dependabot-maven 0.93.3 → 0.93.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/metadata_finder.rb +9 -6
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 81a0b80416df65437048303376c2432df59bf27f0572e07437d5e4698ffd4013
|
|
4
|
+
data.tar.gz: fcea1999c2e177350ff1c901e6b1b7665206b09e160af1ed9dd6a1d93731c4cd
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 80b7a24ff9d25f255768fe46c3b8d93402593837f23888f1dad4c7bbd2498a0792b170192d523e33a08595948dea62974529f322f4f38f5bd39fb30656b8d7fd
|
|
7
|
+
data.tar.gz: 8bc6b7b3a36dfa07c252f69e5808ecdc404b71b92279e0525a9ffa2d2dadc2b625a82bb322e0d8b415dc391515b9e7b7f1ba8c16375a761fcd3c9345c8b8a618
|
|
@@ -55,12 +55,12 @@ module Dependabot
|
|
|
55
55
|
|
|
56
56
|
source_url = potential_source_urls.find { |url| Source.from_url(url) }
|
|
57
57
|
source_url ||= source_from_anywhere_in_pom(pom)
|
|
58
|
-
source_url =
|
|
58
|
+
source_url = substitute_properties_in_source_url(source_url, pom)
|
|
59
59
|
|
|
60
60
|
Source.from_url(source_url)
|
|
61
61
|
end
|
|
62
62
|
|
|
63
|
-
def
|
|
63
|
+
def substitute_properties_in_source_url(source_url, pom)
|
|
64
64
|
return unless source_url
|
|
65
65
|
return source_url unless source_url.include?("${")
|
|
66
66
|
|
|
@@ -81,7 +81,8 @@ module Dependabot
|
|
|
81
81
|
nm = nm.sub(DOT_SEPARATOR_REGEX, "/")
|
|
82
82
|
end
|
|
83
83
|
|
|
84
|
-
source_url.gsub(source_url.match(regex).to_s, property_value)
|
|
84
|
+
url = source_url.gsub(source_url.match(regex).to_s, property_value)
|
|
85
|
+
substitute_properties_in_source_url(url, pom)
|
|
85
86
|
end
|
|
86
87
|
|
|
87
88
|
def source_from_anywhere_in_pom(pom)
|
|
@@ -124,10 +125,12 @@ module Dependabot
|
|
|
124
125
|
|
|
125
126
|
return unless artifact_id && group_id && version
|
|
126
127
|
|
|
128
|
+
url = "#{maven_repo_url}/#{group_id.tr('.', '/')}/#{artifact_id}/"\
|
|
129
|
+
"#{version}/"\
|
|
130
|
+
"#{artifact_id}-#{version}.pom"
|
|
131
|
+
|
|
127
132
|
response = Excon.get(
|
|
128
|
-
|
|
129
|
-
"#{version}/"\
|
|
130
|
-
"#{artifact_id}-#{version}.pom",
|
|
133
|
+
substitute_properties_in_source_url(url, pom),
|
|
131
134
|
headers: auth_details,
|
|
132
135
|
idempotent: true,
|
|
133
136
|
**SharedHelpers.excon_defaults
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-maven
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.93.
|
|
4
|
+
version: 0.93.4
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.93.
|
|
19
|
+
version: 0.93.4
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.93.
|
|
26
|
+
version: 0.93.4
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: byebug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|