RubyGems - dependabot-composer - Versions diffs - 0.230.0 → 0.232.0 - Mend

dependabot-composer 0.230.0 → 0.232.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

checksums.yaml +4 -4
data/lib/dependabot/composer/file_fetcher/path_dependency_builder.rb +3 -2
data/lib/dependabot/composer/file_fetcher.rb +17 -16
data/lib/dependabot/composer/file_parser.rb +5 -4
data/lib/dependabot/composer/file_updater/lockfile_updater.rb +47 -46
data/lib/dependabot/composer/file_updater/manifest_updater.rb +6 -5
data/lib/dependabot/composer/file_updater.rb +1 -0
data/lib/dependabot/composer/helpers.rb +1 -0
data/lib/dependabot/composer/metadata_finder.rb +6 -5
data/lib/dependabot/composer/native_helpers.rb +1 -0
data/lib/dependabot/composer/requirement.rb +6 -5
data/lib/dependabot/composer/update_checker/latest_version_finder.rb +16 -15
data/lib/dependabot/composer/update_checker/requirements_updater.rb +11 -10
data/lib/dependabot/composer/update_checker/version_resolver.rb +31 -30
data/lib/dependabot/composer/update_checker.rb +3 -2
data/lib/dependabot/composer/version.rb +3 -2
data/lib/dependabot/composer.rb +3 -2
metadata +19 -5

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a616ac1f8585d909dab986a81b6d5fdc91f2e5ceef146468412445481aaef41f
-  data.tar.gz: 95a7f04a69c9c39faa7f9c0491238d2a9174e9ab817639b98930e64cac19d904
+  metadata.gz: e6ee9d2713c67203e08765c34b290b474f54f09dd6fc301fc1b69c38fa08cf28
+  data.tar.gz: e5ee304eb85d6333c9136dd1cc7bbd26b1db21197b25956294967b80b4f1690b
 SHA512:
-  metadata.gz: d2d91c86bff8595ca6c4ad76cb4d69ebd90eba7e81f4636caf0654805f491087ea5ef2ec55df4c9baa7d0aa26ca0882eea4ad8d3125c847df8630f786073c96c
-  data.tar.gz: 8bf8453d50f4cbcd2154df4e44f4a47a63227a6c1b923ce26940bf0646003c45bf180e7317721df371b642fd60c20e25a038ad390c9bf6acb485a9914996f565
+  metadata.gz: 9535dda677fc9be6a2e049bcd364c273e2a2d1b9de3733ab0a92d68f2b292e55747d5422bf678fd58f0684635d651f210feb9b2e5fbece817fca69e2b991543d
+  data.tar.gz: a0bb045eb36b50be8d771a1fb8b2c5b9a37def243ec1bf8728007c07da6dedf549c5921440dfc250e496e502070bb5daf3e954d47c383ac77702469346a1593b

data/lib/dependabot/composer/file_fetcher/path_dependency_builder.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "json"
@@ -37,8 +38,8 @@ module Dependabot
         attr_reader :path, :lockfile, :directory
         def details_from_lockfile
-          keys = FileParser::DEPENDENCY_GROUP_KEYS.
-                 map { |h| h.fetch(:lockfile) }
+          keys = FileParser::DEPENDENCY_GROUP_KEYS
+                 .map { |h| h.fetch(:lockfile) }
           keys.each do |key|
             next unless parsed_lockfile[key]

data/lib/dependabot/composer/file_fetcher.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "json"
@@ -91,9 +92,9 @@ module Dependabot
               repos = repos.values if repos.is_a?(Hash)
               repos = repos.select { |r| r.is_a?(Hash) }
-              repos.
-                select { |details| details["type"] == "path" }.
-                map { |details| details["url"] }
+              repos
+                .select { |details| details["type"] == "path" }
+                .map { |details| details["url"] }
             else
               []
             end
@@ -117,34 +118,34 @@ module Dependabot
           path = path.gsub(%r{\*/$}, "")
           wildcard_depth += 1
         end
-        directories = repo_contents(dir: path).
-                      select { |file| file.type == "dir" }.
-                      map { |f| File.join(path, f.name) }
+        directories = repo_contents(dir: path)
+                      .select { |file| file.type == "dir" }
+                      .map { |f| File.join(path, f.name) }
         while wildcard_depth.positive?
           directories.each do |dir|
-            directories += repo_contents(dir: dir).
-                           select { |file| file.type == "dir" }.
-                           map { |f| File.join(dir, f.name) }
+            directories += repo_contents(dir: dir)
+                           .select { |file| file.type == "dir" }
+                           .map { |f| File.join(dir, f.name) }
           end
           wildcard_depth -= 1
         end
         directories
       rescue Octokit::NotFound, Gitlab::Error::NotFound
-        lockfile_path_dependency_paths.
-          select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }
+        lockfile_path_dependency_paths
+          .select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }
       end
       def lockfile_path_dependency_paths
-        keys = FileParser::DEPENDENCY_GROUP_KEYS.
-               map { |h| h.fetch(:lockfile) }
+        keys = FileParser::DEPENDENCY_GROUP_KEYS
+               .map { |h| h.fetch(:lockfile) }
         keys.flat_map do |key|
           next [] unless parsed_lockfile[key]
-          parsed_lockfile[key].
-            select { |details| details.dig("dist", "type") == "path" }.
-            map { |details| details.dig("dist", "url") }
+          parsed_lockfile[key]
+            .select { |details| details.dig("dist", "type") == "path" }
+            .map { |details| details.dig("dist", "url") }
         end
       end

data/lib/dependabot/composer/file_parser.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/dependency"
@@ -149,10 +150,10 @@ module Dependabot
         branch =
           if requirement.start_with?("dev-")
-            requirement.
-              sub(/^dev-/, "").
-              sub(/\s+as\s.*/, "").
-              split("#").first
+            requirement
+              .sub(/^dev-/, "")
+              .sub(/\s+as\s.*/, "")
+              .split("#").first
           elsif package_details.fetch("version")&.to_s&.start_with?("dev-")
             package_details.fetch("version")&.to_s&.sub(/^dev-/, "")
           end

data/lib/dependabot/composer/file_updater/lockfile_updater.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/shared_helpers"
@@ -137,8 +138,8 @@ module Dependabot
             # These errors occur when platform requirements declared explicitly
             # in the composer.json aren't met.
             missing_extensions =
-              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -148,8 +149,8 @@ module Dependabot
                 !initial_platform.empty? &&
                 implicit_platform_reqs_satisfiable?(error.message)
             missing_extensions =
-              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -171,14 +172,14 @@ module Dependabot
           end
           if error.message.match?(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR)
-            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR).
-                             named_captures.fetch("url")
+            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR)
+                                  .named_captures.fetch("url")
             raise Dependabot::GitDependenciesNotReachable, dependency_url
           end
           if error.message.match?(UpdateChecker::VersionResolver::FAILED_GIT_CLONE)
-            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE).
-                             named_captures.fetch("url")
+            dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE)
+                                  .named_captures.fetch("url")
             raise Dependabot::GitDependenciesNotReachable, dependency_url
           end
@@ -205,8 +206,8 @@ module Dependabot
           raise Dependabot::OutOfMemory if error.message.start_with?("Allowed memory size")
           if error.message.include?("403 Forbidden")
-            source = error.message.match(%r{https?://(?<source>[^/]+)/}).
-                     named_captures.fetch("source")
+            source = error.message.match(%r{https?://(?<source>[^/]+)/})
+                          .named_captures.fetch("source")
             raise PrivateSourceAuthenticationFailure, source
           end
@@ -237,8 +238,8 @@ module Dependabot
         def implicit_platform_reqs_satisfiable?(message)
           missing_extensions =
-            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-            map do |extension_string|
+            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
               name, requirement = extension_string.strip.split(" ", 2)
               { name: name, requirement: requirement }
             end
@@ -288,8 +289,8 @@ module Dependabot
             next content unless Composer::Version.correct?(updated_req)
             old_req =
-              dep.requirements.find { |r| r[:file] == "composer.json" }&.
-              fetch(:requirement)
+              dep.requirements.find { |r| r[:file] == "composer.json" }
+              &.fetch(:requirement)
             # When updating a subdep there won't be an old requirement
             next content unless old_req
@@ -316,10 +317,10 @@ module Dependabot
               next unless req.start_with?("dev-")
               next if req.include?("#")
-              commit_sha = parsed_lockfile.
-                           fetch(keys[:lockfile], []).
-                           find { |d| d["name"] == name }&.
-                           dig("source", "reference")
+              commit_sha = parsed_lockfile
+                           .fetch(keys[:lockfile], [])
+                           .find { |d| d["name"] == name }
+                           &.dig("source", "reference")
               updated_req_parts = req.split
               updated_req_parts[0] = updated_req_parts[0] + "##{commit_sha}"
               json[keys[:manifest]][name] = updated_req_parts.join(" ")
@@ -330,13 +331,13 @@ module Dependabot
         end
         def git_dependency_reference_error(error)
-          ref = error.message.match(/checkout '(?<ref>.*?)'/).
-                named_captures.fetch("ref")
+          ref = error.message.match(/checkout '(?<ref>.*?)'/)
+                     .named_captures.fetch("ref")
           dependency_name =
-            JSON.parse(lockfile.content).
-            values_at("packages", "packages-dev").flatten(1).
-            find { |dep| dep.dig("source", "reference") == ref }&.
-            fetch("name")
+            JSON.parse(lockfile.content)
+                .values_at("packages", "packages-dev").flatten(1)
+                .find { |dep| dep.dig("source", "reference") == ref }
+            &.fetch("name")
           raise unless dependency_name
@@ -358,9 +359,9 @@ module Dependabot
               updated_object = JSON.parse(content)
               updated_object_package =
-                updated_object.
-                fetch(package_type).
-                find { |d| d["name"] == details["name"] }
+                updated_object
+                .fetch(package_type)
+                .find { |d| d["name"] == details["name"] }
               next unless updated_object_package
@@ -368,9 +369,9 @@ module Dependabot
               updated_object_package["extra"]["patches_applied"] = patches
               content =
-                JSON.pretty_generate(updated_object, indent: "    ").
-                gsub(/\[\n\n\s*\]/, "[]").
-                gsub(/\}\z/, "}\n")
+                JSON.pretty_generate(updated_object, indent: "    ")
+                    .gsub(/\[\n\n\s*\]/, "[]")
+                    .gsub(/\}\z/, "}\n")
             end
           end
           content
@@ -405,15 +406,15 @@ module Dependabot
             updated_object.delete("platform-overrides")
           end
-          JSON.pretty_generate(updated_object, indent: "    ").
-            gsub(/\[\n\n\s*\]/, "[]").
-            gsub(/\}\z/, "}\n")
+          JSON.pretty_generate(updated_object, indent: "    ")
+              .gsub(/\[\n\n\s*\]/, "[]")
+              .gsub(/\}\z/, "}\n")
         end
         def version_for_reqs(requirements)
           req_arrays =
-            requirements.
-            map { |str| Composer::Requirement.requirements_array(str) }
+            requirements
+            .map { |str| Composer::Requirement.requirements_array(str) }
           potential_versions =
             req_arrays.flatten.map do |req|
               op, version = req.requirements.first
@@ -425,8 +426,8 @@ module Dependabot
             end
           version =
-            potential_versions.
-            find do |v|
+            potential_versions
+            .find do |v|
               req_arrays.all? { |reqs| reqs.any? { |r| r.satisfied_by?(v) } }
             end
           raise "No matching version for #{requirements}!" unless version
@@ -453,21 +454,21 @@ module Dependabot
         end
         def credentials_env
-          credentials.
-            select { |c| c.fetch("type") == "php_environment_variable" }.
-            to_h { |cred| [cred["env-key"], cred.fetch("env-value", "-")] }
+          credentials
+            .select { |c| c.fetch("type") == "php_environment_variable" }
+            .to_h { |cred| [cred["env-key"], cred.fetch("env-value", "-")] }
         end
         def git_credentials
-          credentials.
-            select { |cred| cred.fetch("type") == "git_source" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred.fetch("type") == "git_source" }
+            .select { |cred| cred["password"] }
         end
         def registry_credentials
-          credentials.
-            select { |cred| cred.fetch("type") == "composer_repository" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred.fetch("type") == "composer_repository" }
+            .select { |cred| cred["password"] }
         end
         def initial_platform

data/lib/dependabot/composer/file_updater/manifest_updater.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/composer/file_updater"
@@ -44,14 +45,14 @@ module Dependabot
         end
         def old_requirement(dependency, new_requirement)
-          dependency.previous_requirements.
-            select { |r| r[:file] == manifest.name }.
-            find { |r| r[:groups] == new_requirement[:groups] }
+          dependency.previous_requirements
+                    .select { |r| r[:file] == manifest.name }
+                    .find { |r| r[:groups] == new_requirement[:groups] }
         end
         def updated_requirements(dependency)
-          new_requirements(dependency).
-            reject { |r| dependency.previous_requirements.include?(r) }
+          new_requirements(dependency)
+            .reject { |r| dependency.previous_requirements.include?(r) }
         end
         def requirement_changed?(file, dependency)

data/lib/dependabot/composer/file_updater.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/file_updaters"

data/lib/dependabot/composer/helpers.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/composer/version"

data/lib/dependabot/composer/metadata_finder.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "excon"
@@ -17,9 +18,9 @@ module Dependabot
       def source_from_dependency
         source_url =
-          dependency.requirements.
-          filter_map { |r| r.fetch(:source) }.
-          first&.fetch(:url, nil)
+          dependency.requirements
+                    .filter_map { |r| r.fetch(:source) }
+                    .first&.fetch(:url, nil)
         Source.from_url(source_url)
       end
@@ -57,5 +58,5 @@ module Dependabot
   end
 end
-Dependabot::MetadataFinders.
-  register("composer", Dependabot::Composer::MetadataFinder)
+Dependabot::MetadataFinders
+  .register("composer", Dependabot::Composer::MetadataFinder)

data/lib/dependabot/composer/native_helpers.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 module Dependabot

data/lib/dependabot/composer/requirement.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/utils"
@@ -25,9 +26,9 @@ module Dependabot
       def initialize(*requirements)
         requirements =
-          requirements.flatten.
-          flat_map { |req_string| req_string.split(AND_SEPARATOR) }.
-          flat_map { |req| convert_php_constraint_to_ruby_constraint(req) }
+          requirements.flatten
+                      .flat_map { |req_string| req_string.split(AND_SEPARATOR) }
+                      .flat_map { |req| convert_php_constraint_to_ruby_constraint(req) }
         super(requirements)
       end
@@ -100,5 +101,5 @@ module Dependabot
   end
 end
-Dependabot::Utils.
-  register_requirement_class("composer", Dependabot::Composer::Requirement)
+Dependabot::Utils
+  .register_requirement_class("composer", Dependabot::Composer::Requirement)

data/lib/dependabot/composer/update_checker/latest_version_finder.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "excon"
@@ -62,8 +63,8 @@ module Dependabot
         def filter_ignored_versions(versions_array)
           filtered =
-            versions_array.
-            reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
+            versions_array
+            .reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
           if @raise_on_ignored && filter_lower_versions(filtered).empty? && filter_lower_versions(versions_array).any?
             raise AllVersionsIgnored
@@ -75,8 +76,8 @@ module Dependabot
         def filter_lower_versions(versions_array)
           return versions_array unless dependency.numeric_version
-          versions_array.
-            select { |version| version > dependency.numeric_version }
+          versions_array
+            .select { |version| version > dependency.numeric_version }
         end
         def wants_prerelease?
@@ -89,23 +90,23 @@ module Dependabot
         end
         def available_versions
-          registry_version_details.
-            select { |version| version_class.correct?(version.gsub(/^v/, "")) }.
-            map { |version| version_class.new(version.gsub(/^v/, "")) }
+          registry_version_details
+            .select { |version| version_class.correct?(version.gsub(/^v/, "")) }
+            .map { |version| version_class.new(version.gsub(/^v/, "")) }
         end
         def registry_version_details
           return @registry_version_details unless @registry_version_details.nil?
           repositories =
-            JSON.parse(composer_file.content).
-            fetch("repositories", []).
-            select { |r| r.is_a?(Hash) }
-          urls = repositories.
-                 select { |h| h["type"] == "composer" }.
-                 filter_map { |h| h["url"] }.
-                 map { |url| url.gsub(%r{\/$}, "") + "/packages.json" }
+            JSON.parse(composer_file.content)
+                .fetch("repositories", [])
+                .select { |r| r.is_a?(Hash) }
+          urls = repositories
+                 .select { |h| h["type"] == "composer" }
+                 .filter_map { |h| h["url"] }
+                 .map { |url| url.gsub(%r{\/$}, "") + "/packages.json" }
           unless repositories.any? { |rep| rep["packagist.org"] == false }
             urls << "https://repo.packagist.org/p2/#{dependency.name.downcase}.json"

data/lib/dependabot/composer/update_checker/requirements_updater.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 ################################################################################
@@ -57,10 +58,10 @@ module Dependabot
           req_string = req[:requirement].strip
           or_string_reqs = req_string.split(OR_SEPARATOR)
           or_separator = req_string.match(OR_SEPARATOR)&.to_s || " || "
-          numeric_or_string_reqs = or_string_reqs.
-                                   reject { |r| r.strip.start_with?("dev-") }
-          branch_or_string_reqs = or_string_reqs.
-                                  select { |r| r.strip.start_with?("dev-") }
+          numeric_or_string_reqs = or_string_reqs
+                                   .reject { |r| r.strip.start_with?("dev-") }
+          branch_or_string_reqs = or_string_reqs
+                                  .select { |r| r.strip.start_with?("dev-") }
           return req unless req_string.match?(/\d/)
           return req if numeric_or_string_reqs.none?
@@ -136,18 +137,18 @@ module Dependabot
         end
         def req_satisfied_by_latest_resolvable?(requirement_string)
-          ruby_requirements(requirement_string).
-            any? { |r| r.satisfied_by?(latest_resolvable_version) }
+          ruby_requirements(requirement_string)
+            .any? { |r| r.satisfied_by?(latest_resolvable_version) }
         end
         def update_version_string(req_string)
-          req_string.
-            sub(VERSION_REGEX) do |old_version|
+          req_string
+            .sub(VERSION_REGEX) do |old_version|
               next latest_resolvable_version.to_s unless req_string.match?(/[~*\^]/)
               old_parts = old_version.split(".")
-              new_parts = latest_resolvable_version.to_s.split(".").
-                          first(old_parts.count)
+              new_parts = latest_resolvable_version.to_s.split(".")
+                                                   .first(old_parts.count)
               new_parts.map.with_index do |part, i|
                 old_parts[i] == "*" ? "*" : part
               end.join(".")

data/lib/dependabot/composer/update_checker/version_resolver.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 require "json"
@@ -184,10 +185,10 @@ module Dependabot
               next unless req.start_with?("dev-")
               next if req.include?("#")
-              commit_sha = parsed_lockfile.
-                           fetch(keys[:lockfile], []).
-                           find { |d| d["name"] == name }&.
-                           dig("source", "reference")
+              commit_sha = parsed_lockfile
+                           .fetch(keys[:lockfile], [])
+                           .find { |d| d["name"] == name }
+                           &.dig("source", "reference")
               updated_req_parts = req.split
               updated_req_parts[0] = updated_req_parts[0] + "##{commit_sha}"
               json[keys[:manifest]][name] = updated_req_parts.join(" ")
@@ -206,12 +207,12 @@ module Dependabot
               ">= #{dependency.version}"
             else
               version_for_requirement =
-                dependency.requirements.filter_map { |r| r[:requirement] }.
-                reject { |req_string| req_string.start_with?("<") }.
-                select { |req_string| req_string.match?(VERSION_REGEX) }.
-                map { |req_string| req_string.match(VERSION_REGEX) }.
-                select { |version| requirement_valid?(">= #{version}") }.
-                max_by { |version| Composer::Version.new(version) }
+                dependency.requirements.filter_map { |r| r[:requirement] }
+                          .reject { |req_string| req_string.start_with?("<") }
+                          .select { |req_string| req_string.match?(VERSION_REGEX) }
+                          .map { |req_string| req_string.match(VERSION_REGEX) }
+                          .select { |version| requirement_valid?(">= #{version}") }
+                          .max_by { |version| Composer::Version.new(version) }
               ">= #{version_for_requirement || 0}"
             end
@@ -258,8 +259,8 @@ module Dependabot
             # These errors occur when platform requirements declared explicitly
             # in the composer.json aren't met.
             missing_extensions =
-              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -269,8 +270,8 @@ module Dependabot
                 !initial_platform.empty? &&
                 implicit_platform_reqs_satisfiable?(error.message)
             missing_extensions =
-              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              error.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -352,8 +353,8 @@ module Dependabot
         def implicit_platform_reqs_satisfiable?(message)
           missing_extensions =
-            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-            map do |extension_string|
+            message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+                   .map do |extension_string|
               name, requirement = extension_string.strip.split(" ", 2)
               { name: name, requirement: requirement }
             end
@@ -376,8 +377,8 @@ module Dependabot
         rescue SharedHelpers::HelperSubprocessFailed => e
           if e.message.match?(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
             missing_extensions =
-              e.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              e.message.scan(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
+               .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -385,8 +386,8 @@ module Dependabot
           elsif e.message.match?(MISSING_IMPLICIT_PLATFORM_REQ_REGEX) &&
                 implicit_platform_reqs_satisfiable?(e.message)
             missing_extensions =
-              e.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX).
-              map do |extension_string|
+              e.message.scan(MISSING_IMPLICIT_PLATFORM_REQ_REGEX)
+               .map do |extension_string|
                 name, requirement = extension_string.strip.split(" ", 2)
                 { name: name, requirement: requirement }
               end
@@ -398,8 +399,8 @@ module Dependabot
         def version_for_reqs(requirements)
           req_arrays =
-            requirements.
-            map { |str| Composer::Requirement.requirements_array(str) }
+            requirements
+            .map { |str| Composer::Requirement.requirements_array(str) }
           potential_versions =
             req_arrays.flatten.map do |req|
               op, version = req.requirements.first
@@ -411,8 +412,8 @@ module Dependabot
             end
           version =
-            potential_versions.
-            find do |v|
+            potential_versions
+            .find do |v|
               req_arrays.all? { |reqs| reqs.any? { |r| r.satisfied_by?(v) } }
             end
           return unless version
@@ -501,15 +502,15 @@ module Dependabot
         end
         def git_credentials
-          credentials.
-            select { |cred| cred["type"] == "git_source" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred["type"] == "git_source" }
+            .select { |cred| cred["password"] }
         end
         def registry_credentials
-          credentials.
-            select { |cred| cred["type"] == "composer_repository" }.
-            select { |cred| cred["password"] }
+          credentials
+            .select { |cred| cred["type"] == "composer_repository" }
+            .select { |cred| cred["password"] }
         end
       end
     end

data/lib/dependabot/composer/update_checker.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "json"
@@ -177,5 +178,5 @@ module Dependabot
   end
 end
-Dependabot::UpdateCheckers.
-  register("composer", Dependabot::Composer::UpdateChecker)
+Dependabot::UpdateCheckers
+  .register("composer", Dependabot::Composer::UpdateChecker)

data/lib/dependabot/composer/version.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 require "dependabot/version"
@@ -22,5 +23,5 @@ module Dependabot
   end
 end
-Dependabot::Utils.
-  register_version_class("composer", Dependabot::Composer::Version)
+Dependabot::Utils
+  .register_version_class("composer", Dependabot::Composer::Version)

data/lib/dependabot/composer.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 # These all need to be required so the various classes can be registered in a
@@ -11,8 +12,8 @@ require "dependabot/composer/requirement"
 require "dependabot/composer/version"
 require "dependabot/pull_request_creator/labeler"
-Dependabot::PullRequestCreator::Labeler.
-  register_label_details("composer", name: "php", colour: "45229e")
+Dependabot::PullRequestCreator::Labeler
+  .register_label_details("composer", name: "php", colour: "45229e")
 require "dependabot/dependency"
 Dependabot::Dependency.register_production_check(

metadata CHANGED Viewed

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.230.0
+  version: 0.232.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-09-08 00:00:00.000000000 Z
+date: 2023-09-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.232.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.232.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -230,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.230.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.232.0
 post_install_message:
 rdoc_options: []
 require_paths: