dependabot-bun 0.360.0 → 0.361.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f3bbffcbb4cbf2f52e2aa1bf17c2f8a3ec7723ddcdfa131a72d55a39965af073
-  data.tar.gz: b00ff4ba4e63030e58060eda05fa0406f13227185d06977e4fffac04c96ca568
+  metadata.gz: 1c83f0e46d9b9a17d6e7ec0fd31cffa0ee6c70d2f55b316273a6b759c13a0725
+  data.tar.gz: 0b38a073e2da7a34c1ec141bcba1fa24e99989f9c2a996abe4c9e61166e9c624
 SHA512:
-  metadata.gz: 415dd416e835ae8a4064af85eb51f9ac991b199b922ed4132419731f9b5dd31c57deb87b1f0285c0678bc30256efb211decbca740411ac877d6738e947e3f4da
-  data.tar.gz: b2e86ac25d8e715c0487a29ca6f2381b4bc0ff60ee884e3e436775199e5cae8e9ad95238bacfa9099202698e40d2b1a0c58a31d9035a2a6beab8aec10e793199
+  metadata.gz: 6694dfe0415f20fca24ee95191806c885bdab451232613c9272443b39f9a8fc3e6d8ed2e7ec7419f0939f6402895c9d0a103732398980d12a261a75dba8bf4a2
+  data.tar.gz: 04d164686779098d9f043193ec876723019e18915f83035b1e2d4d4d953572a7791442a535b4db59e50d6bf8b3dc3dd9eff9aebd8084f82f405f658f85fcd585

data/helpers/package-lock.json

@@ -8380,9 +8380,9 @@
       }
     },
     "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+      "version": "4.17.23",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="
     },
     "node_modules/lodash.clone": {
       "version": "4.5.0",
@@ -22563,9 +22563,9 @@
       }
     },
     "lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg=="
+      "version": "4.17.23",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.23.tgz",
+      "integrity": "sha512-LgVTMpQtIopCi79SJeDiP0TfWi5CNEc/L/aRdTh3yIvmZXTnheWpKjSZhnvMl8iXbC1tFg9gdHHDMLoV7CnG+w=="
     },
     "lodash.clone": {
       "version": "4.5.0",

data/lib/dependabot/bun/package_manager.rb

@@ -101,8 +101,6 @@ module Dependabot
         @language_requirement ||= find_engine_constraints_as_requirement(Language::NAME)
       end
 
-      # rubocop:disable Metrics/PerceivedComplexity
-      # rubocop:disable Metrics/AbcSize
       sig { params(name: String).returns(T.nilable(Requirement)) }
       def find_engine_constraints_as_requirement(name)
         Dependabot.logger.info("Processing engine constraints for #{name}")
@@ -112,30 +110,12 @@ module Dependabot
         raw_constraint = @engines[name].to_s.strip
         return nil if raw_constraint.empty?
 
-        if Dependabot::Experiments.enabled?(:enable_engine_version_detection)
-          constraints = ConstraintHelper.extract_ruby_constraints(raw_constraint)
-          # When constraints are invalid we return constraints array nil
-          if constraints.nil?
-            Dependabot.logger.warn(
-              "Unrecognized constraint format for #{name}: #{raw_constraint}"
-            )
-          end
-        else
-          raw_constraints = raw_constraint.split
-          constraints = raw_constraints.map do |constraint|
-            case constraint
-            when /^\d+$/
-              ">=#{constraint}.0.0 <#{constraint.to_i + 1}.0.0"
-            when /^\d+\.\d+$/
-              ">=#{constraint} <#{constraint.split('.').first.to_i + 1}.0.0"
-            when /^\d+\.\d+\.\d+$/
-              "=#{constraint}"
-            else
-              Dependabot.logger.warn("Unrecognized constraint format for #{name}: #{constraint}")
-              constraint
-            end
-          end
-
+        constraints = ConstraintHelper.extract_ruby_constraints(raw_constraint)
+        # When constraints are invalid we return constraints array nil
+        if constraints.nil?
+          Dependabot.logger.warn(
+            "Unrecognized constraint format for #{name}: #{raw_constraint}"
+          )
         end
 
         if constraints && !constraints.empty?
@@ -146,8 +126,6 @@ module Dependabot
         Dependabot.logger.error("Error processing constraints for #{name}: #{e.message}")
         nil
       end
-      # rubocop:enable Metrics/AbcSize
-      # rubocop:enable Metrics/PerceivedComplexity
 
       # rubocop:disable Metrics/CyclomaticComplexity
       # rubocop:disable Metrics/PerceivedComplexity

data/lib/dependabot/bun/version_selector.rb

@@ -10,10 +10,6 @@ module Dependabot
       extend T::Sig
       extend T::Helpers
 
-      # For limited testing, allowing only specific versions defined in engines in package.json
-      # such as "20.8.7", "8.1.2", "8.21.2",
-      NODE_ENGINE_SUPPORTED_REGEX = /^\d+(?:\.\d+)*$/
-
       # Sets up engine versions from the given manifest JSON.
       #
       # @param manifest_json [Hash] The manifest JSON containing version information.
@@ -35,27 +31,16 @@ module Dependabot
 
         versions = {}
 
-        if Dependabot::Experiments.enabled?(:enable_engine_version_detection)
-          engine_versions.each do |engine, value|
-            next unless engine.to_s.match(name)
-
-            versions[name] = ConstraintHelper.find_highest_version_from_constraint_expression(
-              value, dependabot_versions
-            )
-          end
-        else
-          versions = engine_versions.select do |engine, value|
-            engine.to_s.match(name) && valid_extracted_version?(value)
-          end
+        engine_versions.each do |engine, value|
+          next unless engine.to_s == name
+
+          versions[name] = ConstraintHelper.find_highest_version_from_constraint_expression(
+            value, dependabot_versions
+          )
         end
 
         versions
       end
-
-      sig { params(version: String).returns(T::Boolean) }
-      def valid_extracted_version?(version)
-        version.match?(NODE_ENGINE_SUPPORTED_REGEX)
-      end
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bun
 version: !ruby/object:Gem::Version
-  version: 0.360.0
+  version: 0.361.1
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.360.0
+        version: 0.361.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.360.0
+        version: 0.361.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -347,7 +347,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.360.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.361.1
 rdoc_options: []
 require_paths:
 - lib