dependabot-bazel 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0bc8e33d24c59767e7bbbdc09e36298ee43895ece6984032250f4373dd78477
-  data.tar.gz: f1ec19b81466dc3afed1e298d0d92ad47d1444b4774a004475aca0b9ec0743c3
+  metadata.gz: a287ec6c36d40305a8ed719a166a87a0ad363aaaadb6b77ffdd38bdd89d0ca95
+  data.tar.gz: c2620b0ee29d9da16fad68bbe71a4a51c00815546d29257f222e38c1631c6770
 SHA512:
-  metadata.gz: 560135a611ee640452581bbacee2cc2d78336b030c2c7b95614c5b17ba2b37a9209d253fdfeb3d6ffa51cd3672f80d756aac8b855fbb2037ccb67611511a173d
-  data.tar.gz: 8975601e9610eb7bc0bbd583590cb87b994bf5ad5220d5f8777b8407107a816336fd992226fdbff82b45251b6e56c8f9eb477c2483e3529cb1e5cfed5e423d4f
+  metadata.gz: 0fdde17060ab508d6d819d3124867e68e51665ab4667f1d94b0cedec66d3b6881d3b510263718d9f21123fffd8392f335cc61311de610cfe06b1208ff825b971
+  data.tar.gz: dff2cc0148841141df5e1fcae355619068a41d6d04d5c7e1e6d2996a3680b5363c459610f134a02ad750f0b445d5795616ae0f074b0c2626f238f6833807a7de

data/lib/dependabot/bazel/file_fetcher.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "dependabot/file_fetchers"
@@ -73,7 +73,7 @@ module Dependabot
         files = T.let([], T::Array[DependencyFile])
 
         module_file_items.each do |item|
-          file = fetch_file_if_present(T.must(item.name))
+          file = fetch_file_if_present(item.name)
           files << file if file
         end
 

data/lib/dependabot/bazel/update_checker/registry_client.rb

@@ -3,6 +3,7 @@
 
 require "json"
 require "base64"
+require "time"
 require "sorbet-runtime"
 require "dependabot/shared_helpers"
 require "dependabot/clients/github_with_retries"
@@ -66,10 +67,8 @@ module Dependabot
           file_path = "modules/#{module_name}/#{version}/source.json"
 
           begin
-            content = T.unsafe(github_client.contents(GITHUB_REPO, path: file_path))
-            return nil unless content
-
-            decoded_content = Base64.decode64(content.content)
+            content = github_file_content(file_path)
+            decoded_content = Base64.decode64(content)
             JSON.parse(decoded_content)
           rescue StandardError => e
             Dependabot.logger.warn("Failed to get source for #{module_name}@#{version}: #{e.message}")
@@ -82,10 +81,7 @@ module Dependabot
           file_path = "modules/#{module_name}/#{version}/MODULE.bazel"
 
           begin
-            content = T.unsafe(github_client.contents(GITHUB_REPO, path: file_path))
-            return nil unless content
-
-            Base64.decode64(content.content)
+            Base64.decode64(github_file_content(file_path))
           rescue StandardError => e
             Dependabot.logger.warn("Failed to get MODULE.bazel for #{module_name}@#{version}: #{e.message}")
             nil
@@ -102,18 +98,45 @@ module Dependabot
           file_path = "modules/#{module_name}/#{version}/MODULE.bazel"
 
           commits = begin
-            T.unsafe(github_client).commits("bazelbuild/bazel-central-registry", path: file_path, per_page: 1)
+            github_client.commits("bazelbuild/bazel-central-registry", path: file_path, per_page: 1)
           rescue StandardError => e
             Dependabot.logger.warn("Failed to get release date for #{module_name} #{version}: #{e.message}")
+            nil
           end
 
-          return nil unless commits&.any?
+          commit = commits&.first
+          return nil unless commit
 
-          T.unsafe(commits).first.commit.committer.date
+          commit_details = resource_field(commit, :commit, "commit details")
+          committer = resource_field(commit_details, :committer, "committer")
+          value = T.cast(committer[:date], Object)
+          return value if value.is_a?(Time)
+          return Time.parse(value) if value.is_a?(String)
+
+          raise TypeError, "committer date must be a time or string"
         end
 
         private
 
+        sig { params(file_path: String).returns(String) }
+        def github_file_content(file_path)
+          response = github_client.contents(GITHUB_REPO, path: file_path)
+          raise TypeError, "GitHub file response must be an object" unless response.is_a?(Sawyer::Resource)
+
+          value = T.cast(response[:content], Object)
+          return value if value.is_a?(String)
+
+          raise TypeError, "GitHub file content must be a string"
+        end
+
+        sig { params(resource: Sawyer::Resource, key: Symbol, context: String).returns(Sawyer::Resource) }
+        def resource_field(resource, key, context)
+          value = T.cast(resource[key], Object)
+          return value if value.is_a?(Sawyer::Resource)
+
+          raise TypeError, "#{context} must be an object"
+        end
+
         sig { returns(Dependabot::Clients::GithubWithRetries) }
         def github_client
           @github_client ||= T.let(

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bazel
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -269,7 +269,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib