dependabot-conda 0.385.0 → 0.386.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7fb5c6e80563270d7b99bb9c85ac4dac6fd01faabfdeab82ce8ea4487be3c343
-  data.tar.gz: ef4aad9f20ee500a81382df84c103cbea2b16f9beead32ba6cd032da992e11d5
+  metadata.gz: 560c6d6dbe90e27642b391998040c8042c8ef4638034e8ca881e68aa9b69a8c2
+  data.tar.gz: 55c0056f8830372139e6b75284e38e7ce276f0228389cd67014fd8e666cada12
 SHA512:
-  metadata.gz: 317e03137cd7cc3e193fdb8cd1124b7fe0a4f10c6676257e3f2cb8cdf73dfb10d01ca6dbd4dd356f57ed2c0f5cf9524a6f8841ac70060bc8335b5b5ee6f42a29
-  data.tar.gz: 0c462bd7b6672c947902f031bed4001eaeea2d78fa199879cd72f4febfd28c7f40fb26ad5813377ad4fd3ec32038e2101ea6984fb8762cdd025c413105c1da20
+  metadata.gz: 4a9b536798cdb1fc4ccae93a47edfbb480927029cf19fd078d11c733641ae665a4849a1d4f83cbb21c7da80ca642b8ae913b96f5718ed2651279b382bc2a9a28
+  data.tar.gz: 3f4c7e4de79d8cdba506a547b13907c61668e2c6eaff7491eaf36c31a743f6711a85e705403d459c56a259c6a2916c47efb34d4b01f9f92712acd33640b32789

data/lib/dependabot/conda/conda_registry_client.rb

@@ -34,7 +34,7 @@ module Dependabot
 
       sig { void }
       def initialize
-        @cache = T.let({}, T::Hash[String, T.untyped])
+        @cache = T.let({}, T::Hash[String, T::Hash[String, Object]])
         @not_found_cache = T.let(Set.new, T::Set[String])
       end
 
@@ -43,7 +43,7 @@ module Dependabot
         params(
           package_name: String,
           channel: String
-        ).returns(T.nilable(T::Hash[String, T.untyped]))
+        ).returns(T.nilable(T::Hash[String, Object]))
       end
       def fetch_package_metadata(package_name, channel = DEFAULT_CHANNEL)
         cache_key = "#{channel}/#{package_name}"
@@ -147,7 +147,7 @@ module Dependabot
           package_name: String,
           channel: String,
           cache_key: String
-        ).returns(T.nilable(T::Hash[String, T.untyped]))
+        ).returns(T.nilable(T::Hash[String, Object]))
       end
       def fetch_from_api(package_name, channel, cache_key)
         # Normalize channel name for API (e.g., 'defaults' -> 'anaconda')
@@ -187,7 +187,7 @@ module Dependabot
           response: Excon::Response,
           package_name: String,
           cache_key: String
-        ).returns(T.nilable(T::Hash[String, T.untyped]))
+        ).returns(T.nilable(T::Hash[String, Object]))
       end
       def handle_response(response, package_name, cache_key)
         case response.status

data/lib/dependabot/conda/file_fetcher.rb

@@ -44,7 +44,7 @@ module Dependabot
             raise(
               Dependabot::DependencyFileNotFound.new(
                 File.join(directory, environment_file.name),
-                unsupported_environment_message(validation[:reason])
+                unsupported_environment_message(T.cast(validation[:reason], T.nilable(Symbol)))
               )
             )
           end
@@ -63,7 +63,7 @@ module Dependabot
 
       # Validate that environment file is a proper conda manifest with manageable packages
       # Returns a hash with :valid (Boolean) and :reason (Symbol or nil)
-      sig { params(file: DependencyFile).returns(T::Hash[Symbol, T.untyped]) }
+      sig { params(file: DependencyFile).returns(T::Hash[Symbol, T.anything]) }
       def validate_conda_environment(file)
         content = file.content
         return { valid: false, reason: :no_content } unless content
@@ -81,7 +81,7 @@ module Dependabot
         { valid: true, reason: nil }
       end
 
-      sig { params(content: String).returns(T.nilable(T::Hash[T.untyped, T.untyped])) }
+      sig { params(content: String).returns(T.nilable(T::Hash[String, Object])) }
       def parse_and_validate_yaml(content)
         parsed_yaml = parse_yaml_content(content)
         return nil unless parsed_yaml
@@ -94,7 +94,7 @@ module Dependabot
       end
 
       # Check if there are any manageable packages (simple specs or pip)
-      sig { params(dependencies: T.untyped).returns(T::Boolean) }
+      sig { params(dependencies: Object).returns(T::Boolean) }
       def manageable_packages?(dependencies)
         return false unless dependencies.is_a?(Array)
 
@@ -107,7 +107,7 @@ module Dependabot
         has_simple_conda || has_pip
       end
 
-      sig { params(content: String).returns(T.nilable(T::Hash[T.untyped, T.untyped])) }
+      sig { params(content: String).returns(T.nilable(T::Hash[String, Object])) }
       def parse_yaml_content(content)
         parsed = YAML.safe_load(content)
         parsed.is_a?(Hash) ? parsed : nil

data/lib/dependabot/conda/file_parser.rb

@@ -79,7 +79,7 @@ module Dependabot
 
       sig do
         params(
-          dependencies: T::Array[T.untyped],
+          dependencies: T::Array[Object],
           file: Dependabot::DependencyFile
         ).returns(T::Array[Dependabot::Dependency])
       end
@@ -98,12 +98,14 @@ module Dependabot
 
           parsed_dep = parse_conda_dependency_string(dep, file)
           next unless parsed_dep
-          next if parsed_dep[:name] == "pip"
+
+          name = T.cast(parsed_dep[:name], String)
+          next if name == "pip"
 
           parsed_dependencies << create_dependency(
-            name: parsed_dep[:name],
-            version: parsed_dep[:version],
-            requirements: parsed_dep[:requirements],
+            name: name,
+            version: T.cast(parsed_dep[:version], T.nilable(String)),
+            requirements: T.cast(parsed_dep[:requirements], T::Array[T::Hash[Symbol, T.anything]]),
             package_manager: "conda"
           )
         end
@@ -111,7 +113,7 @@ module Dependabot
         parsed_dependencies
       end
 
-      sig { params(dependencies: T.untyped).returns(T.nilable(T::Array[String])) }
+      sig { params(dependencies: Object).returns(T.nilable(T::Array[String])) }
       def find_pip_dependencies(dependencies)
         return nil unless dependencies.is_a?(Array)
 
@@ -135,9 +137,9 @@ module Dependabot
           next unless parsed_dep
 
           parsed_dependencies << create_dependency(
-            name: parsed_dep[:name],
-            version: parsed_dep[:version],
-            requirements: parsed_dep[:requirements],
+            name: T.cast(parsed_dep[:name], String),
+            version: T.cast(parsed_dep[:version], T.nilable(String)),
+            requirements: T.cast(parsed_dep[:requirements], T::Array[T::Hash[Symbol, T.anything]]),
             package_manager: "pip"
           )
         end
@@ -146,7 +148,7 @@ module Dependabot
       end
 
       sig do
-        params(dep_string: String, file: Dependabot::DependencyFile).returns(T.nilable(T::Hash[Symbol, T.untyped]))
+        params(dep_string: String, file: Dependabot::DependencyFile).returns(T.nilable(T::Hash[Symbol, T.anything]))
       end
       def parse_conda_dependency_string(dep_string, file)
         return nil if dep_string.nil?
@@ -219,7 +221,7 @@ module Dependabot
           constraint: T.nilable(String),
           file: Dependabot::DependencyFile,
           channel: T.nilable(String)
-        ).returns(T::Array[T::Hash[Symbol, T.untyped]])
+        ).returns(T::Array[T::Hash[Symbol, T.anything]])
       end
       def build_conda_requirements(constraint, file, channel = nil)
         source = channel ? { channel: channel } : nil
@@ -233,7 +235,7 @@ module Dependabot
       end
 
       sig do
-        params(dep_string: String, file: Dependabot::DependencyFile).returns(T.nilable(T::Hash[Symbol, T.untyped]))
+        params(dep_string: String, file: Dependabot::DependencyFile).returns(T.nilable(T::Hash[Symbol, T.anything]))
       end
       def parse_pip_dependency_string(dep_string, file)
         match = dep_string.match(/^([a-zA-Z0-9_.-]+)(?:\s*(==|>=|>|<=|<|!=|~=)\s*([0-9][a-zA-Z0-9._+-]*))?$/)
@@ -279,7 +281,7 @@ module Dependabot
         params(
           name: String,
           version: T.nilable(String),
-          requirements: T::Array[T::Hash[Symbol, T.untyped]],
+          requirements: T::Array[T::Hash[Symbol, T.anything]],
           package_manager: String
         ).returns(Dependabot::Dependency)
       end

data/lib/dependabot/conda/file_updater.rb

@@ -20,14 +20,14 @@ module Dependabot
         lambda do |name|
           /^(\s{2,4}-\s+[a-zA-Z0-9_.-]+::)(#{Regexp.escape(name)})#{VERSION_CONSTRAINT_PATTERN}(\s*)(#.*)?$/
         end,
-        T.proc.params(arg0: T.untyped).returns(Regexp)
+        T.proc.params(arg0: String).returns(Regexp)
       )
 
       CONDA_SIMPLE_PATTERN = T.let(
         lambda do |name|
           /^(\s{2,4}-\s+)(#{Regexp.escape(name)})#{VERSION_CONSTRAINT_PATTERN}(\s*)(#.*)?$/
         end,
-        T.proc.params(arg0: T.untyped).returns(Regexp)
+        T.proc.params(arg0: String).returns(Regexp)
       )
 
       # Bracket syntax: package[version='>=1.0']
@@ -35,21 +35,21 @@ module Dependabot
         lambda do |name|
           /^(\s{2,4}-\s+)(#{Regexp.escape(name)})(\[version=['"])[^'"]+(['"]\])(\s*)(#.*)?$/
         end,
-        T.proc.params(arg0: T.untyped).returns(Regexp)
+        T.proc.params(arg0: String).returns(Regexp)
       )
 
       CONDA_CHANNEL_BRACKET_PATTERN = T.let(
         lambda do |name|
           /^(\s{2,4}-\s+[a-zA-Z0-9_.-]+::)(#{Regexp.escape(name)})(\[version=['"])[^'"]+(['"]\])(\s*)(#.*)?$/
         end,
-        T.proc.params(arg0: T.untyped).returns(Regexp)
+        T.proc.params(arg0: String).returns(Regexp)
       )
 
       PIP_PATTERN = T.let(
         lambda do |name|
           /^(\s{5,}-\s+)(#{Regexp.escape(name)})#{VERSION_CONSTRAINT_PATTERN}(\s*)(#.*)?$/
         end,
-        T.proc.params(arg0: T.untyped).returns(Regexp)
+        T.proc.params(arg0: String).returns(Regexp)
       )
 
       sig { override.returns(T::Array[Dependabot::DependencyFile]) }
@@ -129,7 +129,7 @@ module Dependabot
         params(
           content: String,
           dependency: Dependabot::Dependency
-        ).returns(T::Hash[Symbol, T.untyped])
+        ).returns(T::Hash[Symbol, T.anything])
       end
       def update_dependency_in_content(content, dependency)
         return { updated: false, content: content, not_found: false } unless dependency.version
@@ -150,7 +150,7 @@ module Dependabot
         params(
           content: String,
           dependency: Dependabot::Dependency
-        ).returns(T::Hash[Symbol, T.untyped])
+        ).returns(T::Hash[Symbol, T.anything])
       end
       def update_conda_dependency_in_content(content, dependency)
         # Try standard patterns first (most common)
@@ -202,7 +202,7 @@ module Dependabot
         params(
           content: String,
           dependency: Dependabot::Dependency
-        ).returns(T::Hash[Symbol, T.untyped])
+        ).returns(T::Hash[Symbol, T.anything])
       end
       def update_pip_dependency_in_content(content, dependency)
         pip_pattern = PIP_PATTERN.call(dependency.name)

data/lib/dependabot/conda/requirement.rb

@@ -22,7 +22,7 @@ module Dependabot
           "==" => ->(v, r) { v == r },        # pip equality
           "~=" => ->(v, r) { v >= r && v.release < r.bump } # pip compatible release
         ),
-        T::Hash[String, T.proc.params(arg0: T.untyped, arg1: T.untyped).returns(T.untyped)]
+        T::Hash[String, T.proc.params(arg0: Gem::Version, arg1: Gem::Version).returns(T::Boolean)]
       )
 
       quoted = OPS.keys.sort_by(&:length).reverse

data/lib/dependabot/conda/update_checker/latest_version_finder.rb

@@ -117,7 +117,7 @@ module Dependabot
         def extract_channel_from_source
           return nil unless dependency.requirements.first
 
-          source = T.let(T.must(dependency.requirements.first)[:source], T.nilable(T::Hash[Symbol, T.untyped]))
+          source = T.let(T.must(dependency.requirements.first)[:source], T.nilable(T::Hash[Symbol, Object]))
           return nil unless source
 
           channel = source[:channel]
@@ -185,7 +185,7 @@ module Dependabot
           )
         end
 
-        sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+        sig { returns(T::Array[T::Hash[Symbol, T.anything]]) }
         def python_compatible_requirements
           dependency.requirements.map do |req|
             req.merge(

data/lib/dependabot/conda/update_checker.rb

@@ -25,7 +25,7 @@ module Dependabot
           requirements_update_strategy: T.nilable(Dependabot::RequirementsUpdateStrategy),
           dependency_group: T.nilable(Dependabot::DependencyGroup),
           update_cooldown: T.nilable(Dependabot::Package::ReleaseCooldownOptions),
-          options: T::Hash[Symbol, T.untyped]
+          options: T::Hash[Symbol, T.anything]
         )
           .void
       end

data/lib/dependabot/conda/version.rb

@@ -50,7 +50,11 @@ module Dependabot
       sig { returns(T.nilable(T::Array[T.any(Integer, String)])) }
       attr_reader :local_parts
 
-      VersionParts = T.let(Struct.new(:epoch, :main, :local), T.untyped)
+      class VersionParts < T::Struct
+        const :epoch, String
+        const :main, String
+        const :local, T.nilable(String)
+      end
       private_constant :VersionParts
 
       sig { override.params(version: VersionParameter).void }
@@ -68,14 +72,14 @@ module Dependabot
         @epoch = T.let(parts.epoch.to_i, Integer)
         @version_parts = T.let(parse_components(parts.main), T::Array[T.any(Integer, String)])
         @local_parts = T.let(
-          parts.local ? parse_components(parts.local) : nil,
+          parts.local ? parse_components(T.must(parts.local)) : nil,
           T.nilable(T::Array[T.any(Integer, String)])
         )
 
         super
       end
 
-      sig { override.params(other: T.untyped).returns(T.nilable(Integer)) }
+      sig { params(other: VersionParameter).returns(T.nilable(Integer)) }
       def <=>(other)
         return nil unless other.is_a?(Dependabot::Conda::Version)
 
@@ -106,12 +110,12 @@ module Dependabot
 
       # Parses epoch and local version from version string
       # Returns VersionParts struct with epoch, main, and local fields
-      sig { params(version_str: String).returns(T.untyped) }
+      sig { params(version_str: String).returns(VersionParts) }
       def parse_epoch_and_local(version_str)
         # Split on '!' for epoch
         parts = version_str.split("!", 2)
         if parts.length == 2
-          epoch_str = parts[0]
+          epoch_str = T.must(parts[0])
           remainder = T.must(parts[1])
         else
           epoch_str = "0"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-conda
 version: !ruby/object:Gem::Version
-  version: 0.385.0
+  version: 0.386.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,28 +15,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
 - !ruby/object:Gem::Dependency
   name: dependabot-python
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.385.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.386.0
 rdoc_options: []
 require_paths:
 - lib