dependabot-maven 0.381.0 → 0.383.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 1d87ba52c3c36739ae677c82b6725a6ef6e6aefca50b43730449cf8741e60e87
|
|
4
|
+
data.tar.gz: 4ab56c57b08369874bc1364d518a262c35da600807cec05c18431341d3899536
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f1898c3fd47ea0b6cfd1e3c6188c2ebba0ede0ec58e9a398ce2d4011ae5354b3c4ed9b2ac96b31916f2100f9020e01cc542d49477cde7cd93534161e9ab50440
|
|
7
|
+
data.tar.gz: acb273492ed6eb8ca9e9fcc96fac2a6fcbc0da6e5a9718e00c8e4537d7130a8b90abe16573172dc561ef580272a08dc42dee296ec5f47e72b633769037f1fe81
|
|
@@ -20,8 +20,8 @@ module Dependabot
|
|
|
20
20
|
updated_files = T.let(dependency_files.dup, T::Array[Dependabot::DependencyFile])
|
|
21
21
|
|
|
22
22
|
# Loop through each of the changed requirements, applying changes to
|
|
23
|
-
# all
|
|
24
|
-
#
|
|
23
|
+
# all Maven dependency files for that change. Note that the logic is
|
|
24
|
+
# different here to other package managers because Maven has property
|
|
25
25
|
# inheritance across files
|
|
26
26
|
dependencies.each do |dependency|
|
|
27
27
|
updated_files = update_files_for_dependency(
|
|
@@ -30,7 +30,7 @@ module Dependabot
|
|
|
30
30
|
)
|
|
31
31
|
end
|
|
32
32
|
|
|
33
|
-
updated_files.select! { |f| f.name.end_with?(".xml") }
|
|
33
|
+
updated_files.select! { |f| f.name.end_with?(".xml", ".target") }
|
|
34
34
|
updated_files.reject! { |f| dependency_files.include?(f) }
|
|
35
35
|
|
|
36
36
|
raise "No files changed!" if updated_files.none?
|
|
@@ -29,7 +29,7 @@ module Dependabot
|
|
|
29
29
|
RUBY_STYLE_PATTERN
|
|
30
30
|
end
|
|
31
31
|
|
|
32
|
-
sig { params(obj: T.any(String, Gem::Version)).returns(T::Array[T.any(String,
|
|
32
|
+
sig { params(obj: T.any(String, Gem::Version)).returns(T::Array[T.any(String, Gem::Version)]) }
|
|
33
33
|
def self.parse(obj)
|
|
34
34
|
return ["=", Maven::Version.new(obj.to_s)] if obj.is_a?(Gem::Version)
|
|
35
35
|
|
|
@@ -50,7 +50,7 @@ module Dependabot
|
|
|
50
50
|
end
|
|
51
51
|
end
|
|
52
52
|
|
|
53
|
-
sig { params(version:
|
|
53
|
+
sig { params(version: Object).returns(T::Boolean) }
|
|
54
54
|
def satisfied_by?(version)
|
|
55
55
|
version = Maven::Version.new(version.to_s)
|
|
56
56
|
super
|
|
@@ -6,6 +6,7 @@
|
|
|
6
6
|
# https://maven.apache.org/pom.html#Dependencies #
|
|
7
7
|
#######################################################
|
|
8
8
|
|
|
9
|
+
require "dependabot/dependency_requirement"
|
|
9
10
|
require "dependabot/requirements_updater/base"
|
|
10
11
|
require "dependabot/maven/update_checker"
|
|
11
12
|
require "dependabot/maven/version"
|
|
@@ -25,7 +26,7 @@ module Dependabot
|
|
|
25
26
|
|
|
26
27
|
sig do
|
|
27
28
|
params(
|
|
28
|
-
requirements: T::Array[
|
|
29
|
+
requirements: T::Array[Dependabot::DependencyRequirement],
|
|
29
30
|
latest_version: T.nilable(T.any(Version, String)),
|
|
30
31
|
source_url: T.nilable(String),
|
|
31
32
|
properties_to_update: T::Array[String]
|
|
@@ -45,7 +46,7 @@ module Dependabot
|
|
|
45
46
|
@latest_version = T.let(version_class.new(latest_version), Version)
|
|
46
47
|
end
|
|
47
48
|
|
|
48
|
-
sig { override.returns(T::Array[
|
|
49
|
+
sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
|
|
49
50
|
def updated_requirements
|
|
50
51
|
return requirements unless latest_version
|
|
51
52
|
|
|
@@ -62,13 +63,13 @@ module Dependabot
|
|
|
62
63
|
new_req = update_requirement(req[:requirement])
|
|
63
64
|
next req if new_req == req[:requirement]
|
|
64
65
|
|
|
65
|
-
req.merge(requirement: new_req, source: updated_source)
|
|
66
|
+
Dependabot::DependencyRequirement.create(req.merge(requirement: new_req, source: updated_source))
|
|
66
67
|
end
|
|
67
68
|
end
|
|
68
69
|
|
|
69
70
|
private
|
|
70
71
|
|
|
71
|
-
sig { returns(T::Array[
|
|
72
|
+
sig { returns(T::Array[Dependabot::DependencyRequirement]) }
|
|
72
73
|
attr_reader :requirements
|
|
73
74
|
|
|
74
75
|
sig { returns(T.nilable(Version)) }
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-maven
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.383.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.383.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.383.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: rexml
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -291,7 +291,7 @@ licenses:
|
|
|
291
291
|
- MIT
|
|
292
292
|
metadata:
|
|
293
293
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
294
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
294
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.383.0
|
|
295
295
|
rdoc_options: []
|
|
296
296
|
require_paths:
|
|
297
297
|
- lib
|