dependabot-common 0.390.0 → 0.392.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (38) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/clients/azure.rb +1 -1
  3. data/lib/dependabot/command_helpers.rb +11 -3
  4. data/lib/dependabot/config/file_fetcher.rb +2 -2
  5. data/lib/dependabot/config/ignore_condition.rb +1 -1
  6. data/lib/dependabot/config/update_config.rb +1 -1
  7. data/lib/dependabot/dependency_group.rb +16 -0
  8. data/lib/dependabot/dependency_requirement.rb +80 -14
  9. data/lib/dependabot/ecosystem.rb +8 -8
  10. data/lib/dependabot/errors.rb +8 -1
  11. data/lib/dependabot/file_fetchers/base.rb +1 -1
  12. data/lib/dependabot/file_updaters/artifact_updater.rb +1 -1
  13. data/lib/dependabot/file_updaters/base.rb +2 -2
  14. data/lib/dependabot/metadata_finders/base/changelog_finder.rb +4 -7
  15. data/lib/dependabot/metadata_finders/base/changelog_pruner.rb +3 -3
  16. data/lib/dependabot/metadata_finders/base/commits_finder.rb +6 -5
  17. data/lib/dependabot/metadata_finders/base/release_finder.rb +24 -16
  18. data/lib/dependabot/metadata_finders/base.rb +1 -1
  19. data/lib/dependabot/package/package_details.rb +2 -2
  20. data/lib/dependabot/package/package_language.rb +3 -3
  21. data/lib/dependabot/package/package_latest_version_finder.rb +4 -3
  22. data/lib/dependabot/package/package_release.rb +11 -11
  23. data/lib/dependabot/pull_request_creator/branch_name_template.rb +5 -14
  24. data/lib/dependabot/pull_request_creator/branch_namer/solo_strategy.rb +18 -16
  25. data/lib/dependabot/pull_request_creator/labeler.rb +8 -15
  26. data/lib/dependabot/pull_request_creator/message_builder/issue_linker.rb +21 -2
  27. data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb +53 -13
  28. data/lib/dependabot/pull_request_creator/message_builder/metadata_presenter.rb +20 -13
  29. data/lib/dependabot/pull_request_creator/message_builder.rb +13 -13
  30. data/lib/dependabot/pull_request_creator/pr_name_prefixer.rb +10 -17
  31. data/lib/dependabot/pull_request_updater/github.rb +1 -1
  32. data/lib/dependabot/shared_helpers.rb +30 -7
  33. data/lib/dependabot/source.rb +1 -4
  34. data/lib/dependabot/update_checkers/base.rb +3 -3
  35. data/lib/dependabot/version.rb +2 -5
  36. data/lib/dependabot/workspace/git.rb +2 -2
  37. data/lib/dependabot.rb +1 -1
  38. metadata +2 -2
data/lib/dependabot/update_checkers/base.rb CHANGED
@@ -379,7 +379,7 @@ module Dependabot
379
379
  return false
380
380
  end
381
381
 
382
- updated_requirements.none? { |r| r[:requirement] == :unfixable }
382
+ updated_requirements.none? { |r| r.requirement == :unfixable }
383
383
  end
384
384
 
385
385
  sig { returns(T::Boolean) }
@@ -415,7 +415,7 @@ module Dependabot
415
415
  def version_from_requirements
416
416
  @version_from_requirements ||=
417
417
  T.let(
418
- dependency.requirements.filter_map { |r| r.fetch(:requirement) }
418
+ dependency.requirements.filter_map(&:requirement_string)
419
419
  .flat_map { |req_str| requirement_class.requirements_array(req_str) }
420
420
  .flat_map(&:requirements)
421
421
  .reject { |req_array| req_array.first.start_with?("<") }
@@ -429,7 +429,7 @@ module Dependabot
429
429
  def requirements_can_update?
430
430
  return false if changed_requirements.none?
431
431
 
432
- changed_requirements.none? { |r| r[:requirement] == :unfixable }
432
+ changed_requirements.none? { |r| r.requirement == :unfixable }
433
433
  end
434
434
  end
435
435
  end
data/lib/dependabot/version.rb CHANGED
@@ -97,8 +97,7 @@ module Dependabot
97
97
  end
98
98
 
99
99
  # https://semver.org/#is-there-a-suggested-regular-expression-regex-to-check-a-semver-string
100
- SEMVER_REGEX = T.let(
101
- /
100
+ SEMVER_REGEX = /
102
101
  # major.minor.patch
103
102
  ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)
104
103
  # pre-release
@@ -109,9 +108,7 @@ module Dependabot
109
108
  # build metadata
110
109
  (?:\+(
111
110
  [0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*
112
- ))?$/x,
113
- Regexp
114
- )
111
+ ))?$/x
115
112
 
116
113
  sig { params(version: String).returns(T::Boolean) }
117
114
  def self.valid_semver?(version)
data/lib/dependabot/workspace/git.rb CHANGED
@@ -127,7 +127,7 @@ module Dependabot
127
127
 
128
128
  sig { params(memo: T.nilable(String)).returns(String) }
129
129
  def commit(memo = nil)
130
- run_shell_command("git add #{path}")
130
+ run_shell_command(["git", "add", "--", path.to_s])
131
131
 
132
132
  msg = memo || "workspace change"
133
133
  run_shell_command(
@@ -152,7 +152,7 @@ module Dependabot
152
152
  run_shell_command("git clean -fx .")
153
153
  end
154
154
 
155
- sig { params(args: String, kwargs: T.any(T::Boolean, String)).returns(String) }
155
+ sig { params(args: SharedHelpers::Command, kwargs: T.any(T::Boolean, String)).returns(String) }
156
156
  def run_shell_command(*args, **kwargs)
157
157
  Dir.chdir(path) { T.unsafe(SharedHelpers).run_shell_command(*args, **kwargs) }
158
158
  end
data/lib/dependabot.rb CHANGED
@@ -2,5 +2,5 @@
2
2
  # frozen_string_literal: true
3
3
 
4
4
  module Dependabot
5
- VERSION = "0.390.0"
5
+ VERSION = "0.392.0"
6
6
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-common
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.390.0
4
+ version: 0.392.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -625,7 +625,7 @@ licenses:
625
625
  - MIT
626
626
  metadata:
627
627
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
628
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.390.0
628
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
629
629
  rdoc_options: []
630
630
  require_paths:
631
631
  - lib