dependabot-common 0.280.0 → 0.282.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ae924a2cf736a7ed5602dfe97f4a3b55005de4ea62414cc3873a593b22e5b24
-  data.tar.gz: 610e19d87470728a685020743597e87495f7d61a7ae29b6e6076b0530bd5dc5b
+  metadata.gz: bab04f92d1012d9c1c6ad35a8a7d1dd1fc6c44871574575fca3a194d77e09d91
+  data.tar.gz: 2e55d5191c95ad599cb84cb2a5da47afce5faca28401cb259e87ccae89e0dcfd
 SHA512:
-  metadata.gz: 45eb26b84f90aa08d55407334ca8be24957d07d0f14d5d31eceb4a6d7e9f1d20b8c086f42fad5cabd26f4bc8e47b4c0228db16fb63cb033738e3a55c5c980951
-  data.tar.gz: 6412e967b632dd03177156b5f744ebcf8a014712832e62a89eb3cad362cbe1e3f14e570516d3201c26813346dd61744e58203fd7a2b9c7a206bcb89429388fd7
+  metadata.gz: bce2900b9b4f729e4cc8696636b13e33aef9b6791d727070d88b33e4909437811a1baea39b09272911a5929c4addd002e8177e6b6ad0061c43c1901805c9da13
+  data.tar.gz: 2dd3ba8fdf0810637da059b6587658fc6cb0800defa344c3bf724286f2cc63146af79fbd27e6dc0509ef85517e433b1479c13607bbf305ff36e0e49d32b5a89c

data/lib/dependabot/git_metadata_fetcher.rb

@@ -235,7 +235,7 @@ module Dependabot
 
       uri.scheme = "https" if uri.scheme != "http"
 
-      if !uri.password && cred && cred.fetch("username", nil) && cred.fetch("password", nil)
+      if !uri.password && cred&.fetch("username", nil) && cred.fetch("password", nil)
         # URI doesn't have authentication details, but we have credentials
         uri.user = URI.encode_www_form_component(cred["username"])
         uri.password = URI.encode_www_form_component(cred["password"])

data/lib/dependabot/metadata_finders/base/release_finder.rb

@@ -75,7 +75,7 @@ module Dependabot
           releases_with_dependency_name =
             releases
             .reject { |r| r.tag_name.nil? }
-            .select { |r| r.tag_name.downcase.include?(dep_prefix) }
+            .select { |r| r.tag_name.start_with?(dep_prefix) }
 
           return releases unless releases_with_dependency_name.any?
 

data/lib/dependabot/pull_request_creator/branch_namer/base.rb

@@ -83,6 +83,9 @@ module Dependabot
 
         sig { params(ref: String).returns(String) }
         def dedup_existing_branches(ref)
+          Dependabot.logger.debug(
+            "Dependabot::PullRequestCreator::dedup_existing_branches::ref : #{ref}"
+          )
           return ref unless existing_branches.include?(ref)
 
           i = 1
@@ -92,6 +95,10 @@ module Dependabot
             new_ref = "#{ref}-#{i}"
           end
 
+          Dependabot.logger.debug(
+            "Dependabot::PullRequestCreator::dedup_existing_branches::new_ref : #{new_ref}"
+          )
+
           new_ref
         end
 

data/lib/dependabot/pull_request_creator/branch_namer.rb

@@ -77,6 +77,12 @@ module Dependabot
 
       sig { returns(Dependabot::PullRequestCreator::BranchNamer::Base) }
       def strategy
+        if Dependabot::Experiments.enabled?(:dedup_branch_names) && existing_branches
+          Dependabot.logger.debug(
+            "Dependabot::PullRequestCreator::strategy : #{existing_branches}"
+          )
+        end
+
         @strategy ||= T.let(
           if dependency_group.nil?
             SoloStrategy.new(

data/lib/dependabot/pull_request_creator.rb

@@ -396,6 +396,12 @@ module Dependabot
 
     sig { returns(Dependabot::PullRequestCreator::BranchNamer) }
     def branch_namer
+      if Dependabot::Experiments.enabled?(:dedup_branch_names) && existing_branches
+        Dependabot.logger.debug(
+          "Dependabot::PullRequestCreator::branch_namer : #{existing_branches}"
+        )
+      end
+
       @branch_namer ||= T.let(
         BranchNamer.new(
           dependencies: dependencies,

data/lib/dependabot/version.rb

@@ -52,7 +52,7 @@ module Dependabot
     def ignored_minor_versions
       parts = to_semver.split(".")
       version_parts = parts.fill("0", parts.length...2)
-      lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + ["a"]
+      lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + [lowest_prerelease_suffix]
       upper_parts = version_parts.first(0) + [version_parts[0].to_i + 1]
       lower_bound = ">= #{lower_parts.join('.')}"
       upper_bound = "< #{upper_parts.join('.')}"
@@ -63,10 +63,15 @@ module Dependabot
     sig { overridable.returns(T::Array[String]) }
     def ignored_major_versions
       version_parts = to_semver.split(".")
-      lower_parts = [version_parts[0].to_i + 1] + ["a"]
+      lower_parts = [version_parts[0].to_i + 1] + [lowest_prerelease_suffix]
       lower_bound = ">= #{lower_parts.join('.')}"
 
       [lower_bound]
     end
+
+    sig { returns(String) }
+    def lowest_prerelease_suffix
+      "a"
+    end
   end
 end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.280.0"
+  VERSION = "0.282.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.280.0
+  version: 0.282.0
 platform: ruby
 authors:
 - Dependabot
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-10-10 00:00:00.000000000 Z
+date: 2024-10-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -396,28 +396,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.65.0
+        version: 1.67.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.65.0
+        version: 1.67.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.21.0
+        version: 1.22.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.21.0
+        version: 1.22.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
@@ -614,8 +614,8 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.280.0
-post_install_message:
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.282.0
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -631,7 +631,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 3.3.7
 requirements: []
 rubygems_version: 3.5.9
-signing_key:
+signing_key: 
 specification_version: 4
 summary: Shared code used across Dependabot Core
 test_files: []