semver_dialects 1.2.1 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 545d60dd98889db6974b741b120bfbf036b5c2f03c003c3c76bd0869ce429a5b
-  data.tar.gz: 65289d2e8856c19bcd13330a57db255163934c17ed8486b84388b275541150f5
+  metadata.gz: 477a8f6b9d50ce0b31df72e328f683e585e4eb191ea02e44a42101dba4e7be4a
+  data.tar.gz: c636be1d60cab7452ccda9963898eee992d969e3a8b490656fb8b8def27c3642
 SHA512:
-  metadata.gz: 47cad5277161c8cad94ab902c8476467311f1b2e48b36f4d335d43e18ec882c5681fc9c168837f1e12502f0a890e35323bcd1583c5c29fa358ce52c25d281657
-  data.tar.gz: 8db66efd085fb9b764effb1966dedcf6f1ac4602800cbcef8bee81d67805895ba54d65ef3cb25347409190ff5f548510018377c2b7b1174841768052e6fefc1b
+  metadata.gz: 134eb5c82a142e260bd946954383050966579cb40983e7ca6094c9d66001565eea5cb1250deeb84811b7a3556a5bde6c3eb53ca48815dda6a361649ade1fc537
+  data.tar.gz: 6039fc1f6d4163c7813e7f4155c93a8d5f2aa4ce43cfe62fb75784d524532a2662e8c8831d43c2e88592539955385981f60b52dfa5577657ce68580dd6720167

data/lib/semver_dialects/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SemverDialects
-  VERSION = '1.2.1'
+  VERSION = '1.4.0'
 end

data/lib/semver_dialects.rb

@@ -4,6 +4,7 @@ require 'semver_dialects/version'
 require 'semver_dialects/semantic_version/version_translator'
 require 'semver_dialects/semantic_version/version_parser'
 require 'semver_dialects/semantic_version/version_range'
+require 'deb_version'
 
 module SemverDialects
   # Captures all errors that could be possibly raised
@@ -34,15 +35,18 @@ module SemverDialects
       when 'packagist'
         VersionTranslator.translate_packagist(version_string)
       else
-        raise SemverDialects::Error, 'unsupported package type'
+        raise SemverDialects::Error, "unsupported package type '#{typ}'"
       end
     end
 
     def self.version_sat?(typ, raw_ver, raw_constraint)
-      version_constraint = version_translate(typ, raw_constraint)
-      version = VersionParser.parse('=' + raw_ver)
+      # os package versions are handled very differently from application package versions
+      return os_pkg_version_sat?(typ, raw_ver, raw_constraint) if os_purl_type?(typ)
 
+      version_constraint = version_translate(typ, raw_constraint)
       raise SemverDialects::Error, 'malformed constraint' if version_constraint.nil? || version_constraint.empty?
+
+      version = VersionParser.parse('=' + raw_ver)
       raise SemverDialects::Error, 'malformed constraint' if version.nil? || version.empty?
 
       constraint = VersionRange.new
@@ -52,5 +56,22 @@ module SemverDialects
 
       constraint.overlaps_with?(version)
     end
+
+    def self.os_purl_type?(typ)
+      ['deb', 'rpm', 'apk'].include?(typ)
+    end
+
+    def self.os_pkg_version_sat?(typ, raw_ver, raw_constraint)
+      if typ == 'deb'
+        # we only support the less than operator, because that's the only one currently output
+        # by the advisory exporter for operating system packages.
+        raise SemverDialects::Error, 'malformed constraint' unless raw_constraint[0] == '<'
+
+        v1 = DebVersion.new(raw_ver)
+        v2 = DebVersion.new(raw_constraint[1..-1])
+
+        return v1 < v2
+      end
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: semver_dialects
 version: !ruby/object:Gem::Version
-  version: 1.2.1
+  version: 1.4.0
 platform: ruby
 authors:
 - Julian Thome
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-04-13 00:00:00.000000000 Z
+date: 2023-10-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pastel
@@ -54,20 +54,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 0.10.1
+- !ruby/object:Gem::Dependency
+  name: deb_version
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.1
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.17'
+        version: 2.4.9
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.17'
+        version: 2.4.9
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
@@ -155,7 +169,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: This gem provides utility function to process semantic versions expressed