dependabot-common 0.309.0 → 0.311.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 10f070d6c3b5e109381e3c56635049cc30bcebbdfec2958cf7f29121402a1ebd
-  data.tar.gz: 1973d67a820a16c8d3b645602ccc34ac852fc916aa618a4910c2c2d056aef67d
+  metadata.gz: 896e658ef71b4518142ff132b8ab2f0f964cee4b69760ad3accc4f2c018d6f8a
+  data.tar.gz: d9273804a99bc6835fd9cd57bf3df0721204876281dc50b3ed1b3d47ae2fea2b
 SHA512:
-  metadata.gz: f4ba5d04950b7d0c9cf206a1f0e7f4922d6860cf4a60749a6559b74b2b96944785aa18c137592fe5e7cb1dd3bd2658f017966f7eb0c90e2deb9610a635dc4b32
-  data.tar.gz: 600b87611c5b30f1429a0bfa0de814b912579904d54f9d281659b41edc5d4abe03e8ff2c8b7971fb3aa46c259b62e8974fea16a6fa4fb7ce51fd0f62fbc547e6
+  metadata.gz: dff45877a4977abe2d27c2e1546a1b6eccd6f028bd49f33cfd608a6f3bae7370268bffc7dbb8ad52827070bdccecb6860c71dda204353838a006cbf1bdc21b5b
+  data.tar.gz: 97fae1b7cad856afe9b19686f7965d4c501b396b9172538e68908a8fb3dd28785847196e4dc65d67a44b8847c12be282cc43285e2d3a691ca6bb938823aac3b7

data/lib/dependabot/package/package_latest_version_finder.rb

@@ -19,6 +19,8 @@ module Dependabot
       extend T::Sig
       extend T::Helpers
 
+      DAY_IN_SECONDS = T.let(24 * 60 * 60, Integer)
+
       abstract!
 
       sig { returns(Dependabot::Dependency) }
@@ -160,7 +162,6 @@ module Dependabot
         return unless releases
 
         releases = filter_yanked_versions(releases)
-        releases = filter_by_cooldown(releases)
         releases = filter_unsupported_versions(releases, language_version)
         # versions = filter_prerelease_versions(versions)
         releases = Dependabot::UpdateCheckers::VersionFilters
@@ -211,14 +212,7 @@ module Dependabot
         return releases unless cooldown_enabled?
         return releases unless cooldown_options
 
-        current_version = dependency.version ? version_class.new(dependency.version) : nil
-
-        filtered = releases.reject do |release|
-          next false unless release.released_at
-
-          days = cooldown_days_for(current_version, release.version)
-          (Time.now.to_i - release.released_at.to_i) < (days * 24 * 60 * 60)
-        end
+        filtered = releases.reject { |release| in_cooldown_period?(release) }
 
         if releases.count > filtered.count
           Dependabot.logger.info("Filtered out #{releases.count - filtered.count} versions due to cooldown")
@@ -226,6 +220,19 @@ module Dependabot
         filtered
       end
 
+      sig { params(release: Dependabot::Package::PackageRelease).returns(T::Boolean) }
+      def in_cooldown_period?(release)
+        return false unless release.released_at
+
+        current_version = version_class.correct?(dependency.version) ? version_class.new(dependency.version) : nil
+        days = cooldown_days_for(current_version, release.version)
+
+        # Calculate the number of seconds passed since the release
+        passed_seconds = Time.now.to_i - release.released_at.to_i
+        # Check if the release is within the cooldown period
+        passed_seconds < days * DAY_IN_SECONDS
+      end
+
       sig do
         params(
           releases: T::Array[Dependabot::Package::PackageRelease],

data/lib/dependabot/shared_helpers.rb

@@ -90,7 +90,7 @@ module Dependabot
       sig { returns(String) }
       attr_reader :error_class
 
-      sig { returns(T::Hash[Symbol, String]) }
+      sig { returns(T::Hash[Symbol, T.untyped]) }
       attr_reader :error_context
 
       sig { returns(T.nilable(T::Array[String])) }
@@ -130,14 +130,14 @@ module Dependabot
       params(
         command: String,
         function: String,
-        args: T.any(T::Array[T.any(String, T::Array[T::Hash[String, T.untyped]])], T::Hash[Symbol, String]),
+        args: T.untyped,
         env: T.nilable(T::Hash[String, String]),
         stderr_to_stdout: T::Boolean,
         allow_unsafe_shell_command: T::Boolean,
         error_class: T.class_of(HelperSubprocessFailed),
         timeout: Integer
       )
-        .returns(T.nilable(T.any(String, T::Hash[String, T.untyped], T::Array[T::Hash[String, T.untyped]])))
+        .returns(T.untyped)
     end
     def self.run_helper_subprocess(command:, function:, args:, env: nil,
                                    stderr_to_stdout: false,

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.309.0"
+  VERSION = "0.311.0"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.309.0
+  version: 0.311.0
 platform: ruby
 authors:
 - Dependabot
 bindir: bin
 cert_chain: []
-date: 2025-04-17 00:00:00.000000000 Z
+date: 2025-05-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -303,16 +303,16 @@ dependencies:
   name: toml-rb
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.1.2
+        version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.1.2
+        version: '4.0'
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -513,16 +513,16 @@ dependencies:
   name: webrick
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '1.9'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.7'
+        version: '1.9'
 description: Dependabot-Common provides the shared code used across Dependabot. If
   you want support for multiple package managers, you probably want the meta-gem dependabot-omnibus.
 email: opensource@github.com
@@ -627,7 +627,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.309.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.311.0
 rdoc_options: []
 require_paths:
 - lib