dependabot-maven 0.131.1 → 0.131.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/maven/file_parser/property_value_finder.rb +3 -0
  3. data/lib/dependabot/maven/update_checker/version_finder.rb +2 -0
  4. metadata +3 -3
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9ff955e40aa2e808669d3b5bd45ae5a9646a810e3b009492f1c5dae6c749198e
4
- data.tar.gz: ef0b489891d15c0d2d32bf892be1bc1b31490655bf26451cc4291d27fdf8f27c
3
+ metadata.gz: 02ece2d6401e0ad388e7b8397a34b2b611ded737e61682b07d2ce4217836912d
4
+ data.tar.gz: '0783854aab31ba872ae45ae81fc0058377b77a238af55ce7caabd97b126ddfea'
5
5
  SHA512:
6
- metadata.gz: a029bfc14df2b40082cf990ede28ca6277d95c85580ca3a80bb156357d8067308041860089f335ae22e3e206b63f969c8cb5340116c5c951e20480c5db410b26
7
- data.tar.gz: 192aa31f6eee191c03ad95a0ff8826940f2e4ef9cc77fe1abd744ba1959d21c70739252a1e3875645ce5a85789da7895571f41880e3f398827dc996d045663df
6
+ metadata.gz: 4b454ea124809f7e06952019b3a2173e95444679afb2f58baf8aa2d6a4fcde91282f7a4d8459039de656b484dd9c7f9f3fb93326a6b84dbb96895d57f8aa82d5
7
+ data.tar.gz: dffd60e42647f6655e6aef0d95bb8b8d045cfe93976a2f7167d9a28a3d3311c0f588f9a77b1314ea9911c9c3e26d8b2f0aab7b8b1a7d445df79a7035fb9cd706
data/lib/dependabot/maven/file_parser/property_value_finder.rb CHANGED
@@ -39,6 +39,9 @@ module Dependabot
39
39
  break unless nm.match?(DOT_SEPARATOR_REGEX)
40
40
 
41
41
  nm = nm.sub(DOT_SEPARATOR_REGEX, "/")
42
+
43
+ rescue Nokogiri::XML::XPath::SyntaxError => e
44
+ raise DependencyFileNotEvaluatable, e.message
42
45
  end
43
46
 
44
47
  # If we found a property, return it
data/lib/dependabot/maven/update_checker/version_finder.rb CHANGED
@@ -162,6 +162,8 @@ module Dependabot
162
162
  rescue Excon::Error::Socket, Excon::Error::Timeout,
163
163
  Excon::Error::TooManyRedirects
164
164
  false
165
+ rescue URI::InvalidURIError => e
166
+ raise DependencyFileNotResolvable, e.message
165
167
  end
166
168
  end
167
169
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-maven
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.131.1
4
+ version: 0.131.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.131.1
19
+ version: 0.131.2
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.131.1
26
+ version: 0.131.2
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement