Fix change_log to deal with {branch, Branch} git dep syntax
Deriving dep info from fetched artifact instead of rebar.config.
Merge remote-tracking branch 'oferrigni/6_deps_discovery'

When determining the locked set of dependencies, take both the SHA and
git URL from the directories on disk in the deps dir. Previously, the
SHA was taken from the on disk directory, but the URL was determined
by the rebar.config files encountered leading to inconsistencies.
Fix list_deps_versions to handle dep tuples with URLs
Respect order of rebar.config files when generating lock file

Before this patch, lock-deps would generate an alphabetized listing
of dependencies in the lock file. This was a side-effect of using
filelib:wildcard to list the entries in the dep dir.

With this patch, the relative order of dependencies as they appear in
the various rebar.config files is (mostly) preserved when generating
the lock file via lock-deps. When a dep is shared, only the first
occurance is kept. As a result, deps that are shared will be listed
out of order from the point of view of some rebar.config files.

Preserving the ordering in the lock file is important when making use
of parse transforms. For example, if a project uses lager's parse
transform it must be built before projects making use of the
transform.

Since generated lock files change as a result of this patch, the major
version of the plugin has been increased. This is a conservative
approach. It should be the case that the reordering is back
compatible.

Thanks to Oliver Ferrigni for identifying this issue, providing an
initial fix prototype, and reviewing this work.
Merge branch 'keep-dep-order'
Respect rebar.config.script by using  rebar_config:consult_file/1

Previously when reading deps, the plugin naively read the rebar.config
file using file:consult/1. However, projects can add or remove deps
via a rebar.config.script file. The gproc project uses this mechanism
to provide certains deps only if available.

With this patch, rebar_config:consult_file/1 is used to obtain the
deps data for each project. This will run the script file if present
and give the same result as rebar will see when running `rebar
get-deps`.

Also adding a safety check for missing dependencies to crash with some
useful debug info if this occurs.
Merge pull request #10 from seth/sf/rebar.config.script

Respect rebar.config.script by using  rebar_config:consult_file/1
Handle missing dependecy tag

The tag for a dependecy is optional. Handle the case when it is missing.
Merge pull request #11 from cristianberneanu/master

Handle missing dependecy tag
Add initial support for version bump in relx.config
version bump