dependabot-nuget 0.216.0 → 0.216.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d44dd497e124af3a548585bc2be6e6eb2086eafe910ae3707869952ee2621b04
-  data.tar.gz: 93b7795f0a9681c930bd4dc13c75c2eb84efab8f410188e492f539e707270e6d
+  metadata.gz: b36c726b50217782ae39173525d1a0ab53664449e768aaa9f72f94c4c4625f80
+  data.tar.gz: 8cdbc25a21cfa897939d53d48cd04e3dab2b4a6b71ed50c91f022be72d663e88
 SHA512:
-  metadata.gz: c32d21b61f2d17587627175db2a82d5cc8d9ed03eacbfa3251b12b3d55d494ce7854385bb5526329bef51bd5e24a510a9471b430941610d559bcafde7fefb4e2
-  data.tar.gz: 4bbe24a21f3bf5247e4caf1293d5265dbdad38d9353b09b6836e5fa37c100e27e75fd4b00552f2228b64948c5cc42fbd451d1be565e5376f217d8aa8f0509288
+  metadata.gz: cfc97aaec50815896f46d32788095849998ffbad62a609e852bec28626f889d444d9393834e755957042cd2a47d96ff099ac6e2dbf594aab87afb32a6507e024
+  data.tar.gz: 5d9c2617b7d64c0643c0a562289b9d607be819be62678b7bb8890e4ef570d0836691c71cd7ae4f644fde7af703d14af84289c9764a4ebf327577a85c087c07cf

data/lib/dependabot/nuget/file_fetcher.rb

@@ -32,6 +32,7 @@ module Dependabot
         fetched_files += packages_config_files
         fetched_files += nuget_config_files
         fetched_files << global_json if global_json
+        fetched_files << dotnet_tools_json if dotnet_tools_json
         fetched_files << packages_props if packages_props
 
         fetched_files = fetched_files.uniq
@@ -221,6 +222,12 @@ module Dependabot
         @global_json ||= fetch_file_if_present("global.json")
       end
 
+      def dotnet_tools_json
+        @dotnet_tools_json ||= fetch_file_if_present(".config/dotnet-tools.json")
+      rescue Dependabot::DependencyFileNotFound
+        nil
+      end
+
       def packages_props
         @packages_props ||= fetch_file_if_present("Packages.props")
       end

data/lib/dependabot/nuget/file_parser/dotnet_tools_json_parser.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+require "json"
+
+require "dependabot/dependency"
+require "dependabot/nuget/file_parser"
+
+# For details on dotnet-tools.json files see:
+# https://learn.microsoft.com/en-us/dotnet/core/tools/local-tools-how-to-use
+module Dependabot
+  module Nuget
+    class FileParser
+      class DotNetToolsJsonParser
+        require "dependabot/file_parsers/base/dependency_set"
+
+        def initialize(dotnet_tools_json:)
+          @dotnet_tools_json = dotnet_tools_json
+        end
+
+        def dependency_set
+          dependency_set = Dependabot::FileParsers::Base::DependencySet.new
+
+          tools = parsed_dotnet_tools_json.fetch("tools", {})
+
+          raise Dependabot::DependencyFileNotParseable, dotnet_tools_json.path unless tools.is_a?(Hash)
+
+          tools.each do |dependency_name, node|
+            raise Dependabot::DependencyFileNotParseable, dotnet_tools_json.path unless node.is_a?(Hash)
+
+            version = node["version"]
+            dependency_set <<
+              Dependency.new(
+                name: dependency_name,
+                version: version,
+                package_manager: "nuget",
+                requirements: [{
+                  requirement: version,
+                  file: dotnet_tools_json.name,
+                  groups: ["dependencies"],
+                  source: nil
+                }]
+              )
+          end
+
+          dependency_set
+        end
+
+        private
+
+        attr_reader :dotnet_tools_json
+
+        def parsed_dotnet_tools_json
+          @parsed_dotnet_tools_json ||= JSON.parse(dotnet_tools_json.content)
+        rescue JSON::ParserError
+          raise Dependabot::DependencyFileNotParseable, dotnet_tools_json.path
+        end
+      end
+    end
+  end
+end

data/lib/dependabot/nuget/file_parser.rb

@@ -15,6 +15,7 @@ module Dependabot
       require_relative "file_parser/project_file_parser"
       require_relative "file_parser/packages_config_parser"
       require_relative "file_parser/global_json_parser"
+      require_relative "file_parser/dotnet_tools_json_parser"
 
       PACKAGE_CONF_DEPENDENCY_SELECTOR = "packages > packages"
 
@@ -23,6 +24,7 @@ module Dependabot
         dependency_set += project_file_dependencies
         dependency_set += packages_config_dependencies
         dependency_set += global_json_dependencies if global_json
+        dependency_set += dotnet_tools_json_dependencies if dotnet_tools_json
         dependency_set.dependencies
       end
 
@@ -56,6 +58,12 @@ module Dependabot
         GlobalJsonParser.new(global_json: global_json).dependency_set
       end
 
+      def dotnet_tools_json_dependencies
+        return DependencySet.new unless dotnet_tools_json
+
+        DotNetToolsJsonParser.new(dotnet_tools_json: dotnet_tools_json).dependency_set
+      end
+
       def project_file_parser
         @project_file_parser ||=
           ProjectFileParser.new(dependency_files: dependency_files)
@@ -76,7 +84,8 @@ module Dependabot
           project_files -
           packages_config_files -
           nuget_configs -
-          [global_json]
+          [global_json] -
+          [dotnet_tools_json]
       end
 
       def nuget_configs
@@ -87,6 +96,10 @@ module Dependabot
         dependency_files.find { |f| f.name.casecmp("global.json").zero? }
       end
 
+      def dotnet_tools_json
+        dependency_files.find { |f| f.name.casecmp(".config/dotnet-tools.json").zero? }
+      end
+
       def check_required_files
         return if project_files.any? || packages_config_files.any?
 

data/lib/dependabot/nuget/file_updater.rb

@@ -15,6 +15,7 @@ module Dependabot
           %r{^[^/]*\.[a-z]{2}proj$},
           /^packages\.config$/i,
           /^global\.json$/i,
+          /^dotnet-tools\.json$/i,
           /^Directory\.Build\.props$/i,
           /^Directory\.Build\.targets$/i,
           /^Packages\.props$/i
@@ -58,6 +59,10 @@ module Dependabot
         dependency_files.find { |f| f.name.casecmp("global.json").zero? }
       end
 
+      def dotnet_tools_json
+        dependency_files.find { |f| f.name.casecmp(".config/dotnet-tools.json").zero? }
+      end
+
       def check_required_files
         return if project_files.any? || packages_config_files.any?
 
@@ -128,6 +133,13 @@ module Dependabot
                "#{Regexp.escape(dependency.previous_version)}"/x
             ).to_s
           ]
+        elsif requirement.fetch(:file).casecmp(".config/dotnet-tools.json").zero?
+          [
+            dotnet_tools_json.content.match(
+              /"#{Regexp.escape(dependency.name)}"\s*:\s*{\s*"version"\s*:\s*
+               "#{Regexp.escape(dependency.previous_version)}"/xm
+            ).to_s
+          ]
         else
           declaration_finder(dependency, requirement).declaration_strings
         end

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -307,11 +307,11 @@ module Dependabot
         end
 
         def version_class
-          Nuget::Version
+          dependency.version_class
         end
 
         def requirement_class
-          Nuget::Requirement
+          dependency.requirement_class
         end
 
         def remove_wrapping_zero_width_chars(string)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.216.0
+  version: 0.216.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-12 00:00:00.000000000 Z
+date: 2023-04-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.0
+        version: 0.216.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.0
+        version: 0.216.2
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.48.0
+        version: 1.50.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.48.0
+        version: 1.50.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -219,6 +219,7 @@ files:
 - lib/dependabot/nuget/file_fetcher/import_paths_finder.rb
 - lib/dependabot/nuget/file_fetcher/sln_project_paths_finder.rb
 - lib/dependabot/nuget/file_parser.rb
+- lib/dependabot/nuget/file_parser/dotnet_tools_json_parser.rb
 - lib/dependabot/nuget/file_parser/global_json_parser.rb
 - lib/dependabot/nuget/file_parser/packages_config_parser.rb
 - lib/dependabot/nuget/file_parser/project_file_parser.rb