Support all version components supported by versionomy gem

Add support for all version components supported by the versionomy gem:

[major].[minor].[tiny].[tiny2]-[patchlevel]

Author: dblandin

lib/cc/engine/bundler_audit/unpatched_gem_remediation.rb

@@ -4,7 +4,8 @@ module BundlerAudit
       class UnpatchedGemRemediation
         MAJOR_UPGRADE_POINTS = 50_000_000
         MINOR_UPGRADE_POINTS = 5_000_000
-        PATCH_UPGRADE_POINTS = 500_000
+        TINY_UPGRADE_POINTS = 500_000
+        MINIMUM_UPGRADE_POINTS = 50_000
         UNPATCHED_VERSION_POINTS = 500_000_000
 
         def initialize(gem_version, patched_versions)
@@ -31,7 +32,9 @@ def calculate_points(upgrade_version)
           when current_version.minor != upgrade_version.minor
             MINOR_UPGRADE_POINTS
           when current_version.tiny != upgrade_version.tiny
-            PATCH_UPGRADE_POINTS
+            TINY_UPGRADE_POINTS
+          else
+            MINIMUM_UPGRADE_POINTS
           end
         end
 

spec/cc/engine/bundler_audit/remediation_spec.rb

@@ -15,10 +15,28 @@ module CC::Engine::BundlerAudit
         expect(remediation.points).to eq(UnpatchedGemRemediation::MINOR_UPGRADE_POINTS)
       end
 
-      it "returns patch upgrade remediation points when an upgrade requies a patch version bump" do
-        remediation = UnpatchedGemRemediation.new("1.0.0", %w[1.0.3 2.0.3])
+      it "returns tiny upgrade remediation points when an upgrade requies a tiny version bump" do
+        remediation = UnpatchedGemRemediation.new("1.0", %w[1.0.2])
 
-        expect(remediation.points).to eq(UnpatchedGemRemediation::PATCH_UPGRADE_POINTS)
+        expect(remediation.points).to eq(UnpatchedGemRemediation::TINY_UPGRADE_POINTS)
+      end
+
+      it "returns minimum upgrade remediation points when an upgrade requies a <= tiny2 version bump" do
+        remediation = UnpatchedGemRemediation.new("1.0", %w[1.0.0.2-2])
+
+        expect(remediation.points).to eq(UnpatchedGemRemediation::MINIMUM_UPGRADE_POINTS)
+
+        remediation = UnpatchedGemRemediation.new("1.0", %w[1.0.0.2-2])
+
+        expect(remediation.points).to eq(UnpatchedGemRemediation::MINIMUM_UPGRADE_POINTS)
+
+        remediation = UnpatchedGemRemediation.new("1.0", %w[1.0a2])
+
+        expect(remediation.points).to eq(UnpatchedGemRemediation::MINIMUM_UPGRADE_POINTS)
+
+        remediation = UnpatchedGemRemediation.new("1.0", %w[1.0b2])
+
+        expect(remediation.points).to eq(UnpatchedGemRemediation::MINIMUM_UPGRADE_POINTS)
       end
 
       it "returns unpatched version remediation points when an upgrade is not possible" do