dependabot-nuget 0.119.4 → 0.120.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a826bc8d48ac0f98d6f71e9d98e4e49cc1154d69b25cc28bb3ad1e434b20fc41
-  data.tar.gz: d25db8de84976c39a9438db5147fe410c55539a79f35ec47af30eb9a6414d280
+  metadata.gz: c3c6274cdbd6acdcfa3f590a1a616236373d342d811c377bfc6ee4914f947b0f
+  data.tar.gz: 9ada42fc1b3fb713ae01948e55b0e015d1780ee10a1a8d5a18ecdbebc231f5ed
 SHA512:
-  metadata.gz: 575ff47e0577e65962aed7cc98229aa51a2a88cb67492c5f04586de57009e668e98cf80b87fb30edce0f9d1de6a63aaae31ff60f3dc92939423cfd88a3f99cb7
-  data.tar.gz: 1966b4307a5ca0333550ef5eb3d53bcd17fbad20324a06d23116f2ea6c5881bad791086a2071477091bd273d1430b8b2a25cec226d85fbf7860c327726ad1329
+  metadata.gz: a448984be1dece904a6a28e4310c99823197b3ea262bd19ea5f3094e96d00b405db4f784c82c9fe4e05e07a3ef66d62ffcd12bffe74ee199b3762c5d4a5feea1
+  data.tar.gz: 64d8444e2761879a6494583b52b77bb429b207b4298bec2dacfb8db5461684b6a6ca11aa9d7bfcb390b40ff8f016e0691ae3d02cb405c175bcf59ee10fe3e9bc

data/lib/dependabot/nuget/metadata_finder.rb

@@ -32,7 +32,8 @@ module Dependabot
 
       def source_from_anywhere_in_nuspec(nuspec)
         github_urls = []
-        nuspec.to_s.scan(Source::SOURCE_REGEX) do
+        nuspec.to_s.force_encoding(Encoding::UTF_8).
+          scan(Source::SOURCE_REGEX) do
           github_urls << Regexp.last_match.to_s
         end
 
@@ -47,9 +48,8 @@ module Dependabot
 
         response = Excon.get(
           dependency_nuspec_url,
-          headers: auth_header,
           idempotent: true,
-          **SharedHelpers.excon_defaults
+          **SharedHelpers.excon_defaults(headers: auth_header)
         )
 
         @dependency_nuspec_file = Nokogiri::XML(response.body)

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -71,9 +71,10 @@ module Dependabot
         def get_repo_metadata(repo_details)
           Excon.get(
             repo_details.fetch(:url),
-            headers: auth_header_for_token(repo_details.fetch(:token)),
             idempotent: true,
-            **SharedHelpers.excon_defaults
+            **SharedHelpers.excon_defaults(
+              headers: auth_header_for_token(repo_details.fetch(:token))
+            )
           )
         end
 

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -215,9 +215,10 @@ module Dependabot
             map do |url_details|
               response = Excon.get(
                 url_details[:versions_url],
-                headers: url_details[:auth_header],
                 idempotent: true,
-                **excon_defaults
+                **SharedHelpers.excon_defaults(
+                  excon_options.merge(headers: url_details[:auth_header])
+                )
               )
               next unless response.status == 200
 
@@ -237,9 +238,10 @@ module Dependabot
           elsif repository_details[:versions_url]
             response = Excon.get(
               repository_details[:versions_url],
-              headers: repository_details[:auth_header],
               idempotent: true,
-              **excon_defaults
+              **SharedHelpers.excon_defaults(
+                excon_options.merge(headers: repository_details[:auth_header])
+              )
             )
             return unless response.status == 200
 
@@ -251,9 +253,10 @@ module Dependabot
         def fetch_versions_from_search_url(repository_details)
           response = Excon.get(
             repository_details[:search_url],
-            headers: repository_details[:auth_header],
             idempotent: true,
-            **excon_defaults
+            **SharedHelpers.excon_defaults(
+              excon_options.merge(headers: repository_details[:auth_header])
+            )
           )
           return unless response.status == 200
 
@@ -301,16 +304,16 @@ module Dependabot
             gsub(/[\u200B-\u200D\uFEFF]\Z/, "")
         end
 
-        def excon_defaults
+        def excon_options
           # For large JSON files we sometimes need a little longer than for
           # other languages. For example, see:
           # https://dotnet.myget.org/F/aspnetcore-dev/api/v3/query?
           # q=microsoft.aspnetcore.mvc&prerelease=true
-          SharedHelpers.excon_defaults.merge(
+          {
             connect_timeout: 30,
             write_timeout: 30,
             read_timeout: 30
-          )
+          }
         end
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.119.4
+  version: 0.120.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-15 00:00:00.000000000 Z
+date: 2020-09-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.4
+        version: 0.120.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.4
+        version: 0.120.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.90.0
+        version: 0.91.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.90.0
+        version: 0.91.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement