dependabot-maven 0.395.0 → 0.396.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/shared/base_version_finder.rb +11 -7
- metadata +4 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: f681ccdf35c9bb41f70991513c98aa2c71e0373c848231238cfb3f1fec8d5e66
|
|
4
|
+
data.tar.gz: 8c079e8daf4de93af87c167b0230c5d42c9046ce23359560ef76dcbb5e181130
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: c7c02de0cb8393690544546664a2f1b2a883850c241ab27b23c649b596db5ec41445c1d6904279de15b8aaec7243b7e90c41265b4e37bdf0d4856bd232c3bca1
|
|
7
|
+
data.tar.gz: b6ea966696ecc770959ec9e187bb3fce67da8cb3ab6186881e60b6cc39826dd6997ecad4722ea7b705efc1b43b953e7e262b92dd9f4e5ff49fb874b22d5a5971
|
|
@@ -80,15 +80,19 @@ module Dependabot
|
|
|
80
80
|
return possible_releases_reverse.find { |r| released?(r.version) } unless cooldown_options
|
|
81
81
|
|
|
82
82
|
cooldown_filtered_releases = 0
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
83
|
+
latest_releases = cooldown_tracker.filter_prefiltered do
|
|
84
|
+
latest_release = possible_releases_reverse.find do |release|
|
|
85
|
+
if in_cooldown_period?(release)
|
|
86
|
+
Dependabot.logger.info("Filtered out (cooldown) : #{release}")
|
|
87
|
+
cooldown_filtered_releases += 1
|
|
88
|
+
next false
|
|
89
|
+
end
|
|
90
|
+
|
|
91
|
+
released?(release.version)
|
|
88
92
|
end
|
|
89
|
-
|
|
90
|
-
released?(release.version)
|
|
93
|
+
latest_release ? [latest_release] : []
|
|
91
94
|
end
|
|
95
|
+
latest_release = latest_releases.first
|
|
92
96
|
|
|
93
97
|
if cooldown_filtered_releases.positive?
|
|
94
98
|
Dependabot.logger.info(
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-maven
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.396.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,14 +15,14 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.396.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.396.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: rexml
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -296,7 +296,7 @@ licenses:
|
|
|
296
296
|
- MIT
|
|
297
297
|
metadata:
|
|
298
298
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
299
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
299
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.396.0
|
|
300
300
|
rdoc_options: []
|
|
301
301
|
require_paths:
|
|
302
302
|
- lib
|