Update bin/bundle-drift to catch dependency requirement diffs (#2821)

* Detect dependency requirement drift in bin/bundle-drift

The checker only compared resolved spec versions between Gemfile.lock
and Gemfile.saas.lock. When dependabot bumped solid_queue from ~> 1.3
to ~> 1.4, the forward command patched the resolved version but left
the stale dependency requirement. The checker didn't catch it because
both lockfiles resolved to the same version.

Now find_drift also compares dependency requirements for shared direct
dependencies, and forward patches the DEPENDENCIES section too.

Includes built-in self-test (bin/bundle-drift self-test).

* Sync solid_queue dependency requirement in Gemfile.saas.lock

Updates ~> 1.3 to ~> 1.4 to match Gemfile.lock.
This commit is contained in:
Mike Dalessio
2026-04-09 12:19:52 -04:00
committed by GitHub
parent 659ec1e6e6
commit 759e6079e8
2 changed files with 149 additions and 21 deletions
+1 -1
View File
@@ -745,7 +745,7 @@ DEPENDENCIES
sentry-ruby
solid_cable (>= 3.0)
solid_cache (~> 1.0)
solid_queue (~> 1.3)
solid_queue (~> 1.4)
sqlite3 (>= 2.0)
stackprof
stimulus-rails