dependabot-bundler 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a138c6365394197429180097e4313439247425bee62007670d386b138e3e135
-  data.tar.gz: 6a19d0836c030bc9aaa9b27a4b1761fe11bb27e0afc8ecc6b1d1ae001872a892
+  metadata.gz: 39fcadba0e242442b3e47d0eb3217a64830dde572424d06266a89b31bbfde55a
+  data.tar.gz: 99a0d72550c281c293e7a6ccd8e992402e3df5e44bf7bdb9c2473938c5eb98d0
 SHA512:
-  metadata.gz: e03c7d9d79a773cc78d4d43e2cca675bddb45053c5aee73d68b86476ce560e092e94b5441e5aeca5dd5a8c8e99337b24a542dcdd5de4c5b7a5de20749a357579
-  data.tar.gz: '08fc1b1c9f73c5649a53758f60a41a8139211f48fa81b371cce24666fd79ae6000e998c802808664ee8d54675047693c11bc15d544cbcd6598b43c75cd962d23'
+  metadata.gz: 825f095afb8b27e725f15a083b0301a686e020d6a9023817b2a7a9f35c0b8d98df667fe583d1bccb270ae9232778e04b326fead86ec2bc778769ed0d36f5d8e2
+  data.tar.gz: 240587e72dec8f0184e0cdd91c8506e6cb84d7d01c449a006560c52237345e5cbd3536b92462a45c61f83a2c95471dcf5e58a2363337af815bf85deabb8d64a7

data/lib/dependabot/bundler/update_checker/conflicting_dependency_resolver.rb

@@ -49,7 +49,7 @@ module Dependabot
         #
         # @param dependency [Dependabot::Dependency] the dependency to check
         # @param target_version [String] the version to check
-        # @return [Array<Hash{String => String}]
+        # @return [Array<Hash{String => Object}]
         #   * name [String] the blocking dependencies name
         #   * version [String] the version of the blocking dependency
         #   * requirement [String] the requirement on the target_dependency
@@ -58,7 +58,7 @@ module Dependabot
             dependency: Dependabot::Dependency,
             target_version: String
           )
-            .returns(T::Array[T::Hash[String, String]])
+            .returns(T::Array[Dependabot::UpdateCheckers::Conflict])
         end
         def conflicting_dependencies(dependency:, target_version:)
           return [] if lockfile.nil?

data/lib/dependabot/bundler/update_checker.rb

@@ -131,7 +131,7 @@ module Dependabot
         cooldown_options_builder.release_cooldown_options(@update_cooldown)
       end
 
-      sig { override.returns(T::Array[T::Hash[String, String]]) }
+      sig { override.returns(T::Array[Dependabot::UpdateCheckers::Conflict]) }
       def conflicting_dependencies
         ConflictingDependencyResolver.new(
           dependency_files: dependency_files,
@@ -297,7 +297,7 @@ module Dependabot
         # we want to update that tag. The latest version will then be the SHA
         # of the latest tag that looks like a version.
         latest_tag = git_commit_checker.local_tag_for_pinned_version_ref(git_dependency_cooldown)
-        return latest_tag.fetch(:tag_sha) || dependency.version if latest_tag
+        return latest_tag.tag_sha || dependency.version if latest_tag
 
         # If the dependency is pinned to a tag that doesn't look like a
         # version then there's nothing we can do.
@@ -321,7 +321,7 @@ module Dependabot
         # of the latest tag that looks like a version.
         if latest_git_tag_is_resolvable?
           new_tag = git_commit_checker.local_tag_for_pinned_version_ref(git_dependency_cooldown)
-          return new_tag&.fetch(:tag_sha)
+          return new_tag&.tag_sha
         end
 
         # If the dependency is pinned to a tag that doesn't look like a
@@ -358,7 +358,7 @@ module Dependabot
         latest_tag_details = git_commit_checker.local_tag_for_pinned_version_ref(git_dependency_cooldown)
         return false unless latest_tag_details
 
-        git_tag_resolvable?(latest_tag_details.fetch(:tag))
+        git_tag_resolvable?(latest_tag_details.tag)
       end
 
       sig { params(release: T.untyped).returns(T::Boolean) }
@@ -376,7 +376,7 @@ module Dependabot
         # Update the git tag if updating a pinned version
         if latest_git_tag_is_resolvable?
           new_tag = git_commit_checker.local_tag_for_pinned_version_ref(git_dependency_cooldown)
-          return T.must(dependency_source_details).merge(ref: T.must(new_tag).fetch(:tag))
+          return T.must(dependency_source_details).merge(ref: T.must(new_tag).tag)
         end
 
         # Otherwise return the original source

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-bundler
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: parallel
   requirement: !ruby/object:Gem::Requirement
@@ -354,7 +354,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib