
252
266
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
253
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
267
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.247.0
|
254
268
|
post_install_message:
|
255
269
|
rdoc_options: []
|
256
270
|
require_paths:
|