unwrappr 0.3.5 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 39fe485a8ba714ba4e22b8b7ba8acea5526ff391c47db66a4a10650ce249d7a0
-  data.tar.gz: b08f8f60715a38c840e2333357e8251d202cdcfb11094a1caa4465aacfc8c8a1
+  metadata.gz: 17cf29453a149873809590eabc7cb496b39abe330f47514a24da54ec5f869ef7
+  data.tar.gz: e0e5ce8b470ef58e9a341bf70368c0a3e394c4db8322b52294b2fff773a343b0
 SHA512:
-  metadata.gz: 5bad3d6eb78341a7053fe4228e963c0e057b518b20cad6056ce006dc981d8e20977ce6095e710b3aa3ae2045ac419871cb370c1454af6ba0eae8386be9a36d5e
-  data.tar.gz: a2126e6001bfe6b82dba09d4d8a32d01b599589f1d245ed17033662336c895a5a8304afe4d4608b083ed162fea8d76b90d9fa8bcb1ae4ce6b9b9f1cad0761031
+  metadata.gz: 392d0cfc8f2f4613616f379765ec8f0ab43ec3aeb5bdb8fbf6fc5ff816337b6a9d9eecdab729caceb2f43fda883a44290821e58f1cfd8e2e5877ed2e2fe384de
+  data.tar.gz: 25a9a43fc432e09eb0aeb2cf019d3e6a6b8fe2ef1e4ccd5ffaeccde386b16330679489085f0e5c0bbdec8327e2495c553e50d75672d8d1ae629adf8389b95320

data/.gitignore

@@ -1,3 +1,5 @@
+*.gem
+.rspec_status
 /.bundle/
 /.yardoc
 /Gemfile.lock
@@ -9,6 +11,3 @@
 /spec/reports/
 /stdout.txt
 /tmp/
-
-# rspec failure tracking
-.rspec_status

data/.travis.yml

@@ -1,9 +1,8 @@
 sudo: false
 language: ruby
 rvm:
-  - 2.3.8
-  - 2.4.5
-  - 2.5.3
-  - 2.6.0
+  - 2.5.8
+  - 2.6.6
+  - 2.7.1
 before_install:
   - gem update --system

data/CHANGELOG.md

@@ -6,7 +6,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
-[Unreleased]: https://github.com/envato/unwrappr/compare/v0.3.5...HEAD
+[Unreleased]: https://github.com/envato/unwrappr/compare/v0.4.0...HEAD
+
+## [0.4.0] 2020-04-14
+### Changed
+- `bundler-audit` limited to `>= 0.6.0` ([#71])
+
+### Removed
+- Support for Ruby 2.3 and 2.4 ([#73])
+
+### Added
+- Rake vulnerability CVE-2020-8130 fixes ([#72])
+- Support for Ruby 2.6 and 2.7 ([#73])
+- Support for version numbers including a fourth segment (_e.g._ "6.0.2.2") ([#74])
+- Support for GitHub URIs including anchors ([#75])
+
+[0.4.0]: https://github.com/envato/unwrappr/compare/v0.3.5..v0.4.0
+[#71]: https://github.com/envato/unwrappr/pull/71
+[#72]: https://github.com/envato/unwrappr/pull/72
+[#73]: https://github.com/envato/unwrappr/pull/73
+[#74]: https://github.com/envato/unwrappr/pull/74
+[#75]: https://github.com/envato/unwrappr/pull/75
 
 ## [0.3.5] 2019-11-28
 ### Changed

data/README.md

@@ -63,13 +63,12 @@ See https://github.com/settings/tokens to set up personal access tokens.
 
 ## Requirements
 
- - Ruby (tested against v2.3 and above)
+ - Ruby (tested against v2.5 and above)
  - GitHub access (see Configuration section)
 
-## Contact ![Join the chat at https://gitter.im/envato/unwrappr](https://badges.gitter.im/Join%20Chat.svg)
+## Contact
 
  - [GitHub project](https://github.com/envato/unwrappr)
- - [Gitter chat room](https://gitter.im/envato/unwrappr)
  - Bug reports and feature requests are welcome via [GitHub Issues](https://github.com/envato/unwrappr/issues)
 
 ## Maintainers

data/lib/unwrappr/gem_change.rb

@@ -43,6 +43,11 @@ module Unwrappr
         head_version.patch_difference?(base_version)
     end
 
+    def hotfix?
+      head_version && base_version &&
+        head_version.hotfix_difference?(base_version)
+    end
+
     def upgrade?
       head_version && base_version && (head_version > base_version)
     end

data/lib/unwrappr/gem_version.rb

@@ -13,9 +13,10 @@ module Unwrappr
       @major = segment(0)
       @minor = segment(1)
       @patch = segment(2)
+      @hotfix = segment(3)
     end
 
-    attr_reader :major, :minor, :patch, :version
+    attr_reader :major, :minor, :patch, :hotfix, :version
 
     def major_difference?(other)
       (major != other.major)
@@ -32,6 +33,13 @@ module Unwrappr
         (patch != other.patch)
     end
 
+    def hotfix_difference?(other)
+      (major == other.major) &&
+        (minor == other.minor) &&
+        (patch == other.patch) &&
+        (hotfix != other.hotfix)
+    end
+
     def <=>(other)
       @version <=> other.version
     end

data/lib/unwrappr/researchers/github_repo.rb

@@ -7,7 +7,10 @@ module Unwrappr
     # Implements the `gem_researcher` interface required by the
     # LockFileAnnotator.
     class GithubRepo
-      GITHUB_URI_PATTERN = %r{^https?://github.com/(?<repo>[^/]+/[^/]+)}i.freeze
+      GITHUB_URI_PATTERN = %r{^https?://
+                              github.com/
+                              (?<repo>[^/]+/[[:alnum:]_.-]+)
+                              }ix.freeze
 
       def research(_gem_change, gem_change_info)
         repo = match_repo(gem_change_info, :source_code_uri) ||

data/lib/unwrappr/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Unwrappr
-  VERSION = '0.3.5'
+  VERSION = '0.4.0'
 end

data/lib/unwrappr/writers/version_change.rb

@@ -27,18 +27,28 @@ module Unwrappr
       private
 
       def_delegators(:@gem_change,
-                     :added?, :removed?, :major?, :minor?, :patch?,
+                     :added?, :removed?, :major?, :minor?, :patch?, :hotfix?,
                      :upgrade?, :downgrade?, :base_version, :head_version)
 
       def change_description
-        if added? then 'Gem added :snowman:'
-        elsif removed? then 'Gem removed :fire:'
-        elsif major?
+        if added?
+          'Gem added :snowman:'
+        elsif removed?
+          'Gem removed :fire:'
+        else
+          version_description
+        end
+      end
+
+      def version_description
+        if major?
           "**Major** version #{grade}:exclamation: #{version_diff}"
         elsif minor?
           "**Minor** version #{grade}:large_orange_diamond: #{version_diff}"
         elsif patch?
           "**Patch** version #{grade}:small_blue_diamond: #{version_diff}"
+        elsif hotfix?
+          "**Hotfix** version #{grade}:small_red_triangle: #{version_diff}"
         end
       end
 

data/unwrappr.gemspec

@@ -22,7 +22,7 @@ Gem::Specification.new do |spec| # rubocop:disable Metrics/BlockLength:
   spec.description = 'bundle update PRs: Automated. Annotated.'
   spec.homepage = 'http://www.unwrappr.com.org'
   spec.license = 'MIT'
-  spec.required_ruby_version = '~> 2.3'
+  spec.required_ruby_version = '~> 2.5'
   spec.required_rubygems_version = '>= 2.7'
 
   spec.files = `git ls-files -z`.split("\x0").reject do |f|
@@ -33,7 +33,7 @@ Gem::Specification.new do |spec| # rubocop:disable Metrics/BlockLength:
   spec.require_paths = ['lib']
 
   spec.add_dependency 'bundler', '< 3'
-  spec.add_dependency 'bundler-audit', '~> 0'
+  spec.add_dependency 'bundler-audit', '>= 0.6.0'
   spec.add_dependency 'clamp', '~> 1'
   spec.add_dependency 'faraday', '~> 0'
   spec.add_dependency 'git', '~> 1'
@@ -43,7 +43,7 @@ Gem::Specification.new do |spec| # rubocop:disable Metrics/BlockLength:
   spec.add_development_dependency 'guard', '~> 2'
   spec.add_development_dependency 'guard-rspec', '~> 4'
   spec.add_development_dependency 'pry', '~> 0'
-  spec.add_development_dependency 'rake', '~> 10.0'
+  spec.add_development_dependency 'rake', '>= 12.3.3'
   spec.add_development_dependency 'rspec', '~> 3.0'
   spec.add_development_dependency 'rspec-its', '~> 1'
   spec.add_development_dependency 'rubocop', '>= 0.49.0'

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: unwrappr
 version: !ruby/object:Gem::Version
-  version: 0.3.5
+  version: 0.4.0
 platform: ruby
 authors:
 - Emilyn Escabarte
@@ -12,7 +12,7 @@ authors:
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-11-28 00:00:00.000000000 Z
+date: 2020-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -32,16 +32,16 @@ dependencies:
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.6.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 0.6.0
 - !ruby/object:Gem::Dependency
   name: clamp
   requirement: !ruby/object:Gem::Requirement
@@ -158,16 +158,16 @@ dependencies:
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: 12.3.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: 12.3.3
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -284,14 +284,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - "~>"
     - !ruby/object:Gem::Version
-      version: '2.3'
+      version: '2.5'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '2.7'
 requirements: []
-rubygems_version: 3.0.6
+rubygems_version: 3.0.3
 signing_key: 
 specification_version: 4
 summary: A tool to unwrap your gems and see what's changed easily