dependabot-composer 0.283.0 → 0.284.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b8992484220d81903b1a07855d565d277f7811b6b937663a7331c0f46d42086b
-  data.tar.gz: e7f25e075ca04f67d30cc707d4329f341595b6e0165084e70afd1cbf82eb8aa0
+  metadata.gz: ad969271d547cae9e3c61478cd18bfcfb1d929fc33cedb36797c86f7763cfffa
+  data.tar.gz: 358b50f002d51effcacfa7dcdc5743a66f2a7f5b7e60c319191e6d84ac364c45
 SHA512:
-  metadata.gz: f92979c93ab7679b5cc5990ca6b2ab50e8bb54a2ffac18c9d389682b9cc3065b26bf7c4f7261c8259f2f0084f87bb8cc24f039c391bec242fc089bba9ec9533a
-  data.tar.gz: 768006dadeb5fb2f142f1e3666d8275e83d30e6eca34dd1c89f58763548f46136b557a53104590c3bdb8b91c86413a685d9083a2346cf42fead87bdb2151e0a4
+  metadata.gz: bc855cfb10f61f18f3819a4bf5f8c3b30ed23812e0abb87e994537ce2f296267d70c0378b2e1901a6258b1d5c6ab131432612af07870d959d7913df0b3225179
+  data.tar.gz: c4cb94ed6706c3417508bbcfd6918efa1b5d18c02b814ea1726111a76f806b4cd2cb03ee66be4f5cbdae5c02a8213a77b9ed4881f7a94436733b52f772a11791

data/lib/dependabot/composer/file_parser.rb

@@ -35,13 +35,24 @@ module Dependabot
         dependency_set.dependencies
       end
 
-      sig { returns(PackageManagerBase) }
-      def package_manager
-        PackageManager.new(composer_version)
+      sig { returns(Ecosystem) }
+      def ecosystem
+        @ecosystem ||= T.let(
+          Ecosystem.new(
+            name: ECOSYSTEM,
+            package_manager: package_manager
+          ),
+          T.nilable(Ecosystem)
+        )
       end
 
       private
 
+      sig { returns(Ecosystem::VersionManager) }
+      def package_manager
+        PackageManager.new(composer_version)
+      end
+
       sig { returns(DependencySet) }
       def manifest_dependencies # rubocop:disable Metrics/PerceivedComplexity
         dependencies = T.let(DependencySet.new, DependencySet)

data/lib/dependabot/composer/package_manager.rb

@@ -2,11 +2,12 @@
 # frozen_string_literal: true
 
 require "sorbet-runtime"
-require "dependabot/package_manager"
+require "dependabot/ecosystem"
 require "dependabot/composer/version"
 
 module Dependabot
   module Composer
+    ECOSYSTEM = "composer"
     PACKAGE_MANAGER = "composer"
 
     # Keep versions in ascending order
@@ -16,29 +17,19 @@ module Dependabot
       Version.new("1")
     ].freeze, T::Array[Dependabot::Version])
 
-    class PackageManager < PackageManagerBase
+    class PackageManager < Dependabot::Ecosystem::VersionManager
       extend T::Sig
 
-      sig { params(version: T.any(String, Dependabot::Version)).void }
-      def initialize(version)
-        @version = T.let(Version.new(version), Dependabot::Version)
-        @name = T.let(PACKAGE_MANAGER, String)
-        @deprecated_versions = T.let(DEPRECATED_COMPOSER_VERSIONS, T::Array[Dependabot::Version])
-        @supported_versions = T.let(SUPPORTED_COMPOSER_VERSIONS, T::Array[Dependabot::Version])
+      sig { params(raw_version: String).void }
+      def initialize(raw_version)
+        super(
+          PACKAGE_MANAGER,
+          Version.new(raw_version),
+          DEPRECATED_COMPOSER_VERSIONS,
+          SUPPORTED_COMPOSER_VERSIONS,
+       )
       end
 
-      sig { override.returns(String) }
-      attr_reader :name
-
-      sig { override.returns(Dependabot::Version) }
-      attr_reader :version
-
-      sig { override.returns(T::Array[Dependabot::Version]) }
-      attr_reader :deprecated_versions
-
-      sig { override.returns(T::Array[Dependabot::Version]) }
-      attr_reader :supported_versions
-
       sig { override.returns(T::Boolean) }
       def deprecated?
         return false if unsupported?
@@ -46,7 +37,7 @@ module Dependabot
         # Check if the feature flag for Composer v1 deprecation warning is enabled.
         return false unless Dependabot::Experiments.enabled?(:composer_v1_deprecation_warning)
 
-        deprecated_versions.include?(version)
+        super
       end
 
       sig { override.returns(T::Boolean) }
@@ -54,7 +45,7 @@ module Dependabot
         # Check if the feature flag for Composer v1 unsupported error is enabled.
         return false unless Dependabot::Experiments.enabled?(:composer_v1_unsupported_error)
 
-        supported_versions.all? { |supported| supported > version }
+        super
       end
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.283.0
+  version: 0.284.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-10-31 00:00:00.000000000 Z
+date: 2024-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.283.0
+        version: 0.284.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.283.0
+        version: 0.284.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -287,7 +287,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.283.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.284.0
 post_install_message: 
 rdoc_options: []
 require_paths: