dependabot-cargo 0.308.0 → 0.309.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/cargo/update_checker/latest_version_finder.rb +24 -7
  3. metadata +5 -5
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b830b897ee246742059ad0d56924be8b7ca0c646b9f0777637f1f0c608752054
4
- data.tar.gz: 4db462646457521b6256f413d149a2ca3bf2ad768e243485f938528a1b740808
3
+ metadata.gz: 1c4a5a9c8b93aa864400eba7d8e9f51fae3cce71fcd7ccd14c35686eeb23497b
4
+ data.tar.gz: fd5ec3bfc4c57378d7641727f6dfbc2b3bc801487ee383745e26e24ca9d2e244
5
5
  SHA512:
6
- metadata.gz: f6954c5b0a79e3764f1050f037b877a4f934de71db5af4630bcbd9c50823e457e596c28a8e83dcdaf966b63ba851c431e304d8efddf170ee6912f77ee4b74056
7
- data.tar.gz: 66b3541bd6f79a1787b3083051e59f2693a2bb57932a97f7f59052abdfa33e3cd85b138de68eff778a312f46c924fd36e0a7924aa8ccbd86af1be487ea6666e0
6
+ metadata.gz: 55681667ecff17e2e2cbd9660a65c700b36d21714c9ee0201912d4071c1c1bea61c07d13a73baa125ff304fee0e31e63c0b7adb24bf0cd51d94d83ea80b426d9
7
+ data.tar.gz: efd51669f1c7643876b6a8dcd7f203f2daafe3b16e5a16d709edde5ca092d50fb750e0f66ed8a8a74501de05d9211986ae5831fbe50225f35e8b81c040c2791f
data/lib/dependabot/cargo/update_checker/latest_version_finder.rb CHANGED
@@ -1,4 +1,4 @@
1
- # typed: true
1
+ # typed: strict
2
2
  # frozen_string_literal: true
3
3
 
4
4
  require "excon"
@@ -26,12 +26,20 @@ module Dependabot
26
26
  ).fetch
27
27
  end
28
28
 
29
- def latest_version
30
- @latest_version ||= fetch_latest_version
29
+ sig do
30
+ override.params(language_version: T.nilable(T.any(String, Dependabot::Version)))
31
+ .returns(T.nilable(Dependabot::Version))
32
+ end
33
+ def latest_version(language_version: nil)
34
+ @latest_version ||= fetch_latest_version(language_version: language_version)
31
35
  end
32
36
 
33
- def lowest_security_fix_version
34
- @lowest_security_fix_version ||= fetch_lowest_security_fix_version(language_version: nil)
37
+ sig do
38
+ override.params(language_version: T.nilable(T.any(String, Dependabot::Version)))
39
+ .returns(T.nilable(Dependabot::Version))
40
+ end
41
+ def lowest_security_fix_version(language_version: nil)
42
+ @lowest_security_fix_version ||= fetch_lowest_security_fix_version(language_version: language_version)
35
43
  end
36
44
 
37
45
  protected
@@ -53,14 +61,23 @@ module Dependabot
53
61
 
54
62
  private
55
63
 
64
+ sig { returns(Dependabot::Dependency) }
56
65
  attr_reader :dependency
66
+ sig { returns(T::Array[Dependabot::DependencyFile]) }
57
67
  attr_reader :dependency_files
68
+ sig { returns(T::Array[Dependabot::Credential]) }
58
69
  attr_reader :credentials
70
+ sig { returns(T::Array[String]) }
59
71
  attr_reader :ignored_versions
72
+ sig { returns(T::Array[Dependabot::SecurityAdvisory]) }
60
73
  attr_reader :security_advisories
61
74
 
62
- def apply_post_fetch_lowest_security_fix_versions_filter(versions)
63
- filter_prerelease_versions(versions)
75
+ sig do
76
+ override.params(releases: T::Array[Dependabot::Package::PackageRelease])
77
+ .returns(T::Array[Dependabot::Package::PackageRelease])
78
+ end
79
+ def apply_post_fetch_lowest_security_fix_versions_filter(releases)
80
+ filter_prerelease_versions(releases)
64
81
  end
65
82
  end
66
83
  end
metadata CHANGED
@@ -1,13 +1,13 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-cargo
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.308.0
4
+ version: 0.309.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  bindir: bin
9
9
  cert_chain: []
10
- date: 2025-04-12 00:00:00.000000000 Z
10
+ date: 2025-04-17 00:00:00.000000000 Z
11
11
  dependencies:
12
12
  - !ruby/object:Gem::Dependency
13
13
  name: dependabot-common
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.308.0
18
+ version: 0.309.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.308.0
25
+ version: 0.309.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -265,7 +265,7 @@ licenses:
265
265
  - MIT
266
266
  metadata:
267
267
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
268
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.308.0
268
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.309.0
269
269
  rdoc_options: []
270
270
  require_paths:
271
271
  - lib