dependabot-maven 0.248.0 → 0.249.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/file_parser.rb +4 -2
- data/lib/dependabot/maven/file_updater/declaration_finder.rb +12 -6
- data/lib/dependabot/maven/update_checker/property_updater.rb +6 -2
- data/lib/dependabot/maven/update_checker/requirements_updater.rb +4 -2
- data/lib/dependabot/maven/update_checker/version_finder.rb +6 -2
- metadata +5 -5
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8a62e5e29ceaf203fac55696ca58f4786ba5252fbb7210c6a6f3feb610931fda
|
|
4
|
+
data.tar.gz: 1604c195371889b0372a963f42b2c30d5aa83524a840561444ac4e7b0f22be55
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 51482f93039c6ec09003bd3fa69de8f9b99365bf0580ed0c5b7662fa97163b08825799dfe640bc7a5342eeaaeef243aa224fafed0a10d608624a7c69b3ba6d88
|
|
7
|
+
data.tar.gz: 208b86459255729612d5c6345d7a2013ea7c9bd3b5e13360cc41884849ffd35906213a29a5bcffe5019b0e8e3e5ac511409a486ac8250389aa94f2835033107b
|
|
@@ -28,9 +28,11 @@ module Dependabot
|
|
|
28
28
|
"annotationProcessorPaths > path"
|
|
29
29
|
PLUGIN_SELECTOR = "plugins > plugin"
|
|
30
30
|
EXTENSION_SELECTOR = "extensions > extension"
|
|
31
|
+
PLUGIN_ARTIFACT_ITEMS_SELECTOR = "plugins > plugin > executions > execution > " \
|
|
32
|
+
"configuration > artifactItems > artifactItem"
|
|
31
33
|
|
|
32
34
|
# Regex to get the property name from a declaration that uses a property
|
|
33
|
-
PROPERTY_REGEX
|
|
35
|
+
PROPERTY_REGEX = /\$\{(?<property>.*?)\}/
|
|
34
36
|
|
|
35
37
|
def parse
|
|
36
38
|
dependency_set = DependencySet.new
|
|
@@ -55,7 +57,7 @@ module Dependabot
|
|
|
55
57
|
errors << e
|
|
56
58
|
end
|
|
57
59
|
|
|
58
|
-
doc.css(PLUGIN_SELECTOR).each do |dependency_node|
|
|
60
|
+
doc.css(PLUGIN_SELECTOR, PLUGIN_ARTIFACT_ITEMS_SELECTOR).each do |dependency_node|
|
|
59
61
|
dep = dependency_from_plugin_node(pom, dependency_node)
|
|
60
62
|
dependency_set << dep if dep
|
|
61
63
|
rescue DependencyFileNotEvaluatable => e
|
|
@@ -10,12 +10,18 @@ module Dependabot
|
|
|
10
10
|
module Maven
|
|
11
11
|
class FileUpdater
|
|
12
12
|
class DeclarationFinder
|
|
13
|
-
DECLARATION_REGEX =
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
13
|
+
DECLARATION_REGEX = %r{
|
|
14
|
+
<parent>.*?</parent>|
|
|
15
|
+
<dependency>.*?</dependency>|
|
|
16
|
+
<plugin>.*?(?:<plugin>.*?</plugin>.*)?</plugin>|
|
|
17
|
+
<extension>.*?</extension>|
|
|
18
|
+
<path>.*?</path>|
|
|
19
|
+
<artifactItem>.*?</artifactItem>
|
|
20
|
+
}mx
|
|
21
|
+
|
|
22
|
+
attr_reader :dependency
|
|
23
|
+
attr_reader :declaring_requirement
|
|
24
|
+
attr_reader :dependency_files
|
|
19
25
|
|
|
20
26
|
def initialize(dependency:, dependency_files:, declaring_requirement:)
|
|
21
27
|
@dependency = dependency
|
|
@@ -60,8 +60,12 @@ module Dependabot
|
|
|
60
60
|
|
|
61
61
|
private
|
|
62
62
|
|
|
63
|
-
attr_reader :dependency
|
|
64
|
-
|
|
63
|
+
attr_reader :dependency
|
|
64
|
+
attr_reader :dependency_files
|
|
65
|
+
attr_reader :target_version
|
|
66
|
+
attr_reader :source_url
|
|
67
|
+
attr_reader :credentials
|
|
68
|
+
attr_reader :ignored_versions
|
|
65
69
|
|
|
66
70
|
def dependencies_using_property
|
|
67
71
|
@dependencies_using_property ||=
|
|
@@ -44,8 +44,10 @@ module Dependabot
|
|
|
44
44
|
|
|
45
45
|
private
|
|
46
46
|
|
|
47
|
-
attr_reader :requirements
|
|
48
|
-
|
|
47
|
+
attr_reader :requirements
|
|
48
|
+
attr_reader :latest_version
|
|
49
|
+
attr_reader :source_url
|
|
50
|
+
attr_reader :properties_to_update
|
|
49
51
|
|
|
50
52
|
def update_requirement(req_string)
|
|
51
53
|
if req_string.include?(".+")
|
|
@@ -78,8 +78,12 @@ module Dependabot
|
|
|
78
78
|
|
|
79
79
|
private
|
|
80
80
|
|
|
81
|
-
attr_reader :dependency
|
|
82
|
-
|
|
81
|
+
attr_reader :dependency
|
|
82
|
+
attr_reader :dependency_files
|
|
83
|
+
attr_reader :credentials
|
|
84
|
+
attr_reader :ignored_versions
|
|
85
|
+
attr_reader :forbidden_urls
|
|
86
|
+
attr_reader :security_advisories
|
|
83
87
|
|
|
84
88
|
sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
|
|
85
89
|
def filter_prereleases(possible_versions)
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-maven
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.249.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2024-03-
|
|
11
|
+
date: 2024-03-28 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: dependabot-common
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.
|
|
19
|
+
version: 0.249.0
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.
|
|
26
|
+
version: 0.249.0
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: debug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -264,7 +264,7 @@ licenses:
|
|
|
264
264
|
- Nonstandard
|
|
265
265
|
metadata:
|
|
266
266
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
267
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
267
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.249.0
|
|
268
268
|
post_install_message:
|
|
269
269
|
rdoc_options: []
|
|
270
270
|
require_paths:
|