dependabot-nuget 0.130.0 → 0.131.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ea7b471f49cf282a13ca44d93154182f60347bdf68d720f28ca494425e134851
-  data.tar.gz: 3dd61959355763b17d97427076f248748d949da8cfebf6c0ddbfd651648f26e7
+  metadata.gz: b1e826c6ebe79786d4c01a5f9845714f23bb33011143e7d5348bfc1baedda2b2
+  data.tar.gz: 9f7f0c9571fc6fdaf6a8bcd3eab696f0b72dd0feb0c3ee40f369d4cab6fa0da2
 SHA512:
-  metadata.gz: 6c3506d9cd91a21e2c7d1889d666e352d8931e3902dc0dce6439c5ca2978d946f5dad0a224160ab737dcda6961798179490adb40235155e77ee15ac4f855f0ba
-  data.tar.gz: 4acf40794ebb57aa3fb7a974c4c146a0ef35f04050c441ee922618a4059ef42fe6c4832f5a2236f4dabf8356bddc5547cacc304406d385c57786d3a13d2fa66d
+  metadata.gz: c89b3d0f01851ccea56f980fca4697075261c9f69db2aee12f80397c2747df550733b888f30ed7409c9422b33fd8a0e324b9892d8356e85b05de2d2068a3b567
+  data.tar.gz: aa95aa9accfef30295ebba49248eb7292f52f733079ae34fd7c80fe537f7eace94ff89459ccbdafe384a7ad918315c9f03f370ae43edece131dc93bb23624b00

data/lib/dependabot/nuget/file_fetcher/import_paths_finder.rb

@@ -26,11 +26,16 @@ module Dependabot
         def project_reference_paths
           doc = Nokogiri::XML(project_file.content)
           doc.remove_namespaces!
-          doc.xpath("/Project/ItemGroup/ProjectReference").map do |node|
-            path = node.attribute("Include").value.strip.tr("\\", "/")
+          nodes = doc.xpath("/Project/ItemGroup/ProjectReference").map do |node|
+            attribute = node.attribute("Include")
+            next unless attribute
+
+            path = attribute.value.strip.tr("\\", "/")
             path = File.join(current_dir, path) unless current_dir.nil?
             Pathname.new(path).cleanpath.to_path
           end
+
+          nodes.compact
         end
 
         private

data/lib/dependabot/nuget/requirement.rb

@@ -49,13 +49,18 @@ module Dependabot
         return convert_dotnet_range_to_ruby_range(req_string) if req_string&.start_with?("(", "[")
 
         return req_string.split(",").map(&:strip) if req_string.include?(",")
+
         return req_string unless req_string.include?("*")
 
         convert_wildcard_req(req_string)
       end
 
       def convert_dotnet_range_to_ruby_range(req_string)
-        lower_b, upper_b = req_string.split(",").map(&:strip)
+        lower_b, upper_b = req_string.split(",").map(&:strip).map do |bound|
+          next convert_range_wildcard_req(bound) if bound.include?("*")
+
+          bound
+        end
 
         lower_b =
           if ["(", "["].include?(lower_b) then nil
@@ -72,6 +77,14 @@ module Dependabot
         [lower_b, upper_b].compact
       end
 
+      def convert_range_wildcard_req(req_string)
+        range_end = req_string[-1]
+        defined_part = req_string.split("*").first
+        version = defined_part + "0"
+        version += range_end if [")", "]"].include?(range_end)
+        version
+      end
+
       def convert_wildcard_req(req_string)
         return ">= 0" if req_string.start_with?("*")
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.130.0
+  version: 0.131.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-13 00:00:00.000000000 Z
+date: 2021-02-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.130.0
+        version: 0.131.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.130.0
+        version: 0.131.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.8.0
+        version: 1.9.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.8.0
+        version: 1.9.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.0
+        version: 0.9.1
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
@@ -211,7 +211,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.3
 signing_key: 
 specification_version: 4
 summary: ".NET (NuGet) support for dependabot"