dependabot-bun 0.362.0 → 0.363.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 75d180b678ceb65ddd56fe7fcd6ab89a7030e3e1499101c8e7cfc2b8928eb1ad
-  data.tar.gz: 0b38a073e2da7a34c1ec141bcba1fa24e99989f9c2a996abe4c9e61166e9c624
+  metadata.gz: 258a5d904892d113e930edf61c32eb0dc86f0dfc6927f8e1c9976bcd9bee6c0d
+  data.tar.gz: 3c138bd0bc4ca408f2183c8c1f4e54308cb59f1ebb76d10dec6f9dae4bb22624
 SHA512:
-  metadata.gz: 40fbd7ae566f1fd3938a9602e0468a894a19422f2a41b07f917c1af7374871585c8da689e0ddf4c9470c75769b50cc083b988d33022f6d8b0f594a30676535b0
-  data.tar.gz: 04d164686779098d9f043193ec876723019e18915f83035b1e2d4d4d953572a7791442a535b4db59e50d6bf8b3dc3dd9eff9aebd8084f82f405f658f85fcd585
+  metadata.gz: 46a33edb38611d3f1c31994da75d558d2aa803fdda542c7d3690a91555d979928cad02d8830748be7b25dd8b03ded81e17ae8645dfea81c97414ae6120e47cad
+  data.tar.gz: 68eab34cc0760b686d7ed6d30f30faef861ec3ae2dea78acce96e9360ec89d89c4a37e42f81eb6e26b4f06cab5b1d5f9b5ef3d434dc398e8568ec61fc4a66849

data/lib/dependabot/bun/file_fetcher/path_dependency_builder.rb

@@ -71,9 +71,9 @@ module Dependabot
           path_starts = FileFetcher::PATH_DEPENDENCY_STARTS
           parsed_yarn_lock.to_a
                           .find do |n, _|
-            next false unless n.split(/(?<=\w)\@/).first == dependency_name
+                            next false unless n.split(/(?<=\w)\@/).first == dependency_name
 
-            T.must(n.split(/(?<=\w)\@/).last).start_with?(*path_starts)
+                            T.must(n.split(/(?<=\w)\@/).last).start_with?(*path_starts)
           end&.last
         end
 
@@ -82,7 +82,7 @@ module Dependabot
           path_starts = FileFetcher::NPM_PATH_DEPENDENCY_STARTS
           path_deps = parsed_package_lock.fetch("dependencies", []).to_a
                                          .select do |_, v|
-            v.fetch("version", "").start_with?(*path_starts)
+                                           v.fetch("version", "").start_with?(*path_starts)
           end
           path_deps.find { |n, _| n == dependency_name }&.last
         end
@@ -131,10 +131,10 @@ module Dependabot
             path_from_base =
               parsed_yarn_lock.to_a
                               .find do |n, _|
-                next false unless n.split(/(?<=\w)\@/).first == name
+                                next false unless n.split(/(?<=\w)\@/).first == name
 
-                T.must(n.split(/(?<=\w)\@/).last)
-                 .start_with?(*FileFetcher::PATH_DEPENDENCY_STARTS)
+                                T.must(n.split(/(?<=\w)\@/).last)
+                                 .start_with?(*FileFetcher::PATH_DEPENDENCY_STARTS)
               end&.first&.split(/(?<=\w)\@/)&.last
 
             next unless path_from_base

data/lib/dependabot/bun/file_fetcher.rb

@@ -250,18 +250,19 @@ module Dependabot
 
         resolution_deps = resolution_objects.flat_map(&:to_a)
                                             .map do |path, value|
-          # skip dependencies that contain invalid values such as inline comments, null, etc.
+                                              # skip dependencies that contain invalid values
+                                              # such as inline comments, null, etc.
 
-          unless value.is_a?(String)
-            Dependabot.logger.warn(
-              "File fetcher: Skipping dependency \"#{path}\" " \
-              "with value: \"#{value}\""
-            )
+                                              unless value.is_a?(String)
+                                                Dependabot.logger.warn(
+                                                  "File fetcher: Skipping dependency \"#{path}\" " \
+                                                  "with value: \"#{value}\""
+                                                )
 
-            next
-          end
+                                                next
+                                              end
 
-          convert_dependency_path_to_name(path, value)
+                                              convert_dependency_path_to_name(path, value)
         end
 
         path_starts = PATH_DEPENDENCY_STARTS

data/lib/dependabot/bun/file_updater/package_json_updater.rb

@@ -126,10 +126,10 @@ module Dependabot
           updated_requirement_pairs =
             dependency.requirements.zip(T.must(dependency.previous_requirements))
                       .reject do |new_req, old_req|
-              next true if new_req == old_req
-              next false unless old_req&.fetch(:source).nil?
+                        next true if new_req == old_req
+                        next false unless old_req&.fetch(:source).nil?
 
-              new_req[:requirement] == old_req&.fetch(:requirement)
+                        new_req[:requirement] == old_req&.fetch(:requirement)
             end
 
           updated_requirement_pairs

data/lib/dependabot/bun/update_checker/latest_version_finder.rb

@@ -237,7 +237,7 @@ module Dependabot
         def possible_previous_releases
           (package_details&.releases || [])
             .reject do |r|
-            r.version.prerelease? && !related_to_current_pre?(T.unsafe(r.version))
+              r.version.prerelease? && !related_to_current_pre?(T.unsafe(r.version))
           end
             .sort_by(&:version).reverse
         end

data/lib/dependabot/bun/update_checker/version_resolver.rb

@@ -229,7 +229,7 @@ module Dependabot
                                 .possible_previous_versions_with_details
                                 .map(&:first)
             reqs = dep.requirements.filter_map { |r| r[:requirement] }
-                      .map { |r| requirement_class.requirements_array(r) }
+                                   .map { |r| requirement_class.requirements_array(r) }
 
             # Pick the lowest version from the max possible version from all
             # requirements. This matches the logic when combining the same
@@ -720,12 +720,12 @@ module Dependabot
           return version_class.new(dep.version) if dep.version && version_class.correct?(dep.version)
 
           dep.requirements.filter_map { |r| r[:requirement] }
-             .reject { |req_string| req_string.start_with?("<") }
-             .select { |req_string| req_string.match?(version_regex) }
-             .map { |req_string| req_string.match(version_regex) }
-             .select { |version| version_class.correct?(version.to_s) }
-             .map { |version| version_class.new(version.to_s) }
-             .max
+                          .reject { |req_string| req_string.start_with?("<") }
+                          .select { |req_string| req_string.match?(version_regex) }
+                          .map { |req_string| req_string.match(version_regex) }
+                          .select { |version| version_class.correct?(version.to_s) }
+                          .map { |version| version_class.new(version.to_s) }
+                          .max
         end
 
         sig { returns(T.class_of(Dependabot::Version)) }

data/lib/dependabot/bun/update_checker.rb

@@ -538,7 +538,7 @@ module Dependabot
         sources =
           updated_dependency
           .requirements.map { |r| r.fetch(:source) }
-          .uniq.compact
+                       .uniq.compact
           .sort_by do |source|
             Package::RegistryFinder.central_registry?(source[:url]) ? 1 : 0
           end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bun
 version: !ruby/object:Gem::Version
-  version: 0.362.0
+  version: 0.363.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.363.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.363.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -85,14 +85,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rspec-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -347,7 +347,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.362.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.363.0
 rdoc_options: []
 require_paths:
 - lib