dependabot-composer 0.282.0 → 0.284.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aa759c414a3bfc27e6c5710db84543ce7b83821fc8386f0874bafd9be00a62e4
-  data.tar.gz: 67a958d868216c99f9a6a5e4dbb72b25e21d886507a6abcc520bdfc0db497e6b
+  metadata.gz: ad969271d547cae9e3c61478cd18bfcfb1d929fc33cedb36797c86f7763cfffa
+  data.tar.gz: 358b50f002d51effcacfa7dcdc5743a66f2a7f5b7e60c319191e6d84ac364c45
 SHA512:
-  metadata.gz: fe9dfc28a5683ff62e5d1d9e230f7432bbd106dc5b87debb2f0081de41c3fb26b55bbc8a7504e79ebdcd418ac5b4ce7752c6dc709bad5d2c6582317c748341e1
-  data.tar.gz: f7cf4a3e0549e1841a2895277b76455c16bac210258b54986b66c1437c377b3695c8fc86aa916b3b002cabf55a197e9ca3ee334a22d04657b856d1f27ca27478
+  metadata.gz: bc855cfb10f61f18f3819a4bf5f8c3b30ed23812e0abb87e994537ce2f296267d70c0378b2e1901a6258b1d5c6ab131432612af07870d959d7913df0b3225179
+  data.tar.gz: c4cb94ed6706c3417508bbcfd6918efa1b5d18c02b814ea1726111a76f806b4cd2cb03ee66be4f5cbdae5c02a8213a77b9ed4881f7a94436733b52f772a11791

data/lib/dependabot/composer/file_parser.rb

@@ -35,13 +35,24 @@ module Dependabot
         dependency_set.dependencies
       end
 
-      sig { returns(PackageManagerBase) }
-      def package_manager
-        PackageManager.new(composer_version)
+      sig { returns(Ecosystem) }
+      def ecosystem
+        @ecosystem ||= T.let(
+          Ecosystem.new(
+            name: ECOSYSTEM,
+            package_manager: package_manager
+          ),
+          T.nilable(Ecosystem)
+        )
       end
 
       private
 
+      sig { returns(Ecosystem::VersionManager) }
+      def package_manager
+        PackageManager.new(composer_version)
+      end
+
       sig { returns(DependencySet) }
       def manifest_dependencies # rubocop:disable Metrics/PerceivedComplexity
         dependencies = T.let(DependencySet.new, DependencySet)

data/lib/dependabot/composer/package_manager.rb

@@ -2,11 +2,12 @@
 # frozen_string_literal: true
 
 require "sorbet-runtime"
-require "dependabot/package_manager"
+require "dependabot/ecosystem"
 require "dependabot/composer/version"
 
 module Dependabot
   module Composer
+    ECOSYSTEM = "composer"
     PACKAGE_MANAGER = "composer"
 
     # Keep versions in ascending order
@@ -16,29 +17,19 @@ module Dependabot
       Version.new("1")
     ].freeze, T::Array[Dependabot::Version])
 
-    class PackageManager < PackageManagerBase
+    class PackageManager < Dependabot::Ecosystem::VersionManager
       extend T::Sig
 
-      sig { params(version: T.any(String, Dependabot::Version)).void }
-      def initialize(version)
-        @version = T.let(Version.new(version), Dependabot::Version)
-        @name = T.let(PACKAGE_MANAGER, String)
-        @deprecated_versions = T.let(DEPRECATED_COMPOSER_VERSIONS, T::Array[Dependabot::Version])
-        @supported_versions = T.let(SUPPORTED_COMPOSER_VERSIONS, T::Array[Dependabot::Version])
+      sig { params(raw_version: String).void }
+      def initialize(raw_version)
+        super(
+          PACKAGE_MANAGER,
+          Version.new(raw_version),
+          DEPRECATED_COMPOSER_VERSIONS,
+          SUPPORTED_COMPOSER_VERSIONS,
+       )
       end
 
-      sig { override.returns(String) }
-      attr_reader :name
-
-      sig { override.returns(Dependabot::Version) }
-      attr_reader :version
-
-      sig { override.returns(T::Array[Dependabot::Version]) }
-      attr_reader :deprecated_versions
-
-      sig { override.returns(T::Array[Dependabot::Version]) }
-      attr_reader :supported_versions
-
       sig { override.returns(T::Boolean) }
       def deprecated?
         return false if unsupported?
@@ -46,7 +37,7 @@ module Dependabot
         # Check if the feature flag for Composer v1 deprecation warning is enabled.
         return false unless Dependabot::Experiments.enabled?(:composer_v1_deprecation_warning)
 
-        deprecated_versions.include?(version)
+        super
       end
 
       sig { override.returns(T::Boolean) }
@@ -54,7 +45,7 @@ module Dependabot
         # Check if the feature flag for Composer v1 unsupported error is enabled.
         return false unless Dependabot::Experiments.enabled?(:composer_v1_unsupported_error)
 
-        supported_versions.all? { |supported| supported > version }
+        super
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.282.0
+  version: 0.284.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-10-24 00:00:00.000000000 Z
+date: 2024-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.282.0
+        version: 0.284.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.282.0
+        version: 0.284.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -287,7 +287,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.282.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.284.0
 post_install_message: 
 rdoc_options: []
 require_paths: