dependabot-composer 0.334.0 → 0.335.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 91db08f546cb6c2ea2b4870527a5c59fa6685b42a85c0a102cfe092c5c992d49
-  data.tar.gz: b83412521e3ac415989585422374d85e0d8db86172816dda4703ef11dfa56e6b
+  metadata.gz: c1583381ef2a66a39150b750f5dbd4325a029a0faa6aef978455ea8e7096dc32
+  data.tar.gz: 6d50ca55ecb55bccd9e1fe3da7eebfa723c746dccac97f02e09b0982d588a73b
 SHA512:
-  metadata.gz: 186875970ccddc0a19fef7c0d41b8c809aea458eb65faac1499075106ddd4b34364a0a73ec2f122c9de314e54b65cef596cdcd5c876c5dff7ccb03db0cb1acc0
-  data.tar.gz: 912331741a6f9a37ae3704e70461eb2d8257d6604f845eea25a17ec04a024ac79d0bc37e01fc293a7c643fea289f9ead5f4fc901388ce7538fcbdd366007d70d
+  metadata.gz: e89aca1d6664c7b314eeb131d4d98a2bbd03d831915b481390f8a677a594dc613000590b1c421ed5b3a6127dd9c29dc13346015b8880b0097d5e67bdbb2a6073
+  data.tar.gz: 10ad1dd0559dfa79eebcedab2ee6cfc7f39856a5c978551b733c3ebdfa7de71cc79e209b80fa9f54a9ae09cc90f8e80072a0b37a24a57fb62fd74efc07438927

data/lib/dependabot/composer/file_parser.rb

@@ -20,18 +20,21 @@ module Dependabot
     class FileParser < Dependabot::FileParsers::Base
       require "dependabot/file_parsers/base/dependency_set"
 
-      DEPENDENCY_GROUP_KEYS = T.let([
-        {
-          manifest: "require",
-          lockfile: "packages",
-          group: "runtime"
-        },
-        {
-          manifest: "require-dev",
-          lockfile: "packages-dev",
-          group: "development"
-        }
-      ].freeze, T::Array[T::Hash[Symbol, String]])
+      DEPENDENCY_GROUP_KEYS = T.let(
+        [
+          {
+            manifest: "require",
+            lockfile: "packages",
+            group: "runtime"
+          },
+          {
+            manifest: "require-dev",
+            lockfile: "packages-dev",
+            group: "development"
+          }
+        ].freeze,
+        T::Array[T::Hash[Symbol, String]]
+      )
 
       sig { override.returns(T::Array[Dependabot::Dependency]) }
       def parse
@@ -225,8 +228,11 @@ module Dependabot
       end
 
       sig do
-        params(name: String, type: String,
-               requirement: String).returns(T.nilable(T::Hash[Symbol, T.nilable(String)]))
+        params(
+          name: String,
+          type: String,
+          requirement: String
+        ).returns(T.nilable(T::Hash[Symbol, T.nilable(String)]))
       end
       def dependency_source(name:, type:, requirement:)
         return unless lockfile
@@ -243,8 +249,10 @@ module Dependabot
       end
 
       sig do
-        params(package_details: T::Hash[String, T.untyped],
-               requirement: String).returns(T.nilable(T::Hash[Symbol, T.nilable(String)]))
+        params(
+          package_details: T::Hash[String, T.untyped],
+          requirement: String
+        ).returns(T.nilable(T::Hash[Symbol, T.nilable(String)]))
       end
       def git_dependency_details(package_details, requirement)
         return unless package_details.dig("source", "type") == "git"

data/lib/dependabot/composer/file_updater/manifest_updater.rb

@@ -19,27 +19,29 @@ module Dependabot
 
         sig { returns(String) }
         def updated_manifest_content
-          T.must(dependencies.reduce(manifest.content.dup) do |content, dep|
-            updated_content = content
-            updated_requirements(dep).each do |new_req|
-              old_req = old_requirement(dep, new_req)&.fetch(:requirement)
-              updated_req = new_req.fetch(:requirement)
-
-              regex =
-                /
-                  "#{Regexp.escape(dep.name)}"\s*:\s*
-                  "#{Regexp.escape(old_req)}"
-                /x
-
-              updated_content = content&.gsub(regex) do |declaration|
-                declaration.gsub(%("#{old_req}"), %("#{updated_req}"))
+          T.must(
+            dependencies.reduce(manifest.content.dup) do |content, dep|
+              updated_content = content
+              updated_requirements(dep).each do |new_req|
+                old_req = old_requirement(dep, new_req)&.fetch(:requirement)
+                updated_req = new_req.fetch(:requirement)
+
+                regex =
+                  /
+                    "#{Regexp.escape(dep.name)}"\s*:\s*
+                    "#{Regexp.escape(old_req)}"
+                  /x
+
+                updated_content = content&.gsub(regex) do |declaration|
+                  declaration.gsub(%("#{old_req}"), %("#{updated_req}"))
+                end
+
+                raise "Expected content to change!" if content == updated_content
               end
 
-              raise "Expected content to change!" if content == updated_content
+              updated_content
             end
-
-            updated_content
-          end)
+          )
         end
 
         private

data/lib/dependabot/composer/file_updater.rb

@@ -74,8 +74,10 @@ module Dependabot
 
       sig { returns(T.nilable(Dependabot::DependencyFile)) }
       def composer_json
-        @composer_json ||= T.let(get_original_file(PackageManager::MANIFEST_FILENAME),
-                                 T.nilable(Dependabot::DependencyFile))
+        @composer_json ||= T.let(
+          get_original_file(PackageManager::MANIFEST_FILENAME),
+          T.nilable(Dependabot::DependencyFile)
+        )
       end
 
       sig { returns(T.nilable(Dependabot::DependencyFile)) }

data/lib/dependabot/composer/package/package_details_fetcher.rb

@@ -246,11 +246,13 @@ module Dependabot
 
           parsed_auth_json = JSON.parse(T.must(json.content))
           parsed_auth_json.fetch("http-basic", {}).map do |reg, details|
-            Dependabot::Credential.new({
-              "registry" => reg,
-              "username" => details["username"],
-              "password" => details["password"]
-            })
+            Dependabot::Credential.new(
+              {
+                "registry" => reg,
+                "username" => details["username"],
+                "password" => details["password"]
+              }
+            )
           end
         rescue JSON::ParserError
           raise Dependabot::DependencyFileNotParseable, json.path if json

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -59,8 +59,10 @@ module Dependabot
         def fetch_lowest_security_fix_version(language_version: nil) # rubocop:disable Lint/UnusedMethodArgument
           releases = available_versions
           releases = filter_prerelease_versions(releases)
-          releases = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(releases,
-                                                                                           security_advisories)
+          releases = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(
+            releases,
+            security_advisories
+          )
           releases = filter_ignored_versions(releases)
           releases = filter_lower_versions(releases)
           releases.min_by(&:version)&.version

data/lib/dependabot/composer/update_checker/requirements_updater.rb

@@ -41,8 +41,11 @@ module Dependabot
             latest_resolvable_version: T.nilable(T.any(String, Composer::Version))
           ).void
         end
-        def initialize(requirements:, update_strategy:,
-                       latest_resolvable_version:)
+        def initialize(
+          requirements:,
+          update_strategy:,
+          latest_resolvable_version:
+        )
           @requirements = requirements
           @update_strategy = update_strategy
 

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -61,8 +61,13 @@ module Dependabot
             latest_allowable_version: T.nilable(Gem::Version)
           ).void
         end
-        def initialize(credentials:, dependency:, dependency_files:,
-                       requirements_to_unlock:, latest_allowable_version:)
+        def initialize(
+          credentials:,
+          dependency:,
+          dependency_files:,
+          requirements_to_unlock:,
+          latest_allowable_version:
+        )
           @credentials                  = credentials
           @dependency                   = dependency
           @dependency_files             = dependency_files
@@ -637,11 +642,14 @@ module Dependabot
       # Private source errors
       CURL_ERROR = T.let(/curl error 52 while downloading (?<url>.*): Empty reply from server/, Regexp)
 
-      PRIVATE_SOURCE_AUTH_FAIL = T.let([
-        /Could not authenticate against (?<url>.*)/,
-        /The '(?<url>.*)' URL could not be accessed \(HTTP 403\)/,
-        /The "(?<url>.*)" file could not be downloaded/
-      ].freeze, T::Array[Regexp])
+      PRIVATE_SOURCE_AUTH_FAIL = T.let(
+        [
+          /Could not authenticate against (?<url>.*)/,
+          /The '(?<url>.*)' URL could not be accessed \(HTTP 403\)/,
+          /The "(?<url>.*)" file could not be downloaded/
+        ].freeze,
+        T::Array[Regexp]
+      )
 
       REQUIREMENT_ERROR = T.let(/^(?<req>.*) is invalid, it should not contain uppercase characters/, Regexp)
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.334.0
+  version: 0.335.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -113,56 +113,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -276,7 +276,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.335.0
 rdoc_options: []
 require_paths:
 - lib