dependabot-maven 0.252.0 → 0.254.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/file_parser/property_value_finder.rb +26 -3
- metadata +15 -29
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 9d270322f7ca1c92e1ea2916f509e05d06ba98659b63a0088fdf3fe3332508f6
|
4
|
+
data.tar.gz: 1ba11c4b4f7d2610974ae2372c9631ce341d048a585d77794eac98f991018937
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 8c4154672463bc7af35b4000e30cb11d98fdc5bd10f07b76f9c30b20f9d2f8668021d596930e863d4c1679a140a04c85093bb178fdab9e910eda56efe9caa0eb
|
7
|
+
data.tar.gz: c4143032c1f627d0fb96a3b62dc0446195fe3d068fdeac64fc9146a96e34c33e49dea80d35c2d48cf85d6018b5c03d31038fa1e303b550ce8af0685d6501b5a8
|
@@ -36,9 +36,10 @@ module Dependabot
|
|
36
36
|
node =
|
37
37
|
loop do
|
38
38
|
candidate_node =
|
39
|
-
doc.
|
40
|
-
doc.
|
41
|
-
doc.
|
39
|
+
doc.xpath("/project/#{nm}").last ||
|
40
|
+
doc.xpath("/project/properties/#{property_name}").last ||
|
41
|
+
doc.xpath("/project/profiles/profile/properties/#{property_name}").last
|
42
|
+
|
42
43
|
break candidate_node if candidate_node
|
43
44
|
break unless nm.match?(DOT_SEPARATOR_REGEX)
|
44
45
|
|
@@ -47,6 +48,15 @@ module Dependabot
|
|
47
48
|
raise DependencyFileNotEvaluatable, e.message
|
48
49
|
end
|
49
50
|
|
51
|
+
# and value is an expression
|
52
|
+
if node && /\$\{(?<expression>.+)\}/.match(node.content.strip)
|
53
|
+
return extract_value_from_expression(
|
54
|
+
expression: node.content.strip,
|
55
|
+
property_name: property_name,
|
56
|
+
callsite_pom: callsite_pom
|
57
|
+
)
|
58
|
+
end
|
59
|
+
|
50
60
|
# If we found a property, return it
|
51
61
|
return { file: pom.name, node: node, value: node.content.strip } if node
|
52
62
|
|
@@ -63,6 +73,19 @@ module Dependabot
|
|
63
73
|
|
64
74
|
attr_reader :dependency_files
|
65
75
|
|
76
|
+
def extract_value_from_expression(expression:, property_name:, callsite_pom:)
|
77
|
+
# and the expression is pointing to self then raise the error
|
78
|
+
if expression.eql?("${#{property_name}}")
|
79
|
+
raise Dependabot::DependencyFileNotParseable.new(
|
80
|
+
callsite_pom.name,
|
81
|
+
"Error trying to resolve recursive expression '#{expression}'."
|
82
|
+
)
|
83
|
+
end
|
84
|
+
|
85
|
+
# and the expression is pointing to another tag, then get the value of that tag
|
86
|
+
property_details(property_name: expression.slice(2..-2), callsite_pom: callsite_pom)
|
87
|
+
end
|
88
|
+
|
66
89
|
def sanitize_property_name(property_name)
|
67
90
|
property_name.sub(/^pom\./, "").sub(/^project\./, "")
|
68
91
|
end
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-maven
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.254.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-04-
|
11
|
+
date: 2024-04-24 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,28 +16,28 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.254.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.254.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
30
30
|
requirements:
|
31
31
|
- - "~>"
|
32
32
|
- !ruby/object:Gem::Version
|
33
|
-
version: 1.
|
33
|
+
version: 1.9.2
|
34
34
|
type: :development
|
35
35
|
prerelease: false
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
37
37
|
requirements:
|
38
38
|
- - "~>"
|
39
39
|
- !ruby/object:Gem::Version
|
40
|
-
version: 1.
|
40
|
+
version: 1.9.2
|
41
41
|
- !ruby/object:Gem::Dependency
|
42
42
|
name: gpgme
|
43
43
|
requirement: !ruby/object:Gem::Requirement
|
@@ -114,70 +114,56 @@ dependencies:
|
|
114
114
|
requirements:
|
115
115
|
- - "~>"
|
116
116
|
- !ruby/object:Gem::Version
|
117
|
-
version: 1.
|
117
|
+
version: 1.63.2
|
118
118
|
type: :development
|
119
119
|
prerelease: false
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
121
121
|
requirements:
|
122
122
|
- - "~>"
|
123
123
|
- !ruby/object:Gem::Version
|
124
|
-
version: 1.
|
124
|
+
version: 1.63.2
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
126
|
name: rubocop-performance
|
127
127
|
requirement: !ruby/object:Gem::Requirement
|
128
128
|
requirements:
|
129
129
|
- - "~>"
|
130
130
|
- !ruby/object:Gem::Version
|
131
|
-
version: 1.
|
131
|
+
version: 1.21.0
|
132
132
|
type: :development
|
133
133
|
prerelease: false
|
134
134
|
version_requirements: !ruby/object:Gem::Requirement
|
135
135
|
requirements:
|
136
136
|
- - "~>"
|
137
137
|
- !ruby/object:Gem::Version
|
138
|
-
version: 1.
|
138
|
+
version: 1.21.0
|
139
139
|
- !ruby/object:Gem::Dependency
|
140
140
|
name: rubocop-rspec
|
141
141
|
requirement: !ruby/object:Gem::Requirement
|
142
142
|
requirements:
|
143
143
|
- - "~>"
|
144
144
|
- !ruby/object:Gem::Version
|
145
|
-
version: 2.
|
145
|
+
version: 2.29.1
|
146
146
|
type: :development
|
147
147
|
prerelease: false
|
148
148
|
version_requirements: !ruby/object:Gem::Requirement
|
149
149
|
requirements:
|
150
150
|
- - "~>"
|
151
151
|
- !ruby/object:Gem::Version
|
152
|
-
version: 2.
|
152
|
+
version: 2.29.1
|
153
153
|
- !ruby/object:Gem::Dependency
|
154
154
|
name: rubocop-sorbet
|
155
155
|
requirement: !ruby/object:Gem::Requirement
|
156
156
|
requirements:
|
157
157
|
- - "~>"
|
158
158
|
- !ruby/object:Gem::Version
|
159
|
-
version: 0.
|
160
|
-
type: :development
|
161
|
-
prerelease: false
|
162
|
-
version_requirements: !ruby/object:Gem::Requirement
|
163
|
-
requirements:
|
164
|
-
- - "~>"
|
165
|
-
- !ruby/object:Gem::Version
|
166
|
-
version: 0.7.3
|
167
|
-
- !ruby/object:Gem::Dependency
|
168
|
-
name: stackprof
|
169
|
-
requirement: !ruby/object:Gem::Requirement
|
170
|
-
requirements:
|
171
|
-
- - "~>"
|
172
|
-
- !ruby/object:Gem::Version
|
173
|
-
version: 0.2.16
|
159
|
+
version: 0.8.1
|
174
160
|
type: :development
|
175
161
|
prerelease: false
|
176
162
|
version_requirements: !ruby/object:Gem::Requirement
|
177
163
|
requirements:
|
178
164
|
- - "~>"
|
179
165
|
- !ruby/object:Gem::Version
|
180
|
-
version: 0.
|
166
|
+
version: 0.8.1
|
181
167
|
- !ruby/object:Gem::Dependency
|
182
168
|
name: turbo_tests
|
183
169
|
requirement: !ruby/object:Gem::Requirement
|
@@ -264,7 +250,7 @@ licenses:
|
|
264
250
|
- Nonstandard
|
265
251
|
metadata:
|
266
252
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
267
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
253
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.254.0
|
268
254
|
post_install_message:
|
269
255
|
rdoc_options: []
|
270
256
|
require_paths:
|