dependabot-go_modules 0.287.0 → 0.289.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e17c95675b770b60d44e3296b0ced8d6e4e74a22f9b4e264d96331f4d6c6066e
-  data.tar.gz: 1a18f8998dbbbf023607e93b9e851e5d948f506e68c8f7741f20822a9c3962f9
+  metadata.gz: e3cbd03c58df59da4c14bad68f7237ca97a6912cb91c3ece0c03ebc85f4667c4
+  data.tar.gz: 4633f1e9f267b548b3281cbbda9978fed0653129155edba26f6a07d675a53f52
 SHA512:
-  metadata.gz: 1ee3f7c954aa84740562c1d4dede902c9ac3a3a29a7d3b8be212f964fcb78c70af62b8719a141f0ff6303802a81a1cd60d682c4b94c663952adb557a7e658acc
-  data.tar.gz: 16c1e9e0eb93b13ee31c958a321e8e1179d9e8d09eb541513b4a31ad0d7243df8c6984e5167062dc9cd55b8499ca8b1163242e277bc1d7d07b8f351779f1d8aa
+  metadata.gz: 20c8c3c20bee249965110dca0c17508e451b91f66b92d8e35596acaf86c16db8e020fd9c909f751650bc84b5a8ceb1b4b88b14f4d80c7f079cd54464ef6d330e
+  data.tar.gz: ae9b6e2af6cce4ce35a4ec9324b430bb7a82928efbcc03b53490855f321cf7f30dbdf095ea9c8adef55e7a07295b2b406e84a32d04264cf3cc9fd07be37fcde3

data/lib/dependabot/go_modules/file_parser.rb

@@ -12,6 +12,8 @@ require "dependabot/errors"
 require "dependabot/file_parsers"
 require "dependabot/file_parsers/base"
 require "dependabot/go_modules/version"
+require "dependabot/go_modules/language"
+require "dependabot/go_modules/package_manager"
 
 module Dependabot
   module GoModules
@@ -31,8 +33,50 @@ module Dependabot
         dependency_set.dependencies
       end
 
+      sig { returns(Ecosystem) }
+      def ecosystem
+        @ecosystem ||= T.let(begin
+          set_gotoolchain_env
+          Ecosystem.new(
+            name: ECOSYSTEM,
+            package_manager: package_manager,
+            language: language
+          )
+        end, T.nilable(Dependabot::Ecosystem))
+      end
+
       private
 
+      sig { returns(Ecosystem::VersionManager) }
+      def package_manager
+        @package_manager ||= T.let(
+          PackageManager.new(T.must(go_toolchain_version)),
+          T.nilable(Dependabot::GoModules::PackageManager)
+        )
+      end
+
+      sig { returns(T.nilable(Ecosystem::VersionManager)) }
+      def language
+        @language ||= T.let(begin
+          Language.new(go_version)
+        end, T.nilable(Dependabot::GoModules::Language))
+      end
+
+      sig { returns(String) }
+      def go_version
+        @go_version ||= T.let(T.must(go_mod&.content&.match(/^go\s(\d+\.\d+(.\d+)*)/)&.captures&.first),
+                              T.nilable(String))
+      end
+
+      sig { returns(T.nilable(String)) }
+      def go_toolchain_version
+        @go_toolchain_version ||= T.let(begin
+          # Checks version based on the GOTOOLCHAIN in ENV
+          version = SharedHelpers.run_shell_command("go version")
+          version.match(/go\s*(\d+\.\d+(.\d+)*)/)&.captures&.first
+        end, T.nilable(String))
+      end
+
       # set GOTOOLCHAIN=local+auto if go version >= 1.21
       sig { void }
       def set_gotoolchain_env

data/lib/dependabot/go_modules/language.rb

@@ -0,0 +1,25 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+require "dependabot/ecosystem"
+require "dependabot/go_modules/version"
+require "dependabot/go_modules/requirement"
+
+module Dependabot
+  module GoModules
+    LANGUAGE = "go"
+
+    class Language < Dependabot::Ecosystem::VersionManager
+      extend T::Sig
+
+      sig { params(raw_version: String).void }
+      def initialize(raw_version)
+        super(
+          LANGUAGE,
+          Version.new(raw_version)
+        )
+      end
+    end
+  end
+end

data/lib/dependabot/go_modules/package_manager.rb

@@ -0,0 +1,42 @@
+# typed: strong
+# frozen_string_literal: true
+
+require "sorbet-runtime"
+require "dependabot/ecosystem"
+require "dependabot/go_modules/version"
+require "dependabot/go_modules/requirement"
+
+module Dependabot
+  module GoModules
+    ECOSYSTEM = "go"
+    PACKAGE_MANAGER = "go_modules"
+    SUPPORTED_GO_VERSIONS = T.let([].freeze, T::Array[Dependabot::Version])
+
+    # When a version is going to be unsupported, it will be added here
+    DEPRECATED_GO_VERSIONS = T.let([].freeze, T::Array[Dependabot::Version])
+
+    class PackageManager < Dependabot::Ecosystem::VersionManager
+      extend T::Sig
+
+      sig { params(raw_version: String).void }
+      def initialize(raw_version)
+        super(
+          PACKAGE_MANAGER,
+          Version.new(raw_version),
+          DEPRECATED_GO_VERSIONS,
+          SUPPORTED_GO_VERSIONS
+        )
+      end
+
+      sig { returns(T::Boolean) }
+      def deprecated?
+        false
+      end
+
+      sig { returns(T::Boolean) }
+      def unsupported?
+        false
+      end
+    end
+  end
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.287.0
+  version: 0.289.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-11-19 00:00:00.000000000 Z
+date: 2024-12-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.287.0
+        version: 0.289.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.287.0
+        version: 0.289.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -254,8 +254,10 @@ files:
 - lib/dependabot/go_modules/file_parser.rb
 - lib/dependabot/go_modules/file_updater.rb
 - lib/dependabot/go_modules/file_updater/go_mod_updater.rb
+- lib/dependabot/go_modules/language.rb
 - lib/dependabot/go_modules/metadata_finder.rb
 - lib/dependabot/go_modules/native_helpers.rb
+- lib/dependabot/go_modules/package_manager.rb
 - lib/dependabot/go_modules/path_converter.rb
 - lib/dependabot/go_modules/replace_stubber.rb
 - lib/dependabot/go_modules/requirement.rb
@@ -268,7 +270,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.287.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.289.0
 post_install_message: 
 rdoc_options: []
 require_paths: