dependabot-common 0.300.0 → 0.301.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/dependency_file.rb +11 -8
  3. data/lib/dependabot/package/package_latest_version_finder.rb +3 -3
  4. data/lib/dependabot/package/release_cooldown_options.rb +11 -11
  5. data/lib/dependabot.rb +1 -1
  6. metadata +3 -9
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 430d17c9cd55d06157f1d17b68484d6eff404a01556ec23e7c135e6717ab8115
4
- data.tar.gz: 59c83e71796d1001cce58205b36ad13878d15e7c20a414fd555725cf3512e1e9
3
+ metadata.gz: 6e5ad8afb5c78de76b83fc7c242fbbe9a473c9648b71324b54d47aeb31e3a701
4
+ data.tar.gz: f608054fbeca4427bbe80ce83d71f8b30ec2e411704a9b465c21f82d0eb09529
5
5
  SHA512:
6
- metadata.gz: 602fec245c2dd192286d03064a2254c86c8817cd2a284401a142714223d55c8374b55abe5f61b60d42d06acbb2efe1ad3ba494b2a639d850fe21b4d3c38b36ed
7
- data.tar.gz: 5fbde394f4529f08fced5621d6b406d92f173410acb76a310051f93f4bdf80ed8934bc1bea3e431dfce1bfc45fc151436d40f0be4cf8105d1d3d052912452caa
6
+ metadata.gz: 45eebb6b045a77cb8c34a707e726de39193fc63b8f6f5d056717417b44fbdd308f319c610fc9675c745d856bb7797c5125863d9c88877a78785dd7964865262d
7
+ data.tar.gz: 7a04d8d2038ec11faaa0e3353b20e01b0d47cff8fbf8d7688a4540b08fc7904f113ffd55e0e3d4ea7eb36b69110902bd558d9e0d66a0897f97efafe81a30cce2
data/lib/dependabot/dependency_file.rb CHANGED
@@ -52,10 +52,17 @@ module Dependabot
52
52
  end
53
53
 
54
54
  class Mode
55
+ EXECUTABLE = "100755"
55
56
  FILE = "100644"
57
+ TREE = "040000"
56
58
  SUBMODULE = "160000"
59
+ SYMLINK = "120000"
57
60
  end
58
61
 
62
+ # See https://github.com/git/git/blob/a36e024e989f4d35f35987a60e3af8022cac3420/object.h#L144-L153
63
+ VALID_MODES = T.let([Mode::FILE, Mode::EXECUTABLE, Mode::TREE, Mode::SUBMODULE, Mode::SYMLINK].freeze,
64
+ T::Array[String])
65
+
59
66
  sig do
60
67
  params(
61
68
  name: String,
@@ -84,6 +91,8 @@ module Dependabot
84
91
  @vendored_file = vendored_file
85
92
  @content_encoding = content_encoding
86
93
  @operation = operation
94
+ @mode = mode
95
+ raise ArgumentError, "Invalid Git mode: #{mode}" if mode && !VALID_MODES.include?(mode)
87
96
 
88
97
  # Make deleted override the operation. Deleted is kept when operation
89
98
  # was introduced to keep compatibility with downstream dependants.
@@ -96,12 +105,6 @@ module Dependabot
96
105
  # support_file flag instead)
97
106
  @type = type
98
107
 
99
- begin
100
- @mode = T.let(File.stat(realpath).mode.to_s(8), T.nilable(String))
101
- rescue StandardError
102
- @mode = mode
103
- end
104
-
105
108
  return unless (type == "symlink") ^ symlink_target
106
109
 
107
110
  raise "Symlinks must specify a target!" unless symlink_target
@@ -118,9 +121,9 @@ module Dependabot
118
121
  "support_file" => support_file,
119
122
  "content_encoding" => content_encoding,
120
123
  "deleted" => deleted,
121
- "operation" => operation,
122
- "mode" => mode
124
+ "operation" => operation
123
125
  }
126
+ details["mode"] = mode if mode
124
127
 
125
128
  details["symlink_target"] = symlink_target if symlink_target
126
129
  details
data/lib/dependabot/package/package_latest_version_finder.rb CHANGED
@@ -319,9 +319,9 @@ module Dependabot
319
319
  new_major, new_minor, new_patch = new_version_semver
320
320
 
321
321
  # Determine cooldown based on version difference
322
- return cooldown.major_days if new_major > current_major
323
- return cooldown.minor_days if new_minor > current_minor
324
- return cooldown.patch_days if new_patch > current_patch
322
+ return cooldown.semver_major_days if new_major > current_major
323
+ return cooldown.semver_minor_days if new_minor > current_minor
324
+ return cooldown.semver_patch_days if new_patch > current_patch
325
325
 
326
326
  cooldown.default_days
327
327
  end
data/lib/dependabot/package/release_cooldown_options.rb CHANGED
@@ -11,34 +11,34 @@ module Dependabot
11
11
  sig do
12
12
  params(
13
13
  default_days: T.nilable(Integer),
14
- major_days: T.nilable(Integer),
15
- minor_days: T.nilable(Integer),
16
- patch_days: T.nilable(Integer),
14
+ semver_major_days: T.nilable(Integer),
15
+ semver_minor_days: T.nilable(Integer),
16
+ semver_patch_days: T.nilable(Integer),
17
17
  include: T.nilable(T::Array[String]),
18
18
  exclude: T.nilable(T::Array[String])
19
19
  ).void
20
20
  end
21
21
  def initialize(
22
- default_days: 0, major_days: 0, minor_days: 0, patch_days: 0,
22
+ default_days: 0, semver_major_days: 0, semver_minor_days: 0, semver_patch_days: 0,
23
23
  include: [], exclude: []
24
24
  )
25
25
  default_days ||= 0
26
- major_days ||= 0
27
- minor_days ||= 0
28
- patch_days ||= 0
26
+ semver_major_days ||= 0
27
+ semver_minor_days ||= 0
28
+ semver_patch_days ||= 0
29
29
  include ||= []
30
30
  exclude ||= []
31
31
 
32
32
  @default_days = T.let(default_days, Integer)
33
- @major_days = T.let(major_days.positive? ? major_days : default_days, Integer)
34
- @minor_days = T.let(minor_days.positive? ? minor_days : default_days, Integer)
35
- @patch_days = T.let(patch_days.positive? ? patch_days : default_days, Integer)
33
+ @semver_major_days = T.let(semver_major_days.positive? ? semver_major_days : default_days, Integer)
34
+ @semver_minor_days = T.let(semver_minor_days.positive? ? semver_minor_days : default_days, Integer)
35
+ @semver_patch_days = T.let(semver_patch_days.positive? ? semver_patch_days : default_days, Integer)
36
36
  @include = T.let(include.to_set, T::Set[String])
37
37
  @exclude = T.let(exclude.to_set, T::Set[String])
38
38
  end
39
39
 
40
40
  sig { returns(Integer) }
41
- attr_reader :default_days, :major_days, :minor_days, :patch_days
41
+ attr_reader :default_days, :semver_major_days, :semver_minor_days, :semver_patch_days
42
42
 
43
43
  sig { returns(T::Set[String]) }
44
44
  attr_reader :include, :exclude
data/lib/dependabot.rb CHANGED
@@ -2,5 +2,5 @@
2
2
  # frozen_string_literal: true
3
3
 
4
4
  module Dependabot
5
- VERSION = "0.300.0"
5
+ VERSION = "0.301.0"
6
6
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-common
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.300.0
4
+ version: 0.301.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2025-03-06 00:00:00.000000000 Z
11
+ date: 2025-03-13 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-codecommit
@@ -293,9 +293,6 @@ dependencies:
293
293
  - - ">="
294
294
  - !ruby/object:Gem::Version
295
295
  version: 1.1.2
296
- - - "<"
297
- - !ruby/object:Gem::Version
298
- version: '4.0'
299
296
  type: :runtime
300
297
  prerelease: false
301
298
  version_requirements: !ruby/object:Gem::Requirement
@@ -303,9 +300,6 @@ dependencies:
303
300
  - - ">="
304
301
  - !ruby/object:Gem::Version
305
302
  version: 1.1.2
306
- - - "<"
307
- - !ruby/object:Gem::Version
308
- version: '4.0'
309
303
  - !ruby/object:Gem::Dependency
310
304
  name: debug
311
305
  requirement: !ruby/object:Gem::Requirement
@@ -620,7 +614,7 @@ licenses:
620
614
  - MIT
621
615
  metadata:
622
616
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
623
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.300.0
617
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.301.0
624
618
  post_install_message:
625
619
  rdoc_options: []
626
620
  require_paths: