dependabot-common 0.302.0 → 0.304.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: af1001294afd1ae8cf19fdd8bb1c37b56448db3b6f23e9d31c7185e28ee9d5f7
-  data.tar.gz: 2d5943a83497504e6f54a104517246525ba506f8a90d20f2ddf1da8bb07c871f
+  metadata.gz: 6bbfade51beac4689cd6b9e1fc06da529c4559a682daf9665b1a8a30105e5f80
+  data.tar.gz: e5877835ffdd8f8bb7a6956b410f3928f8be6f96907f2db0f07f67b683d6ab22
 SHA512:
-  metadata.gz: 4ad4383f74288d63a6b738fc918e7527e0e5f4c893f85d139ddcc3c62181e4e24fca1de34ecd33ada8d471076b6fcfd322132f2e140e3b371e33a66c1848f12c
-  data.tar.gz: f6aacd9c4529634181a6a526b6e273a9150e28b9912212da75752dbf7655350ddc510c7ff9927a7e7b704ddc5661986296636c441ac044eaea95a64bab6d0e23
+  metadata.gz: 72303ea39dfcf5f6497062bdac90a943b29ecc9406ba913bc47c981405ecfd0bd0d71b98a9d33cbec68d453634037c26c311de71162c138f472747482f7be7c7
+  data.tar.gz: a33afc379842f423ab4c6606b97e4ef141ba95a417f011f5b1f8530770400a2c0bdc163ac0e465ff00ffdf57963e6b4d304e7d10364cac09484a4968ce00dd4b

data/lib/dependabot/package/package_details.rb

@@ -15,15 +15,17 @@ module Dependabot
       sig do
         params(
           dependency: Dependabot::Dependency,
-          releases: T::Array[Dependabot::Package::PackageRelease]
+          releases: T::Array[Dependabot::Package::PackageRelease],
+          dist_tags: T.nilable(T::Hash[String, String])
         ).void
       end
-      def initialize(dependency:, releases: [])
+      def initialize(dependency:, releases: [], dist_tags: nil)
         @dependency = T.let(dependency, Dependabot::Dependency)
         @releases = T.let(
           releases.sort_by(&:version).reverse,
           T::Array[Dependabot::Package::PackageRelease]
         )
+        @dist_tags = T.let(dist_tags, T.nilable(T::Hash[String, String]))
       end
 
       sig { returns(Dependabot::Dependency) }
@@ -31,6 +33,9 @@ module Dependabot
 
       sig { returns(T::Array[Dependabot::Package::PackageRelease]) }
       attr_reader :releases
+
+      sig { returns(T.nilable(T::Hash[String, String])) }
+      attr_reader :dist_tags
     end
   end
 end

data/lib/dependabot/package/package_latest_version_finder.rb

@@ -10,7 +10,6 @@ require "dependabot/security_advisory"
 require "dependabot/dependency"
 require "dependabot/update_checkers/version_filters"
 require "dependabot/registry_client"
-require "dependabot/bundler"
 require "dependabot/package/package_details"
 require "dependabot/package/release_cooldown_options"
 
@@ -121,7 +120,7 @@ module Dependabot
         params(language_version: T.nilable(T.any(String, Version)))
           .returns(T.nilable(Dependabot::Version))
       end
-      def fetch_latest_version(language_version:)
+      def fetch_latest_version(language_version: nil)
         version_hashes = available_versions
         return unless version_hashes
 
@@ -130,10 +129,15 @@ module Dependabot
         versions = filter_unsupported_versions(version_hashes, language_version)
         versions = filter_prerelease_versions(versions)
         versions = filter_ignored_versions(versions)
-
+        versions = apply_post_fetch_latest_versions_filter(versions)
         versions.max
       end
 
+      sig { params(versions: T::Array[Dependabot::Version]).returns(T::Array[Dependabot::Version]) }
+      def apply_post_fetch_latest_versions_filter(versions)
+        versions
+      end
+
       sig do
         params(language_version: T.nilable(T.any(String, Version)))
           .returns(T.nilable(Dependabot::Version))
@@ -148,7 +152,7 @@ module Dependabot
         versions = filter_prerelease_versions(versions)
         versions = filter_ignored_versions(versions)
         versions = filter_out_of_range_versions(versions)
-
+        versions = apply_post_fetch_latest_versions_filter(versions)
         versions.max
       end
 

data/lib/dependabot/package/package_release.rb

@@ -16,33 +16,38 @@ module Dependabot
         params(
           version: Dependabot::Version,
           released_at: T.nilable(Time),
+          latest: T::Boolean,
           yanked: T::Boolean,
           yanked_reason: T.nilable(String),
           downloads: T.nilable(Integer),
           url: T.nilable(String),
           package_type: T.nilable(String),
-          language: T.nilable(Dependabot::Package::PackageLanguage)
-        )
-          .void
+          language: T.nilable(Dependabot::Package::PackageLanguage),
+          details: T::Hash[String, T.untyped]
+        ).void
       end
       def initialize(
         version:,
         released_at: nil,
+        latest: false,
         yanked: false,
         yanked_reason: nil,
         downloads: nil,
         url: nil,
         package_type: nil,
-        language: nil
+        language: nil,
+        details: {}
       )
         @version = T.let(version, Dependabot::Version)
         @released_at = T.let(released_at, T.nilable(Time))
+        @latest = T.let(latest, T::Boolean)
         @yanked = T.let(yanked, T::Boolean)
         @yanked_reason = T.let(yanked_reason, T.nilable(String))
         @downloads = T.let(downloads, T.nilable(Integer))
         @url = T.let(url, T.nilable(String))
         @package_type = T.let(package_type, T.nilable(String))
         @language = T.let(language, T.nilable(Dependabot::Package::PackageLanguage))
+        @details = T.let(details, T::Hash[String, T.untyped])
       end
 
       sig { returns(Dependabot::Version) }
@@ -51,6 +56,9 @@ module Dependabot
       sig { returns(T.nilable(Time)) }
       attr_reader :released_at
 
+      sig { returns(T::Boolean) }
+      attr_reader :latest
+
       sig { returns(T::Boolean) }
       attr_reader :yanked
 
@@ -69,6 +77,9 @@ module Dependabot
       sig { returns(T.nilable(Dependabot::Package::PackageLanguage)) }
       attr_reader :language
 
+      sig { returns(T::Hash[String, T.untyped]) }
+      attr_reader :details
+
       sig { returns(T::Boolean) }
       def yanked?
         @yanked

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.302.0"
+  VERSION = "0.304.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.302.0
+  version: 0.304.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-20 00:00:00.000000000 Z
+date: 2025-04-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -202,28 +202,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '1.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+- !ruby/object:Gem::Dependency
+  name: opentelemetry-logs-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: opentelemetry-metrics-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: parser
   requirement: !ruby/object:Gem::Requirement
@@ -264,14 +278,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.11577
+        version: 0.5.11952
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.5.11577
+        version: 0.5.11952
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -432,14 +446,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.5
+        version: 0.8.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.5
+        version: 0.8.7
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -614,7 +628,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.302.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.304.0
 post_install_message:
 rdoc_options: []
 require_paths: