dependabot-git_submodules 0.386.0 → 0.388.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 61d0109ce70408192b6f6b6015657321f975abbf57405caff077eca0b7ef181c
-  data.tar.gz: acbfe9715f9ff0e05d299dc5be3d742c5ab95694388ba7adeb1a55a5561f50f6
+  metadata.gz: f3eacdd11d05c7746fada2a8289151d3c23107d16634e283f2c4832c865f570d
+  data.tar.gz: ab146a5b6c9a65f4b4e2ccd2cddf20b3a9ea8106ed0c4c983a499389f8081469
 SHA512:
-  metadata.gz: d2f118565b5f365ec374087d5187d813579f5e84dc297f868cf86b53de0b53a7f964a4760637e4a119edc8bfa3088e74deb896fee1cd9731c5dcd29b8dc699b1
-  data.tar.gz: 60860e28e3fa0d6790ab02e0c652f4650866d6e539fe552514af950281a7f28ae92026d96082d61089989ad5ed92fbb59da663a32004de644d7331c0ecdb63ca
+  metadata.gz: 67d9b386aa7244bf69e1b6b855effe533a0f24c0e201c90daaca9d9427c2dcefcf4934ba7b41e642dd1a076fc4e0883ceea54ad138dc1cddd54a9e96e0232c49
+  data.tar.gz: d7ea8b25f5a3fa93e2fea21f4602485a6220415b93c8d951111d76af3b75f58c0ea21aef1efc2281d1224310acc96427cc00649ea1b749a2d8ac39d83f65b946

data/lib/dependabot/git_submodules/update_checker/latest_version_finder.rb

@@ -7,7 +7,6 @@ require "sorbet-runtime"
 
 require "dependabot/errors"
 require "dependabot/shared_helpers"
-require "dependabot/update_checkers/cooldown_calculation"
 require "dependabot/update_checkers/version_filters"
 require "dependabot/package/package_latest_version_finder"
 require "dependabot/git_submodules/update_checker"
@@ -46,50 +45,40 @@ module Dependabot
             )
         end
 
-        sig { params(release: Dependabot::Package::PackageRelease).returns(T::Boolean) }
-        def in_cooldown_period?(release)
-          unless release.released_at
-            Dependabot.logger.info("Release date not available for ref tag #{release.tag}")
-            return false
-          end
+        protected
+
+        sig do
+          override.params(releases: T::Array[Dependabot::Package::PackageRelease])
+                  .returns(T::Array[Dependabot::Package::PackageRelease])
+        end
+        def filter_by_cooldown(releases)
+          return releases unless cooldown_enabled?
+          return releases unless cooldown_options
+
+          filtered = releases.reject { |release| in_cooldown_period?(release) }
 
-          days = cooldown_days
-          in_cooldown = Dependabot::UpdateCheckers::CooldownCalculation
-                        .within_cooldown_window?(T.must(release.released_at), days)
+          if releases.count > filtered.count
+            Dependabot.logger.info("Filtered out #{releases.count - filtered.count} versions due to cooldown")
+          end
 
-          if in_cooldown
-            passed_days = (Time.now.to_i - release.released_at.to_i) / (24 * 60 * 60)
+          if filtered.empty? && !releases.empty? && dependency.version
             Dependabot.logger.info(
-              "Filtered #{release.tag}, Released on: " \
-              "#{T.must(release.released_at).strftime('%Y-%m-%d')} " \
-              "(#{passed_days}/#{days} cooldown days)"
+              "All versions filtered by cooldown for #{dependency.name}, " \
+              "falling back to current version #{dependency.version}"
             )
-          end
 
-          in_cooldown
-        end
+            return [
+              Dependabot::Package::PackageRelease.new(
+                version: GitSubmodules::Version.new("0.0.0-0.0"),
+                tag: dependency.version
+              )
+            ]
+          end
 
-        sig do
-          returns(Integer)
-        end
-        def cooldown_days
-          cooldown = @cooldown_options
-          return 0 if cooldown.nil?
-          return 0 unless cooldown_enabled?
-          return 0 unless cooldown.included?(dependency.name)
-
-          return cooldown.default_days if cooldown.default_days.positive?
-          return cooldown.semver_major_days if cooldown.semver_major_days.positive?
-          return cooldown.semver_minor_days if cooldown.semver_minor_days.positive?
-          return cooldown.semver_patch_days if cooldown.semver_patch_days.positive?
-
-          cooldown.default_days
+          filtered
         end
 
-        sig { returns(T::Boolean) }
-        def cooldown_enabled?
-          true
-        end
+        private
 
         sig do
           params(releases: T::Array[Dependabot::Package::PackageRelease])

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-git_submodules
 version: !ruby/object:Gem::Version
-  version: 0.386.0
+  version: 0.388.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.386.0
+        version: 0.388.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.386.0
+        version: 0.388.0
 - !ruby/object:Gem::Dependency
   name: parseconfig
   requirement: !ruby/object:Gem::Requirement
@@ -277,7 +277,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.386.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.388.0
 rdoc_options: []
 require_paths:
 - lib