chore: bump hsec-tools 0.3.0.0

Author: blackheaven

code/hsec-tools/CHANGELOG.md

@@ -1,3 +1,8 @@
+## 0.3.0.0
+
+* Move `isVersionAffectedBy` and `isVersionRangeAffectedBy` to `Security.Advisories.Core` (`hsec-core`)
+* Add support for GHC component in `query is-affected`
+
 ## 0.2.0.2
 
 * Update `tasty` dependency bounds

code/hsec-tools/hsec-tools.cabal

@@ -1,6 +1,6 @@
 cabal-version:      3.0
 name:               hsec-tools
-version:            0.2.0.2
+version:            0.3.0.0
 
 -- A short (one-line) description of the package.
 synopsis:
@@ -65,7 +65,7 @@ library
     , directory             <2
     , extra                 >=1.7      && <1.9
     , filepath              >=1.4      && <1.6
-    , hsec-core             ^>= 0.2
+    , hsec-core             >= 0.2.1.0 && <0.3
     , file-embed            >=0.0.13.0 && <0.0.17
     , lucid                 >=2.9.0    && < 3
     , mtl                   >=2.2      && <2.4
@@ -106,17 +106,17 @@ executable hsec-tools
   -- LANGUAGE extensions used by modules in this package.
   -- other-extensions:
   build-depends:
-    , aeson                 >=2.0.1.0 && <3
-    , base                  >=4.14    && <5
-    , bytestring            >=0.10    && <0.13
-    , Cabal-syntax          >=3.8.1.0 && <3.15
-    , filepath              >=1.4     && <1.6
-    , hsec-core             ^>= 0.2
+    , aeson                 >=2.0.1.0  && <3
+    , base                  >=4.14     && <5
+    , bytestring            >=0.10     && <0.13
+    , Cabal-syntax          >=3.8.1.0  && <3.15
+    , filepath              >=1.4      && <1.6
+    , hsec-core             >= 0.2.1.0 && <0.3
     , hsec-tools
-    , optparse-applicative  >=0.17    && <0.19
-    , text                  >=1.2     && <3
+    , optparse-applicative  >=0.17     && <0.19
+    , text                  >=1.2      && <3
     , transformers
-    , validation-selective  >=0.1     && <1
+    , validation-selective  >=0.1      && <1
 
   hs-source-dirs:   app
   default-language: Haskell2010

code/hsec-tools/src/Security/Advisories/Queries.hs

@@ -5,7 +5,6 @@ module Security.Advisories.Queries
 where
 
 import Control.Monad.IO.Class (MonadIO)
-import Data.Text (Text)
 import Distribution.Types.Version (Version)
 import Distribution.Types.VersionRange (VersionRange)
 import Validation (Validation(..))
@@ -16,22 +15,22 @@ import Security.Advisories.Parse
 
 type QueryResult = Validation [(FilePath, ParseAdvisoryError)] [Advisory]
 
--- | List the advisories matching a package name and a version
+-- | List the advisories matching a component and a version
 listVersionAffectedBy
   :: MonadIO m
-  => FilePath -> Text -> Version -> m QueryResult
+  => FilePath -> ComponentIdentifier -> Version -> m QueryResult
 listVersionAffectedBy = listAffectedByHelper isVersionAffectedBy
 
--- | List the advisories matching a package name and a version range
+-- | List the advisories matching a component and a version range
 listVersionRangeAffectedBy
   :: (MonadIO m)
-  => FilePath -> Text -> VersionRange -> m QueryResult
+  => FilePath -> ComponentIdentifier -> VersionRange -> m QueryResult
 listVersionRangeAffectedBy = listAffectedByHelper isVersionRangeAffectedBy
 
 -- | Helper function for 'listVersionAffectedBy' and 'listVersionRangeAffectedBy'
 listAffectedByHelper
   :: (MonadIO m)
-  => (ComponentIdentifier -> a -> Advisory -> Bool) -> FilePath -> Text -> a -> m QueryResult
-listAffectedByHelper checkAffectedBy root queryPackageName queryVersionish =
-  fmap (filter (checkAffectedBy (Hackage queryPackageName) queryVersionish)) <$>
+  => (ComponentIdentifier -> a -> Advisory -> Bool) -> FilePath -> ComponentIdentifier -> a -> m QueryResult
+listAffectedByHelper checkAffectedBy root queryComponent queryVersionish =
+  fmap (filter (checkAffectedBy queryComponent queryVersionish)) <$>
     listAdvisories root