dependabot-pub 0.332.0 → 0.334.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a28215163500eba999a50d9308e80ffd678b6de74c1c79283f9d8cabe0badab1
-  data.tar.gz: dc86d89e1f8d19f6850a0e556ba1459c6d864f106bf07d3e9398ba95b4f093d3
+  metadata.gz: e7c629ce8ff27c25b95a3f4df12763784ef000d30cf2994fb4ba19abb397e586
+  data.tar.gz: 5b9bcf4c7ddd567c03da21decba2aee418b23d2adb7b5f60f0362b4008cebd57
 SHA512:
-  metadata.gz: 8cd124626d47978957f945e8b432fe73d285ac1392c5bac3d593b1b36e900ba9cd9e4831959e0c3d831d603953541b6ca26c75e68f23459de1313f67e70cbc33
-  data.tar.gz: a370978d6cd143ba7f875ecdd12a60b1f5c5ccde5480e8c651265ab112b13e30b9f4adbe1a9da37b88598b2eefc55893daa8bf8d05ed17a6c92ea4c3fc24e9ff
+  metadata.gz: ceedf9d2141426aea8f8780a90a86ffc91a931d7734fbe0772ef44d941bb39cc88c805d808b259f13de32e2c04837df3e9b766b69358da05caf27e845457ca2c
+  data.tar.gz: 6f72a3ac8507bf2014f100ee3a249fa17405731322a4acdc622e64bad4306c4ada7b3505ce60f206746edc780792f3834e2549ae6decc51e2c24baa9a6e245dd

data/lib/dependabot/pub/file_fetcher.rb

@@ -4,6 +4,7 @@
 require "sorbet-runtime"
 require "dependabot/file_fetchers"
 require "dependabot/file_fetchers/base"
+require "dependabot/file_filtering"
 
 # For details on pub packages, see:
 # https://dart.dev/tools/pub/package-layout#the-pubspec
@@ -31,11 +32,26 @@ module Dependabot
         # Fetch any additional pubspec.yamls in the same git repo for resolving
         # local path-dependencies and workspace packages.
         extra_pubspecs = Dir.glob("**/pubspec.yaml", base: clone_repo_contents)
-        fetched_files += extra_pubspecs.map do |pubspec|
+        fetched_files += extra_pubspecs.filter_map do |pubspec|
           relative_name = Pathname.new("/#{pubspec}").relative_path_from(directory)
+
+          # Skip excluded workspace pubspec files
+          next nil if Dependabot::FileFiltering.should_exclude_path?(relative_name.to_s,
+                                                                     "workspace pubspec file",
+                                                                     @exclude_paths)
+
           fetch_file_from_host(relative_name)
         end
-        fetched_files.uniq
+
+        # Filter excluded files from final collection
+        filtered_files = fetched_files.uniq.reject do |file|
+          file_name = T.cast(file, DependencyFile).name
+          Dependabot::FileFiltering.should_exclude_path?(file_name,
+                                                         "file from final collection",
+                                                         @exclude_paths)
+        end
+
+        filtered_files
       end
 
       private

data/lib/dependabot/pub/requirement.rb

@@ -107,7 +107,7 @@ module Dependabot
         return req_string if parts.count >= 3
 
         # If we have no parts then the version is completely unlocked
-        return ">= 0" if parts.count.zero?
+        return ">= 0" if parts.none?
 
         # If we have fewer than three parts we do a partial match
         parts << "0"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.332.0
+  version: 0.334.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.332.0
+        version: 0.334.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.332.0
+        version: 0.334.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -211,14 +211,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.18'
+        version: '3.25'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.18'
+        version: '3.25'
 - !ruby/object:Gem::Dependency
   name: webrick
   requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.332.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
 rdoc_options: []
 require_paths:
 - lib