dependency_bot 0.1.0 → 0.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/exe/dependency_bot +21 -0
- data/lib/dependency_bot/version.rb +1 -1
- metadata +5 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0bcefb5a733dc142ce88b3589a480ef2cc5bfe16833211b25b5b843a08a0b0db
|
|
4
|
+
data.tar.gz: 376b0e7e1e20a59a56a700681eb3e37e23eeba808087cf7dc011049bb803dbb9
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 2e85fb8eddb00b0e07a45f4a3f20fdd0679de20e4c6ed5f046febd5bd8ae87a8b34fe4beeba89cdb7f8238df0f0acc2c711fda62c51cbd0fe2fb89fd76a1a82d
|
|
7
|
+
data.tar.gz: 5a3b9aa909f789e6c2e6aec778a7992ba7dd1047b27013d5c72757c4852a03399e2c89f5f1ff850e2dd0e0f1fe7a59e4f6f9b6040db8920bd8f9ce69b982396e
|
data/exe/dependency_bot
ADDED
|
@@ -0,0 +1,21 @@
|
|
|
1
|
+
#!/usr/bin/env ruby
|
|
2
|
+
# frozen_string_literal: true
|
|
3
|
+
|
|
4
|
+
require "bundler/setup"
|
|
5
|
+
require "dependency_bot"
|
|
6
|
+
|
|
7
|
+
@checker = DependencyBot::Checkers.new
|
|
8
|
+
@checker.add_checker(DependencyBot::Checker::BundleAudit.new)
|
|
9
|
+
@depencies = @checker.run
|
|
10
|
+
|
|
11
|
+
if @depencies.empty?
|
|
12
|
+
puts "No dependencies to update"
|
|
13
|
+
else
|
|
14
|
+
puts "Dependencies to update:"
|
|
15
|
+
@depencies.each do |dependency|
|
|
16
|
+
fixer = DependencyBot::Fixer::BundleAudit.new(dependency)
|
|
17
|
+
|
|
18
|
+
DependencyBot::Git::Wrapper.run_and_commit(fixer)
|
|
19
|
+
DependencyBot::Gitlab::MergeRequestCreator.create(fixer)
|
|
20
|
+
end
|
|
21
|
+
end
|
metadata
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: dependency_bot
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.2.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Vinícius A.
|
|
8
8
|
bindir: exe
|
|
9
9
|
cert_chain: []
|
|
10
|
-
date: 2025-
|
|
10
|
+
date: 2025-06-01 00:00:00.000000000 Z
|
|
11
11
|
dependencies: []
|
|
12
12
|
description: Dependency Bot is a Ruby gem designed to automate the management and
|
|
13
13
|
updating of dependencies in Ruby projects hosted on Gitlab. It simplifies the process
|
|
@@ -15,7 +15,8 @@ description: Dependency Bot is a Ruby gem designed to automate the management an
|
|
|
15
15
|
development without worrying about outdated libraries or security vulnerabilities.
|
|
16
16
|
email:
|
|
17
17
|
- contato@viniciusalonso.com
|
|
18
|
-
executables:
|
|
18
|
+
executables:
|
|
19
|
+
- dependency_bot
|
|
19
20
|
extensions: []
|
|
20
21
|
extra_rdoc_files: []
|
|
21
22
|
files:
|
|
@@ -26,6 +27,7 @@ files:
|
|
|
26
27
|
- LICENSE.txt
|
|
27
28
|
- README.md
|
|
28
29
|
- Rakefile
|
|
30
|
+
- exe/dependency_bot
|
|
29
31
|
- lib/dependency_bot.rb
|
|
30
32
|
- lib/dependency_bot/checker/bundle_audit.rb
|
|
31
33
|
- lib/dependency_bot/checkers.rb
|