dependabot-common 0.281.0 → 0.283.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8cf43bf846f381acbdd67fdc881b863d9f121fbea860830652d103d33969de56
-  data.tar.gz: 4cccc62a8f19b7109af5db7b20570868a9adfe792e2ffcec9547eb7e7940eba1
+  metadata.gz: 23990d60058d974f2358748f5a1a9cebeeb9b0aa41bcff87c8d5c0a82f162639
+  data.tar.gz: 2f8c3980648d02dc8bba63d1b8dde5493293245366d651343a8fac785f65b7f2
 SHA512:
-  metadata.gz: 33ce2db75a34f97dbc9c55a45f27b16204992363e9c2a75c5e56902d9e6287dce9d677b877ec8736de792a56307a4748124fb2ca4ace6e1e74e2e5c95c6fff69
-  data.tar.gz: be75d245fea75411d2d4db23e71aabed5a97ca598957b28acb4b857bf723ee34c89c397407bde397d67c8356d043c388a9aecffc901a7fdc36cffa32872d88ea
+  metadata.gz: 2dd34fccf3d316a0b5b9295a0cdf05be1b7fd577a6cc8701ccb91084bef512a393d1347059ccc0bc2c4affeacaf7e6d2e2b9d4c4432ff111ce32597b50a6ba7e
+  data.tar.gz: 2f8de1d6775ccbd267c25ab3aff79a00247e21ab57a316091cc5419e1fde50fcdd1f5f376aa1954f8aa02e56e105106f4229bc9df98e152df9266013bc7c027a

data/lib/dependabot/git_metadata_fetcher.rb

@@ -235,7 +235,7 @@ module Dependabot
 
       uri.scheme = "https" if uri.scheme != "http"
 
-      if !uri.password && cred && cred.fetch("username", nil) && cred.fetch("password", nil)
+      if !uri.password && cred&.fetch("username", nil) && cred.fetch("password", nil)
         # URI doesn't have authentication details, but we have credentials
         uri.user = URI.encode_www_form_component(cred["username"])
         uri.password = URI.encode_www_form_component(cred["password"])

data/lib/dependabot/pull_request_creator/branch_namer/base.rb

@@ -83,6 +83,9 @@ module Dependabot
 
         sig { params(ref: String).returns(String) }
         def dedup_existing_branches(ref)
+          Dependabot.logger.debug(
+            "Dependabot::PullRequestCreator::dedup_existing_branches::ref : #{ref}"
+          )
           return ref unless existing_branches.include?(ref)
 
           i = 1
@@ -92,6 +95,10 @@ module Dependabot
             new_ref = "#{ref}-#{i}"
           end
 
+          Dependabot.logger.debug(
+            "Dependabot::PullRequestCreator::dedup_existing_branches::new_ref : #{new_ref}"
+          )
+
           new_ref
         end
 

data/lib/dependabot/pull_request_creator/branch_namer.rb

@@ -77,6 +77,12 @@ module Dependabot
 
       sig { returns(Dependabot::PullRequestCreator::BranchNamer::Base) }
       def strategy
+        if Dependabot::Experiments.enabled?(:dedup_branch_names) && existing_branches
+          Dependabot.logger.debug(
+            "Dependabot::PullRequestCreator::strategy : #{existing_branches}"
+          )
+        end
+
         @strategy ||= T.let(
           if dependency_group.nil?
             SoloStrategy.new(

data/lib/dependabot/pull_request_creator.rb

@@ -396,6 +396,12 @@ module Dependabot
 
     sig { returns(Dependabot::PullRequestCreator::BranchNamer) }
     def branch_namer
+      if Dependabot::Experiments.enabled?(:dedup_branch_names) && existing_branches
+        Dependabot.logger.debug(
+          "Dependabot::PullRequestCreator::branch_namer : #{existing_branches}"
+        )
+      end
+
       @branch_namer ||= T.let(
         BranchNamer.new(
           dependencies: dependencies,

data/lib/dependabot/version.rb

@@ -52,7 +52,7 @@ module Dependabot
     def ignored_minor_versions
       parts = to_semver.split(".")
       version_parts = parts.fill("0", parts.length...2)
-      lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + ["a"]
+      lower_parts = version_parts.first(1) + [version_parts[1].to_i + 1] + [lowest_prerelease_suffix]
       upper_parts = version_parts.first(0) + [version_parts[0].to_i + 1]
       lower_bound = ">= #{lower_parts.join('.')}"
       upper_bound = "< #{upper_parts.join('.')}"
@@ -63,10 +63,15 @@ module Dependabot
     sig { overridable.returns(T::Array[String]) }
     def ignored_major_versions
       version_parts = to_semver.split(".")
-      lower_parts = [version_parts[0].to_i + 1] + ["a"]
+      lower_parts = [version_parts[0].to_i + 1] + [lowest_prerelease_suffix]
       lower_bound = ">= #{lower_parts.join('.')}"
 
       [lower_bound]
     end
+
+    sig { returns(String) }
+    def lowest_prerelease_suffix
+      "a"
+    end
   end
 end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.281.0"
+  VERSION = "0.283.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.281.0
+  version: 0.283.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-10-17 00:00:00.000000000 Z
+date: 2024-10-31 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -396,28 +396,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.65.0
+        version: 1.67.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.65.0
+        version: 1.67.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.21.0
+        version: 1.22.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.21.0
+        version: 1.22.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
@@ -614,7 +614,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.281.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.283.0
 post_install_message: 
 rdoc_options: []
 require_paths: