dependabot-nuget 0.118.4 → 0.118.10
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: b69f231394a51e474dd514c5db5b454562b1486222e22889b816feae9da740c6
|
4
|
+
data.tar.gz: 7d69dda55b7e0e11eec903bd9a5c4b001667fe574930864c5094cce3139ffd03
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 0dddff57789b21961a24eb7b9e58b1ce2a99d9400a38cef43ea51a793394d7da901da7b6c89739d20d5d29bf1bd61adbeaa27bdfd1652c6a7c010ee1500b2601
|
7
|
+
data.tar.gz: ccd8db30b5fd6a334bf102c8b0962e78b167683f256d6dfe1267127f14b24c8db5ac3bc4321c2b31b4f2ab4415a1c836e5b2ca6283952cafca63d54a239e39dd
|
@@ -46,10 +46,12 @@ module Dependabot
|
|
46
46
|
def get_element_from_node(node)
|
47
47
|
node.at_xpath("/PackageReference") ||
|
48
48
|
node.at_xpath("/GlobalPackageReference") ||
|
49
|
+
node.at_xpath("/PackageVersion") ||
|
49
50
|
node.at_xpath("/Dependency") ||
|
50
51
|
node.at_xpath("/DevelopmentDependency")
|
51
52
|
end
|
52
53
|
|
54
|
+
# rubocop:disable Metrics/CyclomaticComplexity
|
53
55
|
def fetch_declaration_strings
|
54
56
|
deep_find_declarations(declaring_file.content).select do |nd|
|
55
57
|
node = Nokogiri::XML(nd)
|
@@ -66,6 +68,7 @@ module Dependabot
|
|
66
68
|
node_requirement == declaring_requirement.fetch(:requirement)
|
67
69
|
end
|
68
70
|
end
|
71
|
+
# rubocop:enable Metrics/CyclomaticComplexity
|
69
72
|
|
70
73
|
def get_node_version_value(node)
|
71
74
|
attribute = "Version"
|
@@ -147,6 +147,7 @@ module Dependabot
|
|
147
147
|
config_files.flat_map { |file| repos_from_config_file(file) }
|
148
148
|
end
|
149
149
|
|
150
|
+
# rubocop:disable Metrics/CyclomaticComplexity
|
150
151
|
def repos_from_config_file(config_file)
|
151
152
|
doc = Nokogiri::XML(config_file.content)
|
152
153
|
doc.remove_namespaces!
|
@@ -178,6 +179,7 @@ module Dependabot
|
|
178
179
|
|
179
180
|
sources
|
180
181
|
end
|
182
|
+
# rubocop:enable Metrics/CyclomaticComplexity
|
181
183
|
|
182
184
|
def default_repository_details
|
183
185
|
{
|
@@ -14,6 +14,8 @@ module Dependabot
|
|
14
14
|
class VersionFinder
|
15
15
|
require_relative "repository_finder"
|
16
16
|
|
17
|
+
NUGET_RANGE_REGEX = /[\(\[].*,.*[\)\]]/.freeze
|
18
|
+
|
17
19
|
def initialize(dependency:, dependency_files:, credentials:,
|
18
20
|
ignored_versions:, raise_on_ignored: false,
|
19
21
|
security_advisories:)
|
@@ -67,7 +69,7 @@ module Dependabot
|
|
67
69
|
filtered = possible_versions
|
68
70
|
|
69
71
|
ignored_versions.each do |req|
|
70
|
-
ignore_req = requirement_class.new(req
|
72
|
+
ignore_req = requirement_class.new(parse_requirement_string(req))
|
71
73
|
filtered =
|
72
74
|
filtered.
|
73
75
|
reject { |v| ignore_req.satisfied_by?(v.fetch(:version)) }
|
@@ -98,6 +100,12 @@ module Dependabot
|
|
98
100
|
end
|
99
101
|
end
|
100
102
|
|
103
|
+
def parse_requirement_string(string)
|
104
|
+
return string if string.match?(NUGET_RANGE_REGEX)
|
105
|
+
|
106
|
+
string.split(",").map(&:strip)
|
107
|
+
end
|
108
|
+
|
101
109
|
def available_v3_versions
|
102
110
|
v3_nuget_listings.flat_map do |listing|
|
103
111
|
listing.
|
@@ -169,7 +177,7 @@ module Dependabot
|
|
169
177
|
end
|
170
178
|
|
171
179
|
dependency.requirements.any? do |req|
|
172
|
-
reqs = (req.fetch(:requirement) || "")
|
180
|
+
reqs = parse_requirement_string(req.fetch(:requirement) || "")
|
173
181
|
next unless reqs.any? { |r| r.include?("-") }
|
174
182
|
|
175
183
|
requirement_class.
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-nuget
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.118.
|
4
|
+
version: 0.118.10
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-
|
11
|
+
date: 2020-08-03 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.118.
|
19
|
+
version: 0.118.10
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.118.
|
26
|
+
version: 0.118.10
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: byebug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -94,34 +94,20 @@ dependencies:
|
|
94
94
|
- - "~>"
|
95
95
|
- !ruby/object:Gem::Version
|
96
96
|
version: '1.2'
|
97
|
-
- !ruby/object:Gem::Dependency
|
98
|
-
name: rspec_junit_formatter
|
99
|
-
requirement: !ruby/object:Gem::Requirement
|
100
|
-
requirements:
|
101
|
-
- - "~>"
|
102
|
-
- !ruby/object:Gem::Version
|
103
|
-
version: '0.4'
|
104
|
-
type: :development
|
105
|
-
prerelease: false
|
106
|
-
version_requirements: !ruby/object:Gem::Requirement
|
107
|
-
requirements:
|
108
|
-
- - "~>"
|
109
|
-
- !ruby/object:Gem::Version
|
110
|
-
version: '0.4'
|
111
97
|
- !ruby/object:Gem::Dependency
|
112
98
|
name: rubocop
|
113
99
|
requirement: !ruby/object:Gem::Requirement
|
114
100
|
requirements:
|
115
101
|
- - "~>"
|
116
102
|
- !ruby/object:Gem::Version
|
117
|
-
version: 0.
|
103
|
+
version: 0.88.0
|
118
104
|
type: :development
|
119
105
|
prerelease: false
|
120
106
|
version_requirements: !ruby/object:Gem::Requirement
|
121
107
|
requirements:
|
122
108
|
- - "~>"
|
123
109
|
- !ruby/object:Gem::Version
|
124
|
-
version: 0.
|
110
|
+
version: 0.88.0
|
125
111
|
- !ruby/object:Gem::Dependency
|
126
112
|
name: vcr
|
127
113
|
requirement: !ruby/object:Gem::Requirement
|
@@ -197,7 +183,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
197
183
|
- !ruby/object:Gem::Version
|
198
184
|
version: 2.5.0
|
199
185
|
requirements: []
|
200
|
-
rubygems_version: 3.
|
186
|
+
rubygems_version: 3.1.2
|
201
187
|
signing_key:
|
202
188
|
specification_version: 4
|
203
189
|
summary: ".NET (NuGet) support for dependabot"
|