dependabot-go_modules 0.242.0 → 0.243.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 399860365300c7e10dba87138d8ea2c622fce1089e738fe0f1d3f7c249ffafa7
-  data.tar.gz: ece1f61a65bd977d2d36ec1ab54de22a0544274ef20c6e3b04fbce03abeb6284
+  metadata.gz: 744d85db0b916488bd45277710d63f2843664dfd6a7134280508dbf47d4e6a1f
+  data.tar.gz: e24005d1821ccdafd273d9af42aae6ae2b2eb141c9baa804b213a2e29f78eed0
 SHA512:
-  metadata.gz: 31a17c4a025c5e6736384b38280653c026e2cf6d86ff594e9c25d6b1e9d8a5086a5af67fca7fd1f5df2915174f08e86369d0ff6677ec96c2886b34aec1fd3501
-  data.tar.gz: b6f27b2180b081926930b005951efb5ca5b6220f0f0a563f95716dc9a396a2c78f5d8f12bd7c9008dac1c57875256999aa4cf7c68fc5b8fca4bd74909b6c9faa
+  metadata.gz: 567bd5baf8ffa1edc4f66fdf0f72735761469fa4b497042565582c71296961299e79fa91d536410ef6a4107b02f78f56b4b060ec1faedecf8378540175b96ab8
+  data.tar.gz: e955c9a518ce0494cf51960230516602bd0759a6765bf690f1bb340e1df354a7930301d19d6d0ad3e9c5d07927360e1ec1d514dd571846f378cad237f83e47c0

data/lib/dependabot/go_modules/version.rb

@@ -12,6 +12,8 @@ require "dependabot/utils"
 module Dependabot
   module GoModules
     class Version < Dependabot::Version
+      extend T::Sig
+
       VERSION_PATTERN = '[0-9]+[0-9a-zA-Z]*(?>\.[0-9a-zA-Z]+)*' \
                         '(-[0-9A-Za-z-]+(\.[0-9a-zA-Z-]+)*)?' \
                         '(\+incompatible)?'
@@ -28,6 +30,7 @@ module Dependabot
         @version_string = version.to_s.gsub(/^v/, "")
         version = version.gsub(/^v/, "") if version.is_a?(String)
         version = version.to_s.split("+").first if version.to_s.include?("+")
+        version, @prerelease = version.to_s.split("-") if version.to_s.include?("-")
 
         super
       end
@@ -39,6 +42,73 @@ module Dependabot
       def to_s
         @version_string
       end
+
+      def <=>(other)
+        result = super(other)
+        return if result.nil?
+        return result unless result.zero?
+
+        other = self.class.new(other) unless other.is_a?(Version)
+        compare_prerelease(@prerelease || "", T.unsafe(other).prerelease || "")
+      end
+
+      protected
+
+      attr_reader :prerelease
+
+      private
+
+      # This matches Go's semver behavior
+      # see https://github.com/golang/mod/blob/fa1ba4269bda724bb9f01ec381fbbaf031e45833/semver/semver.go#L333
+      # rubocop:disable Metrics/CyclomaticComplexity
+      # rubocop:disable Metrics/PerceivedComplexity
+      def compare_prerelease(left, right)
+        return 0 if left == right
+        return 1 if left == ""
+        return -1 if right == ""
+
+        while left != "" && right != ""
+          left = left[1..-1] if left.start_with?(".", "-")
+          right = right[1..-1] if right.start_with?(".", "-")
+
+          dx, left = next_ident(left)
+          dy, right = next_ident(right)
+          next unless dx != dy
+
+          ix = num?(dx)
+          iy = num?(dy)
+          if ix != iy
+            return -1 if ix
+
+            return 1
+          end
+          if ix
+            return -1 if dx.length < dy.length
+            return 1 if dx.length > dy.length
+          end
+          return -1 if dx < dy
+
+          return 1
+
+        end
+        return -1 if left == ""
+
+        1
+      end
+      # rubocop:enable Metrics/CyclomaticComplexity
+      # rubocop:enable Metrics/PerceivedComplexity
+
+      def next_ident(data)
+        i = 0
+        i += 1 while i < data.length && data[i] != "."
+        [data[0..i], data[i..-1]]
+      end
+
+      def num?(data)
+        i = 0
+        i += 1 while i < data.length && data[i] >= "0" && data[i] <= "9"
+        i == data.length
+      end
     end
   end
 end

data/lib/dependabot/go_modules.rb

@@ -18,6 +18,3 @@ Dependabot::PullRequestCreator::Labeler
 require "dependabot/dependency"
 Dependabot::Dependency
   .register_production_check("go_modules", ->(_) { true })
-
-require "dependabot/utils"
-Dependabot::Utils.register_always_clone("go_modules")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.242.0
+  version: 0.243.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-01-22 00:00:00.000000000 Z
+date: 2024-02-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.242.0
+        version: 0.243.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.242.0
+        version: 0.243.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -253,7 +253,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.242.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.243.0
 post_install_message: 
 rdoc_options: []
 require_paths: