dependabot_gitlab 0.1.4 → 0.1.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 240eec4b8ff3acf8639e063effad34615f7775d41458b10bca7f6c6970146f42
-  data.tar.gz: 8be08fca8ccd4369ad38a8edfe11e5ad79b903a76824b3ee26fd3d918d3e0c15
+  metadata.gz: c0809afad8c8cd6468cf13426b56dae01f71ea9fa0f94fecf1da26cf153362de
+  data.tar.gz: bc449248466de947f7a14ddb7bb612ad83fe08be62f9aa09d30c4ceb7340932e
 SHA512:
-  metadata.gz: 14a593bfff696de3d8c453198973af7b166f5344131a48a00369521c38caeb4b5a4a49f826e53e191ee7145e82e1298a9664c427381b0dcc3ab5d9257b52262e
-  data.tar.gz: 21f54b4d4075b66c96c76351318cd85bbc0365850b94f7a12eecab3ba3f3e19aa02b859f4f1098ac6c5f67ee6e4dc3433a14528c1430367c0186da818fcdc6df
+  metadata.gz: c4dfaf945c2aebdec1665a079f53a1cfd53ff0158f8e3c600e3b2ba346a7831674d0a0448ad817b0d16ccb8de27c07bb1168f4030b2651d349aa931c7056d669
+  data.tar.gz: 6345b0619c1dcd2ba03cc1a3fd7a5b40f10dfa6df137d08e120bfb0da6ce4313c266ecd5f26695e8a90aff03666da79b8ef98594abb9f1a63fc20784754431b8

data/lib/dependabot_gitlab/core_functions.rb

@@ -0,0 +1,125 @@
+module DependabotGitlab
+  class CoreFunctions
+
+    DEFAULT_HOST_NAME = 'gitlab.com'.freeze
+    DEFAULT_PROVIDER = 'gitlab'.freeze
+    DEFAULT_API_ENDPOINT = 'https://gitlab.com/api/v4'.freeze
+    DEFAULT_BRANCH = 'master'.freeze
+
+    def initialize(credentials, settings)
+      @settings = settings
+      @credentials = credentials
+    end
+
+    def dependencies_info(create_merge_request)
+      messages = []
+
+      init_source
+
+      file_fetcher = fetcher
+      files = file_fetcher.files
+
+      dependencies = parser(files).parse
+
+      commit = file_fetcher.commit
+
+      dependencies.select(&:top_level?).each do |dep|
+        checker = checker(files, dep)
+
+        next if checker.up_to_date?
+
+        requirements_to_unlock = unlock_requirements(checker)
+
+        next if requirements_to_unlock == :update_not_possible
+
+        updated_deps = checker.updated_dependencies(
+            requirements_to_unlock: requirements_to_unlock
+        )
+
+        updater = file_updater(updated_deps, files)
+        updated_files = updater.updated_dependency_files
+
+        create_mr(updated_files, updated_deps, commit) if create_merge_request
+
+        messages << {name: dep.name, old_version: dep.version, new_version: updater.dependencies.first.version}
+      end
+
+      messages.join
+    end
+
+    private
+
+    def init_source
+      @source = Dependabot::Source.new(
+          provider: @settings[:provider] || DEFAULT_PROVIDER,
+          hostname: @settings[:hostname] || DEFAULT_HOST_NAME,
+          api_endpoint: @settings[:api_endpoint] || DEFAULT_API_ENDPOINT,
+          repo: @settings[:repo],
+          directory: @settings[:dir],
+          branch: @settings[:branch] || DEFAULT_BRANCH
+      )
+    end
+
+    def fetcher
+      Dependabot::FileFetchers.for_package_manager(@settings[:pkg_manager]).new(
+          source: @source,
+          credentials: @credentials,
+      )
+    end
+
+    def parser(files)
+      Dependabot::FileParsers.for_package_manager(@settings[:pkg_manager]).new(
+          dependency_files: files,
+          source: @source,
+          credentials: @credentials,
+      )
+    end
+
+    def checker(files, dep)
+      Dependabot::UpdateCheckers.for_package_manager(@settings[:pkg_manager]).new(
+          dependency: dep,
+          dependency_files: files,
+          credentials: @credentials,
+      )
+    end
+
+    def unlock_requirements(checker)
+      if !checker.requirements_unlocked_or_can_be?
+        if checker.can_update?(requirements_to_unlock: :none) then
+          :none
+        else
+          :update_not_possible
+        end
+      elsif checker.can_update?(requirements_to_unlock: :own) then
+        :own
+      elsif checker.can_update?(requirements_to_unlock: :all) then
+        :all
+      else
+        :update_not_possible
+      end
+    end
+
+    def file_updater(updated_deps, files)
+      Dependabot::FileUpdaters.for_package_manager(@settings[:pkg_manager]).new(
+          dependencies: updated_deps,
+          dependency_files: files,
+          credentials: @credentials,
+      )
+    end
+
+    def create_mr(updated_files, updated_deps, commit)
+      pr_creator = Dependabot::PullRequestCreator.new(
+          source: @source,
+          base_commit: commit,
+          dependencies: updated_deps,
+          files: updated_files,
+          credentials: @credentials,
+          assignees: @settings[:assignees],
+          author_details: @settings[:author_details] || {name: "Dependabot", email: "no-reply@github.com"},
+          label_language: true,
+      )
+
+      pr_creator.create
+    end
+  end
+end

data/lib/dependabot_gitlab/updater.rb

@@ -0,0 +1,39 @@
+require "dependabot/file_fetchers"
+require "dependabot/file_parsers"
+require "dependabot/update_checkers"
+require "dependabot/file_updaters"
+require "dependabot/pull_request_creator"
+require "dependabot/omnibus"
+
+require_relative 'core_functions'
+
+module DependabotGitlab
+  class Updater
+    def initialize(credentials, settings, verbose: true)
+      @credentials = credentials
+      @core = CoreFunctions.new(credentials, settings)
+      @verbose = verbose
+    end
+
+    def update_dependencies(create_merge_request:)
+      return dependencies_update_with_timer(create_merge_request) if @verbose
+
+      dependencies_update(create_merge_request)
+    end
+
+    private
+
+    def dependencies_update_with_timer(create_merge_request)
+      p 'Start dependencies update'
+      time = Time.now
+
+      @core.dependencies_info(create_merge_request)
+
+      p "Done (#{Time.now - time })"
+    end
+
+    def dependencies_update(create_merge_request)
+      @core.dependencies_info(create_merge_request)
+    end
+  end
+end

data/lib/dependabot_gitlab/version.rb

@@ -0,0 +1,5 @@
+# frozen_string_literal: true
+
+module DependabotGitlab
+  VERSION = "0.1.5"
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot_gitlab
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.5
 platform: ruby
 authors:
 - storozhenkoalex
@@ -18,6 +18,9 @@ extensions: []
 extra_rdoc_files: []
 files:
 - lib/dependabot_gitlab.rb
+- lib/dependabot_gitlab/core_functions.rb
+- lib/dependabot_gitlab/updater.rb
+- lib/dependabot_gitlab/version.rb
 homepage:
 licenses:
 - MIT