semver_dialects 1.3.0 → 1.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ddcbb054210cd867508c853d05b58c492e24f5019eb53498d2bbce338d4b5312
-  data.tar.gz: 6461b277cd0ddb886b96f23c9a57ab2a20cf4ebaa3fb11f49af54cf59a943ddf
+  metadata.gz: 28ee5ec66f887446314abeffcac8cff51161d7b2040eb06139efc5bbf48b2cc3
+  data.tar.gz: c8328e39e774b98b3e4b0b1eb5c2da35952fbdcf98a1ae76d0f8b4d01749c358
 SHA512:
-  metadata.gz: b44765a7c9500082e3298b2ee34d1d9020b642ca5467c617944c42f57c7e76c0b3c8f34d3cac3058262edb14fb5cc885040e7277016c446277c02e12626e9fed
-  data.tar.gz: 6a7fa2d8043611fe4ff0a44abd5a1f67765f99a356c83be8343f6b1cb367127feb51cfd879021c623062477b2b538051405129280aa4079f46fdaf2bdf282d3c
+  metadata.gz: 17d70269cfc9c4174cd7e9807b8dc79834e9864c5e09ea5d655c006edb9319ef9c3e234e340b4368be7dc4671c254b4e1bfae2874c55420add7f023f7e0e719d
+  data.tar.gz: df0798ecfef4d791201da8348df7262d610346a94f56da96f6624b305b1221c27cef175ed97a96462a6dba50fa703610335ab68f4685c43114f1fff3b7620be1

data/lib/semver_dialects/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module SemverDialects
-  VERSION = '1.3.0'
+  VERSION = '1.5.0'
 end

data/lib/semver_dialects.rb

@@ -4,6 +4,7 @@ require 'semver_dialects/version'
 require 'semver_dialects/semantic_version/version_translator'
 require 'semver_dialects/semantic_version/version_parser'
 require 'semver_dialects/semantic_version/version_range'
+require 'deb_version'
 
 module SemverDialects
   # Captures all errors that could be possibly raised
@@ -39,6 +40,9 @@ module SemverDialects
     end
 
     def self.version_sat?(typ, raw_ver, raw_constraint)
+      # os package versions are handled very differently from application package versions
+      return os_pkg_version_sat?(typ, raw_ver, raw_constraint) if os_purl_type?(typ)
+
       version_constraint = version_translate(typ, raw_constraint)
       raise SemverDialects::Error, 'malformed constraint' if version_constraint.nil? || version_constraint.empty?
 
@@ -52,5 +56,22 @@ module SemverDialects
 
       constraint.overlaps_with?(version)
     end
+
+    def self.os_purl_type?(typ)
+      ['deb', 'rpm', 'apk'].include?(typ)
+    end
+
+    def self.os_pkg_version_sat?(typ, raw_ver, raw_constraint)
+      if typ == 'deb'
+        # we only support the less than operator, because that's the only one currently output
+        # by the advisory exporter for operating system packages.
+        raise SemverDialects::Error, 'malformed constraint' unless raw_constraint[0] == '<'
+
+        v1 = DebVersion.new(raw_ver)
+        v2 = DebVersion.new(raw_constraint[1..-1])
+
+        return v1 < v2
+      end
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: semver_dialects
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.5.0
 platform: ruby
 authors:
 - Julian Thome
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2023-05-23 00:00:00.000000000 Z
+date: 2023-11-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pastel
@@ -32,14 +32,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.0
+        version: '1.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.2.0
+        version: '1.3'
 - !ruby/object:Gem::Dependency
   name: tty-command
   requirement: !ruby/object:Gem::Requirement
@@ -54,6 +54,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 0.10.1
+- !ruby/object:Gem::Dependency
+  name: deb_version
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.1
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.0.1
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -155,7 +169,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: This gem provides utility function to process semantic versions expressed