dependabot-nuget 0.255.0 → 0.257.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1feb135ca2ebd58b0c7c96df96c8e3ad30b9f0dccd17b58c99d5670fb3ebf57b
-  data.tar.gz: 55e7d7d46b36738f198057ef6c83ea3f194d25623a65d6e719bf1fc5a6f44eb5
+  metadata.gz: 49b70e0b9626d157c462ca23016ba1895c80f33cdf8fc16d831b041b9681eba0
+  data.tar.gz: b7c36d26347029a8095d71b75f7038982c39e2c2e0fe0a4c883e2fbb6dce481a
 SHA512:
-  metadata.gz: 13a3eae5d94249eba9a08cbe55c4c36ca3116881550e76a518e789bc7fe7e8ee6d13fcf910a25de365a2e00af96ce586a7f169a52cc1a6b2fc5fbd594d4b8ba5
-  data.tar.gz: 318e0d0cb22917a6198cd0c0821dba4a2456c23a4378f9387d645c205886cac7078119983772806313427e3ceaf52ec72f64f11f134ddb010b2e59e0bf8a2a36
+  metadata.gz: e2a68947d4fa90c7f3864997e23d4019d9360e4448655d3ec91749df124a302a949b7ebd010b3faaff930f93b00d6722193fda25a9dd8a3feefc56506fac7d0b
+  data.tar.gz: 64b02f3fd2412e3aff8c1e8d2b9c3bfdcfd01a43e5eb755fc760ff9ff1a98267a466e3657ce4dfd36a32dd25791316cedaa6a465735965a0f200529dabfc41c7

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Discover/SdkProjectDiscovery.cs

@@ -114,7 +114,7 @@ internal static class SdkProjectDiscovery
                 transitiveDependencies[dependency.Name] = existingDependency with
                 {
                     // Revisit this logic. We may want to return each dependency instead of merging them.
-                    Version = SemanticVersion.Parse(existingDependency.Version!) > SemanticVersion.Parse(dependency.Version!)
+                    Version = NuGetVersion.Parse(existingDependency.Version!) > NuGetVersion.Parse(dependency.Version!)
                         ? existingDependency.Version
                         : dependency.Version,
                     TargetFrameworks = existingDependency.TargetFrameworks is not null && dependency.TargetFrameworks is not null

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Discover/DiscoveryWorkerTests.Project.cs

@@ -401,5 +401,50 @@ public partial class DiscoveryWorkerTests
                     Projects = []
                 });
         }
+
+        [Fact]
+        public async Task DiscoverReportsTransitivePackageVersionsWithFourPartsForMultipleTargetFrameworks()
+        {
+            await TestDiscoveryAsync(
+                workspacePath: "",
+                files:
+                [
+                    ("myproj.csproj", """
+                        <Project Sdk="Microsoft.NET.Sdk">
+                          <PropertyGroup>
+                            <TargetFrameworks>netstandard2.0;net8.0</TargetFrameworks>
+                          </PropertyGroup>
+                          <ItemGroup>
+                            <PackageReference Include="AWSSDK.S3" Version="3.7.307.29" />
+                          </ItemGroup>
+                        </Project>
+                        """)
+                ],
+                expectedResult: new()
+                {
+                    FilePath = "",
+                    Projects = [
+                        new()
+                        {
+                            FilePath = "myproj.csproj",
+                            Dependencies = [
+                                new("Microsoft.NET.Sdk", null, DependencyType.MSBuildSdk),
+                                new("AWSSDK.S3", "3.7.307.29", DependencyType.PackageReference, TargetFrameworks: ["net8.0", "netstandard2.0"], IsDirect: true),
+                                new("AWSSDK.Core", "3.7.303.27", DependencyType.Unknown, TargetFrameworks: ["net8.0", "netstandard2.0"], IsTransitive: true),
+                                new("Microsoft.Bcl.AsyncInterfaces", "1.1.0", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                                new("NETStandard.Library", "2.0.3", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                                new("System.Runtime.CompilerServices.Unsafe", "4.5.2", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                                new("System.Threading.Tasks.Extensions", "4.5.2", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                            ],
+                            Properties = [
+                                new("TargetFrameworks", "netstandard2.0;net8.0", "myproj.csproj"),
+                            ],
+                            TargetFrameworks = ["net8.0", "netstandard2.0"],
+                            ReferencedProjectPaths = [],
+                        }
+                    ],
+                }
+            );
+        }
     }
 }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.255.0
+  version: 0.257.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-05-03 00:00:00.000000000 Z
+date: 2024-05-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.255.0
+        version: 0.257.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.255.0
+        version: 0.257.0
 - !ruby/object:Gem::Dependency
   name: rubyzip
   requirement: !ruby/object:Gem::Requirement
@@ -416,10 +416,10 @@ files:
 - lib/dependabot/nuget/version.rb
 homepage: https://github.com/dependabot/dependabot-core
 licenses:
-- Nonstandard
+- MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.255.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.257.0
 post_install_message: 
 rdoc_options: []
 require_paths: