dependabot-git_submodules 0.235.0 → 0.237.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eac5fe4601df685d52993156061fd1f0a7e33033f9aff743ccb6c48deff45937
-  data.tar.gz: 1d3fd6cae1a731ce1a252abb5c02e2ff5de2496864eb8db5302e9d8c6512c64e
+  metadata.gz: ea4cb7fdb70f3f1c61204df28931cd46eadee800a1f8dc1891b11a3a60516c65
+  data.tar.gz: 5b80bb0d86e84cf2970879db973795e270c7d4a0ffab65818e14b8cb3e9823b2
 SHA512:
-  metadata.gz: 49e166575e93e57cfe2665f370fee10b919a52d0ab932af43946c15face08539bce6855d0aabad8314ae712d7ae951db4f1c8e082bc7db350fdc009d55a4c5dc
-  data.tar.gz: ab0f2e052794d5527d6cac1e71d56da582bd8ca001677c5bec0a04b76a8a2972a7ced013ffc7c0163b08037d662a2ee5fb76ace9f1d156a3f66bbcff6812664e
+  metadata.gz: 5739cd3e2b19182457c8e105ea9114b30d71b08b6a80e2c5c1f3e4d9b43f339058bd6bc0d5827729e3cbf5de011fc7be2d950395ecb5f7ea73201f0b07b7ae62
+  data.tar.gz: fc3d9d08db26f9a7b3a80855abff8c8712b68f8542ce3de26e2dfd29848d84ea5fb2d9e8da3670f7835bd69301de0f64690e7433e136948d4e03884dad209f32

data/lib/dependabot/git_submodules/file_fetcher.rb

@@ -2,6 +2,7 @@
 # frozen_string_literal: true
 
 require "parseconfig"
+require "sorbet-runtime"
 require "dependabot/file_fetchers"
 require "dependabot/file_fetchers/base"
 require "dependabot/shared_helpers"
@@ -9,6 +10,9 @@ require "dependabot/shared_helpers"
 module Dependabot
   module GitSubmodules
     class FileFetcher < Dependabot::FileFetchers::Base
+      extend T::Sig
+      extend T::Helpers
+
       def self.required_files_in?(filenames)
         filenames.include?(".gitmodules")
       end
@@ -17,8 +21,7 @@ module Dependabot
         "Repo must contain a .gitmodules file."
       end
 
-      private
-
+      sig { override.returns(T::Array[DependencyFile]) }
       def fetch_files
         fetched_files = []
         fetched_files << gitmodules_file
@@ -26,6 +29,8 @@ module Dependabot
         fetched_files
       end
 
+      private
+
       def gitmodules_file
         @gitmodules_file ||= fetch_file_from_host(".gitmodules")
       end
@@ -54,7 +59,7 @@ module Dependabot
                  fetch_github_submodule_commit(path)
                when "gitlab"
                  tmp_path = path.gsub(%r{^/*}, "")
-                 gitlab_client.get_file(repo, tmp_path, commit).blob_id
+                 T.unsafe(gitlab_client).get_file(repo, tmp_path, commit).blob_id
                when "azure"
                  azure_client.fetch_file_contents(commit, path)
                else raise "Unsupported provider '#{source.provider}'."
@@ -73,7 +78,7 @@ module Dependabot
       end
 
       def fetch_github_submodule_commit(path)
-        content = github_client.contents(
+        content = T.unsafe(github_client).contents(
           repo,
           path: path,
           ref: commit

data/lib/dependabot/git_submodules/update_checker.rb

@@ -5,6 +5,7 @@ require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/git_submodules/version"
 require "dependabot/git_commit_checker"
+require "dependabot/git_submodules/requirement"
 
 module Dependabot
   module GitSubmodules

data/lib/dependabot/git_submodules/version.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
 require "dependabot/version"

data/lib/dependabot/git_submodules.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
 # These all need to be required so the various classes can be registered in a

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-git_submodules
 version: !ruby/object:Gem::Version
-  version: 0.235.0
+  version: 0.237.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-10-19 00:00:00.000000000 Z
+date: 2023-11-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.235.0
+        version: 0.237.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.235.0
+        version: 0.237.0
 - !ruby/object:Gem::Dependency
   name: parseconfig
   requirement: !ruby/object:Gem::Requirement
@@ -114,20 +114,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: rspec-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.2
 - !ruby/object:Gem::Dependency
   name: rubocop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.56.0
+        version: 1.57.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.56.0
+        version: 1.57.2
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -233,7 +247,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.235.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
 post_install_message: 
 rdoc_options: []
 require_paths: