Class: Dependabot::Bundler::UpdateChecker

Inherits:
UpdateCheckers::Base
  • Object
show all
Defined in:
lib/dependabot/bundler/update_checker.rb,
lib/dependabot/bundler/update_checker/file_preparer.rb,
lib/dependabot/bundler/update_checker/force_updater.rb,
lib/dependabot/bundler/update_checker/version_resolver.rb,
lib/dependabot/bundler/update_checker/requirements_updater.rb,
lib/dependabot/bundler/update_checker/latest_version_finder.rb,
lib/dependabot/bundler/update_checker/shared_bundler_helpers.rb,
lib/dependabot/bundler/update_checker/conflicting_dependency_resolver.rb,
lib/dependabot/bundler/update_checker/latest_version_finder/dependency_source.rb

Defined Under Namespace

Modules: SharedBundlerHelpers Classes: ConflictingDependencyResolver, FilePreparer, ForceUpdater, LatestVersionFinder, RequirementsUpdater, VersionResolver

Instance Method Summary collapse

Instance Method Details

#conflicting_dependencies ⇒ Object 



109
110
111
112
113
114
115
116
117
118
 
# File 'lib/dependabot/bundler/update_checker.rb', line 109

def conflicting_dependencies
  ConflictingDependencyResolver.new(
    dependency_files: dependency_files,
    repo_contents_path: repo_contents_path,
    credentials: credentials
  ).conflicting_dependencies(
    dependency: dependency,
    target_version: lowest_security_fix_version
  )
end

#latest_resolvable_version ⇒ Object 



24
25
26
27
28
 
# File 'lib/dependabot/bundler/update_checker.rb', line 24

def latest_resolvable_version
  return latest_resolvable_version_for_git_dependency if git_dependency?

  latest_resolvable_version_details&.fetch(:version)
end

#latest_resolvable_version_with_no_unlock ⇒ Object 



47
48
49
50
51
52
53
54
55
56
57
58
59
60
 
# File 'lib/dependabot/bundler/update_checker.rb', line 47

def latest_resolvable_version_with_no_unlock
  current_ver = dependency.version
  return current_ver if git_dependency? && git_commit_checker.pinned?

  @latest_resolvable_version_detail_with_no_unlock ||=
    version_resolver(remove_git_source: false, unlock_requirement: false).
    latest_resolvable_version_details

  if git_dependency?
    @latest_resolvable_version_detail_with_no_unlock&.fetch(:commit_sha)
  else
    @latest_resolvable_version_detail_with_no_unlock&.fetch(:version)
  end
end

#latest_version ⇒ Object 



18
19
20
21
22
 
# File 'lib/dependabot/bundler/update_checker.rb', line 18

def latest_version
  return latest_version_for_git_dependency if git_dependency?

  latest_version_details&.fetch(:version)
end

#lowest_resolvable_security_fix_version ⇒ Object 



35
36
37
38
39
40
41
42
43
44
45
 
# File 'lib/dependabot/bundler/update_checker.rb', line 35

def lowest_resolvable_security_fix_version
  raise "Dependency not vulnerable!" unless vulnerable?
  return latest_resolvable_version if git_dependency?

  lowest_fix =
    latest_version_finder(remove_git_source: false).
    lowest_security_fix_version
  return unless lowest_fix

  resolvable?(lowest_fix) ? lowest_fix : latest_resolvable_version
end

#lowest_security_fix_version ⇒ Object 



30
31
32
33
 
# File 'lib/dependabot/bundler/update_checker.rb', line 30

def lowest_security_fix_version
  latest_version_finder(remove_git_source: false).
    lowest_security_fix_version
end

#requirements_unlocked_or_can_be? ⇒ Boolean

Returns:

  • (Boolean) 


86
87
88
89
90
91
92
93
94
95
96
97
98
99
 
# File 'lib/dependabot/bundler/update_checker.rb', line 86

def requirements_unlocked_or_can_be?
  dependency.requirements.
    select { |r| requirement_class.new(r[:requirement]).specific? }.
    all? do |req|
      file = dependency_files.find { |f| f.name == req.fetch(:file) }
      updated = FileUpdater::RequirementReplacer.new(
        dependency: dependency,
        file_type: file.name.end_with?("gemspec") ? :gemspec : :gemfile,
        updated_requirement: "whatever"
      ).rewrite(file.content)

      updated != file.content
    end
end

#requirements_update_strategy ⇒ Object 



101
102
103
104
105
106
107
 
# File 'lib/dependabot/bundler/update_checker.rb', line 101

def requirements_update_strategy
  # If passed in as an option (in the base class) honour that option
  return @requirements_update_strategy.to_sym if @requirements_update_strategy

  # Otherwise, widen ranges for libraries and bump versions for apps
  dependency.version.nil? ? :bump_versions_if_necessary : :bump_versions
end

#updated_requirements ⇒ Object 



62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
 
# File 'lib/dependabot/bundler/update_checker.rb', line 62

def updated_requirements
  latest_version_for_req_updater =
    if switching_source_from_git_to_rubygems?
      git_commit_checker.local_tag_for_latest_version.fetch(:version).to_s
    else
      latest_version_details&.fetch(:version)&.to_s
    end

  latest_resolvable_version_for_req_updater =
    if switching_source_from_git_to_rubygems?
      latest_version_for_req_updater
    else
      preferred_resolvable_version_details&.fetch(:version)&.to_s
    end

  RequirementsUpdater.new(
    requirements: dependency.requirements,
    update_strategy: requirements_update_strategy,
    updated_source: updated_source,
    latest_version: latest_version_for_req_updater,
    latest_resolvable_version: latest_resolvable_version_for_req_updater
  ).updated_requirements
end