Class: Dependabot::Maven::UpdateChecker::VersionFinder

Inherits:
Object
  • Object
show all
Defined in:
lib/dependabot/maven/update_checker/version_finder.rb

Constant Summary collapse

TYPE_SUFFICES = 
%w(jre android java).freeze

Instance Method Summary collapse

Constructor Details

#initialize(dependency:, dependency_files:, credentials:, ignored_versions:, security_advisories:) ⇒ VersionFinder

Returns a new instance of VersionFinder.



16
17
18
19
20
21
22
23
24
 
# File 'lib/dependabot/maven/update_checker/version_finder.rb', line 16

def initialize(dependency:, dependency_files:, credentials:,
               ignored_versions:, security_advisories:)
  @dependency          = dependency
  @dependency_files    = dependency_files
  @credentials         = credentials
  @ignored_versions    = ignored_versions
  @security_advisories = security_advisories
  @forbidden_urls      = []
end

Instance Method Details

#latest_version_details ⇒ Object 



26
27
28
29
30
31
32
33
34
35
 
# File 'lib/dependabot/maven/update_checker/version_finder.rb', line 26

def latest_version_details
  possible_versions = versions

  possible_versions = filter_prereleases(possible_versions)
  possible_versions = filter_date_based_versions(possible_versions)
  possible_versions = filter_version_types(possible_versions)
  possible_versions = filter_ignored_versions(possible_versions)

  possible_versions.reverse.find { |v| released?(v.fetch(:version)) }
end

#lowest_security_fix_version_details ⇒ Object 



37
38
39
40
41
42
43
44
45
46
47
48
 
# File 'lib/dependabot/maven/update_checker/version_finder.rb', line 37

def lowest_security_fix_version_details
  possible_versions = versions

  possible_versions = filter_prereleases(possible_versions)
  possible_versions = filter_date_based_versions(possible_versions)
  possible_versions = filter_version_types(possible_versions)
  possible_versions = filter_ignored_versions(possible_versions)
  possible_versions = filter_vulnerable_versions(possible_versions)
  possible_versions = filter_lower_versions(possible_versions)

  possible_versions.find { |v| released?(v.fetch(:version)) }
end

#versions ⇒ Object 



50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'lib/dependabot/maven/update_checker/version_finder.rb', line 50

def versions
  version_details =
    repositories.map do |repository_details|
      url = repository_details.fetch("url")
      dependency_metadata(repository_details).
        css("versions > version").
        select { |node| version_class.correct?(node.content) }.
        map { |node| version_class.new(node.content) }.
        map { |version| { version: version, source_url: url } }
    end.flatten

  if version_details.none? && forbidden_urls.any?
    raise PrivateSourceAuthenticationFailure, forbidden_urls.first
  end

  version_details.sort_by { |details| details.fetch(:version) }
end