dependabot-bazel 0.392.0 → 0.394.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0bc8e33d24c59767e7bbbdc09e36298ee43895ece6984032250f4373dd78477
-  data.tar.gz: f1ec19b81466dc3afed1e298d0d92ad47d1444b4774a004475aca0b9ec0743c3
+  metadata.gz: 07e967c98967bc6a340bb069eacda200a20a8a25b9d89ccbae17933bf89f53e5
+  data.tar.gz: e592a845112d98402745ba3af8f62cd990916ded84487b3404b514dd5ebee0dc
 SHA512:
-  metadata.gz: 560135a611ee640452581bbacee2cc2d78336b030c2c7b95614c5b17ba2b37a9209d253fdfeb3d6ffa51cd3672f80d756aac8b855fbb2037ccb67611511a173d
-  data.tar.gz: 8975601e9610eb7bc0bbd583590cb87b994bf5ad5220d5f8777b8407107a816336fd992226fdbff82b45251b6e56c8f9eb477c2483e3529cb1e5cfed5e423d4f
+  metadata.gz: 975278b8c31dd91c7905788a2590d75e1ec2c5d5451a448cd0763929f6956cc0ab27353ba14ebf1aca4313b8e181f14b7d24a8bad8bb76d268523ecb38340baa
+  data.tar.gz: 25b59f72cde9c389f12ea651c1051b33bf91f46f6f999f1b4c22dd72e72590eb94369e139831fddc1dd85853085e3318bee247f7a869ccbeaf5766b63cfc4a54

data/lib/dependabot/bazel/file_fetcher.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "dependabot/file_fetchers"
@@ -73,7 +73,7 @@ module Dependabot
         files = T.let([], T::Array[DependencyFile])
 
         module_file_items.each do |item|
-          file = fetch_file_if_present(T.must(item.name))
+          file = fetch_file_if_present(item.name)
           files << file if file
         end
 

data/lib/dependabot/bazel/package_manager.rb

@@ -10,7 +10,7 @@ module Dependabot
   module Bazel
     ECOSYSTEM = "bazel"
     PACKAGE_MANAGER = "bazel"
-    DEFAULT_BAZEL_VERSION = "8.4.2"
+    DEFAULT_BAZEL_VERSION = "8.5.1"
 
     # Keep versions in ascending order
     SUPPORTED_BAZEL_VERSIONS = T.let([Version.new("6"), Version.new("7")].freeze, T::Array[Dependabot::Version])

data/lib/dependabot/bazel/update_checker/registry_client.rb

@@ -3,6 +3,7 @@
 
 require "json"
 require "base64"
+require "time"
 require "sorbet-runtime"
 require "dependabot/shared_helpers"
 require "dependabot/clients/github_with_retries"
@@ -66,10 +67,8 @@ module Dependabot
           file_path = "modules/#{module_name}/#{version}/source.json"
 
           begin
-            content = T.unsafe(github_client.contents(GITHUB_REPO, path: file_path))
-            return nil unless content
-
-            decoded_content = Base64.decode64(content.content)
+            content = github_file_content(file_path)
+            decoded_content = Base64.decode64(content)
             JSON.parse(decoded_content)
           rescue StandardError => e
             Dependabot.logger.warn("Failed to get source for #{module_name}@#{version}: #{e.message}")
@@ -82,10 +81,7 @@ module Dependabot
           file_path = "modules/#{module_name}/#{version}/MODULE.bazel"
 
           begin
-            content = T.unsafe(github_client.contents(GITHUB_REPO, path: file_path))
-            return nil unless content
-
-            Base64.decode64(content.content)
+            Base64.decode64(github_file_content(file_path))
           rescue StandardError => e
             Dependabot.logger.warn("Failed to get MODULE.bazel for #{module_name}@#{version}: #{e.message}")
             nil
@@ -102,18 +98,45 @@ module Dependabot
           file_path = "modules/#{module_name}/#{version}/MODULE.bazel"
 
           commits = begin
-            T.unsafe(github_client).commits("bazelbuild/bazel-central-registry", path: file_path, per_page: 1)
+            github_client.commits("bazelbuild/bazel-central-registry", path: file_path, per_page: 1)
           rescue StandardError => e
             Dependabot.logger.warn("Failed to get release date for #{module_name} #{version}: #{e.message}")
+            nil
           end
 
-          return nil unless commits&.any?
+          commit = commits&.first
+          return nil unless commit
 
-          T.unsafe(commits).first.commit.committer.date
+          commit_details = resource_field(commit, :commit, "commit details")
+          committer = resource_field(commit_details, :committer, "committer")
+          value = T.cast(committer[:date], Object)
+          return value if value.is_a?(Time)
+          return Time.parse(value) if value.is_a?(String)
+
+          raise TypeError, "committer date must be a time or string"
         end
 
         private
 
+        sig { params(file_path: String).returns(String) }
+        def github_file_content(file_path)
+          response = github_client.contents(GITHUB_REPO, path: file_path)
+          raise TypeError, "GitHub file response must be an object" unless response.is_a?(Sawyer::Resource)
+
+          value = T.cast(response[:content], Object)
+          return value if value.is_a?(String)
+
+          raise TypeError, "GitHub file content must be a string"
+        end
+
+        sig { params(resource: Sawyer::Resource, key: Symbol, context: String).returns(Sawyer::Resource) }
+        def resource_field(resource, key, context)
+          value = T.cast(resource[key], Object)
+          return value if value.is_a?(Sawyer::Resource)
+
+          raise TypeError, "#{context} must be an object"
+        end
+
         sig { returns(Dependabot::Clients::GithubWithRetries) }
         def github_client
           @github_client ||= T.let(

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bazel
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.394.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.394.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.394.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -169,14 +169,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.1'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.22'
+        version: '1.1'
 - !ruby/object:Gem::Dependency
   name: turbo_tests
   requirement: !ruby/object:Gem::Requirement
@@ -269,7 +269,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.394.0
 rdoc_options: []
 require_paths:
 - lib