dependabot-nuget 0.209.0 → 0.212.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '029735ac71ca9f03430affb2c8b28dbc054f81d2345f421e9581908eec26a209'
-  data.tar.gz: 6b7e0d243f158ee06f612acb9bfcc635458b211f5bc39d09cb18b000da08e483
+  metadata.gz: f2670db3fd0c6b63fef409230620f4167fb0832deb5df3133dc9762e54104746
+  data.tar.gz: 749cd634dde39e45264654b33e3cfd0f8759ead2e9b808906dd33bf8299b7948
 SHA512:
-  metadata.gz: be30c84d35049942f663b16c2952fdd66cc72985ea4b2dd467ee8d28553ac019def63f4e92113064e0dd6982c91b7fcc05adbb04f596232cf3b343132e625186
-  data.tar.gz: f5523efef56935a27ce497149b41f881daaca803485dffd146a5757a309742f08ddaa7801805ee4b847eb5b21b53cc3460c8016878e3349750d715819a2fc57e
+  metadata.gz: f0c433d102aa4773f20f75b33e0e8566335fe05948abadb9b854e66cedb15ce0061daa1a8b00977ac00ea139d48b86b114a986e192fb2e9aa526b08811285f28
+  data.tar.gz: efab05fc35e9daa61950bae053557ffbeb864fbbb04cbeb052fbf1f6b478ee303d330ed51ec99b3b357f36ac7efe47e9f1ab1ae503563e1fe013240ae9926ebb

data/lib/dependabot/nuget/file_fetcher.rb

@@ -73,11 +73,11 @@ module Dependabot
           [*project_files.map { |f| File.dirname(f.name) }, "."].uniq
 
         @packages_config_files ||=
-          candidate_paths.map do |dir|
+          candidate_paths.filter_map do |dir|
             file = repo_contents(dir: dir).
                    find { |f| f.name.casecmp("packages.config").zero? }
             fetch_file_from_host(File.join(dir, file.name)) if file
-          end.compact
+          end
       end
 
       # rubocop:disable Metrics/PerceivedComplexity
@@ -157,7 +157,7 @@ module Dependabot
                 project_paths
             end
 
-            paths.map do |path|
+            paths.filter_map do |path|
               fetch_file_from_host(path)
             rescue Dependabot::DependencyFileNotFound => e
               @missing_sln_project_file_errors ||= []
@@ -165,7 +165,7 @@ module Dependabot
               # Don't worry about missing files too much for now (at least
               # until we start resolving properties)
               nil
-            end.compact
+            end
           end
       end
 
@@ -209,12 +209,12 @@ module Dependabot
           [*project_files.map { |f| File.dirname(f.name) }, "."].uniq
 
         @nuget_config_files ||=
-          candidate_paths.map do |dir|
+          candidate_paths.filter_map do |dir|
             file = repo_contents(dir: dir).
                    find { |f| f.name.casecmp("nuget.config").zero? }
             file = fetch_file_from_host(File.join(dir, file.name)) if file
             file&.tap { |f| f.support_file = true }
-          end.compact
+          end
       end
 
       def global_json

data/lib/dependabot/nuget/file_parser/packages_config_parser.rb

@@ -61,7 +61,7 @@ module Dependabot
         def dependency_type(dependency_node)
           val = dependency_node.attribute("developmentDependency")&.value&.strip ||
                 dependency_node.at_xpath("./developmentDependency")&.content&.strip
-          val.to_s.downcase == "true" ? "devDependencies" : "dependencies"
+          val.to_s.casecmp("true").zero? ? "devDependencies" : "dependencies"
         end
       end
     end

data/lib/dependabot/nuget/file_parser/project_file_parser.rb

@@ -14,10 +14,10 @@ module Dependabot
         require "dependabot/file_parsers/base/dependency_set"
         require_relative "property_value_finder"
 
-        DEPENDENCY_SELECTOR = "ItemGroup > PackageReference, "\
-                              "ItemGroup > GlobalPackageReference, "\
-                              "ItemGroup > PackageVersion, "\
-                              "ItemGroup > Dependency, "\
+        DEPENDENCY_SELECTOR = "ItemGroup > PackageReference, " \
+                              "ItemGroup > GlobalPackageReference, " \
+                              "ItemGroup > PackageVersion, " \
+                              "ItemGroup > Dependency, " \
                               "ItemGroup > DevelopmentDependency"
 
         PROJECT_SDK_REGEX   = %r{^([^/]+)/(\d+(?:[.]\d+(?:[.]\d+)?)?(?:[+-].*)?)$}.freeze

data/lib/dependabot/nuget/file_parser/property_value_finder.rb

@@ -47,7 +47,7 @@ module Dependabot
             find_property_in_packages_props(property: property_name)
 
           return unless node_details
-          return node_details unless node_details[:value] =~ PROPERTY_REGEX
+          return node_details unless PROPERTY_REGEX.match?(node_details[:value])
 
           check_next_level_of_stack(node_details, stack)
         end
@@ -91,8 +91,7 @@ module Dependabot
           ]
 
           file = import_paths.
-                 map { |p| dependency_files.find { |f| f.name == p } }.
-                 compact.
+                 filter_map { |p| dependency_files.find { |f| f.name == p } }.
                  find { |f| deep_find_prop_node(property: property, file: f) }
 
           return unless file

data/lib/dependabot/nuget/metadata_finder.rb

@@ -63,7 +63,7 @@ module Dependabot
 
       def extract_source_repo(body)
         JSON.parse(body).fetch("data", []).each do |search_result|
-          next unless search_result["id"].downcase == dependency.name.downcase
+          next unless search_result["id"].casecmp(dependency.name).zero?
 
