dependabot-bundler 0.315.0 → 0.316.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6ef18bc7579142ed3ff572df5a7c85ff82eba45c4785e000749e95ce4f636697
-  data.tar.gz: 653e6a490af800e05869d042c6cf43cad01443c2e9d103b71263c0789401d6f9
+  metadata.gz: f3fe30e7a26afccaa2a525cee8a9cd922bed807daaf9b538ba6832eeb55958ca
+  data.tar.gz: 3222607755992756baccfc661c9046d0d0f531394eec15b356e7267d32302aae
 SHA512:
-  metadata.gz: 8cbf2e5195b2f78861a8d24e4c7f03d07b25a71d8fec1bc9c62a7f52043e18c822fdb0eed5228f1dd21b526cc9f5f338399a0a518239bb9d1cefc850ee7876b6
-  data.tar.gz: bfce05a6b8449b26a09287db01426a53887a19161d6d19e763dd891be7761d0d741cb7958b9bd169c694ff7da12f5e9f546f4e7684b835b1d1ddc87d9482a8cb
+  metadata.gz: aafc91ae080e5fce13ea3fcb87dfe1428698bcab4eddb66e40834a307c250fa38fc84ab8dcc6374a36e0adbfcdd9d8589f37a3a06d8a62fc86c68fdbd1b2a929
+  data.tar.gz: 9e1d96d3996858b3b2936a2239e3d22798c9a2af76671efe27c660c0e79199b1bb1a43cd79b27698229f425ab1c7dab959d8f0d6fea96b72d461a552bc1016e1

data/helpers/v2/monkey_patches/definition_ruby_version_patch.rb

@@ -26,7 +26,7 @@ module BundlerDefinitionRubyVersionPatch
         Gem::Specification.new("Ruby\0", requested_version)
     end
 
-    %w(2.5.3 2.6.10 2.7.8 3.0.7 3.1.6 3.2.4).each do |version|
+    %w(2.5.3 2.6.10 2.7.8 3.0.7 3.1.6 3.2.8 3.3.8).each do |version|
       sources.metadata_source.specs << Gem::Specification.new("Ruby\0", version)
     end
 

data/lib/dependabot/bundler/file_updater/ruby_requirement_setter.rb

@@ -1,26 +1,34 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
 require "parser/current"
+require "sorbet-runtime"
+
 require "dependabot/bundler/file_updater"
 require "dependabot/bundler/requirement"
+require "dependabot/bundler/version"
 
 module Dependabot
   module Bundler
     class FileUpdater
       class RubyRequirementSetter
+        extend T::Sig
+
         RUBY_VERSIONS = %w(
-          1.8.7 1.9.3 2.0.0 2.1.10 2.2.10 2.3.8 2.4.10 2.5.9 2.6.9 2.7.6 3.0.6 3.1.6 3.2.4 3.3.6
+          1.8.7 1.9.3 2.0.0 2.1.10 2.2.10 2.3.8 2.4.10 2.5.9 2.6.9 2.7.6 3.0.6 3.1.6 3.2.8 3.3.8 3.4.4
         ).freeze
 
         LANGUAGE = "ruby"
 
+        sig { returns(Dependabot::DependencyFile) }
         attr_reader :gemspec
 
+        sig { params(gemspec: Dependabot::DependencyFile).void }
         def initialize(gemspec:)
           @gemspec = gemspec
         end
 
+        sig { params(content: String).returns(String) }
         def rewrite(content)
           return content unless gemspec_declares_ruby_requirement?
 
@@ -39,10 +47,12 @@ module Dependabot
 
         private
 
+        sig { returns(T::Boolean) }
         def gemspec_declares_ruby_requirement?
           !ruby_requirement.nil?
         end
 
+        sig { params(node: T.untyped).returns(T::Boolean) }
         def declares_ruby_version?(node)
           return false unless node.is_a?(Parser::AST::Node)
           return true if node.type == :send && node.children[1] == :ruby
@@ -50,6 +60,7 @@ module Dependabot
           node.children.any? { |cn| declares_ruby_version?(cn) }
         end
 
+        sig { returns(Dependabot::Version) }
         def ruby_version
           requirement = if ruby_requirement.is_a?(Gem::Requirement)
                           ruby_requirement
@@ -74,6 +85,7 @@ module Dependabot
         end
 
         # rubocop:disable Security/Eval
+        sig { returns(T.untyped) }
         def ruby_requirement
           ast = Parser::CurrentRuby.parse(gemspec.content)
           requirement_node = find_ruby_requirement_node(ast)
@@ -87,6 +99,7 @@ module Dependabot
         end
         # rubocop:enable Security/Eval
 
+        sig { params(node: T.untyped).returns(T.nilable(Parser::AST::Node)) }
         def find_ruby_requirement_node(node)
           return unless node.is_a?(Parser::AST::Node)
           return node if declares_ruby_requirement?(node)
@@ -97,6 +110,7 @@ module Dependabot
           end
         end
 
+        sig { params(node: T.untyped).returns(T::Boolean) }
         def declares_ruby_requirement?(node)
           return false unless node.is_a?(Parser::AST::Node)
 
@@ -104,10 +118,14 @@ module Dependabot
         end
 
         class GemfileRewriter < Parser::TreeRewriter
+          extend T::Sig
+
+          sig { override.params(ruby_version: Dependabot::Version).void }
           def initialize(ruby_version:)
             @ruby_version = ruby_version
           end
 
+          sig { override.params(node: T.untyped).void }
           def on_send(node)
             return unless declares_ruby_version?(node)
 
@@ -117,8 +135,10 @@ module Dependabot
 
           private
 
+          sig { returns(Dependabot::Version) }
           attr_reader :ruby_version
 
+          sig { params(node: T.untyped).returns(T::Boolean) }
           def declares_ruby_version?(node)
             return false unless node.is_a?(Parser::AST::Node)
             return false unless node.type == :send

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.315.0
+  version: 0.316.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.315.0
+        version: 0.316.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.315.0
+        version: 0.316.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -322,7 +322,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.315.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.316.0
 rdoc_options: []
 require_paths:
 - lib