dependabot-github_actions 0.236.0 → 0.237.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/github_actions/file_fetcher.rb +7 -2
  3. data/lib/dependabot/github_actions/update_checker.rb +4 -1
  4. metadata +21 -7
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 01da475f18da7673192a1e563c21dda76604fced7ad602af4d0bb7e65b1d1631
4
- data.tar.gz: 5b4a93873ab7bb6adbfe9cceaa22de7f61ba362ce44e50c73c18a7fd0c5512f5
3
+ metadata.gz: 9f21866075019c5a142acbc0f0c620a6bbfba50eb16a1bb59e37cd0474c0d88f
4
+ data.tar.gz: 70fec17d129dff3814b61e810d6238985ac08ed59e2aa99319cb6ae3c5eba4b3
5
5
  SHA512:
6
- metadata.gz: 0ba93e333392de5c3ca2cab8f4b0a9d546a5936e84de5de882b88ee8810152323793f1317f3d655db0b6dfd807ae716cc57c3f746a0565fe3fdb7624393bfd74
7
- data.tar.gz: a3aced79001e54320e0a3f037c3d38501c7d128dd51d5f5cff1f8d8f76fd8aba302cc2f23784900e7049fab1431102ebbdee9b18e50bcec4a0bbcc0e73b404ee
6
+ metadata.gz: c5eb1345d8690120321f69856e735d0aea769705105dc4168b2f007ea1ad97ed71b2c1c3e2df0ad1179d1c88327326b272e07ffe4e2fb55c305f70c14ee6957c
7
+ data.tar.gz: bb5ea0c6225529c1c07f6c2ca88d11a7b038d852084450b097fa46df1331e2ad3addc890b0189039445882ee7639e553f6598e9c95db5624646ac6f0b11177f4
data/lib/dependabot/github_actions/file_fetcher.rb CHANGED
@@ -1,12 +1,16 @@
1
1
  # typed: true
2
2
  # frozen_string_literal: true
3
3
 
4
+ require "sorbet-runtime"
4
5
  require "dependabot/file_fetchers"
5
6
  require "dependabot/file_fetchers/base"
6
7
 
7
8
  module Dependabot
8
9
  module GithubActions
9
10
  class FileFetcher < Dependabot::FileFetchers::Base
11
+ extend T::Sig
12
+ extend T::Helpers
13
+
10
14
  FILENAME_PATTERN = /^(\.github|action.ya?ml)$/
11
15
 
12
16
  def self.required_files_in?(filenames)
@@ -17,8 +21,7 @@ module Dependabot
17
21
  "Repo must contain a .github/workflows directory with YAML files or an action.yml file"
18
22
  end
19
23
 
20
- private
21
-
24
+ sig { override.returns(T::Array[DependencyFile]) }
22
25
  def fetch_files
23
26
  fetched_files = []
24
27
  fetched_files += correctly_encoded_workflow_files
@@ -45,6 +48,8 @@ module Dependabot
45
48
  end
46
49
  end
47
50
 
51
+ private
52
+
48
53
  def workflow_files
49
54
  return @workflow_files if defined? @workflow_files
50
55
 
data/lib/dependabot/github_actions/update_checker.rb CHANGED
@@ -1,6 +1,7 @@
1
1
  # typed: true
2
2
  # frozen_string_literal: true
3
3
 
4
+ require "sorbet-runtime"
4
5
  require "dependabot/update_checkers"
5
6
  require "dependabot/update_checkers/base"
6
7
  require "dependabot/update_checkers/version_filters"
@@ -11,6 +12,8 @@ require "dependabot/github_actions/requirement"
11
12
  module Dependabot
12
13
  module GithubActions
13
14
  class UpdateChecker < Dependabot::UpdateCheckers::Base
15
+ extend T::Sig
16
+
14
17
  def latest_version
15
18
  @latest_version ||= fetch_latest_version
16
19
  end
@@ -141,7 +144,7 @@ module Dependabot
141
144
  head_commit_for_ref_sha
142
145
  else
143
146
  url = git_commit_checker.dependency_source_details[:url]
144
- source = Source.from_url(url)
147
+ source = T.must(Source.from_url(url))
145
148
 
146
149
  SharedHelpers.in_a_temporary_directory(File.dirname(source.repo)) do |temp_dir|
147
150
  repo_contents_path = File.join(temp_dir, File.basename(source.repo))
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.236.0
4
+ version: 0.237.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-10-26 00:00:00.000000000 Z
11
+ date: 2023-11-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.236.0
19
+ version: 0.237.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.236.0
26
+ version: 0.237.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -94,20 +94,34 @@ dependencies:
94
94
  - - "~>"
95
95
  - !ruby/object:Gem::Version
96
96
  version: '1.3'
97
+ - !ruby/object:Gem::Dependency
98
+ name: rspec-sorbet
99
+ requirement: !ruby/object:Gem::Requirement
100
+ requirements:
101
+ - - "~>"
102
+ - !ruby/object:Gem::Version
103
+ version: 1.9.2
104
+ type: :development
105
+ prerelease: false
106
+ version_requirements: !ruby/object:Gem::Requirement
107
+ requirements:
108
+ - - "~>"
109
+ - !ruby/object:Gem::Version
110
+ version: 1.9.2
97
111
  - !ruby/object:Gem::Dependency
98
112
  name: rubocop
99
113
  requirement: !ruby/object:Gem::Requirement
100
114
  requirements:
101
115
  - - "~>"
102
116
  - !ruby/object:Gem::Version
103
- version: 1.56.0
117
+ version: 1.57.2
104
118
  type: :development
105
119
  prerelease: false
106
120
  version_requirements: !ruby/object:Gem::Requirement
107
121
  requirements:
108
122
  - - "~>"
109
123
  - !ruby/object:Gem::Version
110
- version: 1.56.0
124
+ version: 1.57.2
111
125
  - !ruby/object:Gem::Dependency
112
126
  name: rubocop-performance
113
127
  requirement: !ruby/object:Gem::Requirement
@@ -213,7 +227,7 @@ licenses:
213
227
  - Nonstandard
214
228
  metadata:
215
229
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
216
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.236.0
230
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
217
231
  post_install_message:
218
232
  rdoc_options: []
219
233
  require_paths: