Dep: Ignore indirect dependencies in latest_resolvable_version_with_n…

…o_unlock

dep/lib/dependabot/dep/update_checker.rb

@@ -37,6 +37,9 @@ def latest_resolvable_version
       end
 
       def latest_resolvable_version_with_no_unlock
+        # We don't yet support updating indirect dependencies for dep
+        return dependency.version unless dependency.top_level?
+
         @latest_resolvable_version_with_no_unlock ||=
           if git_dependency?
             latest_resolvable_commit_with_unchanged_git_source

dep/spec/dependabot/dep/update_checker_spec.rb

@@ -238,6 +238,11 @@
       expect(latest_resolvable_version).to eq(Gem::Version.new("3.2.0"))
     end
 
+    context "with an indirect dependency" do
+      let(:requirements) { [] }
+      it { is_expected.to eq(dependency.version) }
+    end
+
     context "with a manifest file that needs unlocking" do
       let(:manifest_fixture_name) { "bare_version.toml" }
       let(:lockfile_fixture_name) { "bare_version.lock" }
@@ -383,6 +388,11 @@
         to eq(Gem::Version.new("3.2.0"))
     end
 
+    context "with an indirect dependency" do
+      let(:requirements) { [] }
+      it { is_expected.to eq(dependency.version) }
+    end
+
     context "with a manifest file that needs unlocking" do
       let(:manifest_fixture_name) { "bare_version.toml" }
       let(:lockfile_fixture_name) { "bare_version.lock" }