dependabot-go_modules 0.246.0 → 0.248.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0aa95e6a02b761020d32e76225b9237400c1c6f81c72cb29e50753fa20197e46
-  data.tar.gz: cb999eea307817d7138f1305ff11e5b791dc6bd8aabb6c32ad2e8becd19d9c26
+  metadata.gz: e7476dde1b288dd6ee4a82cd421837ed66efa0f08d2da98e2fcea56f6491e11b
+  data.tar.gz: c72cce92a6860a2d66f63941be2f8c91a134792281d7bfb2893aeb00ae774e23
 SHA512:
-  metadata.gz: 98afdc03ee45b5b2697a1c2b143008d63b9ba96ab5160ff3291b9eaeaa2b355b80683e86066efbb8037b1aa6a14f75446aa411f3ea3fbf8caf7de61e5a2159e0
-  data.tar.gz: 4877a525a0aca109ded8be8a29f321bca44178071200e2cb63a45184dfa0f97d03cac53c0069b400d01230c86bea15da0d4000a06702099d6ac4c2fa5df20d09
+  metadata.gz: b783358ead8f4180fe472c4f40e16d31240d046b0ef7a54ed1860ccac49e4c1b85beb59d50b0e0c88710c7327a1d14c8d7914bfb8e25b10abf1a8fa5ecb4cc33
+  data.tar.gz: 31a099b196ee68e8103b8a7a3b13d2bf78da7264beb4c6eb7f2c4f822aff3ccc18a08a06b9a37d0fa67cebbe686ab8dc8d52a9bf8920ee097b6c19bbf8eaa593

data/lib/dependabot/go_modules/file_fetcher.rb

@@ -55,10 +55,6 @@ module Dependabot
 
         @go_sum = fetch_file_if_present("go.sum")
       end
-
-      def recurse_submodules_when_cloning?
-        true
-      end
     end
   end
 end

data/lib/dependabot/go_modules/update_checker/latest_version_finder.rb

@@ -9,11 +9,14 @@ require "dependabot/shared_helpers"
 require "dependabot/errors"
 require "dependabot/go_modules/requirement"
 require "dependabot/go_modules/resolvability_errors"
+require "sorbet-runtime"
 
 module Dependabot
   module GoModules
     class UpdateChecker
       class LatestVersionFinder
+        extend T::Sig
+
         RESOLVABILITY_ERROR_REGEXES = [
           # Package url/proxy doesn't include any redirect meta tags
           /no go-import meta tags/,
@@ -136,10 +139,15 @@ module Dependabot
           end
         end
 
+        sig { params(versions_array: T::Array[Gem::Version]).returns(T::Array[Gem::Version]) }
         def filter_prerelease_versions(versions_array)
           return versions_array if wants_prerelease?
 
-          versions_array.reject(&:prerelease?)
+          filtered = versions_array.reject(&:prerelease?)
+          if versions_array.count > filtered.count
+            Dependabot.logger.info("Filtered out #{versions_array.count - filtered.count} pre-release versions")
+          end
+          filtered
         end
 
         def filter_lower_versions(versions_array)
@@ -149,6 +157,7 @@ module Dependabot
             .select { |version| version > dependency.numeric_version }
         end
 
+        sig { params(versions_array: T::Array[Gem::Version]).returns(T::Array[Gem::Version]) }
         def filter_ignored_versions(versions_array)
           filtered = versions_array
                      .reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
@@ -156,6 +165,10 @@ module Dependabot
             raise AllVersionsIgnored
           end
 
+          if versions_array.count > filtered.count
+            Dependabot.logger.info("Filtered out #{versions_array.count - filtered.count} ignored versions")
+          end
+
           filtered
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.246.0
+  version: 0.248.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-03-01 00:00:00.000000000 Z
+date: 2024-03-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.246.0
+        version: 0.248.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.246.0
+        version: 0.248.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -253,7 +267,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.246.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.248.0
 post_install_message: 
 rdoc_options: []
 require_paths: