libyear-bundler 0.6.0 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6605cda8b92cd002e2b1a536a716ba50d8c0df4b550db28f6b0be4760d7734f7
-  data.tar.gz: eec844bd3aaf31c95fc29827ca6a33166da392ab799a03b3b3b5269cc5507fe7
+  metadata.gz: e9b6ae5fa040a91add039ed6d36fd2a6f3084a42efe9adfa1207fdad342ae6b9
+  data.tar.gz: dc93d875dcf16eb18c20bb09bbc8ed38efb1866b49d3b6fe3b721be3d78f009a
 SHA512:
-  metadata.gz: 555318739eb3506de90e6d21f103fbb8ce2c0bd4225595830465c0aae476a906d55ffcf534e375925146c695348bbca975fe75ef962752bb4d41f474b6308b2d
-  data.tar.gz: a1fe20a4d14b170ccc8b10949868cf859382135651ec799bd1c0bfff4c588a5b92e63d7bf347cc0987feb4aa8199966e986b56d797d30828e9b01b3fb64cde72
+  metadata.gz: ef8e98ac272c82f87634523708d44d0e805d571909c4e68b57be3e760780b13b345b6d1fbe09222dc41aedebcfd47105e6cea4baae13555b693a9ba0ec90a3fb
+  data.tar.gz: b06125191e905323a3d43098306899be8e48f7dff79df11b62f8a1d9865311ce6d8048c50706316543b8eb3fcb3b925d55d6ba9e7170019cd0a4894d4fb9af45

data/lib/libyear_bundler/models/ruby.rb

@@ -7,6 +7,7 @@ require 'yaml'
 require 'libyear_bundler/calculators/libyear'
 require 'libyear_bundler/calculators/version_number_delta'
 require 'libyear_bundler/calculators/version_sequence_delta'
+require 'libyear_bundler/yaml_loader'
 
 module LibyearBundler
   module Models
@@ -78,13 +79,19 @@ module LibyearBundler
         def all_versions
           @_all_versions ||= begin
             uri = ::URI.parse(RUBY_VERSION_DATA_URL)
-            response = ::Net::HTTP.get_response(uri)
-            # The Date object is passed through here due to a bug in
-            # YAML#safe_load
-            # https://github.com/ruby/psych/issues/262
-            ::YAML
-              .safe_load(response.body, [Date])
-              .map { |release| release['version'] }
+            opt = { open_timeout: 3, read_timeout: 5, use_ssl: true }
+            response = ::Net::HTTP.start(uri.hostname, uri.port, opt) do |con|
+              con.request_get(uri.path)
+            end
+            if response.is_a?(::Net::HTTPSuccess)
+              YAMLLoader.safe_load(response.body).map { |release| release['version'] }
+            else
+              warn format('Unable to get Ruby version list: response code: %s', response.code)
+              []
+            end
+          rescue ::Timeout::Error
+            warn 'Unable to get Ruby version list: network timeout'
+            []
           end
         end
       end

data/lib/libyear_bundler/release_date_cache.rb

@@ -1,4 +1,5 @@
 require 'yaml'
+require 'libyear_bundler/yaml_loader'
 
 module LibyearBundler
   # A cache of release dates by name and version, for both gems and rubies.
@@ -18,10 +19,18 @@ module LibyearBundler
       end
     end
 
+    def empty?
+      @data.empty?
+    end
+
+    def size
+      @data.size
+    end
+
     class << self
       def load(path)
         if File.exist?(path)
-          new(YAML.safe_load(File.read(path), [Date]))
+          new(YAMLLoader.safe_load(File.read(path)))
         else
           new({})
         end

data/lib/libyear_bundler/version.rb

@@ -1,3 +1,3 @@
 module LibyearBundler
-  VERSION = "0.6.0".freeze
+  VERSION = "0.6.1".freeze
 end

data/lib/libyear_bundler/yaml_loader.rb

@@ -0,0 +1,36 @@
+# frozen_string_literal: true
+
+require 'yaml'
+
+module LibyearBundler
+  # Supports different versions of the `YAML` constant. For example,
+  #
+  # > psych 3.0.3 YAML#safe_load expected the permitted/whitelisted classes in
+  # > the second parameter.
+  # >
+  # > psych 3.1.0 YAML#safe_load introduced keyword argument permitted_classes
+  # > in addition to permitted/whitelisted classes in the second parameter.
+  # >
+  # > psych 4.0.0 dropped the second positional parameter of YAML#safe_load, and
+  # > expects the permitted/whitelisted classes only in keyword parameter
+  # > permitted_classes.
+  # > https://github.com/jaredbeck/libyear-bundler/issues/22
+  #
+  # I expect this will only get more complicated over the years, as we try to
+  # support old rubies for as long as possible.
+  #
+  # Other known issues:
+  #
+  # - https://github.com/ruby/psych/issues/262
+  module YAMLLoader
+    class << self
+      def safe_load(yaml, permitted_classes: [::Date])
+        if YAML.method(:safe_load).parameters.include?([:key, :permitted_classes])
+          YAML.safe_load(yaml, permitted_classes: permitted_classes)
+        else
+          YAML.safe_load(yaml, permitted_classes)
+        end
+      end
+    end
+  end
+end

data/libyear-bundler.gemspec

@@ -33,9 +33,6 @@ Gem::Specification.new do |spec|
   # above.
   spec.add_dependency "bundler", ">= 1.14", "< 3"
 
-  spec.add_development_dependency "rspec", "~> 3.9"
-
-  # rubocop 0.57 drops support for ruby 2.1, so 0.56 is the highest we can
-  # use. We're going to support ruby 2.1 as long as possible. See above.
-  spec.add_development_dependency "rubocop", "~> 0.56.0"
+  # Development dependencies are specified in `/gemfiles`. See CONTRIBUTING.md
+  # for details.
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: libyear-bundler
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.6.1
 platform: ruby
 authors:
 - Jared Beck
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-08-13 00:00:00.000000000 Z
+date: 2022-05-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -30,34 +30,6 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '3'
-- !ruby/object:Gem::Dependency
-  name: rspec
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.9'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.9'
-- !ruby/object:Gem::Dependency
-  name: rubocop
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.56.0
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 0.56.0
 description: 
 email:
 - jared@jaredbeck.com
@@ -80,6 +52,7 @@ files:
 - lib/libyear_bundler/release_date_cache.rb
 - lib/libyear_bundler/report.rb
 - lib/libyear_bundler/version.rb
+- lib/libyear_bundler/yaml_loader.rb
 - libyear-bundler.gemspec
 homepage: https://libyear.com
 licenses:
@@ -100,8 +73,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6.3
+rubygems_version: 3.2.20
 signing_key: 
 specification_version: 4
 summary: A simple measure of dependency freshness