dependabot-nuget 0.212.0 → 0.213.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f2670db3fd0c6b63fef409230620f4167fb0832deb5df3133dc9762e54104746
-  data.tar.gz: 749cd634dde39e45264654b33e3cfd0f8759ead2e9b808906dd33bf8299b7948
+  metadata.gz: a5f084f252deef0d960dff54bc9d3bbef2c21b38f6853f19a3ea5229f239660f
+  data.tar.gz: 8fd0eac3457d63ba3132ea4d9955e041439303310cb6a8b6f89fce60ade5faf7
 SHA512:
-  metadata.gz: f0c433d102aa4773f20f75b33e0e8566335fe05948abadb9b854e66cedb15ce0061daa1a8b00977ac00ea139d48b86b114a986e192fb2e9aa526b08811285f28
-  data.tar.gz: efab05fc35e9daa61950bae053557ffbeb864fbbb04cbeb052fbf1f6b478ee303d330ed51ec99b3b357f36ac7efe47e9f1ab1ae503563e1fe013240ae9926ebb
+  metadata.gz: 24446f402afc0c8f466cc1d74c6d03386a7436b297f04ad166a95fa69d741dfd195b8778c3edfdbf2d6baccb64d3a1ace47fc54de88b73bef3dc71b8579a8e46
+  data.tar.gz: d19f127b8a9a8890fc60be39912e6b30669b0fb371813f6b0547841740ce3061caea3fae953c10d29e849503f8807fdd322ca6ac0c41a670b6233b906b0bba71

data/lib/dependabot/nuget/file_parser/global_json_parser.rb

@@ -33,7 +33,7 @@ module Dependabot
                 requirements: [{
                   requirement: version,
                   file: global_json.name,
-                  groups: [],
+                  groups: ["dependencies"],
                   source: nil
                 }]
               )

data/lib/dependabot/nuget/file_parser/project_file_parser.rb

@@ -20,9 +20,9 @@ module Dependabot
                               "ItemGroup > Dependency, " \
                               "ItemGroup > DevelopmentDependency"
 
-        PROJECT_SDK_REGEX   = %r{^([^/]+)/(\d+(?:[.]\d+(?:[.]\d+)?)?(?:[+-].*)?)$}.freeze
-        PROPERTY_REGEX      = /\$\((?<property>.*?)\)/.freeze
-        ITEM_REGEX          = /\@\((?<property>.*?)\)/.freeze
+        PROJECT_SDK_REGEX   = %r{^([^/]+)/(\d+(?:[.]\d+(?:[.]\d+)?)?(?:[+-].*)?)$}
+        PROPERTY_REGEX      = /\$\((?<property>.*?)\)/
+        ITEM_REGEX          = /\@\((?<property>.*?)\)/
 
         def initialize(dependency_files:)
           @dependency_files = dependency_files

data/lib/dependabot/nuget/file_parser/property_value_finder.rb

@@ -10,7 +10,7 @@ module Dependabot
   module Nuget
     class FileParser
       class PropertyValueFinder
-        PROPERTY_REGEX = /\$\((?<property>.*?)\)/.freeze
+        PROPERTY_REGEX = /\$\((?<property>.*?)\)/
 
         def initialize(dependency_files:)
           @dependency_files = dependency_files

data/lib/dependabot/nuget/file_updater/packages_config_declaration_finder.rb

@@ -9,7 +9,7 @@ module Dependabot
       class PackagesConfigDeclarationFinder
         DECLARATION_REGEX =
           %r{<package [^>]*?/>|
-             <package [^>]*?[^/]>.*?</package>}mx.freeze
+             <package [^>]*?[^/]>.*?</package>}mx
 
         attr_reader :dependency_name, :declaring_requirement,
                     :packages_config

data/lib/dependabot/nuget/file_updater/project_file_declaration_finder.rb

@@ -19,18 +19,18 @@ module Dependabot
             <Dependency [^>]*?[^/]>.*?</Dependency>|
             <DevelopmentDependency [^>]*?/>|
             <DevelopmentDependency [^>]*?[^/]>.*?</DevelopmentDependency>
-          }mx.freeze
+          }mx
         SDK_IMPORT_REGEX =
           / <Import [^>]*?Sdk="[^"]*?"[^>]*?Version="[^"]*?"[^>]*?>
           | <Import [^>]*?Version="[^"]*?"[^>]*?Sdk="[^"]*?"[^>]*?>
-          /mx.freeze
+          /mx
         SDK_PROJECT_REGEX =
           / <Project [^>]*?Sdk="[^"]*?"[^>]*?>
-          /mx.freeze
+          /mx
         SDK_SDK_REGEX =
           / <Sdk [^>]*?Name="[^"]*?"[^>]*?Version="[^"]*?"[^>]*?>
           | <Sdk [^>]*?Version="[^"]*?"[^>]*?Name="[^"]*?"[^>]*?>
-          /mx.freeze
+          /mx
 
         attr_reader :dependency_name, :declaring_requirement,
                     :dependency_files

data/lib/dependabot/nuget/metadata_finder.rb

@@ -121,21 +121,7 @@ module Dependabot
         source = dependency.requirements.
                  find { |r| r&.fetch(:source) }&.fetch(:source)
 
-        if source&.key?(:nuspec_url)
-          source.fetch(:nuspec_url) ||
-            "https://api.nuget.org/v3-flatcontainer/" \
-            "#{dependency.name.downcase}/#{dependency.version}/" \
-            "#{dependency.name.downcase}.nuspec"
-        elsif source&.key?(:nuspec_url)
-          source.fetch("nuspec_url") ||
-            "https://api.nuget.org/v3-flatcontainer/" \
-            "#{dependency.name.downcase}/#{dependency.version}/" \
-            "#{dependency.name.downcase}.nuspec"
-        else
-          "https://api.nuget.org/v3-flatcontainer/" \
-            "#{dependency.name.downcase}/#{dependency.version}/" \
-            "#{dependency.name.downcase}.nuspec"
-        end
+        return source.fetch(:nuspec_url) if source&.key?(:nuspec_url)
       end
 
       def dependency_source_url

data/lib/dependabot/nuget/requirement.rb

@@ -21,7 +21,7 @@ module Dependabot
         [matches[1] || "=", Nuget::Version.new(matches[2])]
       end
 
-      # For consistency with other langauges, we define a requirements array.
+      # For consistency with other languages, we define a requirements array.
       # Dotnet doesn't have an `OR` separator for requirements, so it always
       # contains a single element.
       def self.requirements_array(requirement_string)

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -11,6 +11,7 @@ module Dependabot
     class UpdateChecker
       class RepositoryFinder
         DEFAULT_REPOSITORY_URL = "https://api.nuget.org/v3/index.json"
+        DEFAULT_REPOSITORY_API_KEY = "nuget.org"
 
         def initialize(dependency:, credentials:, config_files: [])
           @dependency  = dependency
@@ -30,7 +31,7 @@ module Dependabot
           @find_dependency_urls ||=
             known_repositories.flat_map do |details|
               if details.fetch(:url) == DEFAULT_REPOSITORY_URL
-                # Save a request for the default URL, since we already how
+                # Save a request for the default URL, since we already know how
                 # it addresses packages
                 next default_repository_details
               end
@@ -151,27 +152,26 @@ module Dependabot
         def repos_from_config_file(config_file)
           doc = Nokogiri::XML(config_file.content)
           doc.remove_namespaces!
-          sources =
-            doc.css("configuration > packageSources > add").map do |node|
-              {
-                key:
-                  node.attribute("key")&.value&.strip ||
-                    node.at_xpath("./key")&.content&.strip,
-                url:
-                  node.attribute("value")&.value&.strip ||
-                    node.at_xpath("./value")&.content&.strip
-              }
+          # analogous to having a root config with the default repository
+          base_sources = [{ url: DEFAULT_REPOSITORY_URL, key: "nuget.org" }]
+
+          sources = []
+          doc.css("configuration > packageSources").children.each do |node|
+            if node.name == "clear"
+              sources.clear
+              base_sources.clear
+            else
+              key = node.attribute("key")&.value&.strip || node.at_xpath("./key")&.content&.strip
+              url = node.attribute("value")&.value&.strip || node.at_xpath("./value")&.content&.strip
+              sources << { url: url, key: key }
             end
-
+          end
+          sources += base_sources # TODO: quirky overwrite behavior
           disabled_sources = disabled_sources(doc)
           sources.reject! do |s|
             disabled_sources.include?(s[:key])
           end
 
