dependabot-nuget 0.118.7 → 0.118.8
Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: ca772ae173088990d7f3b61ae0ededcdc6b702e0ef9cd75860385c89fd0e99db
|
4
|
+
data.tar.gz: 51a1683b22ca3e50749e979d7f6a0ca9a090cb368551af05793802d8b5f40099
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 119618f0317d40c7bcb44952a05defe2eae2f504b0833681c431bdb177a835bfcfc93ede3eb01b82d7ce7a10d877674e5e24442848542da188f4a20b9b4bab3d
|
7
|
+
data.tar.gz: 11252341dea8dde5af25b0ae864ef1f4628dd98796133d530b3cfcb9991257c0ea4b5ed1ad015704645b8a61cb57a56cb99802814214b23f204f7d07c981e573
|
@@ -46,10 +46,12 @@ module Dependabot
|
|
46
46
|
def get_element_from_node(node)
|
47
47
|
node.at_xpath("/PackageReference") ||
|
48
48
|
node.at_xpath("/GlobalPackageReference") ||
|
49
|
+
node.at_xpath("/PackageVersion") ||
|
49
50
|
node.at_xpath("/Dependency") ||
|
50
51
|
node.at_xpath("/DevelopmentDependency")
|
51
52
|
end
|
52
53
|
|
54
|
+
# rubocop:disable Metrics/CyclomaticComplexity
|
53
55
|
def fetch_declaration_strings
|
54
56
|
deep_find_declarations(declaring_file.content).select do |nd|
|
55
57
|
node = Nokogiri::XML(nd)
|
@@ -66,6 +68,7 @@ module Dependabot
|
|
66
68
|
node_requirement == declaring_requirement.fetch(:requirement)
|
67
69
|
end
|
68
70
|
end
|
71
|
+
# rubocop:enable Metrics/CyclomaticComplexity
|
69
72
|
|
70
73
|
def get_node_version_value(node)
|
71
74
|
attribute = "Version"
|
@@ -147,6 +147,7 @@ module Dependabot
|
|
147
147
|
config_files.flat_map { |file| repos_from_config_file(file) }
|
148
148
|
end
|
149
149
|
|
150
|
+
# rubocop:disable Metrics/CyclomaticComplexity
|
150
151
|
def repos_from_config_file(config_file)
|
151
152
|
doc = Nokogiri::XML(config_file.content)
|
152
153
|
doc.remove_namespaces!
|
@@ -178,6 +179,7 @@ module Dependabot
|
|
178
179
|
|
179
180
|
sources
|
180
181
|
end
|
182
|
+
# rubocop:enable Metrics/CyclomaticComplexity
|
181
183
|
|
182
184
|
def default_repository_details
|
183
185
|
{
|
@@ -14,6 +14,8 @@ module Dependabot
|
|
14
14
|
class VersionFinder
|
15
15
|
require_relative "repository_finder"
|
16
16
|
|
17
|
+
NUGET_RANGE_REGEX = /[\(\[].*,.*[\)\]]/.freeze
|
18
|
+
|
17
19
|
def initialize(dependency:, dependency_files:, credentials:,
|
18
20
|
ignored_versions:, raise_on_ignored: false,
|
19
21
|
security_advisories:)
|
@@ -67,7 +69,7 @@ module Dependabot
|
|
67
69
|
filtered = possible_versions
|
68
70
|
|
69
71
|
ignored_versions.each do |req|
|
70
|
-
ignore_req = requirement_class.new(req
|
72
|
+
ignore_req = requirement_class.new(parse_requirement_string(req))
|
71
73
|
filtered =
|
72
74
|
filtered.
|
73
75
|
reject { |v| ignore_req.satisfied_by?(v.fetch(:version)) }
|
@@ -98,6 +100,12 @@ module Dependabot
|
|
98
100
|
end
|
99
101
|
end
|
100
102
|
|
103
|
+
def parse_requirement_string(string)
|
104
|
+
return string if string.match?(NUGET_RANGE_REGEX)
|
105
|
+
|
106
|
+
string.split(",").map(&:strip)
|
107
|
+
end
|
108
|
+
|
101
109
|
def available_v3_versions
|
102
110
|
v3_nuget_listings.flat_map do |listing|
|
103
111
|
listing.
|
@@ -169,7 +177,7 @@ module Dependabot
|
|
169
177
|
end
|
170
178
|
|
171
179
|
dependency.requirements.any? do |req|
|
172
|
-
reqs = (req.fetch(:requirement) || "")
|
180
|
+
reqs = parse_requirement_string(req.fetch(:requirement) || "")
|
173
181
|
next unless reqs.any? { |r| r.include?("-") }
|
174
182
|
|
175
183
|
requirement_class.
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-nuget
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.118.
|
4
|
+
version: 0.118.8
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-07-
|
11
|
+
date: 2020-07-24 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.118.
|
19
|
+
version: 0.118.8
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.118.
|
26
|
+
version: 0.118.8
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: byebug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -114,14 +114,14 @@ dependencies:
|
|
114
114
|
requirements:
|
115
115
|
- - "~>"
|
116
116
|
- !ruby/object:Gem::Version
|
117
|
-
version: 0.
|
117
|
+
version: 0.88.0
|
118
118
|
type: :development
|
119
119
|
prerelease: false
|
120
120
|
version_requirements: !ruby/object:Gem::Requirement
|
121
121
|
requirements:
|
122
122
|
- - "~>"
|
123
123
|
- !ruby/object:Gem::Version
|
124
|
-
version: 0.
|
124
|
+
version: 0.88.0
|
125
125
|
- !ruby/object:Gem::Dependency
|
126
126
|
name: vcr
|
127
127
|
requirement: !ruby/object:Gem::Requirement
|