dependabot-common 0.247.0 → 0.249.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c92ad460f0349deb2012116104501e807bd6d061fe4f5a96a0cfbd8128d3b78b
-  data.tar.gz: f0668f3d3a2106c3245416727393e8a0a2e284fa1f44d05b40d531c4b31b2f38
+  metadata.gz: 217c5c870b824a19e49395f0ae3ecb4a01326f04c48acea4014aaca26ba7735d
+  data.tar.gz: 9a587a5c8c08853903d2e3ed5aec1ebdd943da45d82bbe1f7c2a83187a241d3e
 SHA512:
-  metadata.gz: 8a12d9ebf2c2ab8075e431704cdd3733c854b91b4c0abe761e33d8a9b64a18d9ecb303d063d11f5e0f10200a4b0199409e28ff0e36593eb0288163074cb2e74a
-  data.tar.gz: cb05c3efac2f10c2d6eea5758d0d50eed8cd77d7681c3d0a505b94f43a3cccb2fd436efdbd08bab73cd2940f8dfbba91e61dbbea6a929054d7318dd71d3d7ae3
+  metadata.gz: 87a101be9e06ab4602930b296950db93b8b27ae81319a3ba1523f42866f7e2ea4dde7320ccfc69f604bd87c2aa720023716ca92f1e42bea8f4aeab0ecdde7045
+  data.tar.gz: efdcc0bc5bc3a49cd0f4746a490582cf07884c3a4a4618a784d40aa7f09edf8dcc28b3af05949e39fded10a0450ce30a6bc87ac9d489eeb1baa7e2a38f225c5e

data/lib/dependabot/clients/bitbucket_with_retries.rb

@@ -1,6 +1,8 @@
 # typed: strict
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 require_relative "bitbucket"
 
 module Dependabot

data/lib/dependabot/clients/codecommit.rb

@@ -82,7 +82,10 @@ module Dependabot
           repo: String, commit: T.nilable(String),
           path: T.nilable(String)
         )
-          .returns(Aws::CodeCommit::Types::GetFolderOutput)
+          # See PR 9344: should .returns(Seahorse::Client::Response)
+          # but it not extend Delegator, unblocking until shim or
+          # another fix is implemented
+          .returns(T.untyped)
       end
       def fetch_repo_contents(repo, commit = nil, path = nil)
         actual_path = path

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -242,7 +242,7 @@ module Dependabot
         updates = dependencies.map(&:name).uniq.count
 
         if source.directories
-          "bump the #{T.must(dependency_group).name} across #{T.must(directories_with_updates).count} " \
+          "bump the #{T.must(dependency_group).name} group across #{T.must(directories_with_updates).count} " \
             "#{T.must(directories_with_updates).count > 1 ? 'directories' : 'directory'} " \
             "with #{updates} update#{'s' if updates > 1}"
         else
@@ -466,7 +466,7 @@ module Dependabot
 
           update_count = dependencies_in_directory.map(&:name).uniq.count
 
-          msg += "Bumps the #{T.must(dependency_group).name} " \
+          msg += "Bumps the #{T.must(dependency_group).name} group " \
                  "with #{update_count} update#{update_count > 1 ? 's' : ''} in the #{directory} directory:"
 
           msg += if update_count >= 5

data/lib/dependabot/requirements_updater/base.rb

@@ -0,0 +1,28 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+
+module Dependabot
+  module RequirementsUpdater
+    module Base
+      extend T::Sig
+      extend T::Helpers
+      extend T::Generic
+
+      Version = type_member { { upper: Gem::Version } }
+      Requirement = type_member { { upper: Gem::Requirement } }
+
+      interface!
+
+      sig { abstract.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      def updated_requirements; end
+
+      sig { abstract.returns(T::Class[Version]) }
+      def version_class; end
+
+      sig { abstract.returns(T::Class[Requirement]) }
+      def requirement_class; end
+    end
+  end
+end

data/lib/dependabot/update_checkers/base.rb

@@ -141,7 +141,7 @@ module Dependabot
         raise NotImplementedError, "#{self.class} must implement #lowest_security_fix_version"
       end
 
-      sig { overridable.returns(String) }
+      sig { overridable.returns(T.nilable(Dependabot::Version)) }
       def lowest_resolvable_security_fix_version
         raise NotImplementedError, "#{self.class} must implement #lowest_resolvable_security_fix_version"
       end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.247.0"
+  VERSION = "0.249.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.247.0
+  version: 0.249.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-03-14 00:00:00.000000000 Z
+date: 2024-03-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -562,6 +562,7 @@ files:
 - lib/dependabot/registry_client.rb
 - lib/dependabot/requirement.rb
 - lib/dependabot/requirements_update_strategy.rb
+- lib/dependabot/requirements_updater/base.rb
 - lib/dependabot/security_advisory.rb
 - lib/dependabot/shared_helpers.rb
 - lib/dependabot/simple_instrumentor.rb
@@ -582,7 +583,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.247.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.249.0
 post_install_message: 
 rdoc_options: []
 require_paths: