dependabot-dotnet_sdk 0.314.0 → 0.316.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba90c7863715023e7e92f3a26a926789720e9e155bba6f4f18a1f9907236aeae
-  data.tar.gz: 785582d317f7dbdc36882c4f9dfcf15fee3d497b4ef1460d5201c8dcbba0a20f
+  metadata.gz: fcc95f04b38f229d08596bb848cf805c7437cee7e8b0936a2329a95746176c9e
+  data.tar.gz: 516dfa1ae1d9d75533b4d134d35d126a7da8e84e26e36bc005c9a6260eb38342
 SHA512:
-  metadata.gz: e5007769a2eef77bc7d0424a6e37919bb9a8e1b6f09f3f3cb113bf84508847d05bbe5bf7c5c7216cc8a9d668ba9eaeb563217450c5cb7289d1c1f8b8c7f02dc6
-  data.tar.gz: 6e20f0a4c86f4c8c7b7e0336e25e65ea5ab4fb9ef8b3a63fe864dfccac3a525e5802da88bdda0731f9e43967cb4d658042eae61827b13c3503419a70bb59cda1
+  metadata.gz: 7555ff74b3b6cae05f60afa4bb976a7531cef660f65096369e0af9579eebe0a3bd1d8046b85b98bb55b18b44bf49d20b36b5aa5babb35193462b1fe8e9ddd153
+  data.tar.gz: f1001d8a73701fc2bb1437997eb3a5779e856f87fb09f616372af4bea6e8ad35a476ef8c9959888d92f3611f73f64042fed58c7a0b00432161cf7bcc74f0b782

data/lib/dependabot/dotnet_sdk/file_parser.rb

@@ -19,8 +19,8 @@ module Dependabot
       def parse
         dependency_set = DependencySet.new
 
-        config_dependency_files.each do |config_dependency_file|
-          dependency = parse_dependency_file(config_dependency_file)
+        config_dependency_files.each do |dependency_file|
+          dependency = parse_dependency_file(dependency_file)
           dependency_set << dependency if dependency
         end
 
@@ -51,21 +51,25 @@ module Dependabot
           raise Dependabot::DependencyFileNotParseable, T.must(dependency_files.first).path
         end
 
-        return unless contents["sdk"]
+        sdk_info = contents["sdk"]
+        return unless sdk_info
+
+        version = sdk_info["version"]
+        return unless version
 
         Dependabot::Dependency.new(
           name: "dotnet-sdk",
-          version: contents["sdk"]["version"],
+          version: version,
           package_manager: "dotnet_sdk",
           requirements: [{
             file: dependency_file.name,
-            requirement: contents["sdk"]["version"],
+            requirement: version,
             groups: [],
             source: nil
           }],
           metadata: {
-            allow_prerelease: contents["sdk"]["allowPrerelease"] || false,
-            roll_forward: contents["sdk"]["rollForward"] || "latestPatch"
+            allow_prerelease: sdk_info["allowPrerelease"] || false,
+            roll_forward: sdk_info["rollForward"] || "latestPatch"
           }
         )
       end
@@ -78,18 +82,14 @@ module Dependabot
       sig { returns(T::Array[Dependabot::DependencyFile]) }
       def config_dependency_files
         @config_dependency_files ||= T.let(
-          dependency_files.select do |f|
-            f.name.end_with?("global.json")
-          end,
+          dependency_files.filter { |f| f.name.end_with?("global.json") },
           T.nilable(T::Array[Dependabot::DependencyFile])
         )
       end
 
       sig { override.void }
       def check_required_files
-        return if dependency_files.any?
-
-        raise "No dependency files!"
+        raise "No dependency files!" if dependency_files.empty?
       end
 
       sig { returns(Ecosystem::VersionManager) }
@@ -99,13 +99,15 @@ module Dependabot
 
       sig { returns(T.nilable(String)) }
       def sdk_version
-        @sdk_version = T.let(nil, T.nilable(String))
-        config_dependency_files.each do |dependency_file|
-          @sdk_version ||= JSON.parse(T.must(dependency_file.content))["sdk"]["version"]
-
-          raise Dependabot::DependencyFileNotParseable, dependency_file.path if @sdk_version.nil?
-        end
-        @sdk_version
+        @sdk_version ||= T.let(
+          config_dependency_files.filter_map do |dependency_file|
+            contents = JSON.parse(T.must(dependency_file.content))
+            contents.dig("sdk", "version")
+          rescue JSON::ParserError
+            raise Dependabot::DependencyFileNotParseable, dependency_file.path
+          end.first,
+          T.nilable(String)
+        )
       end
     end
   end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-dotnet_sdk
 version: !ruby/object:Gem::Version
-  version: 0.314.0
+  version: 0.316.0
 platform: ruby
 authors:
 - Dependabot
 bindir: bin
 cert_chain: []
-date: 2025-05-22 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.314.0
+        version: 0.316.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.314.0
+        version: 0.316.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -256,7 +256,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.314.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.316.0
 rdoc_options: []
 require_paths:
 - lib
@@ -264,14 +264,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.1.0
+      version: 3.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.1.0
+      version: 3.3.0
 requirements: []
-rubygems_version: 3.6.3
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Provides Dependabot support for .NET SDK
 test_files: []