dependabot-nuget 0.176.0 → 0.178.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bcd7e79ec7ee525413a1434f75185c313f759a431c2ff79d8748658b156ea55b
-  data.tar.gz: b6c57dd5e4944bfc07739158442c181d10705f835d6f8ea1f6c67bea0a07e0d0
+  metadata.gz: 8389cfea58bf0a72e3170737916609e4110af64a45c6f0508f07e7c8be1239e2
+  data.tar.gz: c57795d1262f1ca15213def48416566f09431c80d1139c9f73b6e4292bf8733d
 SHA512:
-  metadata.gz: ce1b5218af398612614f511995bc57e2f13fcebde34433dbf777e1e39f30604ff3eac4a0b231219223aa64053dce523e8b2b7fb871dd8ac91b1033811cf0c3f5
-  data.tar.gz: 0b7f6b61ea0916902c734bf23991537579aa65235557c85ba316b4a6f1ac65616f89d1cb7e35d76bb40e39717d26a48c44ee49a9738efb5e54de3607fd6ba5d9
+  metadata.gz: b3d8a3647c5c0d871192a58054ea410fea2852fd7b39a0c1af0fe5883adeb37e94e64773481aedcf291b0fa2136ccb9a7d30692fb699ee55663d76c0638947b0
+  data.tar.gz: 5827fdaebbaf85e3272ce29226baed7453d66ee870158229b772a334924966c80958030150516b6b4ccb7f5cc46214653e1e81772e9b46f77dc4756367525124

data/lib/dependabot/nuget/requirement.rb

@@ -88,6 +88,8 @@ module Dependabot
       end
 
       def convert_wildcard_req(req_string)
+        return ">= 0-a" if req_string == "*-*"
+
         return ">= 0" if req_string.start_with?("*")
 
         defined_part = req_string.split("*").first

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -59,7 +59,7 @@ module Dependabot
           end
           if search_url
             details[:search_url] =
-              search_url + "?q=#{dependency.name.downcase}&prerelease=true"
+              search_url + "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0"
           end
           details
         rescue JSON::ParserError
@@ -196,8 +196,8 @@ module Dependabot
             repository_url: DEFAULT_REPOSITORY_URL,
             versions_url: "https://api.nuget.org/v3-flatcontainer/"\
                              "#{dependency.name.downcase}/index.json",
-            search_url: "https://api-v2v3search-0.nuget.org/query"\
-                             "?q=#{dependency.name.downcase}&prerelease=true",
+            search_url: "https://azuresearch-usnc.nuget.org/query"\
+                             "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0",
             auth_header: {},
             repository_type: "v3"
           }

data/lib/dependabot/nuget/update_checker/requirements_updater.rb

@@ -58,6 +58,8 @@ module Dependabot
         end
 
         def update_wildcard_requirement(req_string)
+          return req_string if req_string == "*-*"
+
           return req_string if req_string == "*"
 
           precision = req_string.split("*").first.split(/\.|\-/).count

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -172,6 +172,7 @@ module Dependabot
 
           dependency.requirements.any? do |req|
             reqs = parse_requirement_string(req.fetch(:requirement) || "")
+            return true if reqs.any? { |r| r == "*-*" }
             next unless reqs.any? { |r| r.include?("-") }
 
             requirement_class.
@@ -329,7 +330,7 @@ module Dependabot
           # For large JSON files we sometimes need a little longer than for
           # other languages. For example, see:
           # https://dotnet.myget.org/F/aspnetcore-dev/api/v3/query?
-          # q=microsoft.aspnetcore.mvc&prerelease=true
+          # q=microsoft.aspnetcore.mvc&prerelease=true&semVerLevel=2.0.0
           {
             connect_timeout: 30,
             write_timeout: 30,

data/lib/dependabot/nuget/version.rb

@@ -55,6 +55,8 @@ module Dependabot
       end
 
       # rubocop:disable Metrics/PerceivedComplexity
+      # rubocop:disable Metrics/CyclomaticComplexity
+      # rubocop:disable Metrics/AbcSize
       def compare_prerelease_part(other)
         release_str = @version_string.split("-").first&.split("+")&.first || ""
         prerelease_string = @version_string.
@@ -74,11 +76,31 @@ module Dependabot
 
         return -1 if prerelease_string && !other_prerelease_string
         return 1 if !prerelease_string && other_prerelease_string
+        return 0 if !prerelease_string && !other_prerelease_string
 
-        prerelease_string.<=>(other_prerelease_string)
+        split_prerelease_string = prerelease_string.split(".")
+        other_split_prerelease_string = other_prerelease_string.split(".")
+
+        split_prerelease_string.zip(other_split_prerelease_string).each do |lhs, rhs|
+          result = compare_dot_separated_part(lhs, rhs)
+          return result unless result.zero?
+        end
+
+        0
       end
 
       # rubocop:enable Metrics/PerceivedComplexity
+      # rubocop:enable Metrics/CyclomaticComplexity
+      # rubocop:enable Metrics/AbcSize
+
+      def compare_dot_separated_part(lhs, rhs)
+        return -1 if lhs.nil?
+        return 1 if rhs.nil?
+
+        return lhs.to_i <=> rhs.to_i if lhs.match?(/^\d+$/) && rhs.match?(/^\d+$/)
+
+        lhs <=> rhs
+      end
 
       def compare_build_info(other)
         return build_info.nil? ? 0 : 1 unless other.is_a?(Nuget::Version)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.176.0
+  version: 0.178.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-28 00:00:00.000000000 Z
+date: 2022-03-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.176.0
+        version: 0.178.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.176.0
+        version: 0.178.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement