dependabot-bun 0.310.0 → 0.311.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 159d2c2ddc4b498599717040d27f7b2717285c3738e6d7acd5ac5ad279545e02
-  data.tar.gz: aec8f967c53261427a5e7f8def3c8bf9ee55d7634602d1cdb12b5014354fa823
+  metadata.gz: 16c6238c2f4b305e1da8396b8fdc3729ad9cc94285c6da390da165b0b7503d1a
+  data.tar.gz: 3212eed6384868bfac1c9319883b479ca56eadff6c9f67d9452e9f22b5975c9c
 SHA512:
-  metadata.gz: fa83d31d48b7c6736fc93354c9955bf146124c6a4d5cc8391409448bf6afa0384e9b6c306617b342a858f8f5857381c6788e9d73b76fd13062977ca560cb9043
-  data.tar.gz: 0764dd5e7109bd9fd96bcce70f07c643f4c84635db030fdcf1e62b4b85e65440a943c783433a11e61e2e654131af7d95681776f654f0c8e6281629078c8e1aeb
+  metadata.gz: e09a08b44d87699568858075e4c8882cb8e0fb0a46fe1d750f480615014ee41654bdd8273c209d595825c8799be48118c4f43029f8a1436d5ba8f6138db78388
+  data.tar.gz: 854ea4cc9c5ea03bdee012e2f83fd22e3153983bb60228e47d120199aed2912eec25bffe87af9753aee4b129e791628818f4c131c4c980a45328b7b64d10b3fb

data/lib/dependabot/bun/metadata_finder.rb

@@ -122,12 +122,22 @@ module Dependabot
         potential_source
       end
 
-      sig { params(details: T.any(String, T::Hash[String, String])).returns(T.nilable(String)) }
+      sig do
+        params(
+          details: T.nilable(T.any(String, T::Array[String], T::Hash[String, String]))
+        ).returns(T.nilable(String))
+      end
       def get_url(details)
+        return unless details
+
         url =
           case details
           when String then details
           when Hash then details.fetch("url", nil)
+          when Array
+            # Try to find the first valid URL string, and if not, return the first string (even if it isn't a URL)
+            details.find { |d| d.is_a?(String) && d.match?(%r{^[\w.-]+/[\w.-]+$}) } ||
+            details.find { |d| d.is_a?(String) }
           end
         return url unless url&.match?(%r{^[\w.-]+/[\w.-]+$})
 

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bun
 version: !ruby/object:Gem::Version
-  version: 0.310.0
+  version: 0.311.0
 platform: ruby
 authors:
 - Dependabot
 bindir: bin
 cert_chain: []
-date: 2025-04-24 00:00:00.000000000 Z
+date: 2025-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.310.0
+        version: 0.311.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.310.0
+        version: 0.311.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -223,16 +223,16 @@ dependencies:
   name: webrick
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '1.9'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '1.9'
 description: Dependabot-BUN provides support for bumping Javascript libraries via
   Dependabot. If you want support for multiple package managers, you probably want
   the meta-gem dependabot-omnibus.
@@ -347,7 +347,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.310.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.311.0
 rdoc_options: []
 require_paths:
 - lib