dependabot-bundler 0.390.0 → 0.391.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0dac96c40d771c86c54ade253e41f44c096a49953f97a3a2732e365a7742e699
-  data.tar.gz: 3b300480b45f379249135aeaf77338678da10e128abf76c09c6d5ee3030f454f
+  metadata.gz: 672d87cda96727e07addcdfc985c06c305ba63f344405f55ff4b10dd36562096
+  data.tar.gz: 6a19d0836c030bc9aaa9b27a4b1761fe11bb27e0afc8ecc6b1d1ae001872a892
 SHA512:
-  metadata.gz: 3d4953d692f99de6007cb8f64722d13a963d09cd20c01e3b3b1907907562fcd2d0551876b8ad40054c7ed77dcea490355c01dde2856845d1510eafc02689cb58
-  data.tar.gz: 73e2ed787f41f55aed80da27d17d443801536f7894b1fdfd4ec0711e70eef7a3dc82a3675ab8ae4740dce3b2f549b5b58ad8ae490b3a402636bfda7a8ec3aff0
+  metadata.gz: 3ba582280818476c7829d113c8ce8d6658240d9295f497736621418c9d8d0e85b1aefa555ea4dbd2f6296149fe8f7e2b4527f176edf6d3bfeb3393f0bd94e90c
+  data.tar.gz: '08fc1b1c9f73c5649a53758f60a41a8139211f48fa81b371cce24666fd79ae6000e998c802808664ee8d54675047693c11bc15d544cbcd6598b43c75cd962d23'

data/lib/dependabot/bundler/file_updater/gemspec_updater.rb

@@ -13,8 +13,8 @@ module Dependabot
 
         sig { params(dependencies: T::Array[Dependabot::Dependency], gemspec: Dependabot::DependencyFile).void }
         def initialize(dependencies:, gemspec:)
-          @dependencies = T.let(dependencies, T::Array[Dependabot::Dependency])
-          @gemspec = T.let(gemspec, Dependabot::DependencyFile)
+          @dependencies = dependencies
+          @gemspec = gemspec
         end
 
         sig { returns(String) }

data/lib/dependabot/bundler/file_updater/git_pin_replacer.rb

@@ -20,8 +20,8 @@ module Dependabot
 
         sig { params(dependency: Dependabot::Dependency, new_pin: String).void }
         def initialize(dependency:, new_pin:)
-          @dependency = T.let(dependency, Dependabot::Dependency)
-          @new_pin = T.let(new_pin, String)
+          @dependency = dependency
+          @new_pin = new_pin
         end
 
         sig { params(content: String).returns(String) }
@@ -38,7 +38,7 @@ module Dependabot
         class Rewriter < Parser::TreeRewriter
           extend T::Sig
 
-          PIN_KEYS = T.let(%i(ref tag).freeze, T::Array[Symbol])
+          PIN_KEYS = %i(ref tag).freeze
 
           sig { returns(Dependabot::Dependency) }
           attr_reader :dependency
@@ -49,8 +49,8 @@ module Dependabot
           sig { params(dependency: Dependabot::Dependency, new_pin: String).void }
           def initialize(dependency:, new_pin:)
             super()
-            @dependency = T.let(dependency, Dependabot::Dependency)
-            @new_pin = T.let(new_pin, String)
+            @dependency = dependency
+            @new_pin = new_pin
           end
 
           sig { params(node: Parser::AST::Node).void }

data/lib/dependabot/bundler/file_updater/git_source_remover.rb

@@ -44,7 +44,7 @@ module Dependabot
 
           sig { params(dependency: Dependabot::Dependency).void }
           def initialize(dependency:)
-            @dependency = T.let(dependency, Dependabot::Dependency)
+            @dependency = dependency
           end
 
           sig { params(node: Parser::AST::Node).void }
@@ -57,10 +57,10 @@ module Dependabot
               key_from_hash_pair(hash_pair)
             end
 
-            if keys.none? { |key| GOOD_KEYS.include?(key) }
-              remove_all_kwargs(node)
-            else
+            if keys.intersect?(GOOD_KEYS)
               remove_git_related_kwargs(kwargs_node)
+            else
+              remove_all_kwargs(node)
             end
           end
 

data/lib/dependabot/bundler/file_updater/lockfile_updater.rb

@@ -47,11 +47,11 @@ module Dependabot
           options:,
           repo_contents_path: nil
         )
-          @dependencies = T.let(dependencies, T::Array[Dependabot::Dependency])
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @repo_contents_path = T.let(repo_contents_path, T.nilable(String))
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
-          @options = T.let(options, T::Hash[Symbol, T.untyped])
+          @dependencies = dependencies
+          @dependency_files = dependency_files
+          @repo_contents_path = repo_contents_path
+          @credentials = credentials
+          @options = options
           @updated_lockfile_content = T.let(nil, T.nilable(String))
           @gemfile = T.let(nil, T.nilable(Dependabot::DependencyFile))
           @lockfile = T.let(nil, T.nilable(Dependabot::DependencyFile))

data/lib/dependabot/bundler/file_updater/requirement_replacer.rb

@@ -117,7 +117,7 @@ module Dependabot
 
           # TODO: Ideally we wouldn't have to ignore all of these, but
           # implementing each one will be tricky.
-          SKIPPED_TYPES = T.let(%i(send lvar dstr begin if case splat const or).freeze, T::Array[Symbol])
+          SKIPPED_TYPES = %i(send lvar dstr begin if case splat const or).freeze
 
           sig do
             params(
@@ -133,10 +133,10 @@ module Dependabot
             updated_requirement:,
             insert_if_bare:
           )
-            @dependency = T.let(dependency, Dependabot::Dependency)
-            @file_type = T.let(file_type, Symbol)
-            @updated_requirement = T.let(updated_requirement, String)
-            @insert_if_bare = T.let(insert_if_bare, T::Boolean)
+            @dependency = dependency
+            @file_type = file_type
+            @updated_requirement = updated_requirement
+            @insert_if_bare = insert_if_bare
 
             return if %i(gemfile gemspec).include?(file_type)
 
@@ -231,7 +231,7 @@ module Dependabot
               end
 
             ops = Gem::Requirement::OPS.keys
-            return true if ops.none? { |op| req_string.include?(op) }
+            return true if ops.none? { |op| req_string.index(op) }
 
             req_string.include?(" ")
           end

data/lib/dependabot/bundler/metadata_finder.rb

@@ -11,19 +11,16 @@ module Dependabot
     class MetadataFinder < Dependabot::MetadataFinders::Base
       extend T::Sig
 
-      SOURCE_KEYS = T.let(
-        %w(
-          source_code_uri
-          homepage_uri
-          wiki_uri
-          bug_tracker_uri
-          documentation_uri
-          changelog_uri
-          mailing_list_uri
-          download_uri
-        ).freeze,
-        T::Array[String]
-      )
+      SOURCE_KEYS = %w(
+        source_code_uri
+        homepage_uri
+        wiki_uri
+        bug_tracker_uri
+        documentation_uri
+        changelog_uri
+        mailing_list_uri
+        download_uri
+      ).freeze
 
       sig do
         params(

data/lib/dependabot/bundler/requirement.rb

@@ -11,7 +11,7 @@ module Dependabot
     class Requirement < Dependabot::Requirement
       extend T::Sig
 
-      GEM_DEP_SPLIT = T.let(/\A(?<name>[a-zA-Z0-9_\-]+):(?<version>.+)\z/, Regexp)
+      GEM_DEP_SPLIT = /\A(?<name>[a-zA-Z0-9_\-]+):(?<version>.+)\z/
 
       sig { params(req: Dependabot::DependencyRequirement, version: Gem::Version).returns(T::Boolean) }
       def self.satisfied_by?(req, version)

data/lib/dependabot/bundler/update_checker/file_preparer.rb

@@ -62,16 +62,16 @@ module Dependabot
           latest_allowable_version: nil,
           lock_ruby_version: true
         )
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @dependency = T.let(dependency, Dependabot::Dependency)
-          @remove_git_source = T.let(remove_git_source, T::Boolean)
-          @unlock_requirement = T.let(unlock_requirement, T::Boolean)
-          @replacement_git_pin = T.let(replacement_git_pin, T.nilable(String))
+          @dependency_files = dependency_files
+          @dependency = dependency
+          @remove_git_source = remove_git_source
+          @unlock_requirement = unlock_requirement
+          @replacement_git_pin = replacement_git_pin
           @latest_allowable_version = T.let(
             latest_allowable_version&.to_s,
             T.nilable(String)
           )
-          @lock_ruby_version = T.let(lock_ruby_version, T::Boolean)
+          @lock_ruby_version = lock_ruby_version
         end
 
         # rubocop:disable Metrics/AbcSize

data/lib/dependabot/bundler/update_checker/requirements_updater.rb

@@ -127,7 +127,8 @@ module Dependabot
             T.must(req.requirement_string).split(",").map { |r| Gem::Requirement.new(r) }
 
           new_requirement =
-            if requirements.any?(&:exact?) then latest_resolvable_version.to_s
+            if requirements.any?(&:exact?)
+              latest_resolvable_version.to_s
             elsif requirements.any? { |r| r.to_s.start_with?("~>") }
               tw_req = requirements.find { |r| r.to_s.start_with?("~>") }
               update_twiddle_version(T.must(tw_req), T.must(latest_resolvable_version)).to_s

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.390.0
+  version: 0.391.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -354,7 +354,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.390.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.391.0
 rdoc_options: []
 require_paths:
 - lib