dependabot-composer 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 90874526a1c8b9f36669040be08ce71794578d3844f3d0aa97fe80e831ee5b4b
-  data.tar.gz: d940cd0bef070dac30dc9a4f54a88e9a10601fc9a4cb5711dd0667b466bacdb6
+  metadata.gz: 78b54a4ac406d7d5f1cae0f767b47f6ba8eb7671d202fd379bd560201f5d7cc7
+  data.tar.gz: 020ec993034ceea2e4aa1e4f11d6d87486499bb0a5e241a7087ffbad2b0d981f
 SHA512:
-  metadata.gz: e044682e96915f3f126ebf844a71e7c150398a518660fa771003ecc196c52836d35c4b77736dbe7aa0813a062d181d05ca0e4c091ac87af2859b75605d2c9ed2
-  data.tar.gz: b7e61669d528f52aecdf68e17a668163863d4d0e013632c7a354848d28c972a9a3817d56aa4f5d86c836d361f9dc6ed2c38f8e24e6f0d0725e2d69f53bc785a8
+  metadata.gz: de52472901295cf6f857c01953829a2931d77423ec1b713e4789ed782b016012cdd70543be3c9c4463f89f78f2e4239b6c88eee521c71230e227e73f576c0c61
+  data.tar.gz: d8ea50434bf9909eb7bc3592bbcbe597c72112ac29e611e04fa6688ea31a2ab45e2984d149c0c89fb365c07bf05836a2a8bc0384ec5d691d58801028311cc58e

data/lib/dependabot/composer/file_updater/lockfile_updater.rb

@@ -122,21 +122,24 @@ module Dependabot
 
         sig { returns(T::Hash[String, String]) }
         def run_update_helper
-          SharedHelpers.with_git_configured(credentials: T.unsafe(credentials)) do
-            SharedHelpers.run_helper_subprocess(
-              command: "php -d memory_limit=-1 #{php_helper_path}",
-              allow_unsafe_shell_command: true,
-              function: "update",
-              env: credentials_env,
-              args: [
-                Dir.pwd,
-                dependency.name,
-                dependency.version,
-                git_credentials,
-                registry_credentials
-              ]
-            )
-          end
+          T.cast(
+            SharedHelpers.with_git_configured(credentials: credentials) do
+              SharedHelpers.run_helper_subprocess(
+                command: "php -d memory_limit=-1 #{php_helper_path}",
+                allow_unsafe_shell_command: true,
+                function: "update",
+                env: credentials_env,
+                args: [
+                  Dir.pwd,
+                  dependency.name,
+                  dependency.version,
+                  git_credentials,
+                  registry_credentials
+                ]
+              )
+            end,
+            T::Hash[String, String]
+          )
         end
 
         sig { returns(String) }
@@ -418,13 +421,15 @@ module Dependabot
           SharedHelpers.in_a_temporary_directory do
             File.write(PackageManager::MANIFEST_FILENAME, updated_composer_json_content)
 
-            content_hash =
+            content_hash = T.cast(
               SharedHelpers.run_helper_subprocess(
                 command: "#{Language::NAME} #{php_helper_path}",
                 function: "get_content_hash",
                 env: credentials_env,
                 args: [Dir.pwd]
-              )
+              ),
+              String
+            )
 
             content.gsub(existing_hash, content_hash)
           end

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -188,19 +188,22 @@ module Dependabot
 
         sig { returns(T.nilable(String)) }
         def run_update_checker
-          SharedHelpers.with_git_configured(credentials: credentials) do
-            SharedHelpers.run_helper_subprocess(
-              command: "php -d memory_limit=-1 #{php_helper_path}",
-              allow_unsafe_shell_command: true,
-              function: "get_latest_resolvable_version",
-              args: [
-                Dir.pwd,
-                dependency.name.downcase,
-                git_credentials,
-                registry_credentials
-              ]
-            )
-          end
+          T.cast(
+            SharedHelpers.with_git_configured(credentials: credentials) do
+              SharedHelpers.run_helper_subprocess(
+                command: "php -d memory_limit=-1 #{php_helper_path}",
+                allow_unsafe_shell_command: true,
+                function: "get_latest_resolvable_version",
+                args: [
+                  Dir.pwd,
+                  dependency.name.downcase,
+                  git_credentials,
+                  registry_credentials
+                ]
+              )
+            end,
+            T.nilable(String)
+          )
         end
 
         sig { params(unlock_requirement: T::Boolean).returns(String) }

data/lib/dependabot/composer/update_checker.rb

@@ -191,7 +191,7 @@ module Dependabot
         if git_commit_checker.pinned_ref_looks_like_version? &&
            git_commit_checker.local_tag_for_latest_version(update_cooldown)
           latest_tag = git_commit_checker.local_tag_for_latest_version(update_cooldown)
-          return latest_tag&.fetch(:commit_sha)
+          return latest_tag&.commit_sha
         end
 
         # If the dependency is pinned to a tag that doesn't look like a

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -276,7 +276,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib