dependabot-go_modules 0.245.0 → 0.247.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bf77beb29fa5f52cfe8f65b693fd394df2c759ced54ff554a76381464341dfe3
4
- data.tar.gz: 32ffb052bc90c39487f17cb10b21518c9c87cf98c9977bcad63ad72d2bf2dd79
3
+ metadata.gz: d36e0c5c346b44ce52f74be080cf7997e5d035d0b2bbe5ddb6fd0d7385663afd
4
+ data.tar.gz: b6f09acb8cc803d1ccc895c67e99f8a9e440a6942c015db60e192917f8129de0
5
5
  SHA512:
6
- metadata.gz: '018c85dd281e9dd03dde9765c337765d5b0e1b083d77f7a360cf7579d5fbd7a8a12c56fd5287cc706e907ddbff27377dcde4d9cd0fd9cfd1a71f94e811264295'
7
- data.tar.gz: a7f804233c3fd868f8903139c763f385aaad084056d80b485d4127fdb4ef257de00d13305ff73df823e1b26e497cffc345436ff6e013e76afcbde11b754237c2
6
+ metadata.gz: a283d1c8db253f1e43e83778263ad3989cab65b91a9acfdd152fee674ea98d70a22558cdef913f7b2f737e7bd59c2e20df7c6254ce20ff9d5de603fc6f45fb4a
7
+ data.tar.gz: 76605e017c9eb5db43a1a3ca73d5d83ae51f858058bfa5de59a06965387105057e858ef57d843efe1c339e100d0edf7e3e90d0b923dd799904a67ed36c7cf105
@@ -55,10 +55,6 @@ module Dependabot
55
55
 
56
56
  @go_sum = fetch_file_if_present("go.sum")
57
57
  end
58
-
59
- def recurse_submodules_when_cloning?
60
- true
61
- end
62
58
  end
63
59
  end
64
60
  end
@@ -9,11 +9,14 @@ require "dependabot/shared_helpers"
9
9
  require "dependabot/errors"
10
10
  require "dependabot/go_modules/requirement"
11
11
  require "dependabot/go_modules/resolvability_errors"
12
+ require "sorbet-runtime"
12
13
 
13
14
  module Dependabot
14
15
  module GoModules
15
16
  class UpdateChecker
16
17
  class LatestVersionFinder
18
+ extend T::Sig
19
+
17
20
  RESOLVABILITY_ERROR_REGEXES = [
18
21
  # Package url/proxy doesn't include any redirect meta tags
19
22
  /no go-import meta tags/,
@@ -136,10 +139,15 @@ module Dependabot
136
139
  end
137
140
  end
138
141
 
142
+ sig { params(versions_array: T::Array[Gem::Version]).returns(T::Array[Gem::Version]) }
139
143
  def filter_prerelease_versions(versions_array)
140
144
  return versions_array if wants_prerelease?
141
145
 
142
- versions_array.reject(&:prerelease?)
146
+ filtered = versions_array.reject(&:prerelease?)
147
+ if versions_array.count > filtered.count
148
+ Dependabot.logger.info("Filtered out #{versions_array.count - filtered.count} pre-release versions")
149
+ end
150
+ filtered
143
151
  end
144
152
 
145
153
  def filter_lower_versions(versions_array)
@@ -149,6 +157,7 @@ module Dependabot
149
157
  .select { |version| version > dependency.numeric_version }
150
158
  end
151
159
 
160
+ sig { params(versions_array: T::Array[Gem::Version]).returns(T::Array[Gem::Version]) }
152
161
  def filter_ignored_versions(versions_array)
153
162
  filtered = versions_array
154
163
  .reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
@@ -156,6 +165,10 @@ module Dependabot
156
165
  raise AllVersionsIgnored
157
166
  end
158
167
 
168
+ if versions_array.count > filtered.count
169
+ Dependabot.logger.info("Filtered out #{versions_array.count - filtered.count} ignored versions")
170
+ end
171
+
159
172
  filtered
160
173
  end
161
174
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-go_modules
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.245.0
4
+ version: 0.247.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-02-22 00:00:00.000000000 Z
11
+ date: 2024-03-14 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.245.0
19
+ version: 0.247.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.245.0
26
+ version: 0.247.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
138
  version: 1.19.0
139
+ - !ruby/object:Gem::Dependency
140
+ name: rubocop-rspec
141
+ requirement: !ruby/object:Gem::Requirement
142
+ requirements:
143
+ - - "~>"
144
+ - !ruby/object:Gem::Version
145
+ version: 2.27.1
146
+ type: :development
147
+ prerelease: false
148
+ version_requirements: !ruby/object:Gem::Requirement
149
+ requirements:
150
+ - - "~>"
151
+ - !ruby/object:Gem::Version
152
+ version: 2.27.1
139
153
  - !ruby/object:Gem::Dependency
140
154
  name: rubocop-sorbet
141
155
  requirement: !ruby/object:Gem::Requirement
@@ -253,7 +267,7 @@ licenses:
253
267
  - Nonstandard
254
268
  metadata:
255
269
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
256
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.245.0
270
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.247.0
257
271
  post_install_message:
258
272
  rdoc_options: []
259
273
  require_paths: