dependabot-common 0.394.0 → 0.395.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 56fd73092967bcc3c61c5380d818f4802319503d4ef71fe825cc0433e928e6a9
-  data.tar.gz: c2d55c57dc9a06af239f6f2797c65df21837495afa5c00da8435a0810fd8af30
+  metadata.gz: d9566b1a9930f4b53e02d88a9eda5893f794bcd80b37c0a82870dab926432fba
+  data.tar.gz: 77aa3094407df4ef7627a53cb584abd0cf1b14a16e690b3ee178c8600dad2dd7
 SHA512:
-  metadata.gz: 9051406a2bb191fc74abe230325d756939a54c84588c78c55ddc44e2a03452e2c57952cb8791f1b2f5f3cdfe9317fbabb01aa4ac00da1be8a30d2274bae835eb
-  data.tar.gz: e11299a8ef1eea997446cc50ea216a0615c54875a7a34ce5482f001be1bf038e0700fba9b5e3425aa6d931da753fac54c48f782365755006310651487cfff192
+  metadata.gz: f994b68adbb197b61dfa48006b35b8cd39058d5b482393aa2c56993b86958c32364d7e6869b31b068a8fbc85375883eb33110abd9f5fdc254aff940ae4d98c51
+  data.tar.gz: f5bba21d3f012e715c1918f161ce077d1d9f2a0b2ca681e90fd87d9b321d096b710f98902f1ece9e1814c2cdb16d8b89fb68f0d7670aab3b7630e68acaa0cd9c

data/lib/dependabot/clients/azure.rb

@@ -8,7 +8,7 @@ require "sorbet-runtime"
 
 module Dependabot
   module Clients
-    # rubocop:disable Metrics/ClassLength
+    # rubocop:disable-next Metrics/ClassLength
     class Azure
       extend T::Sig
       include JsonResponseParser
@@ -550,6 +550,5 @@ module Dependabot
       sig { returns(Dependabot::Source) }
       attr_reader :source
     end
-    # rubocop:enable Metrics/ClassLength
   end
 end

data/lib/dependabot/command_helpers.rb

@@ -11,7 +11,7 @@ module Dependabot
 
     module TIMEOUTS
       NO_TIME_OUT = -1 # No timeout
-      GRARECFULLY_STOP = 5 # 5 seconds for graceful termination
+      GRACEFULLY_STOP = 5 # 5 seconds for graceful termination
       LOCAL = 30 # 30 seconds
       NETWORK = 120 # 2 minutes
       LONG_RUNNING = 300 # 5 minutes
@@ -185,8 +185,8 @@ module Dependabot
               if observation&.dig(:gracefully_stop)
                 message = observation[:reason] || "Terminated by output_observer"
                 # If the observer indicates a graceful stop, terminate the process
-                # by adjusting the remaining timeout 5 seconds
-                timeout = [timeout, ((Time.now - last_output_time) + 5).to_i].min
+                # by adjusting the remaining timeout
+                timeout = [timeout, ((Time.now - last_output_time) + TIMEOUTS::GRACEFULLY_STOP).to_i].min
                 Dependabot.logger.warn("Terminating process due to observer signal: #{message}")
               end
             rescue EOFError

data/lib/dependabot/errors.rb

@@ -5,7 +5,7 @@ require "sorbet-runtime"
 require "dependabot/error_details"
 require "dependabot/utils"
 
-# rubocop:disable Metrics/ModuleLength
+# rubocop:disable-next Metrics/ModuleLength
 module Dependabot
   extend T::Sig
 
@@ -1010,4 +1010,3 @@ module Dependabot
     end
   end
 end
-# rubocop:enable Metrics/ModuleLength

data/lib/dependabot/file_fetchers/base.rb

@@ -16,7 +16,7 @@ require "dependabot/clients/bitbucket_with_retries"
 require "dependabot/clients/gitlab_with_retries"
 require "dependabot/shared_helpers"
 
-# rubocop:disable Metrics/ClassLength
+# rubocop:disable-next Metrics/ClassLength
 module Dependabot
   module FileFetchers
     class RepositoryContent < T::ImmutableStruct
@@ -1030,4 +1030,3 @@ module Dependabot
     end
   end
 end
-# rubocop:enable Metrics/ClassLength

data/lib/dependabot/file_updaters/artifact_updater.rb

@@ -36,9 +36,8 @@ module Dependabot
         return [] unless repo_contents_path && target_directory
 
         Dir.chdir(T.must(repo_contents_path)) do
-          # rubocop:disable Performance/DeletePrefix
+          # rubocop:disable-next Performance/DeletePrefix
           relative_dir = Pathname.new(base_directory).sub(%r{\A/}, "").join(T.must(target_directory))
-          # rubocop:enable Performance/DeletePrefix
 
           status = T.let(
             SharedHelpers.run_shell_command(

data/lib/dependabot/git_commit_checker.rb

@@ -23,7 +23,7 @@ require "dependabot/package/release_cooldown_options"
 require "dependabot/update_checkers/cooldown_calculation"
 require "dependabot/git_cooldown_date_resolver"
 module Dependabot
-  # rubocop:disable Metrics/ClassLength
+  # rubocop:disable-next Metrics/ClassLength
   class GitCommitChecker
     extend T::Sig
     include Dependabot::GitCooldownDateResolver
@@ -265,6 +265,7 @@ module Dependabot
 
     sig { returns(T.nilable(String)) }
     def local_tag_for_pinned_sha
+      return @local_tag_for_pinned_sha if defined?(@local_tag_for_pinned_sha)
       return unless pinned_ref_looks_like_commit_sha?
 
       @local_tag_for_pinned_sha = T.let(
@@ -957,5 +958,4 @@ module Dependabot
       SourceDetails.from_hash(details) if details
     end
   end
-  # rubocop:enable Metrics/ClassLength
 end

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -24,7 +24,7 @@ module Dependabot
         const :api_url, T.nilable(String), default: nil
       end
 
-      # rubocop:disable Metrics/ClassLength
+      # rubocop:disable-next Metrics/ClassLength
       class ChangelogFinder
         extend T::Sig
 
@@ -653,7 +653,6 @@ module Dependabot
             )
         end
       end
-      # rubocop:enable Metrics/ClassLength
     end
   end
 end

data/lib/dependabot/package/npm_registry_package.rb

@@ -132,8 +132,17 @@ module Dependabot
             type: type,
             git: type == "git"
           )
+        when Array
+          repositories = T.let([], T::Array[Repository])
+          value.each do |raw_repository|
+            repository_value = T.cast(raw_repository, Object)
+            parsed_repository = parse_repository(repository_value, version)
+            repositories << parsed_repository if parsed_repository
+          end
+
+          repositories.find(&:git?) || repositories.first
         else
-          raise TypeError, "version #{version} repository must be a string or object"
+          raise TypeError, "version #{version} repository must be a string, object, or array"
         end
       end
       private_class_method :parse_repository

data/lib/dependabot/pull_request_creator/github.rb

@@ -12,7 +12,7 @@ require "dependabot/pull_request_creator/commit_signer"
 
 module Dependabot
   class PullRequestCreator
-    # rubocop:disable Metrics/ClassLength
+    # rubocop:disable-next Metrics/ClassLength
     class Github
       extend T::Sig
       include Dependabot::Clients::GithubResourceParser
@@ -634,6 +634,5 @@ module Dependabot
         end
       end
     end
-    # rubocop:enable Metrics/ClassLength
   end
 end

data/lib/dependabot/pull_request_creator/labeler.rb

@@ -9,7 +9,7 @@ require "dependabot/credential"
 
 module Dependabot
   class PullRequestCreator
-    # rubocop:disable Metrics/ClassLength
+    # rubocop:disable-next Metrics/ClassLength
     class Labeler
       extend T::Sig
 
@@ -155,9 +155,8 @@ module Dependabot
             new_version_parts = T.must(version(dep)).split(/[.+]/)
             old_version_parts = previous_version(dep)&.split(/[.+]/) || []
             all_parts = new_version_parts.first(3) + old_version_parts.first(3)
-            # rubocop:disable Performance/RedundantEqualityComparisonBlock
+            # rubocop:disable-next Performance/RedundantEqualityComparisonBlock
             next 0 unless all_parts.all? { |part| part.to_i.to_s == part }
-            # rubocop:enable Performance/RedundantEqualityComparisonBlock
             next 1 if new_version_parts[0] != old_version_parts[0]
             next 2 if new_version_parts[1] != old_version_parts[1]
 
@@ -556,6 +555,5 @@ module Dependabot
         Utils.version_class_for_package_manager(package_manager)
       end
     end
-    # rubocop:enable Metrics/ClassLength
   end
 end

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -14,7 +14,7 @@ require "dependabot/pull_request_creator"
 require "dependabot/pull_request_creator/message"
 require "dependabot/notices"
 
-# rubocop:disable Metrics/ClassLength
+# rubocop:disable-next Metrics/ClassLength
 module Dependabot
   class PullRequestCreator
     # MessageBuilder builds PR message for a dependency update
@@ -976,4 +976,3 @@ module Dependabot
     end
   end
 end
-# rubocop:enable Metrics/ClassLength

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.394.0"
+  VERSION = "0.395.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.394.0
+  version: 0.395.0
 platform: ruby
 authors:
 - Dependabot
@@ -147,14 +147,14 @@ dependencies:
     requirements:
     - - "<"
       - !ruby/object:Gem::Version
-        version: '2.20'
+        version: '2.22'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "<"
       - !ruby/object:Gem::Version
-        version: '2.20'
+        version: '2.22'
 - !ruby/object:Gem::Dependency
   name: nokogiri
   requirement: !ruby/object:Gem::Requirement
@@ -450,19 +450,19 @@ dependencies:
       - !ruby/object:Gem::Version
         version: '1.1'
 - !ruby/object:Gem::Dependency
-  name: turbo_tests
+  name: turbo_tests2
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.2.5
+        version: 3.2.7
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.2.5
+        version: 3.2.7
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
@@ -631,7 +631,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.394.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.395.0
 rdoc_options: []
 require_paths:
 - lib