dependabot-cargo 0.361.1 → 0.361.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 937678efa6d617b2cecb6eabe481558174eb9096c5335fc8df7837e712f6214c
-  data.tar.gz: 31aeb042f06741c7d3664dcd369cfb9359a18daf0fd96edc1de44b5ac3b1a04e
+  metadata.gz: e0abd3ef2c3d113bfab53f19ef6597db84de81080c1c779f5ebb12b4266fdc00
+  data.tar.gz: 975df7676676e3b1c226541dc41bf41e72d71d72b76b6c15d328161183fd450f
 SHA512:
-  metadata.gz: 7434acaa56e6610b49de10e2f47a783c93c2363bdab9ce52bedc6cf2302fe65370c371882d3f013d9a7126bae629258dd4435529e329f91a24d46ed293eef68b
-  data.tar.gz: 9229cbc207a735eb6852f06df90c6cd821fd41cf48e52ae5113b136a7b91d240ef91180383008283da4093f9b84f4e4b24b1ac9912e671c579023d517ce7b964
+  metadata.gz: 937d7716bc6985dbbc231d414c26ed85993e74fcba117035855430d1b285782ba3bb2a7783bc5eb0c77d6e1f600fce5ad441ac60e299ad8cb3d351aa41802ccb
+  data.tar.gz: 39ca24f366cb308d071073649e9b9a5a461a1ee1162e96d37742657c171f605ad81af82d9be54e329c9328b47ec6c06b79549c9881d195a3b2bb11fe0ac8070c

data/lib/dependabot/cargo/requirement.rb

@@ -48,6 +48,52 @@ module Dependabot
         [new(requirement_string)]
       end
 
+      # Parses a pre-commit Rust additional_dependency string.
+      # Formats: "package_name:version", "cli:package_name:version"
+      sig { params(dep_string: String).returns(T.nilable(T::Hash[Symbol, T.untyped])) }
+      def self.parse_dep_string(dep_string)
+        stripped = dep_string.strip
+        return nil if stripped.empty?
+
+        parts = stripped.split(":", -1)
+
+        cli = false
+        if parts.first&.downcase == "cli"
+          return nil if parts.length < 3
+
+          cli = true
+          parts.shift
+        end
+
+        return nil if parts.length < 2
+
+        name = T.must(parts[0])
+        constraint = T.must(parts[1..]).join(":")
+        return nil if name.empty? || constraint.strip.empty?
+
+        constraint = constraint.strip
+        version = extract_version(constraint)
+
+        {
+          name: name,
+          normalised_name: name,
+          version: version,
+          requirement: constraint,
+          extras: cli ? "cli" : nil
+        }
+      end
+
+      sig { params(constraint: String).returns(T.nilable(String)) }
+      def self.extract_version(constraint)
+        version_part = constraint.sub(/\A(?:[~^]|[><=]+)\s*/, "")
+
+        return nil unless Cargo::Version.correct?(version_part)
+
+        version_part
+      end
+
+      private_class_method :extract_version
+
       sig { params(requirements: T.nilable(T.any(String, T::Array[String]))).void }
       def initialize(*requirements)
         requirements = requirements.flatten.flat_map do |req_string|

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.361.1
+  version: 0.361.2
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.361.1
+        version: 0.361.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.361.1
+        version: 0.361.2
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -266,7 +266,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.361.1
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.361.2
 rdoc_options: []
 require_paths:
 - lib