dependabot-common 0.396.0 → 0.398.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38e1442399b4db684997304709cfd914195b3a067d6195989cebead9c1c5d188
-  data.tar.gz: 5a949d0992ee5bddd0ce5f0641ddcc9fe7e70ca32ce21dafbd7504e07e293069
+  metadata.gz: 99a1186f2c1d2774ac7b98d572c505e6265ed6a0d7726b5f791bf5c71fd0a00d
+  data.tar.gz: de30ef9e06bfb21e5b125a3ae6dbab67ac8becb8b8b98aa1f022dc590a8a939a
 SHA512:
-  metadata.gz: 7fcf1078fd4be3cfbd95be9b1529f6ee5c159f0891ad0baebbd42931a21fd2f2b6c02172614c6c537f72115d414aee3feede98296ae5a52c65fe6abafcd9dd82
-  data.tar.gz: 5304d03eb4968bd94732bee2f81e02405e1714c14258aae73735d68f07705c4a80f2c7c7ff96cfc2b65bc1814fbd01aa44b75fbe9cd5e7450304bcee3e3d5fb0
+  metadata.gz: c5b31d2978062c533aa6e2ef0409467c89bfb6ca8f35a25ca44949beb8e3bd4ca6e1b46312f64642d8a81223dfbeb33863c650a34f11fe9699dc741a406666c5
+  data.tar.gz: e97d86d961bf7cbe2fb0b2198d9a0c75882ce0350f679425bc96acc4d2414d776ae1198bf0263402e92d2a9cb1ce07e2c4699a4702ed8fe3482655d662d2359d

data/lib/dependabot/errors.rb

@@ -118,6 +118,11 @@ module Dependabot
         "error-type": "dependency_not_found",
         "error-detail": { source: error.source }
       }
+    when Dependabot::MisconfiguredTooling
+      {
+        "error-type": "misconfigured_tooling",
+        "error-detail": { "tool-name": error.tool_name, message: error.tool_message }
+      }
     when Octokit::Unauthorized
       { "error-type": "octokit_unauthorized" }
     when Octokit::ServerError
@@ -210,6 +215,11 @@ module Dependabot
         "error-type": "git_dependencies_not_reachable",
         "error-detail": { "dependency-urls": error.dependency_urls }
       }
+    when Dependabot::MisconfiguredTooling
+      {
+        "error-type": "misconfigured_tooling",
+        "error-detail": { "tool-name": error.tool_name, message: error.tool_message }
+      }
     when Dependabot::NotImplemented
       {
         "error-type": "not_implemented",

data/lib/dependabot/package/npm_registry_package.rb

@@ -82,6 +82,17 @@ module Dependabot
         )
       end
 
+      sig do
+        params(details: T::Hash[String, T.anything], package_name: String, version: String)
+          .returns(T::Hash[String, String])
+      end
+      def self.peer_dependencies(details:, package_name:, version:)
+        value = T.cast(details["peerDependencies"], Object)
+        return {} if value.nil? || value == false
+
+        string_map(value, "#{package_name} version #{version} peerDependencies")
+      end
+
       sig do
         params(
           version: String,

data/lib/dependabot/update_checkers/peer_dependency_conflict.rb

@@ -0,0 +1,34 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+
+module Dependabot
+  module UpdateCheckers
+    class PeerDependencyConflict < T::ImmutableStruct
+      extend T::Sig
+
+      const :requirement_name, String
+      const :requirement_version, T.nilable(String)
+      const :requiring_dep_name, String
+
+      sig { params(captures: T::Hash[String, T.nilable(String)]).returns(T.nilable(PeerDependencyConflict)) }
+      def self.from_captures(captures)
+        required = captures["required_dep"]
+        requiring = captures["requiring_dep"]
+        return unless required && requiring
+
+        new(
+          requirement_name: required.sub(/@[^@]+$/, ""),
+          requirement_version: required.split("@").last&.delete('"'),
+          requiring_dep_name: requiring.sub(/@[^@]+$/, "")
+        )
+      end
+
+      sig { params(other: PeerDependencyConflict).returns(T::Boolean) }
+      def same_dependencies?(other)
+        requirement_name == other.requirement_name && requiring_dep_name == other.requiring_dep_name
+      end
+    end
+  end
+end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.396.0"
+  VERSION = "0.398.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.396.0
+  version: 0.398.0
 platform: ruby
 authors:
 - Dependabot
@@ -620,6 +620,7 @@ files:
 - lib/dependabot/update_checkers/README.md
 - lib/dependabot/update_checkers/base.rb
 - lib/dependabot/update_checkers/cooldown_calculation.rb
+- lib/dependabot/update_checkers/peer_dependency_conflict.rb
 - lib/dependabot/update_checkers/version_filters.rb
 - lib/dependabot/update_checkers/vulnerability_audit.rb
 - lib/dependabot/utils.rb
@@ -634,7 +635,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.396.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.398.0
 rdoc_options: []
 require_paths:
 - lib