dependabot-deno 0.390.0 → 0.392.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9eeaa342bb90cb4e9a8a32c7b428b983e286cc02eb916929eb14b245d8577d59
-  data.tar.gz: 04f7a89fe8f4e06dd139f7417900be2fb804436aa893ced5ae8de0051b5dc836
+  metadata.gz: e71a5a1f15eff6c0684ebc762ae85746bb7e7365a4f14bfdcd732264acd0b515
+  data.tar.gz: c21efb8245cc422209632c5585cf3f79d65dbe8efb206606a3ddf03177a011f4
 SHA512:
-  metadata.gz: 41117267de55db2816260012a142a24b25bca8291b2457206c870eb788783fd76157f1307b63aa6ac536fdc83e4d0b2d3748b793a7cd9e190a0b960ecffe90fb
-  data.tar.gz: fc75b60a75523599510345460da49f14d7f01c944c92c164b7065c93066b2deef9236c29c6a5f93dd533351b6a1d5c9a3df2c84f86b49fa84c22c6f544cb3d16
+  metadata.gz: d02e0bde42615d8b406d1d51d10cc05e749503faa209be942341cd9eca5ab1ceb54335b9338d230541dde2b5181bb08c09eb5f3e48fe32de4db12ffb31492432
+  data.tar.gz: 1dba33fa1891bd89386ee0376c899ff7759160965d6f0396e99bbbc8cf94580ae06076924d1b5bcd93b0890e55066d35d72189d32a876fddf317d9e161937f38

data/lib/dependabot/deno/file_fetcher.rb

@@ -10,7 +10,7 @@ module Dependabot
     class FileFetcher < Dependabot::FileFetchers::Base
       extend T::Sig
 
-      MANIFEST_FILENAMES = T.let(%w(deno.json deno.jsonc).freeze, T::Array[String])
+      MANIFEST_FILENAMES = %w(deno.json deno.jsonc).freeze
 
       sig { override.returns(String) }
       def self.required_files_message
@@ -19,7 +19,7 @@ module Dependabot
 
       sig { override.params(filenames: T::Array[String]).returns(T::Boolean) }
       def self.required_files_in?(filenames)
-        filenames.any? { |f| MANIFEST_FILENAMES.include?(f) }
+        filenames.intersect?(MANIFEST_FILENAMES)
       end
 
       sig { override.returns(T::Array[DependencyFile]) }

data/lib/dependabot/deno/file_parser.rb

@@ -14,7 +14,7 @@ module Dependabot
       extend T::Sig
 
       ECOSYSTEM = "deno"
-      MANIFEST_FILENAMES = T.let(%w(deno.json deno.jsonc).freeze, T::Array[String])
+      MANIFEST_FILENAMES = %w(deno.json deno.jsonc).freeze
 
       # Matches jsr:@scope/name[@constraint][/subpath] or npm:[@scope/]name[@constraint][/subpath]
       # Constraint and subpath are both optional per Deno's specifier format.
@@ -38,7 +38,7 @@ module Dependabot
             dep = parse_specifier(specifier.to_s, file)
             next unless dep
 
-            key = [dep.name, T.must(dep.requirements.first)[:source][:type]]
+            key = [dep.name, T.must(T.must(dep.requirements.first).source_string("type"))]
             existing = deps_by_key[key]
             deps_by_key[key] = if existing
                                  Dependabot::Dependency.new(

data/lib/dependabot/deno/file_updater/lockfile_updater.rb

@@ -19,7 +19,7 @@ module Dependabot
       class LockfileUpdater
         extend T::Sig
 
-        LOCKFILE_FILENAME = T.let("deno.lock", String)
+        LOCKFILE_FILENAME = "deno.lock"
 
         sig do
           params(

data/lib/dependabot/deno/file_updater/manifest_updater.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -29,8 +29,8 @@ module Dependabot
           content = T.must(manifest.content).dup
 
           dependencies.each do |dep|
-            prev_reqs = (dep.previous_requirements || []).select { |r| r[:file] == manifest.name }
-            new_reqs = dep.requirements.select { |r| r[:file] == manifest.name }
+            prev_reqs = (dep.previous_requirements || []).select { |r| r.file == manifest.name }
+            new_reqs = dep.requirements.select { |r| r.file == manifest.name }
 
             prev_reqs.zip(new_reqs).each do |prev_req, new_req|
               content = apply_substitution(content, dep, prev_req, T.must(new_req))
@@ -52,15 +52,14 @@ module Dependabot
           params(
             content: String,
             dep: Dependabot::Dependency,
-            prev_req: T::Hash[Symbol, T.anything],
-            new_req: T::Hash[Symbol, T.anything]
+            prev_req: Dependabot::DependencyRequirement,
+            new_req: Dependabot::DependencyRequirement
           ).returns(String)
         end
         def apply_substitution(content, dep, prev_req, new_req)
-          source = T.cast(prev_req[:source], T::Hash[Symbol, T.anything])
-          source_type = T.cast(source[:type], String)
-          prev_req_str = T.cast(prev_req[:requirement], T.nilable(String))
-          new_req_str = T.cast(new_req[:requirement], T.nilable(String))
+          source_type = T.must(prev_req.source_string("type"))
+          prev_req_str = prev_req.requirement_string
+          new_req_str = new_req.requirement_string
 
           base = "#{source_type}:#{dep.name}"
           old_specifier = prev_req_str ? "#{base}@#{prev_req_str}" : base

data/lib/dependabot/deno/file_updater.rb

@@ -12,7 +12,7 @@ module Dependabot
       require_relative "file_updater/manifest_updater"
       require_relative "file_updater/lockfile_updater"
 
-      MANIFEST_FILENAMES = T.let(%w(deno.json deno.jsonc).freeze, T::Array[String])
+      MANIFEST_FILENAMES = %w(deno.json deno.jsonc).freeze
 
       sig { override.returns(T::Array[Dependabot::DependencyFile]) }
       def updated_dependency_files

data/lib/dependabot/deno/helpers.rb

@@ -16,15 +16,12 @@ module Dependabot
       # block comment, or a trailing comma. The alternation lets gsub preserve
       # strings while stripping the JSONC-only constructs, so e.g. "//" inside a
       # URL value is not mistaken for the start of a comment.
-      JSONC_TOKEN = T.let(
-        %r{
+      JSONC_TOKEN = %r{
           ("(?:\\.|[^"\\])*")    # JSON string literal
           | //[^\n]*             # line comment
           | /\*.*?\*/            # block comment
           | ,(?=\s*[\}\]])       # trailing comma
-        }mx,
-        Regexp
-      )
+        }mx
 
       sig { params(content: T.nilable(String)).returns(T::Hash[String, T.anything]) }
       def self.parse_json_or_jsonc(content)

data/lib/dependabot/deno/metadata_finder.rb

@@ -15,7 +15,7 @@ module Dependabot
 
       sig { override.returns(T.nilable(Dependabot::Source)) }
       def look_up_source
-        source_type = dependency.requirements.first&.dig(:source, :type)
+        source_type = dependency.requirements.first&.source_string("type")
 
         case source_type
         when "npm"

data/lib/dependabot/deno/package/package_details_fetcher.rb

@@ -25,7 +25,7 @@ module Dependabot
 
         sig { returns(T::Array[Dependabot::Package::PackageRelease]) }
         def available_versions
-          source_type = dependency.requirements.first&.dig(:source, :type)
+          source_type = dependency.requirements.first&.source_string("type")
 
           case source_type
           when "jsr"

data/lib/dependabot/deno/update_checker.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "dependabot/update_checkers"
@@ -33,9 +33,11 @@ module Dependabot
         return dependency.requirements unless latest_version
 
         updated = dependency.requirements.map do |req|
-          req.merge(requirement: updated_constraint(req[:requirement]))
+          Dependabot::DependencyRequirement.create(
+            req.merge(requirement: updated_constraint(req.requirement_string))
+          )
         end
-        wrap_requirements(updated)
+        updated
       end
 
       private

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-deno
 version: !ruby/object:Gem::Version
-  version: 0.390.0
+  version: 0.392.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.392.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.392.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.390.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
 rdoc_options: []
 require_paths:
 - lib