dependabot-devcontainers 0.384.0 → 0.385.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fe10eda0b9f3a6e929ab5af2b974f22abdbf724a3e7c28ea72b9f940c811e90f
-  data.tar.gz: 60157b701669ee55bc224bc526352ec10f4bf899d2c679eb41e4c250f9c3480d
+  metadata.gz: 67a0dd08afaeeef200839d662dde96e06ddc5470eac063ed2115e913b28117a8
+  data.tar.gz: 0f17eb94f5d61817f33843c9ab93a979716bc05f4420450640007983e82b6fb5
 SHA512:
-  metadata.gz: 3c5c8f861bf7cd8d5780577b7e3d0a94e7df90ef3cbf3f8b515c3e8bc053540e82ebeff0eeb7766b8536b385243354dd6fbbec3dd7d6cc05a7e93a4ef75fb25c
-  data.tar.gz: d489231eca1710b7fd361f7684e0f20bb09dc6a763f95a7021fe58f101749e784067db49cf257eae6d858df21f8a03c8b7207c20754648e297afd3e24063b906
+  metadata.gz: bea7b1f7fb6ab4cb8bb0cf65810c912f53283ebb6d3094154bbc7131c7b1d67ae4eadde4547f10644c9022dadb1f50e33eb8ea848145684d0bf1ec1b7431df68
+  data.tar.gz: 81c574f22679f84d4fa4d9ef94a6c93c7f2f630a13b539ff4f026e270579beefd7af12d4f5b411bc15d22a3a714ed69a6f433edab00e30fc02a6050284e94dd1

data/lib/dependabot/devcontainers/file_updater/config_updater.rb

@@ -18,7 +18,7 @@ module Dependabot
         sig do
           params(
             feature: String,
-            requirement: T.any(String, Dependabot::Devcontainers::Version),
+            requirement: T.nilable(T.any(String, Dependabot::Devcontainers::Version)),
             version: String,
             manifest: Dependabot::DependencyFile,
             repo_contents_path: String,
@@ -65,7 +65,7 @@ module Dependabot
 
         sig do
           params(
-            target_requirement: T.any(String, Dependabot::Devcontainers::Version),
+            target_requirement: T.nilable(T.any(String, Dependabot::Devcontainers::Version)),
             target_version: String
           )
             .void
@@ -79,8 +79,16 @@ module Dependabot
           force_target_requirement(lockfile_path, from: target_version, to: target_requirement)
         end
 
-        sig { params(file_name: String, from: String, to: T.any(String, Dependabot::Devcontainers::Version)).void }
+        sig do
+          params(
+            file_name: String,
+            from: String,
+            to: T.nilable(T.any(String, Dependabot::Devcontainers::Version))
+          ).void
+        end
         def force_target_requirement(file_name, from:, to:)
+          return if to.nil?
+
           File.write(file_name, File.read(file_name).gsub("#{feature}:#{from}", "#{feature}:#{to}"))
         end
 
@@ -100,7 +108,7 @@ module Dependabot
         sig { returns(String) }
         attr_reader :feature
 
-        sig { returns(T.any(String, Dependabot::Devcontainers::Version)) }
+        sig { returns(T.nilable(T.any(String, Dependabot::Devcontainers::Version))) }
         attr_reader :requirement
 
         sig { returns(String) }

data/lib/dependabot/devcontainers/update_checker.rb

@@ -35,13 +35,21 @@ module Dependabot
       def updated_requirements
         updated_reqs = dependency.requirements.map do |requirement|
           required_version = T.cast(version_class.new(requirement[:requirement]), Dependabot::Devcontainers::Version)
-          updated_requirement = remove_precision_changes(
-            T.cast(release_versions, T::Array[Dependabot::Devcontainers::Version]),
-            required_version
-          ).last
+          versions = T.cast(release_versions, T::Array[Dependabot::Devcontainers::Version])
+          precision_matches = remove_precision_changes(versions, required_version)
+          # When the published tags don't include a precision-matching tag (e.g. a feature
+          # that only publishes full semver like "1.10.0" but the pin is the major-only ":1"),
+          # fall back to truncating the latest version to the required precision so that
+          # ":1" stays ":1" within the same major and becomes ":2" on a major bump.
+          updated_requirement =
+            if precision_matches.any?
+              precision_matches.last
+            else
+              versions.last&.truncate_to_precision_of(required_version)
+            end
           {
             file: requirement[:file],
-            requirement: updated_requirement&.to_s,
+            requirement: updated_requirement&.to_s || requirement[:requirement],
             groups: requirement[:groups],
             source: requirement[:source]
           }

data/lib/dependabot/devcontainers/version.rb

@@ -16,6 +16,16 @@ module Dependabot
         precision == other.precision
       end
 
+      sig { params(target_precision: Integer).returns(Dependabot::Devcontainers::Version) }
+      def truncate(target_precision)
+        T.cast(self.class.new(segments.first(target_precision).join(".")), Dependabot::Devcontainers::Version)
+      end
+
+      sig { params(other: Dependabot::Devcontainers::Version).returns(Dependabot::Devcontainers::Version) }
+      def truncate_to_precision_of(other)
+        truncate(other.precision)
+      end
+
       sig { params(requirement: Dependabot::Requirement).returns(T::Boolean) }
       def satisfies?(requirement)
         requirement.satisfied_by?(self)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-devcontainers
 version: !ruby/object:Gem::Version
-  version: 0.384.0
+  version: 0.385.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.384.0
+        version: 0.385.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.384.0
+        version: 0.385.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -260,7 +260,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.384.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.385.0
 rdoc_options: []
 require_paths:
 - lib