dependabot-common 0.396.0 → 0.397.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38e1442399b4db684997304709cfd914195b3a067d6195989cebead9c1c5d188
-  data.tar.gz: 5a949d0992ee5bddd0ce5f0641ddcc9fe7e70ca32ce21dafbd7504e07e293069
+  metadata.gz: 79970e220dac70e4c9e5fb36bcf11fb95e997cd86659be7c62fb6fcf98e51afa
+  data.tar.gz: d1148a8d752b03cc3f15492deca23abeced299e6fd194c8e00ba5cfdac2f072c
 SHA512:
-  metadata.gz: 7fcf1078fd4be3cfbd95be9b1529f6ee5c159f0891ad0baebbd42931a21fd2f2b6c02172614c6c537f72115d414aee3feede98296ae5a52c65fe6abafcd9dd82
-  data.tar.gz: 5304d03eb4968bd94732bee2f81e02405e1714c14258aae73735d68f07705c4a80f2c7c7ff96cfc2b65bc1814fbd01aa44b75fbe9cd5e7450304bcee3e3d5fb0
+  metadata.gz: 8e35951dcbb53d13ae20be52132a956c28a89f1e8314b040f0cc3cf3b476e95bf1d7d1b0b98ad4fa1b87daa32e97626d184a71c63a418824942e8a0a1273b4f6
+  data.tar.gz: 45564180f9212a7e7c695d573be1ae536836dd75358b20e6b917a66172f5f5547aa6dccb5de4dcd79a47b0bc5c997a9d88eb33fc23a3f52cf5bd6fca2688c399

data/lib/dependabot/package/npm_registry_package.rb

@@ -82,6 +82,17 @@ module Dependabot
         )
       end
 
+      sig do
+        params(details: T::Hash[String, T.anything], package_name: String, version: String)
+          .returns(T::Hash[String, String])
+      end
+      def self.peer_dependencies(details:, package_name:, version:)
+        value = T.cast(details["peerDependencies"], Object)
+        return {} if value.nil? || value == false
+
+        string_map(value, "#{package_name} version #{version} peerDependencies")
+      end
+
       sig do
         params(
           version: String,

data/lib/dependabot/update_checkers/peer_dependency_conflict.rb

@@ -0,0 +1,34 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+
+module Dependabot
+  module UpdateCheckers
+    class PeerDependencyConflict < T::ImmutableStruct
+      extend T::Sig
+
+      const :requirement_name, String
+      const :requirement_version, T.nilable(String)
+      const :requiring_dep_name, String
+
+      sig { params(captures: T::Hash[String, T.nilable(String)]).returns(T.nilable(PeerDependencyConflict)) }
+      def self.from_captures(captures)
+        required = captures["required_dep"]
+        requiring = captures["requiring_dep"]
+        return unless required && requiring
+
+        new(
+          requirement_name: required.sub(/@[^@]+$/, ""),
+          requirement_version: required.split("@").last&.delete('"'),
+          requiring_dep_name: requiring.sub(/@[^@]+$/, "")
+        )
+      end
+
+      sig { params(other: PeerDependencyConflict).returns(T::Boolean) }
+      def same_dependencies?(other)
+        requirement_name == other.requirement_name && requiring_dep_name == other.requiring_dep_name
+      end
+    end
+  end
+end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.396.0"
+  VERSION = "0.397.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.396.0
+  version: 0.397.0
 platform: ruby
 authors:
 - Dependabot
@@ -620,6 +620,7 @@ files:
 - lib/dependabot/update_checkers/README.md
 - lib/dependabot/update_checkers/base.rb
 - lib/dependabot/update_checkers/cooldown_calculation.rb
+- lib/dependabot/update_checkers/peer_dependency_conflict.rb
 - lib/dependabot/update_checkers/version_filters.rb
 - lib/dependabot/update_checkers/vulnerability_audit.rb
 - lib/dependabot/utils.rb
@@ -634,7 +635,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.396.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.397.0
 rdoc_options: []
 require_paths:
 - lib