dependabot-devcontainers 0.385.0 → 0.386.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 67a0dd08afaeeef200839d662dde96e06ddc5470eac063ed2115e913b28117a8
-  data.tar.gz: 0f17eb94f5d61817f33843c9ab93a979716bc05f4420450640007983e82b6fb5
+  metadata.gz: 5882eb429b9ec36741663d84fedf2782f19aa13db7716d46ee88e0acbcc1753d
+  data.tar.gz: 1e1b42fc429c9e69f5f4bf5e692845092c72ff8fe7102605b86c6d1e54d1a059
 SHA512:
-  metadata.gz: bea7b1f7fb6ab4cb8bb0cf65810c912f53283ebb6d3094154bbc7131c7b1d67ae4eadde4547f10644c9022dadb1f50e33eb8ea848145684d0bf1ec1b7431df68
-  data.tar.gz: 81c574f22679f84d4fa4d9ef94a6c93c7f2f630a13b539ff4f026e270579beefd7af12d4f5b411bc15d22a3a714ed69a6f433edab00e30fc02a6050284e94dd1
+  metadata.gz: 7887c168071758bbe91880bcdfd418b8cfba97311b108319347307a3aa053b2bbefe72bb635d19293cf4140474c938707c7fadc1338d2f0907459b1614593a8f
+  data.tar.gz: b7cd260b85e56e04ed58d4b16ecb78a25fe888a2b8df2b009468b58a49a7ec0c3d3e9d927a58fa5a8856d85ee4d993da7e9d7225439b610a74dcc99b2e02d1fd

data/lib/dependabot/devcontainers/file_fetcher.rb

@@ -63,21 +63,21 @@ module Dependabot
         return [] unless devcontainer_directory
 
         custom_directories.flat_map do |directory|
-          fetch_config_and_lockfile_from(directory.path)
+          fetch_config_and_lockfile_from(T.must(directory.path))
         end
       end
 
-      sig { returns(T::Array[T.untyped]) }
+      sig { returns(T::Array[Dependabot::FileFetchers::RepositoryContent]) }
       def custom_directories
         repo_contents(dir: ".devcontainer").select { |f| f.type == "dir" && f.name != ".devcontainer" }
       end
 
-      sig { returns(T.untyped) }
+      sig { returns(T.nilable(Dependabot::FileFetchers::RepositoryContent)) }
       def devcontainer_directory
         @devcontainer_directory ||=
           T.let(
             repo_contents.find { |f| f.type == "dir" && f.name == ".devcontainer" },
-            T.untyped
+            T.nilable(Dependabot::FileFetchers::RepositoryContent)
           )
       end
 

data/lib/dependabot/devcontainers/file_parser/feature_dependency_parser.rb

@@ -46,7 +46,7 @@ module Dependabot
         end
 
         # https://github.com/devcontainers/cli/blob/9444540283b236298c28f397dea879e7ec222ca1/src/spec-node/devContainersSpecCLI.ts#L1072
-        sig { returns(T::Hash[String, T.untyped]) }
+        sig { returns(T::Hash[String, T.anything]) }
         def evaluate_with_cli
           raise "config_file_path must be a string" unless config_file_path.is_a?(String) && !config_file_path.empty?
 
@@ -61,13 +61,14 @@ module Dependabot
           JSON.parse(json)
         end
 
-        sig { params(json: T::Hash[String, T.untyped]).returns(T::Array[Dependabot::Dependency]) }
+        sig { params(json: T::Hash[String, T.anything]).returns(T::Array[Dependabot::Dependency]) }
         def parse_cli_json(json)
           dependencies = []
 
-          features = json["features"]
+          features = T.cast(json["features"], T::Hash[String, T.anything])
           features.each do |feature, versions_object|
             name, requirement = feature.split(":")
+            next if name.nil?
 
             # Skip sha pinned tags for now. Ideally the devcontainers CLI would give us updated SHA info
             next if name.end_with?("@sha256")
@@ -76,7 +77,7 @@ module Dependabot
             # and `devcontainer upgrade` work with them. See https://github.com/devcontainers/cli/issues/712
             next unless name.include?("/")
 
-            current = versions_object["current"]
+            current = T.cast(T.cast(versions_object, T::Hash[String, T.anything])["current"], T.nilable(String))
 
             dep = Dependency.new(
               name: name,

data/lib/dependabot/devcontainers/file_updater.rb

@@ -77,14 +77,14 @@ module Dependabot
       sig do
         params(
           manifest: Dependabot::DependencyFile,
-          requirement: T::Hash[Symbol, T.untyped]
+          requirement: T::Hash[Symbol, T.anything]
         )
           .returns(T::Array[String])
       end
       def update(manifest, requirement)
         ConfigUpdater.new(
           feature: dependency.name,
-          requirement: requirement[:requirement],
+          requirement: T.cast(requirement[:requirement], T.nilable(String)),
           version: T.must(dependency.version),
           manifest: manifest,
           repo_contents_path: T.must(repo_contents_path),

data/lib/dependabot/devcontainers/update_checker/latest_version_finder.rb

@@ -31,7 +31,7 @@ module Dependabot
             ignored_versions: T::Array[String],
             security_advisories: T::Array[Dependabot::SecurityAdvisory],
             raise_on_ignored: T::Boolean,
-            options: T::Hash[Symbol, T.untyped],
+            options: T::Hash[Symbol, T.anything],
             cooldown_options: T.nilable(Dependabot::Package::ReleaseCooldownOptions)
           ).void
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-devcontainers
 version: !ruby/object:Gem::Version
-  version: 0.385.0
+  version: 0.386.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.385.0
+        version: 0.386.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -260,7 +260,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.385.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.386.0
 rdoc_options: []
 require_paths:
 - lib