Use native JSON in Elixir

This also lets us support `depth` for git repositories.

hex/Dockerfile

@@ -11,16 +11,16 @@ RUN apt-get update \
 #  * https://github.com/dependabot/dependabot-core/pull/7865
 #  * https://erlangforums.com/t/erlang-solutions-apt-package-for-otp-25/1552/1
 #  * https://erlangforums.com/t/the-eef-is-looking-for-volunteers-to-take-over-esls-build-packages/2238/1
-ARG ERLANG_MAJOR_VERSION=24
+ARG ERLANG_MAJOR_VERSION=27
 ARG ERLANG_VERSION=1:${ERLANG_MAJOR_VERSION}.2.1+dfsg-1ubuntu0.1
 RUN apt-get update \
   && apt-get install -y --no-install-recommends \
     erlang=${ERLANG_VERSION}
 
 # Install Elixir
 # https://github.com/elixir-lang/elixir/releases
-ARG ELIXIR_VERSION=v1.14.4
-ARG ELIXIR_CHECKSUM=b5705275d62ce3dae172d25d7ea567fffdabb45458abeb29c0189923b907367c
+ARG ELIXIR_VERSION=v1.18.1
+ARG ELIXIR_CHECKSUM=558113a9c03e891616982e802d76ebb75ff53a372aee8260a8e0ba746800d0ff
 RUN curl -sSLfO https://github.com/elixir-lang/elixir/releases/download/${ELIXIR_VERSION}/elixir-otp-${ERLANG_MAJOR_VERSION}.zip \
   && echo "$ELIXIR_CHECKSUM  elixir-otp-${ERLANG_MAJOR_VERSION}.zip" | sha256sum -c - \
   && unzip -d /usr/local/elixir -x elixir-otp-${ERLANG_MAJOR_VERSION}.zip \
@@ -32,7 +32,7 @@ USER dependabot
 COPY --chown=dependabot:dependabot hex/helpers /opt/hex/helpers
 ENV MIX_HOME="/opt/hex/mix"
 # https://github.com/hexpm/hex/releases
-ENV HEX_VERSION="2.0.6"
+ENV HEX_VERSION="2.1.1"
 RUN bash /opt/hex/helpers/build
 
 COPY --chown=dependabot:dependabot hex $DEPENDABOT_HOME/hex

hex/helpers/build

@@ -26,7 +26,3 @@ esac
 
 cp $CP_OPTS "$helpers_dir/lib" "$install_dir"
 cp $CP_OPTS "$helpers_dir/mix.exs" "$install_dir"
-cp $CP_OPTS "$helpers_dir/mix.lock" "$install_dir"
-
-cd "$install_dir"
-mix deps.get

hex/helpers/lib/run.exs

@@ -1,7 +1,7 @@
 defmodule DependencyHelper do
   def main() do
     IO.read(:stdio, :all)
-    |> Jason.decode!()
+    |> JSON.decode!()
     |> run()
     |> case do
       {output, 0} ->
@@ -33,7 +33,7 @@ defmodule DependencyHelper do
 
   defp encode_and_write(content) do
     content
-    |> Jason.encode!()
+    |> JSON.encode!
     |> IO.write()
   end
 

hex/helpers/mix.exs

@@ -4,7 +4,7 @@ defmodule DependabotCore.Mixfile do
   def project do
     [app: :dependabot_core,
      version: "0.1.0",
-     elixir: "~> 1.5",
+     elixir: "~> 1.18",
      start_permanent: Mix.env == :prod,
      lockfile: System.get_env("MIX_LOCK") || "mix.lock",
      deps_path: System.get_env("MIX_DEPS") || "deps",
@@ -14,8 +14,4 @@ defmodule DependabotCore.Mixfile do
   def application do
     [extra_applications: [:logger]]
   end
-
-  defp deps() do
-    [{:jason, "~> 1.0"}]
-  end
 end