dependabot-bazel 0.385.0 → 0.386.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1289569ff9e104c243623c3b8a1a88d42ef388e54c84784496202cb04f6838b6
-  data.tar.gz: aa3e5a4d9693afb18c3128d80c0d452352d9857ed75a23511beb7b5fdc3ff201
+  metadata.gz: a0a8078f7e729cd906918690029b4f4c31d79f449c241bbe76ca5c5afba20c3a
+  data.tar.gz: f423579b83085817c881ebcafce28268225a033cf478941ea60047a71fcc4144
 SHA512:
-  metadata.gz: 7b80e1626483dc98035de57725421ba5040b18e66148ccd434ebaee4ec59fd64a00efba8101145c86174f2e3566682c39eec921d0ac71f22b62ed933839b53fb
-  data.tar.gz: f91bd0b1fed7a75d6a4ad75795a93d9d2b88d573edc1d6097cf61b779187a2ab21d5b6900af3ff2964e444446e1525b3c19c1579bcf0a2272cf4dfef192bb934
+  metadata.gz: 0513d86749ace9341bd0fd4974df6bb577bb6ac731c225cf7e08bbc93c8732edde717e3afc6b6ed99c04e5409e5109f56086097febf1985d744e91b04659e566
+  data.tar.gz: 2c1b97d9b0baa501c3eeeb78dd56ec8ae2e8dc9315076e74e65037ea7662239553c816245ba73c3fd1923d53c74191eb13b6ae6e29614030469cbfeac8cfb711

data/lib/dependabot/bazel/file_fetcher.rb

@@ -46,7 +46,7 @@ module Dependabot
         raise Dependabot::DependencyFileNotFound.new(nil, self.class.required_files_message)
       end
 
-      sig { override.returns(T.nilable(T::Hash[Symbol, T.untyped])) }
+      sig { override.returns(T.nilable(T::Hash[Symbol, T.anything])) }
       def ecosystem_versions
         bazel_version = "unknown"
 
@@ -75,14 +75,14 @@ module Dependabot
         files = T.let([], T::Array[DependencyFile])
 
         module_file_items.each do |item|
-          file = fetch_file_if_present(item.name)
+          file = fetch_file_if_present(T.must(item.name))
           files << file if file
         end
 
         files
       end
 
-      sig { returns(T::Array[T.untyped]) }
+      sig { returns(T::Array[Dependabot::FileFetchers::RepositoryContent]) }
       def module_file_items
         repo_contents(raise_errors: false).select { |f| f.type == "file" && f.name.end_with?(MODULE_FILE) }
       end
@@ -140,8 +140,8 @@ module Dependabot
 
         all_module_files.each do |module_file|
           module_refs = fetch_module_referenced_files(module_file, directories_with_files)
-          files += module_refs[:files]
-          module_refs[:local_override_dirs].each { |dir| local_override_directories.add(dir) }
+          files += T.cast(module_refs[:files], T::Array[DependencyFile])
+          T.cast(module_refs[:local_override_dirs], T::Array[String]).each { |dir| local_override_directories.add(dir) }
         end
 
         tree_fetcher = DirectoryTreeFetcher.new(fetcher: self)
@@ -156,7 +156,7 @@ module Dependabot
         params(
           module_file: DependencyFile,
           directories_with_files: T::Set[String]
-        ).returns(T::Hash[Symbol, T.untyped])
+        ).returns(T::Hash[Symbol, T.anything])
       end
       def fetch_module_referenced_files(module_file, directories_with_files)
         files = T.let([], T::Array[DependencyFile])

data/lib/dependabot/bazel/file_parser/starlark_parser.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -12,8 +12,8 @@ module Dependabot
 
         class FunctionCall < T::Struct
           const :name, String
-          const :arguments, T::Hash[String, T.untyped]
-          const :positional_arguments, T::Array[T.untyped]
+          const :arguments, T::Hash[String, Object]
+          const :positional_arguments, T::Array[Object]
           const :line, Integer
         end
 
@@ -128,10 +128,10 @@ module Dependabot
           identifier.empty? ? nil : identifier
         end
 
-        sig { returns([T::Hash[String, T.untyped], T::Array[T.untyped]]) }
+        sig { returns([T::Hash[String, Object], T::Array[Object]]) }
         def parse_function_arguments
-          keyword_arguments = T.let({}, T::Hash[String, T.untyped])
-          positional_arguments = T.let([], T::Array[T.untyped])
+          keyword_arguments = T.let({}, T::Hash[String, Object])
+          positional_arguments = T.let([], T::Array[Object])
 
           skip_whitespace_and_comments
 
@@ -161,7 +161,7 @@ module Dependabot
           [keyword_arguments, positional_arguments]
         end
 
-        sig { returns(T.nilable(T::Hash[String, T.untyped])) }
+        sig { returns(T.nilable(T::Hash[String, Object])) }
         def parse_keyword_argument
           start_pos = @position
           start_line = @line
@@ -186,7 +186,7 @@ module Dependabot
           { param_name => value }
         end
 
-        sig { returns(T.untyped) }
+        sig { returns(T.nilable(Object)) }
         def parse_value
           skip_whitespace_and_comments
 
@@ -256,7 +256,7 @@ module Dependabot
           end
         end
 
-        sig { returns(T.untyped) }
+        sig { returns(T.nilable(T.any(Integer, Float))) }
         def parse_number
           number_str = T.let("", String)
 
@@ -271,13 +271,13 @@ module Dependabot
           number_str.include?(".") ? number_str.to_f : number_str.to_i
         end
 
-        sig { returns(T.nilable(T::Array[T.untyped])) }
+        sig { returns(T.nilable(T::Array[Object])) }
         def parse_array
           return nil unless current_char == "["
 
           move_to_next_char
 
-          array_items = T.let([], T::Array[T.untyped])
+          array_items = T.let([], T::Array[Object])
 
           skip_whitespace_and_comments
 

data/lib/dependabot/bazel/metadata_finder.rb

@@ -57,7 +57,7 @@ module Dependabot
         return nil unless version
 
         source_info = registry_client.get_source(dependency.name, version)
-        url = source_info&.dig("url")
+        url = T.cast(source_info&.dig("url"), T.nilable(String))
         return nil unless url
 
         source_from_url(url)

data/lib/dependabot/bazel/update_checker/registry_client.rb

@@ -49,7 +49,7 @@ module Dependabot
           versions.max_by { |v| version_sort_key(v) }
         end
 
-        sig { params(module_name: String).returns(T.nilable(T::Hash[String, T.untyped])) }
+        sig { params(module_name: String).returns(T.nilable(T::Hash[String, Object])) }
         def get_metadata(module_name)
           versions = all_module_versions(module_name)
           return nil if versions.empty?
@@ -61,7 +61,7 @@ module Dependabot
           }
         end
 
-        sig { params(module_name: String, version: String).returns(T.nilable(T::Hash[String, T.untyped])) }
+        sig { params(module_name: String, version: String).returns(T.nilable(T::Hash[String, Object])) }
         def get_source(module_name, version)
           file_path = "modules/#{module_name}/#{version}/source.json"
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bazel
 version: !ruby/object:Gem::Version
-  version: 0.385.0
+  version: 0.386.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -269,7 +269,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.385.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.386.0
 rdoc_options: []
 require_paths:
 - lib