dependabot-bazel 0.358.0 → 0.359.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 86a337c9ca53f3945dc5865f6a0043114f6c0a1c2211ec517815dc5ca77f7f38
-  data.tar.gz: bd9c4cb47ef64d64a392d76f3f8fe76df94c9829f996a5c460a6065eec1fef1f
+  metadata.gz: f99443594cd6420cc0a862357e60375f7e680554f6d9391485fb5b975e166474
+  data.tar.gz: 3e898b1560e8827289b03df2ae3dec20b7cdf1ebe5eef05aa5c6280b92aec37c
 SHA512:
-  metadata.gz: 5c0b5bdc9dcca0e67738132a6fc2987eb6fc5ecf84ba8191e5e1e3b5879faaafbd45fae5205a5895e9b0e51a490f0da98997683ce091de7fde08c7c9743152ad
-  data.tar.gz: 4201907839a568e89b61034bbb313c7faca116e61b23804730db5979fabe71692b0c530323ee767de974bb2bff4af9cfb9f7d4e65d4947c5e737c90480e2aa7c
+  metadata.gz: 809bde25ebb43c9aea3d4319a795e57d77529e1c6228102da06fb53ae7d9b9fa7874c952457aaee7dcab412962d8d3f200e1f976fb54718a7ce738cc804cfd06
+  data.tar.gz: 5378eb34ca54851e868e85b38127e18acd601e72a1c6bdf9710744606fd5552342ca8b95d2a121b54786337aa32d490b95e8be3de0f8fe0d53246119fec8c1ab

data/lib/dependabot/bazel/file_fetcher/module_path_extractor.rb

@@ -9,7 +9,7 @@ module Dependabot
   module Bazel
     class FileFetcher < Dependabot::FileFetchers::Base
       # Extracts file and directory paths referenced in MODULE.bazel files.
-      # Handles attributes like lock_file, requirements_lock, patches, and local_path_override.
+      # Handles attributes like lock_file, requirements_lock, patches, from_file, and local_path_override.
       class ModulePathExtractor
         extend T::Sig
 
@@ -31,13 +31,14 @@ module Dependabot
         sig { returns(DependencyFile) }
         attr_reader :module_file
 
-        # Extracts file paths from lock_file, requirements_lock, and patches attributes.
+        # Extracts file paths from lock_file, requirements_lock, patches, and from_file attributes.
         sig { params(content: String).returns(T::Array[String]) }
         def extract_file_attribute_paths(content)
           (
             extract_lock_file_paths(content) +
             extract_requirements_lock_paths(content) +
-            extract_patches_paths(content)
+            extract_patches_paths(content) +
+            extract_from_file_paths(content)
           ).compact
         end
 
@@ -65,6 +66,11 @@ module Dependabot
           patches
         end
 
+        sig { params(content: String).returns(T::Array[String]) }
+        def extract_from_file_paths(content)
+          content.scan(/from_file\s*=\s*"([^"]+)"/).map { |match| PathConverter.label_to_path(T.must(match[0])) }
+        end
+
         # Extracts directory paths from local_path_override attributes.
         sig { params(content: String).returns(T::Array[String]) }
         def extract_directory_paths(content)

data/lib/dependabot/bazel/file_fetcher.rb

@@ -206,6 +206,8 @@ module Dependabot
       end
 
       # Fetches files and tracks their directories for BUILD file resolution.
+      # Directories are tracked even if the referenced file doesn't exist yet,
+      # as Bazel requires BUILD files to recognize directories as valid packages.
       sig do
         params(
           paths: T::Array[String],
@@ -215,12 +217,12 @@ module Dependabot
       def fetch_paths_and_track_directories(paths, directories)
         files = T.let([], T::Array[DependencyFile])
         paths.each do |path|
-          fetched_file = fetch_file_if_present(path)
-          next unless fetched_file
-
-          files << fetched_file
+          # Track the directory regardless of whether the file exists
           dir = File.dirname(path)
           directories.add(dir) unless dir == "."
+
+          fetched_file = fetch_file_if_present(path)
+          files << fetched_file if fetched_file
         end
         files
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bazel
 version: !ruby/object:Gem::Version
-  version: 0.358.0
+  version: 0.359.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.358.0
+        version: 0.359.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.358.0
+        version: 0.359.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -269,7 +269,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.358.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.359.0
 rdoc_options: []
 require_paths:
 - lib