           if search_result.key?("projectUrl")
             source = Source.from_url(search_result.fetch("projectUrl"))
@@ -123,18 +123,18 @@ module Dependabot
 
         if source&.key?(:nuspec_url)
           source.fetch(:nuspec_url) ||
-            "https://api.nuget.org/v3-flatcontainer/"\
-            "#{dependency.name.downcase}/#{dependency.version}/"\
+            "https://api.nuget.org/v3-flatcontainer/" \
+            "#{dependency.name.downcase}/#{dependency.version}/" \
             "#{dependency.name.downcase}.nuspec"
         elsif source&.key?(:nuspec_url)
           source.fetch("nuspec_url") ||
-            "https://api.nuget.org/v3-flatcontainer/"\
-            "#{dependency.name.downcase}/#{dependency.version}/"\
+            "https://api.nuget.org/v3-flatcontainer/" \
+            "#{dependency.name.downcase}/#{dependency.version}/" \
             "#{dependency.name.downcase}.nuspec"
         else
-          "https://api.nuget.org/v3-flatcontainer/"\
-          "#{dependency.name.downcase}/#{dependency.version}/"\
-          "#{dependency.name.downcase}.nuspec"
+          "https://api.nuget.org/v3-flatcontainer/" \
+            "#{dependency.name.downcase}/#{dependency.version}/" \
+            "#{dependency.name.downcase}.nuspec"
         end
       end
 

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -191,10 +191,10 @@ module Dependabot
         def default_repository_details
           {
             repository_url: DEFAULT_REPOSITORY_URL,
-            versions_url: "https://api.nuget.org/v3-flatcontainer/"\
-                             "#{dependency.name.downcase}/index.json",
-            search_url: "https://azuresearch-usnc.nuget.org/query"\
-                             "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0",
+            versions_url: "https://api.nuget.org/v3-flatcontainer/" \
+                          "#{dependency.name.downcase}/index.json",
+            search_url: "https://azuresearch-usnc.nuget.org/query" \
+                        "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0",
             auth_header: {},
             repository_type: "v3"
           }
@@ -222,7 +222,7 @@ module Dependabot
             next source_details[:token] = nil if key.match?(/^\d/)
 
             tag = key.gsub(" ", "_x0020_")
-            creds_nodes = doc.css("configuration > packageSourceCredentials "\
+            creds_nodes = doc.css("configuration > packageSourceCredentials " \
                                   "> #{tag} > add")
 
             username =

data/lib/dependabot/nuget/update_checker/requirements_updater.rb

@@ -38,7 +38,7 @@ module Dependabot
                 # replace anything that looks like a version with the new
                 # version
                 req[:requirement].sub(
-                  /#{Nuget::Version::VERSION_PATTERN}/,
+                  /#{Nuget::Version::VERSION_PATTERN}/o,
                   latest_version.to_s
                 )
               end

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -127,7 +127,7 @@ module Dependabot
             doc = Nokogiri::XML(body)
             doc.remove_namespaces!
 
-            doc.xpath("/feed/entry").map do |entry|
+            doc.xpath("/feed/entry").filter_map do |entry|
               listed = entry.at_xpath("./properties/Listed")&.content&.strip
               next if listed&.casecmp("false")&.zero?
 
@@ -136,7 +136,7 @@ module Dependabot
                 repo_url: listing.fetch("listing_details").
                           fetch(:repository_url)
               )
-            end.compact
+            end
           end
         end
 
@@ -172,7 +172,7 @@ module Dependabot
 
           dependency.requirements.any? do |req|
             reqs = parse_requirement_string(req.fetch(:requirement) || "")
-            return true if reqs.any? { |r| r == "*-*" }
+            return true if reqs.any?("*-*")
             next unless reqs.any? { |r| r.include?("-") }
 
             requirement_class.
@@ -193,12 +193,12 @@ module Dependabot
           @v3_nuget_listings ||=
             dependency_urls.
             select { |details| details.fetch(:repository_type) == "v3" }.
-            map do |url_details|
+            filter_map do |url_details|
               versions = versions_for_v3_repository(url_details)
               next unless versions
 
               { "versions" => versions, "listing_details" => url_details }
-            end.compact
+            end
         end
 
         def v2_nuget_listings
@@ -208,14 +208,14 @@ module Dependabot
             dependency_urls.
             select { |details| details.fetch(:repository_type) == "v2" }.
             flat_map { |url_details| fetch_paginated_v2_nuget_listings(url_details) }.
-            map do |url_details, response|
+            filter_map do |url_details, response|
               next unless response.status == 200
 
               {
                 "xml_body" => response.body,
                 "listing_details" => url_details
               }
-            end.compact
+            end
         end
 
         def fetch_paginated_v2_nuget_listings(url_details, results = {})

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.209.0
+  version: 0.212.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-17 00:00:00.000000000 Z
+date: 2022-09-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.209.0
+        version: 0.212.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.209.0
+        version: 0.212.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -80,6 +80,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: parallel_tests
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.12.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 3.12.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +142,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.33.0
+        version: 1.36.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.36.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-performance
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.14.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.33.0
+        version: 1.14.2
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement