dependabot-nuget 0.119.2 → 0.120.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b17e71ca2621207000ce4ec937b94bcca2b5a43dfd5a7de0b852520494e62ab9
-  data.tar.gz: a3855462ce00fd420f434016ad20d3174230a2984b98a472de76c8c69db8de5e
+  metadata.gz: 35138ea438bb8209fde7d4519b1e4530568735b860785c3ac69cee4c755cb762
+  data.tar.gz: 1e423974b465e3cd9b29ec90b89c898b75c15961a70b0dc59a0f1048ede0c0ac
 SHA512:
-  metadata.gz: 0a9f6f198fbab2de59064b2ea9958751deaf51dcd11fd2e2e7df358e4710b33680a27943dbcb88794fba3708389ced422357e93586db1404a8d736378c519ce4
-  data.tar.gz: 24c72168e99ed489678b568c37a483b7b136614c88a1028dfe779516542bdce0fb3e94fbe2dc0b68919226bc8f53d6c238697310c420bf56dc134e04afd772a4
+  metadata.gz: dca95fcac4b0a34b0917a4c4b7ddd2b45f2196945080fd92a4a80872eddf651bf95abcba5cae7ce28fc2b9b46b78cb90abd27bc2c62dc5c8cf43dc137957e4be
+  data.tar.gz: 17f9d6164fcd3851f54a310fad3777d77554fb9cb0e74a0807416aa8f0dc09af040d7792206ba68c6a96ca9a51330f42c7b98d50f27fc4253f38b15a1066630f

data/lib/dependabot/nuget/file_fetcher.rb

@@ -82,6 +82,7 @@ module Dependabot
           end.compact
       end
 
+      # rubocop:disable Metrics/PerceivedComplexity
       def sln_file_names
         sln_files = repo_contents.select { |f| f.name.end_with?(".sln") }
         src_dir = repo_contents.any? { |f| f.name == "src" && f.type == "dir" }
@@ -98,6 +99,7 @@ module Dependabot
 
         sln_files.map(&:name)
       end
+      # rubocop:enable Metrics/PerceivedComplexity
 
       def directory_build_files
         return @directory_build_files if @directory_build_files_checked

data/lib/dependabot/nuget/file_parser/project_file_parser.rb

@@ -79,6 +79,7 @@ module Dependabot
           )
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def dependency_name(dependency_node, project_file)
           raw_name =
             dependency_node.attribute("Include")&.value&.strip ||
@@ -93,6 +94,7 @@ module Dependabot
 
           evaluated_value(raw_name, project_file)
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def dependency_requirement(dependency_node, project_file)
           raw_requirement = get_node_version_value(dependency_node)
@@ -127,6 +129,7 @@ module Dependabot
             named_captures.fetch("property")
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def get_node_version_value(node)
           attribute = "Version"
           value =
@@ -137,6 +140,7 @@ module Dependabot
 
           value == "" ? nil : value
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def evaluated_value(value, project_file)
           return value unless value.match?(PROPERTY_REGEX)

data/lib/dependabot/nuget/file_updater/packages_config_declaration_finder.rb

@@ -40,6 +40,7 @@ module Dependabot
 
         private
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def fetch_declaration_strings
           deep_find_declarations(packages_config.content).select do |nd|
             node = Nokogiri::XML(nd)
@@ -55,6 +56,7 @@ module Dependabot
             node_requirement == declaring_requirement.fetch(:requirement)
           end
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def deep_find_declarations(string)
           string.scan(DECLARATION_REGEX).flat_map do |matching_node|

data/lib/dependabot/nuget/file_updater/project_file_declaration_finder.rb

@@ -52,6 +52,7 @@ module Dependabot
         end
 
         # rubocop:disable Metrics/CyclomaticComplexity
+        # rubocop:disable Metrics/PerceivedComplexity
         def fetch_declaration_strings
           deep_find_declarations(declaring_file.content).select do |nd|
             node = Nokogiri::XML(nd)
@@ -68,8 +69,10 @@ module Dependabot
             node_requirement == declaring_requirement.fetch(:requirement)
           end
         end
+        # rubocop:enable Metrics/PerceivedComplexity
         # rubocop:enable Metrics/CyclomaticComplexity
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def get_node_version_value(node)
           attribute = "Version"
           node.attribute(attribute)&.value&.strip ||
@@ -77,6 +80,7 @@ module Dependabot
             node.attribute(attribute.downcase)&.value&.strip ||
             node.at_xpath("./#{attribute.downcase}")&.content&.strip
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def deep_find_declarations(string)
           string.scan(DECLARATION_REGEX).flat_map do |matching_node|

data/lib/dependabot/nuget/metadata_finder.rb

@@ -32,7 +32,8 @@ module Dependabot
 
       def source_from_anywhere_in_nuspec(nuspec)
         github_urls = []
-        nuspec.to_s.scan(Source::SOURCE_REGEX) do
+        nuspec.to_s.force_encoding(Encoding::UTF_8).
+          scan(Source::SOURCE_REGEX) do
           github_urls << Regexp.last_match.to_s
         end
 
@@ -86,6 +87,7 @@ module Dependabot
         source.fetch("source_url")
       end
 
+      # rubocop:disable Metrics/PerceivedComplexity
       def auth_header
         source = dependency.requirements.
                  find { |r| r&.fetch(:source) }&.fetch(:source)
@@ -108,6 +110,7 @@ module Dependabot
           { "Authorization" => "Bearer #{token}" }
         end
       end
+      # rubocop:enable Metrics/PerceivedComplexity
     end
   end
 end

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -93,10 +93,12 @@ module Dependabot
 
         def build_v2_url(response, repo_details)
           doc = Nokogiri::XML(response.body)
+
           doc.remove_namespaces!
           base_url = doc.at_xpath("service")&.attributes&.
                      fetch("base", nil)&.value
-          return unless base_url
+
+          base_url ||= repo_details.fetch(:url)
 
           {
             repository_url: base_url,
@@ -148,6 +150,8 @@ module Dependabot
         end
 
         # rubocop:disable Metrics/CyclomaticComplexity
+        # rubocop:disable Metrics/PerceivedComplexity
+        # rubocop:disable Metrics/AbcSize
         def repos_from_config_file(config_file)
           doc = Nokogiri::XML(config_file.content)
           doc.remove_namespaces!
@@ -179,6 +183,8 @@ module Dependabot
 
           sources
         end
+        # rubocop:enable Metrics/AbcSize
+        # rubocop:enable Metrics/PerceivedComplexity
         # rubocop:enable Metrics/CyclomaticComplexity
 
         def default_repository_details
@@ -193,6 +199,7 @@ module Dependabot
           }
         end
 
+        # rubocop:disable Metrics/PerceivedComplexity
         def add_config_file_credentials(sources:, doc:)
           sources.each do |source_details|
             key = source_details.fetch(:key)
@@ -225,6 +232,7 @@ module Dependabot
 
           sources
         end
+        # rubocop:enable Metrics/PerceivedComplexity
 
         def remove_wrapping_zero_width_chars(string)
           string.force_encoding("UTF-8").encode.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.119.2
+  version: 0.120.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-02 00:00:00.000000000 Z
+date: 2020-09-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.2
+        version: 0.120.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.2
+        version: 0.120.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 0.91.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 0.91.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement