dependabot-common 0.397.0 → 0.399.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 79970e220dac70e4c9e5fb36bcf11fb95e997cd86659be7c62fb6fcf98e51afa
-  data.tar.gz: d1148a8d752b03cc3f15492deca23abeced299e6fd194c8e00ba5cfdac2f072c
+  metadata.gz: 25a94c1e5dc3f55727a0f4ccadd5b4ee8d420f280adb0035bc273d31370843fe
+  data.tar.gz: 5f54adb05f2d66b098cb2ab8443b30dba9bfeb684c3fad1b01fa4e10a895e97d
 SHA512:
-  metadata.gz: 8e35951dcbb53d13ae20be52132a956c28a89f1e8314b040f0cc3cf3b476e95bf1d7d1b0b98ad4fa1b87daa32e97626d184a71c63a418824942e8a0a1273b4f6
-  data.tar.gz: 45564180f9212a7e7c695d573be1ae536836dd75358b20e6b917a66172f5f5547aa6dccb5de4dcd79a47b0bc5c997a9d88eb33fc23a3f52cf5bd6fca2688c399
+  metadata.gz: 6be302598830a25eb71907c3d080aa0d603c054b70dc95a12d17ffe233725e761c5c0ee4304b1086d2ba50099bfa0d7c4fb9c8d68fe8f6e4009eb2c2a5dfa0e1
+  data.tar.gz: 3a2df82a0f866e8a2ae116d767f43c916d820ebda987f348b5a65964742403dba8882a2761e4e7ebcfe4e5ffb0db08f644f0131c27f602d206dc1b20f2c9fdc2

data/lib/dependabot/errors.rb

@@ -118,6 +118,11 @@ module Dependabot
         "error-type": "dependency_not_found",
         "error-detail": { source: error.source }
       }
+    when Dependabot::MisconfiguredTooling
+      {
+        "error-type": "misconfigured_tooling",
+        "error-detail": { "tool-name": error.tool_name, message: error.tool_message }
+      }
     when Octokit::Unauthorized
       { "error-type": "octokit_unauthorized" }
     when Octokit::ServerError
@@ -210,6 +215,11 @@ module Dependabot
         "error-type": "git_dependencies_not_reachable",
         "error-detail": { "dependency-urls": error.dependency_urls }
       }
+    when Dependabot::MisconfiguredTooling
+      {
+        "error-type": "misconfigured_tooling",
+        "error-detail": { "tool-name": error.tool_name, message: error.tool_message }
+      }
     when Dependabot::NotImplemented
       {
         "error-type": "not_implemented",

data/lib/dependabot/metadata_finders/base/release_finder.rb

@@ -378,8 +378,9 @@ module Dependabot
         def new_version
           # New version looks like a git SHA and there's a new ref, guarding
           # against changes to a nil new_ref (not certain this can actually
-          # happen atm)
-          if T.must(dependency.version).match?(/^[0-9a-f]{40}$/) && ref_changed? &&
+          # happen atm). A requirement-only update, such as a Julia stdlib's
+          # compat entry, has no version at all.
+          if dependency.version&.match?(/^[0-9a-f]{40}$/) && ref_changed? &&
              new_ref
             return new_ref
           end

data/lib/dependabot/package/package_release.rb

@@ -59,6 +59,9 @@ module Dependabot
       sig { returns(T.nilable(Time)) }
       attr_reader :released_at
 
+      sig { params(released_at: T.nilable(Time)).returns(T.nilable(Time)) }
+      attr_writer :released_at
+
       sig { returns(T::Boolean) }
       attr_reader :latest
 

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -341,7 +341,9 @@ module Dependabot
         subject = pr_name.gsub("⬆️", ":arrow_up:").gsub("🔒", ":lock:")
         return subject unless subject.length > 72
 
-        subject = subject.gsub(/ from [^\s]*? to [^\s]*/, "")
+        # Requirements can contain spaces ("^0.20, ^0.21"), so match up to the
+        # suffixes solo_pr_name adds rather than to the next space
+        subject = subject.sub(%r{ from .+? to .+?(?= \(via audit fix\)| in /|\z)}, "")
         return subject unless subject.length > 72
 
         T.must(subject.split(" in ").first)

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.397.0"
+  VERSION = "0.399.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.397.0
+  version: 0.399.0
 platform: ruby
 authors:
 - Dependabot
@@ -635,7 +635,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.397.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.399.0
 rdoc_options: []
 require_paths:
 - lib