dependabot-nuget 0.110.2 → 0.110.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 71d08a69eed3e596b3ff2ee717b924b7b6c4b7ca1a4c8a4b19ef725941a6174a
-  data.tar.gz: a4e6db58df3920ed0324d8c77ab22b729f4cf383c95736b76d9e944f77345fa1
+  metadata.gz: b5de858f920127697ee27e0ed5074329fd4d6f822c4bc5a4d8b7e71276b01d0c
+  data.tar.gz: 7916c1a3786a4b4bb5c24bd768455a054603fb5f3ff2f3f665edab8c3fa39409
 SHA512:
-  metadata.gz: 277966511fcc0c0be1d2194dc15fc9a321ec43ce75c0aa0e9b39e29fd9b040d052d1a846a61c2f9ea474130e649b9d029f776b69a61e2a3f6f75d8b26e877d2e
-  data.tar.gz: b7d3fe5693042fbb46dc920722902f0454697458a72b88fc7b7acca55944c70bcc390ecd576ff3907ab569cedbd99eb4365dc3e8f1202174bfaf9066f8bd537f
+  metadata.gz: c14a5ee8190e0582c7406fae133563b53d892a87ce144e937f94e28da3826ab54946bcebf5283d3cdd649ba3df5fbe2200d58d03a257b7a01d0187a0bb575bc0
+  data.tar.gz: 5673a582ce974f9fe0be5b05486a2adfcc0bf8b3f45436e125fae3ad623986a5ed07de51a4018fc11308940b3fe756a07b4e7b4a5ebccc1de720506629716da6

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -44,8 +44,9 @@ module Dependabot
           check_repo_reponse(response, repo_details)
           return unless response.status == 200
 
-          base_url = base_url_from_v3_metadata(JSON.parse(response.body))
-          search_url = search_url_from_v3_metadata(JSON.parse(response.body))
+          body = remove_wrapping_zero_width_chars(response.body)
+          base_url = base_url_from_v3_metadata(JSON.parse(body))
+          search_url = search_url_from_v3_metadata(JSON.parse(body))
 
           details = {
             repository_url: repo_details.fetch(:url),
@@ -219,6 +220,12 @@ module Dependabot
           sources
         end
 
+        def remove_wrapping_zero_width_chars(string)
+          string.
+            gsub(/\A[\u200B-\u200D\uFEFF]/, "").
+            gsub(/[\u200B-\u200D\uFEFF]\Z/, "")
+        end
+
         def auth_header_for_token(token)
           return {} unless token
 

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -230,7 +230,8 @@ module Dependabot
             )
             return unless response.status == 200
 
-            JSON.parse(response.body).fetch("versions")
+            body = remove_wrapping_zero_width_chars(response.body)
+            JSON.parse(body).fetch("versions")
           end
         end
 
@@ -243,7 +244,8 @@ module Dependabot
           )
           return unless response.status == 200
 
-          JSON.parse(response.body).fetch("data").
+          body = remove_wrapping_zero_width_chars(response.body)
+          JSON.parse(body).fetch("data").
             find { |d| d.fetch("id").casecmp(sanitized_name).zero? }&.
             fetch("versions")&.
             map { |d| d.fetch("version") }
@@ -280,6 +282,12 @@ module Dependabot
           Nuget::Requirement
         end
 
+        def remove_wrapping_zero_width_chars(string)
+          string.
+            gsub(/\A[\u200B-\u200D\uFEFF]/, "").
+            gsub(/[\u200B-\u200D\uFEFF]\Z/, "")
+        end
+
         def excon_defaults
           # For large JSON files we sometimes need a little longer than for
           # other languages. For example, see:

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.110.2
+  version: 0.110.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-06-28 00:00:00.000000000 Z
+date: 2019-06-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.110.2
+        version: 0.110.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.110.2
+        version: 0.110.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement