dependabot-maven 0.381.0 → 0.382.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/file_updater.rb +3 -3
- data/lib/dependabot/maven/update_checker.rb +9 -7
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 9949b8b19d460ff8b07e5d322fd98c5f5ba0df32c357edf4ba549b0590939b29
|
|
4
|
+
data.tar.gz: 2c7445b4d2522a3a33d10b8c4329d9deb4b883c0f71c8fd8f6fe1f8b61f073b2
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 56ca26ba8eeb0f759985db8185a72814e38f931fc39d591289af09b7b319c60078dd8d26a8a4fa373c4b7f843c7bb749604d908612ec49bbbbdbbc7638909384
|
|
7
|
+
data.tar.gz: 277835bdc875c4a745a31c6dff74ce0d2dc720b4c9eb445c8f2890e3182089a7b25c7df197ac40a5edd7a27268ad4c46789148f5d746ef8bd45d987c07669d25
|
|
@@ -20,8 +20,8 @@ module Dependabot
|
|
|
20
20
|
updated_files = T.let(dependency_files.dup, T::Array[Dependabot::DependencyFile])
|
|
21
21
|
|
|
22
22
|
# Loop through each of the changed requirements, applying changes to
|
|
23
|
-
# all
|
|
24
|
-
#
|
|
23
|
+
# all Maven dependency files for that change. Note that the logic is
|
|
24
|
+
# different here to other package managers because Maven has property
|
|
25
25
|
# inheritance across files
|
|
26
26
|
dependencies.each do |dependency|
|
|
27
27
|
updated_files = update_files_for_dependency(
|
|
@@ -30,7 +30,7 @@ module Dependabot
|
|
|
30
30
|
)
|
|
31
31
|
end
|
|
32
32
|
|
|
33
|
-
updated_files.select! { |f| f.name.end_with?(".xml") }
|
|
33
|
+
updated_files.select! { |f| f.name.end_with?(".xml", ".target") }
|
|
34
34
|
updated_files.reject! { |f| dependency_files.include?(f) }
|
|
35
35
|
|
|
36
36
|
raise "No files changed!" if updated_files.none?
|
|
@@ -90,18 +90,20 @@ module Dependabot
|
|
|
90
90
|
nil
|
|
91
91
|
end
|
|
92
92
|
|
|
93
|
-
sig { override.returns(T::Array[
|
|
93
|
+
sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
|
|
94
94
|
def updated_requirements
|
|
95
95
|
property_names =
|
|
96
96
|
declarations_using_a_property
|
|
97
97
|
.map { |req| req.dig(:metadata, :property_name) }
|
|
98
98
|
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
99
|
+
wrap_requirements(
|
|
100
|
+
RequirementsUpdater.new(
|
|
101
|
+
requirements: dependency.requirements,
|
|
102
|
+
latest_version: preferred_resolvable_version&.to_s,
|
|
103
|
+
source_url: preferred_version_details&.fetch(:source_url),
|
|
104
|
+
properties_to_update: property_names
|
|
105
|
+
).updated_requirements
|
|
106
|
+
)
|
|
105
107
|
end
|
|
106
108
|
|
|
107
109
|
sig { override.returns(T::Boolean) }
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-maven
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.382.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.382.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.382.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: rexml
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -291,7 +291,7 @@ licenses:
|
|
|
291
291
|
- MIT
|
|
292
292
|
metadata:
|
|
293
293
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
294
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
294
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.382.0
|
|
295
295
|
rdoc_options: []
|
|
296
296
|
require_paths:
|
|
297
297
|
- lib
|