-          unless doc.css("configuration > packageSources > clear").any?
-            sources << { url: DEFAULT_REPOSITORY_URL, key: nil }
-          end
-
           sources.reject! do |s|
             known_urls = credential_repositories.map { |cr| cr.fetch(:url) }
             known_urls.include?(s.fetch(:url))
@@ -202,7 +202,7 @@ module Dependabot
 
         # rubocop:disable Metrics/PerceivedComplexity
         def disabled_sources(doc)
-          doc.css("configuration > disabledPackageSources > add").map do |node|
+          doc.css("configuration > disabledPackageSources > add").filter_map do |node|
             value = node.attribute("value")&.value ||
                     node.at_xpath("./value")&.content
 

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -15,7 +15,7 @@ module Dependabot
       class VersionFinder
         require_relative "repository_finder"
 
-        NUGET_RANGE_REGEX = /[\(\[].*,.*[\)\]]/.freeze
+        NUGET_RANGE_REGEX = /[\(\[].*,.*[\)\]]/
 
         def initialize(dependency:, dependency_files:, credentials:,
                        ignored_versions:, raise_on_ignored: false,

data/lib/dependabot/nuget/version.rb

@@ -11,7 +11,7 @@ module Dependabot
   module Nuget
     class Version < Gem::Version
       VERSION_PATTERN = Gem::Version::VERSION_PATTERN + '(\+[0-9a-zA-Z\-.]+)?'
-      ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/.freeze
+      ANCHORED_VERSION_PATTERN = /\A\s*(#{VERSION_PATTERN})?\s*\z/
 
       def self.correct?(version)
         return false if version.nil?

data/lib/dependabot/nuget.rb

@@ -15,4 +15,11 @@ Dependabot::PullRequestCreator::Labeler.
   register_label_details("nuget", name: ".NET", colour: "7121c6")
 
 require "dependabot/dependency"
-Dependabot::Dependency.register_production_check("nuget", ->(_) { true })
+Dependabot::Dependency.register_production_check(
+  "nuget",
+  lambda do |groups|
+    return true if groups.empty?
+
+    groups.include?("dependencies")
+  end
+)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.212.0
+  version: 0.213.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-09-06 00:00:00.000000000 Z
+date: 2022-10-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,42 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.212.0
+        version: 0.213.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.212.0
-- !ruby/object:Gem::Dependency
-  name: debase
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.2.3
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.2.3
-- !ruby/object:Gem::Dependency
-  name: debase-ruby_core_source
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.10.16
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - '='
-      - !ruby/object:Gem::Version
-        version: 0.10.16
+        version: 0.213.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -86,14 +58,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.12.0
+        version: 3.13.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 3.12.0
+        version: 3.13.0
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -142,42 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.36.0
+        version: 1.37.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.36.0
+        version: 1.37.1
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.14.2
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 1.14.2
-- !ruby/object:Gem::Dependency
-  name: ruby-debug-ide
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.7.3
+        version: 1.15.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.3
+        version: 1.15.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -288,14 +246,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.7.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.7.0
+      version: 3.1.0
 requirements: []
-rubygems_version: 3.1.6
+rubygems_version: 3.3.7
 signing_key: 
 specification_version: 4
 summary: ".NET (NuGet) support for dependabot"