dependabot-pub 0.180.0 → 0.180.3
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/pub/metadata_finder.rb +3 -0
- data/lib/dependabot/pub/update_checker.rb +7 -1
- metadata +6 -6
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6b0b429b2e1bfce94bd00f24b2f55f7133effc2c18437de479021ead8cca7117
|
4
|
+
data.tar.gz: 32d47cbe20c07b794d2166a484c0c468f6b3eb4bc2d8feae24bc00fdf365bbe6
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: dd59e9f79513fc848ad023d017a494904b96dad24b2dfddb2ea9806da84d21d284d7a2ed5e1512c28c77d801c0ecb390d0ff998ebcb00efff2d96d00d7d9e79e
|
7
|
+
data.tar.gz: 9cf9a466a48a0cb3f42f3bb570195008000df79b5f0933be358eeaa812e6ebff08f4c35b7d4ea9a19d469651712eb9e7fd66c4046b0353abe25f5bc454569fba
|
@@ -12,6 +12,9 @@ module Dependabot
|
|
12
12
|
|
13
13
|
def look_up_source
|
14
14
|
repo = pub_listing.dig("latest", "pubspec", "repository")
|
15
|
+
# The repository field did not always exist in pubspec.yaml, and some
|
16
|
+
# packages specify a git repository in the "homepage" field.
|
17
|
+
repo ||= pub_listing.dig("latest", "pubspec", "homepage")
|
15
18
|
return nil unless repo
|
16
19
|
|
17
20
|
Source.from_url(repo)
|
@@ -10,7 +10,13 @@ module Dependabot
|
|
10
10
|
include Dependabot::Pub::Helpers
|
11
11
|
|
12
12
|
def latest_version
|
13
|
-
Dependabot::Pub::Version.new(current_report["latest"])
|
13
|
+
version = Dependabot::Pub::Version.new(current_report["latest"])
|
14
|
+
|
15
|
+
return version if ignore_requirements.none? { |r| r.satisfied_by?(version) }
|
16
|
+
return version if version == version_class.new(dependency.version)
|
17
|
+
return nil unless @raise_on_ignored
|
18
|
+
|
19
|
+
raise AllVersionsIgnored
|
14
20
|
end
|
15
21
|
|
16
22
|
def latest_resolvable_version_with_no_unlock
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-pub
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.180.
|
4
|
+
version: 0.180.3
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-04-04 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.180.
|
19
|
+
version: 0.180.3
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.180.
|
26
|
+
version: 0.180.3
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -100,14 +100,14 @@ dependencies:
|
|
100
100
|
requirements:
|
101
101
|
- - "~>"
|
102
102
|
- !ruby/object:Gem::Version
|
103
|
-
version: 1.
|
103
|
+
version: 1.26.0
|
104
104
|
type: :development
|
105
105
|
prerelease: false
|
106
106
|
version_requirements: !ruby/object:Gem::Requirement
|
107
107
|
requirements:
|
108
108
|
- - "~>"
|
109
109
|
- !ruby/object:Gem::Version
|
110
|
-
version: 1.
|
110
|
+
version: 1.26.0
|
111
111
|
- !ruby/object:Gem::Dependency
|
112
112
|
name: simplecov
|
113
113
|
requirement: !ruby/object:Gem::Requirement
|