dependabot-maven 0.95.66 → 0.95.67

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b14544b8b8ed5b2a9c388c15e564cc065961aa6d482663c45ee36eda4ce4c89c
-  data.tar.gz: b1ce314a613f6c24fbe9102ec28a40566711124d2474a8f62cb0a2f041c5b548
+  metadata.gz: ca7f8a9627f830b76442a98bc0d612de008ed260b4f5cb89fd22402fa0555bab
+  data.tar.gz: 82c77e03426b42cd12f2c698f107e4ccf272a93bb35706d79b356f3bb30a5592
 SHA512:
-  metadata.gz: 8b8e475b5f7e4bcdcab57e819e2485ae20cdbc388883eb4b4a6f538b60f3467e7a3d12cad26a02c3443da513318197518903b6fcb711409b78ea4ae69acb4211
-  data.tar.gz: 83c1a1883ffc19509962ac6c38d9158e0ab3af202b71e6d2726b86a2b8f9f4f8b5b6e3448c8f39175ae7a4adf516f945ea1553e5087dfdba66a9a181c629631f
+  metadata.gz: 2975d91b9478b0a6d7e293b0b9db5c2b8ef3709880989e01b401896e9bf48e4c7101ed14839072689ec9de767e14473a87c06c4bd5be63158bd938b26afdc078
+  data.tar.gz: 46b84f9ee0df85adced98039391641107faf9cc911733693b037b8bc8525427c4eb3c421b64b2f3c00078123835c60bc7c771cbc73a6f93d4fd8954e10b49a8e

data/lib/dependabot/maven/file_parser.rb

@@ -5,6 +5,7 @@ require "nokogiri"
 require "dependabot/dependency"
 require "dependabot/file_parsers"
 require "dependabot/file_parsers/base"
+require "dependabot/maven/version"
 require "dependabot/errors"
 
 # The best Maven documentation is at:
@@ -90,7 +91,7 @@ module Dependabot
           requirements: [{
             requirement: dependency_requirement(pom, dependency_node),
             file: pom.name,
-            groups: [],
+            groups: dependency_groups(pom, dependency_node),
             source: nil,
             metadata: {
               packaging_type: packaging_type(pom, dependency_node)
@@ -157,6 +158,19 @@ module Dependabot
         version_content.empty? ? nil : version_content
       end
 
+      def dependency_groups(pom, dependency_node)
+        dependency_scope(pom, dependency_node) == "test" ? ["test"] : []
+      end
+
+      def dependency_scope(pom, dependency_node)
+        return "compile" unless dependency_node.at_xpath("./scope")
+
+        scope_content = dependency_node.at_xpath("./scope").content.strip
+        scope_content = evaluated_value(scope_content, pom)
+
+        scope_content.empty? ? "compile" : scope_content
+      end
+
       def packaging_type(pom, dependency_node)
         return "pom" if dependency_node.node_name == "parent"
         return "jar" unless dependency_node.at_xpath("./type")

data/lib/dependabot/maven.rb

@@ -15,4 +15,5 @@ Dependabot::PullRequestCreator::Labeler.
   register_label_details("maven", name: "java", colour: "ffa221")
 
 require "dependabot/dependency"
-Dependabot::Dependency.register_production_check("maven", ->(_) { true })
+Dependabot::Dependency.
+  register_production_check("maven", ->(groups) { groups != ["test"] })

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.95.66
+  version: 0.95.67
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.66
+        version: 0.95.67
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.66
+        version: 0.95.67
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement