dependabot-nuget 0.255.0 → 0.256.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1feb135ca2ebd58b0c7c96df96c8e3ad30b9f0dccd17b58c99d5670fb3ebf57b
-  data.tar.gz: 55e7d7d46b36738f198057ef6c83ea3f194d25623a65d6e719bf1fc5a6f44eb5
+  metadata.gz: 843d1c24241a816293d79b8c8129060fb874d7957ae25875391b054407355d3d
+  data.tar.gz: 3756670ac86edadbdb566f6c68e7ad7dff488d6793e1e4e2ce2244b16bc61d2c
 SHA512:
-  metadata.gz: 13a3eae5d94249eba9a08cbe55c4c36ca3116881550e76a518e789bc7fe7e8ee6d13fcf910a25de365a2e00af96ce586a7f169a52cc1a6b2fc5fbd594d4b8ba5
-  data.tar.gz: 318e0d0cb22917a6198cd0c0821dba4a2456c23a4378f9387d645c205886cac7078119983772806313427e3ceaf52ec72f64f11f134ddb010b2e59e0bf8a2a36
+  metadata.gz: bb72d0af8838177538d9483043e6cbeb567da9dcb1129f81b71f589510c5cc3a0b6c456866c4e4245253d9f117ea12c90127626fab8830fdc1c406ae3bcc1007
+  data.tar.gz: c8277195b3c5e1b2a92214f8c96154fc4b2f33de22dfe9c742660c4df5d8801154b0a8b56b942b38012c2c333e53f4d2da7d16a6e07e97592e1c6af04fa1c42b

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core/Discover/SdkProjectDiscovery.cs

@@ -114,7 +114,7 @@ internal static class SdkProjectDiscovery
                 transitiveDependencies[dependency.Name] = existingDependency with
                 {
                     // Revisit this logic. We may want to return each dependency instead of merging them.
-                    Version = SemanticVersion.Parse(existingDependency.Version!) > SemanticVersion.Parse(dependency.Version!)
+                    Version = NuGetVersion.Parse(existingDependency.Version!) > NuGetVersion.Parse(dependency.Version!)
                         ? existingDependency.Version
                         : dependency.Version,
                     TargetFrameworks = existingDependency.TargetFrameworks is not null && dependency.TargetFrameworks is not null

data/helpers/lib/NuGetUpdater/NuGetUpdater.Core.Test/Discover/DiscoveryWorkerTests.Project.cs

@@ -401,5 +401,50 @@ public partial class DiscoveryWorkerTests
                     Projects = []
                 });
         }
+
+        [Fact]
+        public async Task DiscoverReportsTransitivePackageVersionsWithFourPartsForMultipleTargetFrameworks()
+        {
+            await TestDiscoveryAsync(
+                workspacePath: "",
+                files:
+                [
+                    ("myproj.csproj", """
+                        <Project Sdk="Microsoft.NET.Sdk">
+                          <PropertyGroup>
+                            <TargetFrameworks>netstandard2.0;net8.0</TargetFrameworks>
+                          </PropertyGroup>
+                          <ItemGroup>
+                            <PackageReference Include="AWSSDK.S3" Version="3.7.307.29" />
+                          </ItemGroup>
+                        </Project>
+                        """)
+                ],
+                expectedResult: new()
+                {
+                    FilePath = "",
+                    Projects = [
+                        new()
+                        {
+                            FilePath = "myproj.csproj",
+                            Dependencies = [
+                                new("Microsoft.NET.Sdk", null, DependencyType.MSBuildSdk),
+                                new("AWSSDK.S3", "3.7.307.29", DependencyType.PackageReference, TargetFrameworks: ["net8.0", "netstandard2.0"], IsDirect: true),
+                                new("AWSSDK.Core", "3.7.303.27", DependencyType.Unknown, TargetFrameworks: ["net8.0", "netstandard2.0"], IsTransitive: true),
+                                new("Microsoft.Bcl.AsyncInterfaces", "1.1.0", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                                new("NETStandard.Library", "2.0.3", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                                new("System.Runtime.CompilerServices.Unsafe", "4.5.2", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                                new("System.Threading.Tasks.Extensions", "4.5.2", DependencyType.Unknown, TargetFrameworks: ["netstandard2.0"], IsTransitive: true),
+                            ],
+                            Properties = [
+                                new("TargetFrameworks", "netstandard2.0;net8.0", "myproj.csproj"),
+                            ],
+                            TargetFrameworks = ["net8.0", "netstandard2.0"],
+                            ReferencedProjectPaths = [],
+                        }
+                    ],
+                }
+            );
+        }
     }
 }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.255.0
+  version: 0.256.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-05-03 00:00:00.000000000 Z
+date: 2024-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.255.0
+        version: 0.256.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.255.0
+        version: 0.256.0
 - !ruby/object:Gem::Dependency
   name: rubyzip
   requirement: !ruby/object:Gem::Requirement
@@ -419,7 +419,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.255.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.256.0
 post_install_message: 
 rdoc_options: []
 require_paths: