dependabot-maven 0.98.26 → 0.98.27
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/maven/file_updater/declaration_finder.rb +17 -0
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: a71d7cd44ae541b3efe380af062a7fedb945e91f3d9580fa190de27b4f22fb79
|
|
4
|
+
data.tar.gz: 1a5b2c62423e9a864704cbda187f6ac5c4dead1057fbd401c192ac9427cf37ff
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: dd395316d4bc4eb8b41c63c2d1cae10ca279bff624cda884e1f976b3a2a9c6541799e211b97f3914cb3fcf231e22a9e9cd66178a8940a62c4abaddf6e665009f
|
|
7
|
+
data.tar.gz: c5c3ab399f9d215b150b93342488e1ca6229cd4e42e9fbcde2e149adff83c52ae2b9bb3730d24a70fa6c6b4ce24e6a207489e4929a590b6657e2892ff51b3a63
|
|
@@ -59,6 +59,7 @@ module Dependabot
|
|
|
59
59
|
|
|
60
60
|
next false unless node_name == dependency_name
|
|
61
61
|
next false unless packaging_type_matches?(node)
|
|
62
|
+
next false unless scope_matches?(node)
|
|
62
63
|
|
|
63
64
|
declaring_requirement_matches?(node)
|
|
64
65
|
end
|
|
@@ -102,6 +103,13 @@ module Dependabot
|
|
|
102
103
|
type == packaging_type(node)
|
|
103
104
|
end
|
|
104
105
|
|
|
106
|
+
def scope_matches?(node)
|
|
107
|
+
dependency_type = declaring_requirement.fetch(:groups)
|
|
108
|
+
node_type = dependency_scope(node) == "test" ? ["test"] : []
|
|
109
|
+
|
|
110
|
+
dependency_type == node_type
|
|
111
|
+
end
|
|
112
|
+
|
|
105
113
|
def packaging_type(dependency_node)
|
|
106
114
|
return "pom" if dependency_node.child.node_name == "parent"
|
|
107
115
|
return "jar" unless dependency_node.at_xpath("./*/type")
|
|
@@ -112,6 +120,15 @@ module Dependabot
|
|
|
112
120
|
evaluated_value(packaging_type_content)
|
|
113
121
|
end
|
|
114
122
|
|
|
123
|
+
def dependency_scope(dependency_node)
|
|
124
|
+
return "compile" unless dependency_node.at_xpath("./*/scope")
|
|
125
|
+
|
|
126
|
+
scope_content = dependency_node.at_xpath("./*/scope").content.strip
|
|
127
|
+
scope_content = evaluated_value(scope_content)
|
|
128
|
+
|
|
129
|
+
scope_content.empty? ? "compile" : scope_content
|
|
130
|
+
end
|
|
131
|
+
|
|
115
132
|
def evaluated_value(value)
|
|
116
133
|
return value unless value.match?(Maven::FileParser::PROPERTY_REGEX)
|
|
117
134
|
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-maven
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.98.
|
|
4
|
+
version: 0.98.27
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -16,14 +16,14 @@ dependencies:
|
|
|
16
16
|
requirements:
|
|
17
17
|
- - '='
|
|
18
18
|
- !ruby/object:Gem::Version
|
|
19
|
-
version: 0.98.
|
|
19
|
+
version: 0.98.27
|
|
20
20
|
type: :runtime
|
|
21
21
|
prerelease: false
|
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
|
23
23
|
requirements:
|
|
24
24
|
- - '='
|
|
25
25
|
- !ruby/object:Gem::Version
|
|
26
|
-
version: 0.98.
|
|
26
|
+
version: 0.98.27
|
|
27
27
|
- !ruby/object:Gem::Dependency
|
|
28
28
|
name: byebug
|
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|