-
Notifications
You must be signed in to change notification settings - Fork 1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bundler 2: [Prerelease] Implement v2 native functions for LatestVersionFinder #3327
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sweet! Do all specs pass with v2? I reckon we should get this in so I can remove the pending
specs in https://github.com/dependabot/dependabot-core/pull/3319/files
Thoughts on doing a follow up PR to move to project based fixtures?
@@ -0,0 +1,86 @@ | |||
module Functions |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Could also copy these native helper specs over for v2 https://github.com/dependabot/dependabot-core/blob/main/bundler/helpers/v1/spec/functions/dependency_source_spec.rb
@feelepxyz Yeah, that sounds good, I'll add the native helper specs I missed and make sure those pass, then we should merge I think |
03d481a
to
07786ca
Compare
30b73e4
to
9351019
Compare
bundler/spec/dependabot/bundler/update_checker/latest_version_finder_spec.rb
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍
The NPM test failures do seem to be local to this branch, I suspect the change to Dependabot::Error might be involved. Update: Confirmed, looking at reverting that change and making an alternative fix for basic auth. |
7d7bdfc
to
c27be08
Compare
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` comment, but that accidentally got overlooked. So this removes them.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` comment, but that accidentally got overlooked. So this removes them.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` comment, but that accidentally got overlooked. So this removes them.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` comment, but that accidentally got overlooked. So this removes them, and then fixes the failures. One test was straightforward change from method to hash value. But the other was a logical change from expecting a raised error to expecting no error. However, this has been true since this code was originally committed (once #3327 was merged to make the test work): https://github.com/dependabot/dependabot-core/pull/3319/files#r600526250 I considered removing it, but thought it didn't hurt to continue to keep it in to ensure no regressions... it is a `bundler 2` test, so still valid even after we drop support for `bundler 1`.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` comment, but that accidentally got overlooked. So this removes them, and then fixes the failures. One test was straightforward change from method to hash value. But the other was a logical change from expecting a raised error to expecting no error. However, this has been true since this code was originally committed (once #3327 was merged to make the test work): https://github.com/dependabot/dependabot-core/pull/3319/files#r600526250 I considered removing it, but thought it didn't hurt to continue to keep it in to ensure no regressions... it is a `bundler 2` test, so still valid even after we drop support for `bundler 1`.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` marker, but that accidentally got overlooked. So this removes the `pending` marker, and then fixes the failures: 1. The first was a straightforward change from method to hash value. 2. The second wasn't raising the expected error... However, this has been true since [this code was originally committed](https://github.com/dependabot/dependabot-core/pull/3319/files#r600526250) (once #3327 was merged to make the test work). So I deleted the test as it added no value.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` marker, but that accidentally got overlooked. So this removes the `pending` marker, and then fixes the failures: 1. The first was a straightforward change from method to hash value. 2. The second wasn't raising the expected error... However, this has been true since [this code was originally committed](https://github.com/dependabot/dependabot-core/pull/3319/files#r600526250) (once #3327 was merged to make the test work). So I deleted the test as it added no value.
Per the discussion in #3319 (comment), these only temporarily needed to be marked `pending` until #3327 was merged. From the first thread it looks like the intent was to remove the `pending` marker, but that accidentally got overlooked. So this removes the `pending` marker, and then fixes the failures: 1. The first was a straightforward change from method to hash value. 2. The second wasn't raising the expected error... However, this has been true since [this code was originally committed](https://github.com/dependabot/dependabot-core/pull/3319/files#r600526250) (once #3327 was merged to make the test work). So I deleted the test as it added no value.
Adds the DependencySource class back into the v2 helpers without any modifications, tests that it works with bundler v2.
Notes
This may be better merging into #3319 since it is a downstream component
TODOs
Update specs to use project-based fixtures.As per comment below, we'll follow up with those separately to unblock #3319