dependabot-nuget 0.119.0 → 0.119.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f452526e25efb46299d2b758045e4110fab03ba9d09942143eb303a26af4b16d
-  data.tar.gz: c9c7d280bba08eb0ae19fb476d3069d9c76e44e4f2a211d7a078cf92c5aea9fd
+  metadata.gz: 846467aca0385f37b4e168148cf496d5d6dcd53250d052bf0a7dd17ef2137c3d
+  data.tar.gz: e01807725ce6e1925d747fe27053ed86aa2dfd50e78d05a707d0a5238e459b34
 SHA512:
-  metadata.gz: dcb529858714aa3753d6f46bf8d906383a4b4a3e3ea66862e6ae963e1babd94b5278b14d22716a35a0c1c0ffdedade26bb2e531f52d53457e57eb0753956454d
-  data.tar.gz: 2f11ab7c5ac2acaa83ee3733bdcab19c7ec10477676b9c2ca4df4d3d33f954c109580028643a8f710d1a0c5564f47a608a1844cf685c8b9c4156e5e54a7ff050
+  metadata.gz: bdf671ba9417d2ae1a44b04046d0c229a07e903c0013e5d1323c5abdb9ae1a8b4d3b593e249efbc29ac5c5245d3f9b66b8960da0839c52a764cc97956f0b7315
+  data.tar.gz: aa191d37137d723573a01e864d7280cdb5393ad71ab3a3fa372841a2b9bd15d3111a601436117cb0e0e25f081b60e4f85e5bb5a15fc0396ba1e28ef967bb8204

data/lib/dependabot/nuget/file_fetcher.rb

@@ -82,6 +82,7 @@ module Dependabot
           end.compact
       end
 
+      # rubocop:disable Metrics/PerceivedComplexity
       def sln_file_names
         sln_files = repo_contents.select { |f| f.name.end_with?(".sln") }
         src_dir = repo_contents.any? { |f| f.name == "src" && f.type == "dir" }
@@ -98,6 +99,7 @@ module Dependabot
 
         sln_files.map(&:name)
       end
+      # rubocop:enable Metrics/PerceivedComplexity
 
       def directory_build_files
         return @directory_build_files if @directory_build_files_checked

data/lib/dependabot/nuget/file_parser/project_file_parser.rb

@@ -79,6 +79,7 @@ module Dependabot
           )
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def dependency_name(dependency_node, project_file)
           raw_name =
             dependency_node.attribute("Include")&.value&.strip ||
@@ -93,6 +94,7 @@ module Dependabot
 
           evaluated_value(raw_name, project_file)
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def dependency_requirement(dependency_node, project_file)
           raw_requirement = get_node_version_value(dependency_node)
@@ -127,6 +129,7 @@ module Dependabot
             named_captures.fetch("property")
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def get_node_version_value(node)
           attribute = "Version"
           value =
@@ -137,6 +140,7 @@ module Dependabot
 
           value == "" ? nil : value
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def evaluated_value(value, project_file)
           return value unless value.match?(PROPERTY_REGEX)

data/lib/dependabot/nuget/file_updater/packages_config_declaration_finder.rb

@@ -40,6 +40,7 @@ module Dependabot
 
         private
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def fetch_declaration_strings
           deep_find_declarations(packages_config.content).select do |nd|
             node = Nokogiri::XML(nd)
@@ -55,6 +56,7 @@ module Dependabot
             node_requirement == declaring_requirement.fetch(:requirement)
           end
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def deep_find_declarations(string)
           string.scan(DECLARATION_REGEX).flat_map do |matching_node|

data/lib/dependabot/nuget/file_updater/project_file_declaration_finder.rb

@@ -52,6 +52,7 @@ module Dependabot
         end
 
         # rubocop:disable Metrics/CyclomaticComplexity
+        # rubocop:disable Metrics/PerceivedComplexity
         def fetch_declaration_strings
           deep_find_declarations(declaring_file.content).select do |nd|
             node = Nokogiri::XML(nd)
@@ -68,8 +69,10 @@ module Dependabot
             node_requirement == declaring_requirement.fetch(:requirement)
           end
         end
+        # rubocop:enable Metrics/PerceivedComplexity
         # rubocop:enable Metrics/CyclomaticComplexity
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def get_node_version_value(node)
           attribute = "Version"
           node.attribute(attribute)&.value&.strip ||
@@ -77,6 +80,7 @@ module Dependabot
             node.attribute(attribute.downcase)&.value&.strip ||
             node.at_xpath("./#{attribute.downcase}")&.content&.strip
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def deep_find_declarations(string)
           string.scan(DECLARATION_REGEX).flat_map do |matching_node|

data/lib/dependabot/nuget/metadata_finder.rb

@@ -32,7 +32,8 @@ module Dependabot
 
       def source_from_anywhere_in_nuspec(nuspec)
         github_urls = []
-        nuspec.to_s.scan(Source::SOURCE_REGEX) do
+        nuspec.to_s.force_encoding(Encoding::UTF_8).
+          scan(Source::SOURCE_REGEX) do
           github_urls << Regexp.last_match.to_s
         end
 
@@ -86,6 +87,7 @@ module Dependabot
         source.fetch("source_url")
       end
 
+      # rubocop:disable Metrics/PerceivedComplexity
       def auth_header
         source = dependency.requirements.
                  find { |r| r&.fetch(:source) }&.fetch(:source)
@@ -108,6 +110,7 @@ module Dependabot
           { "Authorization" => "Bearer #{token}" }
         end
       end
+      # rubocop:enable Metrics/PerceivedComplexity
     end
   end
 end

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -93,10 +93,12 @@ module Dependabot
 
         def build_v2_url(response, repo_details)
           doc = Nokogiri::XML(response.body)
+
           doc.remove_namespaces!
           base_url = doc.at_xpath("service")&.attributes&.
                      fetch("base", nil)&.value
-          return unless base_url
+
+          base_url ||= repo_details.fetch(:url)
 
           {
             repository_url: base_url,
@@ -148,6 +150,8 @@ module Dependabot
         end
 
         # rubocop:disable Metrics/CyclomaticComplexity
+        # rubocop:disable Metrics/PerceivedComplexity
+        # rubocop:disable Metrics/AbcSize
         def repos_from_config_file(config_file)
           doc = Nokogiri::XML(config_file.content)
           doc.remove_namespaces!
@@ -179,6 +183,8 @@ module Dependabot
 
           sources
         end
+        # rubocop:enable Metrics/AbcSize
+        # rubocop:enable Metrics/PerceivedComplexity
         # rubocop:enable Metrics/CyclomaticComplexity
 
         def default_repository_details
@@ -193,6 +199,7 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|
             key = source_details.fetch(:key)
@@ -225,6 +232,7 @@ module Dependabot
 
           sources
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def remove_wrapping_zero_width_chars(string)
           string.force_encoding("UTF-8").encode.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.119.0
+  version: 0.119.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-26 00:00:00.000000000 Z
+date: 2020-09-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.0
+        version: 0.119.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.0
+        version: 0.119.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 0.90.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 0.90.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement