dependabot-cargo 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45898e2e894023fb481da89044263d6f4a3e6791719c40cc1413815ed5d3abf2
-  data.tar.gz: bd691e2c7daf7172a83dc39929e6cedd5e221b57edaac7b83b52d54e3235956a
+  metadata.gz: e3c076cf3eff1666f3013fb1f14527a0fc2ee7ebbbb1c5c39f44ea14791c238b
+  data.tar.gz: 3355e45e2e4b29238b096f1e9b171d22d267a2ebdcffe0d38e08250eca79aa1a
 SHA512:
-  metadata.gz: 6baf89c602bf3f9585415500d7020d6fa6b2437e87e51c0c8a94beca3bca91a7cbc09d8504449b8126a86b933e5b43413d70ead886377aaff3b2df5dde805c55
-  data.tar.gz: c19750334737189611ae01268d90bd0e3c759e64004ba2aad9acf25e6974f816fa3dd3a2640bb7898275aa42d09815429e737ddfe2621364d8f8e910f1382573
+  metadata.gz: 505c1c3c0e9a33b2bb85ea8a0512f0d3cf769c017a35f9de4d34efdd673acadd92c029b192c4a9ff3abc15940d1724db795aae3cebbcbb74373bb068be1ee0b1
+  data.tar.gz: a8f142ebf3dd3f37fb2421e8efe9e807a9141fa70ea1c1cf1effd919af5cee3da0533901d549780cc18441125824a79a088d189f3283b7c5e8aec6906e2033a4

data/lib/dependabot/cargo/update_checker.rb

@@ -221,7 +221,7 @@ module Dependabot
         # of the latest tag that looks like a version.
         if git_commit_checker.pinned_ref_looks_like_version?
           latest_tag = git_commit_checker.local_tag_for_latest_version(update_cooldown)
-          commit_sha = T.cast(latest_tag&.fetch(:commit_sha), T.nilable(String))
+          commit_sha = latest_tag && tag_commit_sha(latest_tag)
           return commit_sha || dependency.version
         end
 
@@ -242,7 +242,7 @@ module Dependabot
         if git_commit_checker.pinned_ref_looks_like_version? &&
            latest_git_tag_is_resolvable?
           new_tag = git_commit_checker.local_tag_for_latest_version(update_cooldown)
-          return T.cast(T.must(new_tag).fetch(:commit_sha), String)
+          return T.must(tag_commit_sha(T.must(new_tag)))
         end
 
         # If the dependency is pinned then there's nothing we can do.
@@ -271,7 +271,7 @@ module Dependabot
           dependency_files: dependency_files,
           dependency: dependency,
           unlock_requirement: true,
-          replacement_git_pin: T.cast(replacement_tag.fetch(:tag), String)
+          replacement_git_pin: tag_name(replacement_tag)
         ).prepared_dependency_files
 
         VersionResolver.new(
@@ -363,7 +363,7 @@ module Dependabot
         if git_commit_checker.pinned_ref_looks_like_version? &&
            latest_git_tag_is_resolvable?
           new_tag = T.must(git_commit_checker.local_tag_for_latest_version(update_cooldown))
-          return source_with_ref(T.must(dependency_source_details), T.cast(new_tag.fetch(:tag), String))
+          return source_with_ref(T.must(dependency_source_details), tag_name(new_tag))
         end
 
         # Otherwise return the original source
@@ -396,6 +396,20 @@ module Dependabot
         updated_source
       end
 
+      sig { params(tag: T::Hash[Symbol, Object]).returns(String) }
+      def tag_name(tag)
+        return tag.tag if tag.is_a?(Dependabot::GitTagDetails)
+
+        T.cast(tag.fetch(:tag), String)
+      end
+
+      sig { params(tag: T::Hash[Symbol, Object]).returns(T.nilable(String)) }
+      def tag_commit_sha(tag)
+        return tag.commit_sha if tag.is_a?(Dependabot::GitTagDetails)
+
+        T.cast(tag[:commit_sha], T.nilable(String))
+      end
+
       sig { returns(T::Boolean) }
       def git_dependency?
         git_commit_checker.git_dependency?

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -266,7 +266,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib