dependabot-common 0.303.0 → 0.304.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f75e7474b3a1d0d8b86c472e259a4b5a8f47b4c99dccdb25cdedc7913c119cac
-  data.tar.gz: bca3c660b93c7b0e5d2d114ad15b5c06788ff312dfa299424727340cfe039fcb
+  metadata.gz: 6bbfade51beac4689cd6b9e1fc06da529c4559a682daf9665b1a8a30105e5f80
+  data.tar.gz: e5877835ffdd8f8bb7a6956b410f3928f8be6f96907f2db0f07f67b683d6ab22
 SHA512:
-  metadata.gz: 966ee8cf04cd9e2f4e82ad24e817e22a7defc87d412671f5687577ea840e742695f0ca66e2dd1832c8d20cf039e2a5698d4ecd7c513b00b5347a0157e66a7da0
-  data.tar.gz: 8bac029f2116ff7985f610a5b214a291d1b747283f7a69bdba158a2208f5a9df4d616fa1fdde5b877e1029107761806798a98ff0333fdef443fce4055caede56
+  metadata.gz: 72303ea39dfcf5f6497062bdac90a943b29ecc9406ba913bc47c981405ecfd0bd0d71b98a9d33cbec68d453634037c26c311de71162c138f472747482f7be7c7
+  data.tar.gz: a33afc379842f423ab4c6606b97e4ef141ba95a417f011f5b1f8530770400a2c0bdc163ac0e465ff00ffdf57963e6b4d304e7d10364cac09484a4968ce00dd4b

data/lib/dependabot/package/package_latest_version_finder.rb

@@ -10,7 +10,6 @@ require "dependabot/security_advisory"
 require "dependabot/dependency"
 require "dependabot/update_checkers/version_filters"
 require "dependabot/registry_client"
-require "dependabot/bundler"
 require "dependabot/package/package_details"
 require "dependabot/package/release_cooldown_options"
 
@@ -121,7 +120,7 @@ module Dependabot
         params(language_version: T.nilable(T.any(String, Version)))
           .returns(T.nilable(Dependabot::Version))
       end
-      def fetch_latest_version(language_version:)
+      def fetch_latest_version(language_version: nil)
         version_hashes = available_versions
         return unless version_hashes
 
@@ -130,10 +129,15 @@ module Dependabot
         versions = filter_unsupported_versions(version_hashes, language_version)
         versions = filter_prerelease_versions(versions)
         versions = filter_ignored_versions(versions)
-
+        versions = apply_post_fetch_latest_versions_filter(versions)
         versions.max
       end
 
+      sig { params(versions: T::Array[Dependabot::Version]).returns(T::Array[Dependabot::Version]) }
+      def apply_post_fetch_latest_versions_filter(versions)
+        versions
+      end
+
       sig do
         params(language_version: T.nilable(T.any(String, Version)))
           .returns(T.nilable(Dependabot::Version))
@@ -148,7 +152,7 @@ module Dependabot
         versions = filter_prerelease_versions(versions)
         versions = filter_ignored_versions(versions)
         versions = filter_out_of_range_versions(versions)
-
+        versions = apply_post_fetch_latest_versions_filter(versions)
         versions.max
       end
 

data/lib/dependabot/package/package_release.rb

@@ -22,9 +22,9 @@ module Dependabot
           downloads: T.nilable(Integer),
           url: T.nilable(String),
           package_type: T.nilable(String),
-          language: T.nilable(Dependabot::Package::PackageLanguage)
-        )
-          .void
+          language: T.nilable(Dependabot::Package::PackageLanguage),
+          details: T::Hash[String, T.untyped]
+        ).void
       end
       def initialize(
         version:,
@@ -35,7 +35,8 @@ module Dependabot
         downloads: nil,
         url: nil,
         package_type: nil,
-        language: nil
+        language: nil,
+        details: {}
       )
         @version = T.let(version, Dependabot::Version)
         @released_at = T.let(released_at, T.nilable(Time))
@@ -46,6 +47,7 @@ module Dependabot
         @url = T.let(url, T.nilable(String))
         @package_type = T.let(package_type, T.nilable(String))
         @language = T.let(language, T.nilable(Dependabot::Package::PackageLanguage))
+        @details = T.let(details, T::Hash[String, T.untyped])
       end
 
       sig { returns(Dependabot::Version) }
@@ -75,6 +77,9 @@ module Dependabot
       sig { returns(T.nilable(Dependabot::Package::PackageLanguage)) }
       attr_reader :language
 
+      sig { returns(T::Hash[String, T.untyped]) }
+      attr_reader :details
+
       sig { returns(T::Boolean) }
       def yanked?
         @yanked

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.303.0"
+  VERSION = "0.304.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.303.0
+  version: 0.304.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-27 00:00:00.000000000 Z
+date: 2025-04-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -202,28 +202,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '1.5'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.5'
+- !ruby/object:Gem::Dependency
+  name: opentelemetry-logs-api
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: opentelemetry-metrics-api
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '0.3'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.1'
+        version: '0.3'
 - !ruby/object:Gem::Dependency
   name: parser
   requirement: !ruby/object:Gem::Requirement
@@ -614,7 +628,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.303.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.304.0
 post_install_message:
 rdoc_options: []
 require_paths: