dependabot-nuget 0.117.6 → 0.117.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2e1705d4e7aadc7f39a382cd9e61a613c7bcb0a627101ac867445712ea50c14f
-  data.tar.gz: ec59b595619466dbcc7e92745bc286c2d1f26f3ba089484f3713c44b864bb9a7
+  metadata.gz: '086c2197a6a562a6de05fa612462f340728ff5887bd9472a771394d56db84432'
+  data.tar.gz: 440a0ff6854def8b4af4b50f5735dcac5545e6da9f2f9e0c121b7e411cc77d5e
 SHA512:
-  metadata.gz: b896adef41315a4c24564730bfb321365c7ec5844a55707dac5551a577d61bf1eac6f0d8f0777a8f97fc3af3302c5043657dfe83475012eb9db2a8ba455b19bc
-  data.tar.gz: a24775fccd3431723d028484c4cfa5d97cfe7263ba7d69d8e5b1628fc38d0226eb05054b2a2357f83d9b1e2ccba9f31f1ddae5916e0b889cb58289f25366962f
+  metadata.gz: 116976d7995552011f5b9eaee9ce37e92ea1a7c17143998c70d8095bbe762407bd909ea8564f21a229a8ec420a375fa9e5dda4097375ece0e235711175b2cda8
+  data.tar.gz: 32af20a089e8013688f1b468e9e62259559241ea95c0e7caaa5869fc196a31844cd7195d4562abab9b1af2e0003cfdd1d4d87df7a0cf951de16a7a32727733f7

data/lib/dependabot/nuget/update_checker.rb

@@ -95,6 +95,7 @@ module Dependabot
             dependency_files: dependency_files,
             credentials: credentials,
             ignored_versions: ignored_versions,
+            raise_on_ignored: @raise_on_ignored,
             security_advisories: security_advisories
           )
       end
@@ -106,7 +107,8 @@ module Dependabot
             dependency_files: dependency_files,
             target_version_details: latest_version_details,
             credentials: credentials,
-            ignored_versions: ignored_versions
+            ignored_versions: ignored_versions,
+            raise_on_ignored: @raise_on_ignored
           )
       end
 

data/lib/dependabot/nuget/update_checker/property_updater.rb

@@ -11,11 +11,13 @@ module Dependabot
         require_relative "requirements_updater"
 
         def initialize(dependency:, dependency_files:, credentials:,
-                       target_version_details:, ignored_versions:)
+                       target_version_details:, ignored_versions:,
+                       raise_on_ignored: false)
           @dependency       = dependency
           @dependency_files = dependency_files
           @credentials      = credentials
           @ignored_versions = ignored_versions
+          @raise_on_ignored = raise_on_ignored
           @target_version   = target_version_details&.fetch(:version)
           @source_details   = target_version_details&.
                               slice(:nuspec_url, :repo_url, :source_url)
@@ -31,6 +33,7 @@ module Dependabot
                 dependency_files: dependency_files,
                 credentials: credentials,
                 ignored_versions: ignored_versions,
+                raise_on_ignored: @raise_on_ignored,
                 security_advisories: []
               ).versions.map { |v| v.fetch(:version) }
 

data/lib/dependabot/nuget/update_checker/requirements_updater.rb

@@ -12,8 +12,6 @@ module Dependabot
   module Nuget
     class UpdateChecker
       class RequirementsUpdater
-        VERSION_REGEX = /[0-9a-zA-Z]+(?:\.[a-zA-Z0-9\-]+)*/.freeze
-
         def initialize(requirements:, latest_version:, source_details:)
           @requirements = requirements
           @source_details = source_details
@@ -36,9 +34,13 @@ module Dependabot
               if req.fetch(:requirement).include?("*")
                 update_wildcard_requirement(req.fetch(:requirement))
               else
-                # Since range requirements are excluded by the line above we
-                # can just do a `gsub` on anything that looks like a version
-                req[:requirement].gsub(VERSION_REGEX, latest_version.to_s)
+                # Since range requirements are excluded by the line above we can
+                # replace anything that looks like a version with the new
+                # version
+                req[:requirement].sub(
+                  /#{Nuget::Version::VERSION_PATTERN}/,
+                  latest_version.to_s
+                )
               end
 
             next req if new_req == req.fetch(:requirement)

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -15,11 +15,13 @@ module Dependabot
         require_relative "repository_finder"
 
         def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:)
+                       ignored_versions:, raise_on_ignored: false,
+                       security_advisories:)
           @dependency          = dependency
           @dependency_files    = dependency_files
           @credentials         = credentials
           @ignored_versions    = ignored_versions
+          @raise_on_ignored    = raise_on_ignored
           @security_advisories = security_advisories
         end
 
@@ -38,8 +40,8 @@ module Dependabot
             begin
               possible_versions = versions
               possible_versions = filter_prereleases(possible_versions)
-              possible_versions = filter_ignored_versions(possible_versions)
               possible_versions = filter_vulnerable_versions(possible_versions)
+              possible_versions = filter_ignored_versions(possible_versions)
               possible_versions = filter_lower_versions(possible_versions)
               possible_versions.min_by { |hash| hash.fetch(:version) }
             end
@@ -62,16 +64,20 @@ module Dependabot
         end
 
         def filter_ignored_versions(possible_versions)
-          versions_array = possible_versions
+          filtered = possible_versions
 
           ignored_versions.each do |req|
             ignore_req = requirement_class.new(req.split(","))
-            versions_array =
-              versions_array.
+            filtered =
+              filtered.
               reject { |v| ignore_req.satisfied_by?(v.fetch(:version)) }
           end
 
-          versions_array
+          if @raise_on_ignored && filtered.empty? && possible_versions.any?
+            raise AllVersionsIgnored
+          end
+
+          filtered
         end
 
         def filter_vulnerable_versions(possible_versions)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.117.6
+  version: 0.117.11
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-04-09 00:00:00.000000000 Z
+date: 2020-05-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.6
+        version: 0.117.11
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.117.6
+        version: 0.117.11
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.80.1
+        version: 0.83.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.80.1
+        version: 0.83.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement