dependabot-uv 0.400.0 → 0.402.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/helpers/requirements.txt +1 -1
- data/lib/dependabot/uv/update_checker.rb +9 -0
- metadata +6 -6
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8a5e08a5ab005e8916dcec9d6818d061130739b90864f6c139b3295264ef0b0b
|
|
4
|
+
data.tar.gz: ec3bdc333616eb99bec4fc32df5eba26e1b426193d18df106a9b8dd14cfd279f
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 864b454e56053e5e4e2bb81222ccdd9c7cbfbb7cd1bca26d35f3a70ffb3bdd91e3a853688172fee05ce94b0e603c008d7db2971546bb5c53a8ce0e762aa94cf8
|
|
7
|
+
data.tar.gz: f2510bffd526cd4b400a664de5621df71316a7c3006004e95b455057a4f65bfcc89bdb0426c47ddaa7d8bf13f6a7a49cc17bf63428505fa78cdd4b2c40e8630e
|
data/helpers/requirements.txt
CHANGED
|
@@ -42,6 +42,15 @@ module Dependabot
|
|
|
42
42
|
).updated_requirements
|
|
43
43
|
end
|
|
44
44
|
|
|
45
|
+
sig { override.returns(T.nilable(Gem::Version)) }
|
|
46
|
+
def latest_resolvable_version_with_no_unlock
|
|
47
|
+
# A sub-dependency in uv.lock has no manifest requirement to unlock, so
|
|
48
|
+
# any version uv can resolve is reachable with a lockfile-only change.
|
|
49
|
+
return super unless requirements.none? && resolver_type == :lock_file
|
|
50
|
+
|
|
51
|
+
vulnerable? ? lowest_resolvable_security_fix_version : latest_resolvable_version
|
|
52
|
+
end
|
|
53
|
+
|
|
45
54
|
private
|
|
46
55
|
|
|
47
56
|
sig { override.returns(T.nilable(Gem::Version)) }
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependabot-uv
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.402.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Dependabot
|
|
@@ -15,28 +15,28 @@ dependencies:
|
|
|
15
15
|
requirements:
|
|
16
16
|
- - '='
|
|
17
17
|
- !ruby/object:Gem::Version
|
|
18
|
-
version: 0.
|
|
18
|
+
version: 0.402.0
|
|
19
19
|
type: :runtime
|
|
20
20
|
prerelease: false
|
|
21
21
|
version_requirements: !ruby/object:Gem::Requirement
|
|
22
22
|
requirements:
|
|
23
23
|
- - '='
|
|
24
24
|
- !ruby/object:Gem::Version
|
|
25
|
-
version: 0.
|
|
25
|
+
version: 0.402.0
|
|
26
26
|
- !ruby/object:Gem::Dependency
|
|
27
27
|
name: dependabot-python
|
|
28
28
|
requirement: !ruby/object:Gem::Requirement
|
|
29
29
|
requirements:
|
|
30
30
|
- - '='
|
|
31
31
|
- !ruby/object:Gem::Version
|
|
32
|
-
version: 0.
|
|
32
|
+
version: 0.402.0
|
|
33
33
|
type: :runtime
|
|
34
34
|
prerelease: false
|
|
35
35
|
version_requirements: !ruby/object:Gem::Requirement
|
|
36
36
|
requirements:
|
|
37
37
|
- - '='
|
|
38
38
|
- !ruby/object:Gem::Version
|
|
39
|
-
version: 0.
|
|
39
|
+
version: 0.402.0
|
|
40
40
|
- !ruby/object:Gem::Dependency
|
|
41
41
|
name: debug
|
|
42
42
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -302,7 +302,7 @@ licenses:
|
|
|
302
302
|
- MIT
|
|
303
303
|
metadata:
|
|
304
304
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
|
305
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
|
305
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.402.0
|
|
306
306
|
rdoc_options: []
|
|
307
307
|
require_paths:
|
|
308
308
|
- lib
|