dependabot-common 0.233.0 → 0.235.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba05ac04f06978df28a0ffbecc810d6671c19143b3269e9d4193de876c79468b
-  data.tar.gz: 2bae619b79ec71ebc2374fb9aec7e97143b6c3feeac3cd0ebc76bf32ba3dbea9
+  metadata.gz: 0b22cec48025b20921f000f63975cfc9db22dac670fa8ef6710fda754c288f68
+  data.tar.gz: 901b6246fde924caa2adfdcba0bc19dbd86833133c6cf951967024b656f68918
 SHA512:
-  metadata.gz: d8d4069e12c86a96b798f4ec75ecd60b86f6a48ac7062a8d26375712af2bc226539363cb4a9796d0e353b338205b01e2e926bd972a30724110ca610f7642e3aa
-  data.tar.gz: e40dfea60323c3105a743afaa6a908637ee37e5fa5ea2fbc2d9892637e301f5aa44c489afd22ae7369739a4ba8a1510eda3614c048a35a4c4df3435720ea65a0
+  metadata.gz: 819445f789764166001ff2f6ce532e6bd60ecb1a644eb4bb20ec00a15c433c58608af56e3c75bbccba479c2f6b81fd415298083f9d4e74c24ba382881a35280c
+  data.tar.gz: 3b5f7aa169756240055ded3136f8daae04cc52129a42f0566eddc90232a302427b889ef512534f5e865609d7a7ba526f82deb7cea2b59138c4533e61fa01971a

data/lib/dependabot/errors.rb

@@ -5,7 +5,7 @@ require "dependabot/utils"
 
 module Dependabot
   class DependabotError < StandardError
-    BASIC_AUTH_REGEX = %r{://(?<auth>[^:]*:[^@%\s]+(@|%40))}
+    BASIC_AUTH_REGEX = %r{://(?<auth>[^:@]*:[^@%\s/]+(@|%40))}
     # Remove any path segment from fury.io sources
     FURY_IO_PATH_REGEX = %r{fury\.io/(?<path>.+)}
 
@@ -54,6 +54,15 @@ module Dependabot
   # Repo level errors #
   #####################
 
+  class DirectoryNotFound < DependabotError
+    attr_reader :directory_name
+
+    def initialize(directory_name, msg = nil)
+      @directory_name = directory_name
+      super(msg)
+    end
+  end
+
   class BranchNotFound < DependabotError
     attr_reader :branch_name
 

data/lib/dependabot/file_fetchers/base.rb

@@ -194,7 +194,7 @@ module Dependabot
       def repo_contents(dir: ".", ignore_base_directory: false,
                         raise_errors: true, fetch_submodules: false)
         dir = File.join(directory, dir) unless ignore_base_directory
-        path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
+        path = Pathname.new(dir).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
         @repo_contents[dir] ||= if repo_contents_path
@@ -309,6 +309,8 @@ module Dependabot
 
         _fetch_repo_contents_fully_specified(provider, repo, tmp_path, commit)
       rescue *CLIENT_NOT_FOUND_ERRORS
+        raise Dependabot::DirectoryNotFound, directory if path == directory.gsub(%r{^/*}, "")
+
         result = raise_errors ? -> { raise } : -> { [] }
         retrying ||= false
 

data/lib/dependabot/file_updaters/base.rb

@@ -1,18 +1,45 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 module Dependabot
   module FileUpdaters
     class Base
-      attr_reader :dependencies, :dependency_files, :repo_contents_path,
-                  :credentials, :options
+      extend T::Sig
+      extend T::Helpers
+      abstract!
+
+      sig { returns(T::Array[Dependabot::Dependency]) }
+      attr_reader :dependencies
+
+      sig { returns(T::Array[Dependabot::DependencyFile]) }
+      attr_reader :dependency_files
+
+      sig { returns(T.nilable(String)) }
+      attr_reader :repo_contents_path
 
+      sig { returns(T::Array[T::Hash[String, String]]) }
+      attr_reader :credentials
+
+      sig { returns(T::Hash[Symbol, T.untyped]) }
+      attr_reader :options
+
+      sig { overridable.returns(String) }
       def self.updated_files_regex
         raise NotImplementedError
       end
 
-      def initialize(dependencies:, dependency_files:, repo_contents_path: nil,
-                     credentials:, options: {})
+      sig do
+        params(
+          dependencies: T::Array[Dependabot::Dependency],
+          dependency_files: T::Array[Dependabot::DependencyFile],
+          credentials: T::Array[T::Hash[String, String]],
+          repo_contents_path: T.nilable(String),
+          options: T::Hash[Symbol, T.untyped]
+        ).void
+      end
+      def initialize(dependencies:, dependency_files:, credentials:, repo_contents_path: nil, options: {})
         @dependencies = dependencies
         @dependency_files = dependency_files
         @repo_contents_path = repo_contents_path
@@ -22,31 +49,36 @@ module Dependabot
         check_required_files
       end
 
+      sig { overridable.returns(T::Array[::Dependabot::DependencyFile]) }
       def updated_dependency_files
         raise NotImplementedError
       end
 
       private
 
+      sig { overridable.void }
       def check_required_files
         raise NotImplementedError
       end
 
+      sig { params(filename: String).returns(T.nilable(Dependabot::DependencyFile)) }
       def get_original_file(filename)
         dependency_files.find { |f| f.name == filename }
       end
 
+      sig { params(file: Dependabot::DependencyFile).returns(T::Boolean) }
       def file_changed?(file)
         dependencies.any? { |dep| requirement_changed?(file, dep) }
       end
 
+      sig { params(file: Dependabot::DependencyFile, dependency: Dependabot::Dependency).returns(T::Boolean) }
       def requirement_changed?(file, dependency)
-        changed_requirements =
-          dependency.requirements - dependency.previous_requirements
+        changed_requirements = dependency.requirements - dependency.previous_requirements
 
         changed_requirements.any? { |f| f[:file] == file.name }
       end
 
+      sig { params(file: Dependabot::DependencyFile, content: String).returns(Dependabot::DependencyFile) }
       def updated_file(file:, content:)
         updated_file = file.dup
         updated_file.content = content

data/lib/dependabot/pull_request_creator/branch_namer/solo_strategy.rb

@@ -62,7 +62,7 @@ module Dependabot
         def property_name
           @property_name ||= dependencies.first.requirements
                                          .find { |r| r.dig(:metadata, :property_name) }
-                             &.dig(:metadata, :property_name)
+                                         &.dig(:metadata, :property_name)
 
           raise "No property name!" unless @property_name
 
@@ -72,7 +72,7 @@ module Dependabot
         def dependency_set
           @dependency_set ||= dependencies.first.requirements
                                           .find { |r| r.dig(:metadata, :dependency_set) }
-                              &.dig(:metadata, :dependency_set)
+                                          &.dig(:metadata, :dependency_set)
 
           raise "No dependency set!" unless @dependency_set
 

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -416,7 +416,7 @@ module Dependabot
       def property_name
         @property_name ||= dependencies.first.requirements
                                        .find { |r| r.dig(:metadata, :property_name) }
-                           &.dig(:metadata, :property_name)
+                                       &.dig(:metadata, :property_name)
 
         raise "No property name!" unless @property_name
 
@@ -426,7 +426,7 @@ module Dependabot
       def dependency_set
         @dependency_set ||= dependencies.first.requirements
                                         .find { |r| r.dig(:metadata, :dependency_set) }
-                            &.dig(:metadata, :dependency_set)
+                                        &.dig(:metadata, :dependency_set)
 
         raise "No dependency set!" unless @dependency_set
 

data/lib/dependabot/pull_request_creator/pr_name_prefixer.rb

@@ -393,8 +393,8 @@ module Dependabot
 
         @recent_codecommit_commit_messages.commits
                                           .find { |c| c.author.email == dependabot_email }
-          &.message
-          &.strip
+                                          &.message
+                                          &.strip
       end
 
       def azure_commit_author_email(commit)

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.233.0"
+  VERSION = "0.235.0"
 end

data/lib/wildcard_matcher.rb

@@ -1,6 +1,8 @@
 # typed: strong
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 class WildcardMatcher
   extend T::Sig
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.233.0
+  version: 0.235.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-10-06 00:00:00.000000000 Z
+date: 2023-10-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -514,7 +514,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.233.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.235.0
 post_install_message: 
 rdoc_options: []
 require_paths: