dependabot-composer 0.230.0 → 0.231.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a616ac1f8585d909dab986a81b6d5fdc91f2e5ceef146468412445481aaef41f
-  data.tar.gz: 95a7f04a69c9c39faa7f9c0491238d2a9174e9ab817639b98930e64cac19d904
+  metadata.gz: 62da312e85d8bc75382a2da24e5ceb2313bd25773c4cee90be6f2199c4a9da5e
+  data.tar.gz: 9979ec4c9358f9c79ae8d109a41379917b393f4374c006d2b2548676ab7d63d8
 SHA512:
-  metadata.gz: d2d91c86bff8595ca6c4ad76cb4d69ebd90eba7e81f4636caf0654805f491087ea5ef2ec55df4c9baa7d0aa26ca0882eea4ad8d3125c847df8630f786073c96c
-  data.tar.gz: 8bf8453d50f4cbcd2154df4e44f4a47a63227a6c1b923ce26940bf0646003c45bf180e7317721df371b642fd60c20e25a038ad390c9bf6acb485a9914996f565
+  metadata.gz: 7682702d0285cf78e894bb63d8a5d70e6926ceea98acf33599438c805f4e4004bab227a884a13895fd821cffbec4f1e610b8d0d1813d0cac09f11e133de0fb3b
+  data.tar.gz: 7884afdbbf0f985c25438feb37f26501fa2ca5f60bd9b4998d9e542a93b5fe4221af3f6de3c964629d1ff49e77a3fd556ad82261a278f5feba11bbfdf9778c4c

data/lib/dependabot/composer/file_fetcher/path_dependency_builder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "json"
@@ -37,8 +38,8 @@ module Dependabot
         attr_reader :path, :lockfile, :directory
 
         def details_from_lockfile
-          keys = FileParser::DEPENDENCY_GROUP_KEYS.
-                 map { |h| h.fetch(:lockfile) }
+          keys = FileParser::DEPENDENCY_GROUP_KEYS
+                 .map { |h| h.fetch(:lockfile) }
 
           keys.each do |key|
             next unless parsed_lockfile[key]

data/lib/dependabot/composer/file_fetcher.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "json"
@@ -91,9 +92,9 @@ module Dependabot
               repos = repos.values if repos.is_a?(Hash)
               repos = repos.select { |r| r.is_a?(Hash) }
 
-              repos.
-                select { |details| details["type"] == "path" }.
-                map { |details| details["url"] }
+              repos
+                .select { |details| details["type"] == "path" }
+                .map { |details| details["url"] }
             else
               []
             end
@@ -117,34 +118,34 @@ module Dependabot
           path = path.gsub(%r{\*/$}, "")
           wildcard_depth += 1
         end
-        directories = repo_contents(dir: path).
-                      select { |file| file.type == "dir" }.
-                      map { |f| File.join(path, f.name) }
+        directories = repo_contents(dir: path)
+                      .select { |file| file.type == "dir" }
+                      .map { |f| File.join(path, f.name) }
 
         while wildcard_depth.positive?
           directories.each do |dir|
-            directories += repo_contents(dir: dir).
-                           select { |file| file.type == "dir" }.
-                           map { |f| File.join(dir, f.name) }
+            directories += repo_contents(dir: dir)
+                           .select { |file| file.type == "dir" }
+                           .map { |f| File.join(dir, f.name) }
           end
           wildcard_depth -= 1
         end
         directories
       rescue Octokit::NotFound, Gitlab::Error::NotFound
-        lockfile_path_dependency_paths.
-          select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }
+        lockfile_path_dependency_paths
+          .select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }
       end
 
       def lockfile_path_dependency_paths
-        keys = FileParser::DEPENDENCY_GROUP_KEYS.
-               map { |h| h.fetch(:lockfile) }
+        keys = FileParser::DEPENDENCY_GROUP_KEYS
+               .map { |h| h.fetch(:lockfile) }
 
         keys.flat_map do |key|
           next [] unless parsed_lockfile[key]
 
-          parsed_lockfile[key].
-            select { |details| details.dig("dist", "type") == "path" }.
-            map { |details| details.dig("dist", "url") }
+          parsed_lockfile[key]
+            .select { |details| details.dig("dist", "type") == "path" }
+            .map { |details| details.dig("dist", "url") }
         end
       end
 

data/lib/dependabot/composer/file_parser.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/dependency"
@@ -149,10 +150,10 @@ module Dependabot
 
         branch =
           if requirement.start_with?("dev-")
-            requirement.
-              sub(/^dev-/, "").
-              sub(/\s+as\s.*/, "").
-              split("#").first
+            requirement
+              .sub(/^dev-/, "")
+              .sub(/\s+as\s.*/, "")
+              .split("#").first
           elsif package_details.fetch("version")&.to_s&.start_with?("dev-")
             package_details.fetch("version")&.to_s&.sub(/^dev-/, "")
           end

data/lib/dependabot/composer/file_updater/lockfile_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/shared_helpers"
@@ -137,8 +138,8 @@ module Dependabot
             # These errors occur when platform requirements declared explicitly
             # in the composer.json aren't met.
             missing_extensions =
-              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -148,8 +149,8 @@ module Dependabot
                 !initial_platform.empty? &&
                 implicit_platform_reqs_satisfiable?(error.message)
             missing_extensions =
-              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -171,14 +172,14 @@ module Dependabot
           end
 
           if error.message.match?(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR)
-            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR).
-                             named_captures.fetch("url")
+            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR)
+                                  .named_captures.fetch("url")
             raise Dependabot::GitDependenciesNotReachable, dependency_url
           end
 
           if error.message.match?(UpdateChecker::VersionResolver::FAILED_GIT_CLONE)
-            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE).
-                             named_captures.fetch("url")
+            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE)
+                                  .named_captures.fetch("url")
             raise Dependabot::GitDependenciesNotReachable, dependency_url
           end
 
@@ -205,8 +206,8 @@ module Dependabot
           raise Dependabot::OutOfMemory if error.message.start_with?("Allowed memory size")
 
           if error.message.include?("403 Forbidden")
-            source = error.message.match(%r{https?://(?<source>[^/]+)/}).
-                     named_captures.fetch("source")
+            source = error.message.match(%r{https?://(?<source>[^/]+)/})
+                          .named_captures.fetch("source")
             raise PrivateSourceAuthenticationFailure, source
           end
 
@@ -237,8 +238,8 @@ module Dependabot
 
         def implicit_platform_reqs_satisfiable?(message)
           missing_extensions =
-            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-            map do |extension_string|
+            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
               name, requirement = extension_string.strip.split(" ", 2)
               { name: name, requirement: requirement }
             end
@@ -288,8 +289,8 @@ module Dependabot
             next content unless Composer::Version.correct?(updated_req)
 
             old_req =
-              dep.requirements.find { |r| r[:file] == "composer.json" }&.
-              fetch(:requirement)
+              dep.requirements.find { |r| r[:file] == "composer.json" }
+              &.fetch(:requirement)
 
             # When updating a subdep there won't be an old requirement
             next content unless old_req
@@ -316,10 +317,10 @@ module Dependabot
               next unless req.start_with?("dev-")
               next if req.include?("#")
 
-              commit_sha = parsed_lockfile.
-                           fetch(keys[:lockfile], []).
-                           find { |d| d["name"] == name }&.
-                           dig("source", "reference")
+              commit_sha = parsed_lockfile
+                           .fetch(keys[:lockfile], [])
+                           .find { |d| d["name"] == name }
+                           &.dig("source", "reference")
               updated_req_parts = req.split
               updated_req_parts[0] = updated_req_parts[0] + "##{commit_sha}"
               json[keys[:manifest]][name] = updated_req_parts.join(" ")
@@ -330,13 +331,13 @@ module Dependabot
         end
 
         def git_dependency_reference_error(error)
-          ref = error.message.match(/checkout '(?<ref>.*?)'/).
-                named_captures.fetch("ref")
+          ref = error.message.match(/checkout '(?<ref>.*?)'/)
+                     .named_captures.fetch("ref")
           dependency_name =
-            JSON.parse(lockfile.content).
-            values_at("packages", "packages-dev").flatten(1).
-            find { |dep| dep.dig("source", "reference") == ref }&.
-            fetch("name")
+            JSON.parse(lockfile.content)
+                .values_at("packages", "packages-dev").flatten(1)
+                .find { |dep| dep.dig("source", "reference") == ref }
+            &.fetch("name")
 
           raise unless dependency_name
 
@@ -358,9 +359,9 @@ module Dependabot
 
               updated_object = JSON.parse(content)
               updated_object_package =
-                updated_object.
-                fetch(package_type).
-                find { |d| d["name"] == details["name"] }
+                updated_object
+                .fetch(package_type)
+                .find { |d| d["name"] == details["name"] }
 
               next unless updated_object_package
 
@@ -368,9 +369,9 @@ module Dependabot
               updated_object_package["extra"]["patches_applied"] = patches
 
               content =
-                JSON.pretty_generate(updated_object, indent: "    ").
-                gsub(/\[\n\n\s*\]/, "[]").
-                gsub(/\}\z/, "}\n")
+                JSON.pretty_generate(updated_object, indent: "    ")
+                    .gsub(/\[\n\n\s*\]/, "[]")
+                    .gsub(/\}\z/, "}\n")
             end
           end
           content
@@ -405,15 +406,15 @@ module Dependabot
             updated_object.delete("platform-overrides")
           end
 
-          JSON.pretty_generate(updated_object, indent: "    ").
-            gsub(/\[\n\n\s*\]/, "[]").
-            gsub(/\}\z/, "}\n")
+          JSON.pretty_generate(updated_object, indent: "    ")
+              .gsub(/\[\n\n\s*\]/, "[]")
+              .gsub(/\}\z/, "}\n")
         end
 
         def version_for_reqs(requirements)
           req_arrays =
-            requirements.
-            map { |str| Composer::Requirement.requirements_array(str) }
+            requirements
+            .map { |str| Composer::Requirement.requirements_array(str) }
           potential_versions =
             req_arrays.flatten.map do |req|
               op, version = req.requirements.first
@@ -425,8 +426,8 @@ module Dependabot
             end
 
           version =
-            potential_versions.
-            find do |v|
+            potential_versions
+            .find do |v|
               req_arrays.all? { |reqs| reqs.any? { |r| r.satisfied_by?(v) } }
             end
           raise "No matching version for #{requirements}!" unless version
@@ -453,21 +454,21 @@ module Dependabot
         end
 
         def credentials_env
-          credentials.
-            select { |c| c.fetch("type") == "php_environment_variable" }.
-            to_h { |cred| [cred["env-key"], cred.fetch("env-value", "-")] }
+          credentials
+            .select { |c| c.fetch("type") == "php_environment_variable" }
+            .to_h { |cred| [cred["env-key"], cred.fetch("env-value", "-")] }
         end
 
         def git_credentials
-          credentials.
-            select { |cred| cred.fetch("type") == "git_source" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred.fetch("type") == "git_source" }
+            .select { |cred| cred["password"] }
         end
 
         def registry_credentials
-          credentials.
-            select { |cred| cred.fetch("type") == "composer_repository" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred.fetch("type") == "composer_repository" }
+            .select { |cred| cred["password"] }
         end
 
         def initial_platform

data/lib/dependabot/composer/file_updater/manifest_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/composer/file_updater"
@@ -44,14 +45,14 @@ module Dependabot
         end
 
         def old_requirement(dependency, new_requirement)
-          dependency.previous_requirements.
-            select { |r| r[:file] == manifest.name }.
-            find { |r| r[:groups] == new_requirement[:groups] }
+          dependency.previous_requirements
+                    .select { |r| r[:file] == manifest.name }
+                    .find { |r| r[:groups] == new_requirement[:groups] }
         end
 
         def updated_requirements(dependency)
-          new_requirements(dependency).
-            reject { |r| dependency.previous_requirements.include?(r) }
+          new_requirements(dependency)
+            .reject { |r| dependency.previous_requirements.include?(r) }
         end
 
         def requirement_changed?(file, dependency)

data/lib/dependabot/composer/file_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/file_updaters"

data/lib/dependabot/composer/helpers.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/composer/version"

data/lib/dependabot/composer/metadata_finder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "excon"
@@ -17,9 +18,9 @@ module Dependabot
 
       def source_from_dependency
         source_url =
-          dependency.requirements.
-          filter_map { |r| r.fetch(:source) }.
-          first&.fetch(:url, nil)
+          dependency.requirements
+                    .filter_map { |r| r.fetch(:source) }
+                    .first&.fetch(:url, nil)
 
         Source.from_url(source_url)
       end
@@ -57,5 +58,5 @@ module Dependabot
   end
 end
 
-Dependabot::MetadataFinders.
-  register("composer", Dependabot::Composer::MetadataFinder)
+Dependabot::MetadataFinders
+  .register("composer", Dependabot::Composer::MetadataFinder)

data/lib/dependabot/composer/native_helpers.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 module Dependabot

data/lib/dependabot/composer/requirement.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/utils"
@@ -25,9 +26,9 @@ module Dependabot
 
       def initialize(*requirements)
         requirements =
-          requirements.flatten.
-          flat_map { |req_string| req_string.split(AND_SEPARATOR) }.
-          flat_map { |req| convert_php_constraint_to_ruby_constraint(req) }
+          requirements.flatten
+                      .flat_map { |req_string| req_string.split(AND_SEPARATOR) }
+                      .flat_map { |req| convert_php_constraint_to_ruby_constraint(req) }
 
         super(requirements)
       end
@@ -100,5 +101,5 @@ module Dependabot
   end
 end
 
-Dependabot::Utils.
-  register_requirement_class("composer", Dependabot::Composer::Requirement)
+Dependabot::Utils
+  .register_requirement_class("composer", Dependabot::Composer::Requirement)

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "excon"
@@ -62,8 +63,8 @@ module Dependabot
 
         def filter_ignored_versions(versions_array)
           filtered =
-            versions_array.
-            reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
+            versions_array
+            .reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
 
           if @raise_on_ignored && filter_lower_versions(filtered).empty? && filter_lower_versions(versions_array).any?
             raise AllVersionsIgnored
@@ -75,8 +76,8 @@ module Dependabot
         def filter_lower_versions(versions_array)
           return versions_array unless dependency.numeric_version
 
-          versions_array.
-            select { |version| version > dependency.numeric_version }
+          versions_array
+            .select { |version| version > dependency.numeric_version }
         end
 
         def wants_prerelease?
@@ -89,23 +90,23 @@ module Dependabot
         end
 
         def available_versions
-          registry_version_details.
-            select { |version| version_class.correct?(version.gsub(/^v/, "")) }.
-            map { |version| version_class.new(version.gsub(/^v/, "")) }
+          registry_version_details
+            .select { |version| version_class.correct?(version.gsub(/^v/, "")) }
+            .map { |version| version_class.new(version.gsub(/^v/, "")) }
         end
 
         def registry_version_details
           return @registry_version_details unless @registry_version_details.nil?
 
           repositories =
-            JSON.parse(composer_file.content).
-            fetch("repositories", []).
-            select { |r| r.is_a?(Hash) }
-
-          urls = repositories.
-                 select { |h| h["type"] == "composer" }.
-                 filter_map { |h| h["url"] }.
-                 map { |url| url.gsub(%r{\/$}, "") + "/packages.json" }
+            JSON.parse(composer_file.content)
+                .fetch("repositories", [])
+                .select { |r| r.is_a?(Hash) }
+
+          urls = repositories
+                 .select { |h| h["type"] == "composer" }
+                 .filter_map { |h| h["url"] }
+                 .map { |url| url.gsub(%r{\/$}, "") + "/packages.json" }
 
           unless repositories.any? { |rep| rep["packagist.org"] == false }
             urls << "https://repo.packagist.org/p2/#{dependency.name.downcase}.json"

data/lib/dependabot/composer/update_checker/requirements_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 ################################################################################
@@ -57,10 +58,10 @@ module Dependabot
           req_string = req[:requirement].strip
           or_string_reqs = req_string.split(OR_SEPARATOR)
           or_separator = req_string.match(OR_SEPARATOR)&.to_s || " || "
-          numeric_or_string_reqs = or_string_reqs.
-                                   reject { |r| r.strip.start_with?("dev-") }
-          branch_or_string_reqs = or_string_reqs.
-                                  select { |r| r.strip.start_with?("dev-") }
+          numeric_or_string_reqs = or_string_reqs
+                                   .reject { |r| r.strip.start_with?("dev-") }
+          branch_or_string_reqs = or_string_reqs
+                                  .select { |r| r.strip.start_with?("dev-") }
 
           return req unless req_string.match?(/\d/)
           return req if numeric_or_string_reqs.none?
@@ -136,18 +137,18 @@ module Dependabot
         end
 
         def req_satisfied_by_latest_resolvable?(requirement_string)
-          ruby_requirements(requirement_string).
-            any? { |r| r.satisfied_by?(latest_resolvable_version) }
+          ruby_requirements(requirement_string)
+            .any? { |r| r.satisfied_by?(latest_resolvable_version) }
         end
 
         def update_version_string(req_string)
-          req_string.
-            sub(VERSION_REGEX) do |old_version|
+          req_string
+            .sub(VERSION_REGEX) do |old_version|
               next latest_resolvable_version.to_s unless req_string.match?(/[~*\^]/)
 
               old_parts = old_version.split(".")
-              new_parts = latest_resolvable_version.to_s.split(".").
-                          first(old_parts.count)
+              new_parts = latest_resolvable_version.to_s.split(".")
+                                                   .first(old_parts.count)
               new_parts.map.with_index do |part, i|
                 old_parts[i] == "*" ? "*" : part
               end.join(".")

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "json"
@@ -184,10 +185,10 @@ module Dependabot
               next unless req.start_with?("dev-")
               next if req.include?("#")
 
-              commit_sha = parsed_lockfile.
-                           fetch(keys[:lockfile], []).
-                           find { |d| d["name"] == name }&.
-                           dig("source", "reference")
+              commit_sha = parsed_lockfile
+                           .fetch(keys[:lockfile], [])
+                           .find { |d| d["name"] == name }
+                           &.dig("source", "reference")
               updated_req_parts = req.split
               updated_req_parts[0] = updated_req_parts[0] + "##{commit_sha}"
               json[keys[:manifest]][name] = updated_req_parts.join(" ")
@@ -206,12 +207,12 @@ module Dependabot
               ">= #{dependency.version}"
             else
               version_for_requirement =
-                dependency.requirements.filter_map { |r| r[:requirement] }.
-                reject { |req_string| req_string.start_with?("<") }.
-                select { |req_string| req_string.match?(VERSION_REGEX) }.
-                map { |req_string| req_string.match(VERSION_REGEX) }.
-                select { |version| requirement_valid?(">= #{version}") }.
-                max_by { |version| Composer::Version.new(version) }
+                dependency.requirements.filter_map { |r| r[:requirement] }
+                          .reject { |req_string| req_string.start_with?("<") }
+                          .select { |req_string| req_string.match?(VERSION_REGEX) }
+                          .map { |req_string| req_string.match(VERSION_REGEX) }
+                          .select { |version| requirement_valid?(">= #{version}") }
+                          .max_by { |version| Composer::Version.new(version) }
 
               ">= #{version_for_requirement || 0}"
             end
@@ -258,8 +259,8 @@ module Dependabot
             # These errors occur when platform requirements declared explicitly
             # in the composer.json aren't met.
             missing_extensions =
-              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -269,8 +270,8 @@ module Dependabot
                 !initial_platform.empty? &&
                 implicit_platform_reqs_satisfiable?(error.message)
             missing_extensions =
-              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -352,8 +353,8 @@ module Dependabot
 
         def implicit_platform_reqs_satisfiable?(message)
           missing_extensions =
-            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-            map do |extension_string|
+            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
               name, requirement = extension_string.strip.split(" ", 2)
               { name: name, requirement: requirement }
             end
@@ -376,8 +377,8 @@ module Dependabot
         rescue SharedHelpers::HelperSubprocessFailed => e
           if e.message.match?(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
             missing_extensions =
-              e.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              e.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
+               .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -385,8 +386,8 @@ module Dependabot
           elsif e.message.match?(MISSING_IMPLICIT_PLATFORM_REQ_REGEX) &&
                 implicit_platform_reqs_satisfiable?(e.message)
             missing_extensions =
-              e.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              e.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+               .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -398,8 +399,8 @@ module Dependabot
 
         def version_for_reqs(requirements)
           req_arrays =
-            requirements.
-            map { |str| Composer::Requirement.requirements_array(str) }
+            requirements
+            .map { |str| Composer::Requirement.requirements_array(str) }
           potential_versions =
             req_arrays.flatten.map do |req|
               op, version = req.requirements.first
@@ -411,8 +412,8 @@ module Dependabot
             end
 
           version =
-            potential_versions.
-            find do |v|
+            potential_versions
+            .find do |v|
               req_arrays.all? { |reqs| reqs.any? { |r| r.satisfied_by?(v) } }
             end
           return unless version
@@ -501,15 +502,15 @@ module Dependabot
         end
 
         def git_credentials
-          credentials.
-            select { |cred| cred["type"] == "git_source" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred["type"] == "git_source" }
+            .select { |cred| cred["password"] }
         end
 
         def registry_credentials
-          credentials.
-            select { |cred| cred["type"] == "composer_repository" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred["type"] == "composer_repository" }
+            .select { |cred| cred["password"] }
         end
       end
     end

data/lib/dependabot/composer/update_checker.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "json"
@@ -177,5 +178,5 @@ module Dependabot
   end
 end
 
-Dependabot::UpdateCheckers.
-  register("composer", Dependabot::Composer::UpdateChecker)
+Dependabot::UpdateCheckers
+  .register("composer", Dependabot::Composer::UpdateChecker)

data/lib/dependabot/composer/version.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/version"
@@ -22,5 +23,5 @@ module Dependabot
   end
 end
 
-Dependabot::Utils.
-  register_version_class("composer", Dependabot::Composer::Version)
+Dependabot::Utils
+  .register_version_class("composer", Dependabot::Composer::Version)

data/lib/dependabot/composer.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 # These all need to be required so the various classes can be registered in a
@@ -11,8 +12,8 @@ require "dependabot/composer/requirement"
 require "dependabot/composer/version"
 
 require "dependabot/pull_request_creator/labeler"
-Dependabot::PullRequestCreator::Labeler.
-  register_label_details("composer", name: "php", colour: "45229e")
+Dependabot::PullRequestCreator::Labeler
+  .register_label_details("composer", name: "php", colour: "45229e")
 
 require "dependabot/dependency"
 Dependabot::Dependency.register_production_check(

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.230.0
+  version: 0.231.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-08 00:00:00.000000000 Z
+date: 2023-09-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.231.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.231.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -230,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.230.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.231.0
 post_install_message: 
 rdoc_options: []
 require_paths: