dependabot-go_modules 0.381.0 → 0.382.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d755e1ec7cfcbaeba0c4078e462dda1c0dad5a8656671c6951f2bf015af2f181
-  data.tar.gz: 604712cc627e5b5fa2510328fd4afc7d4e7833fb606ca98514a3dd81c5e8caa1
+  metadata.gz: 88add03f124cfee55538eed83a581d28c4056d1162fbb41d490763f891a69a69
+  data.tar.gz: 3ac8f0be34ae4d134fc2b7bab16b20348f5d974639efcded7d18442e987db719
 SHA512:
-  metadata.gz: 84fa95d8b8db24e5ff30cc16b7a7231e26c88ab89b44f6832e75b3575b2fa40b0c4b95200713ebe35315293b64ea86219598c8cdc1776ef357da11e5c9979f22
-  data.tar.gz: 1fa01e546e7fb67c4c88356d996046e6cd6c54eced985e3b7485e5295e16dc958fcfc3f6f227d5a720f8766f5da89e77e717f4b0c8362a78df2868ab8a5517cb
+  metadata.gz: 232898ddf9f694022d7ff47016e249c1f7db49b6627077d90a70154ac2c961bc7daa351043fe2cd748556ca817866c4b58cd99834a694a5bbde8909bb50aedae
+  data.tar.gz: eda15cb96be95e17a881f5ce6c0c4a2667a12aa44dd0d924f162aff40a28a02a1e65c9c3e0e371aa2e0676e73305cc2010d5fbede371b30a7948338ec331c65a

data/helpers/go.mod

@@ -4,5 +4,5 @@ go 1.26.0
 
 require (
 	github.com/Masterminds/vcs v1.13.3
-	golang.org/x/mod v0.33.0
+	golang.org/x/mod v0.37.0
 )

data/helpers/go.sum

@@ -1,4 +1,4 @@
 github.com/Masterminds/vcs v1.13.3 h1:IIA2aBdXvfbIM+yl/eTnL4hb1XwdpvuQLglAix1gweE=
 github.com/Masterminds/vcs v1.13.3/go.mod h1:TiE7xuEjl1N4j016moRd6vezp6e6Lz23gypeXfzXeW8=
-golang.org/x/mod v0.33.0 h1:tHFzIWbBifEmbwtGz65eaWyGiGZatSrT9prnU8DbVL8=
-golang.org/x/mod v0.33.0/go.mod h1:swjeQEj+6r7fODbD2cqrnje9PnziFuw4bmLbBZFrQ5w=
+golang.org/x/mod v0.37.0 h1:vF1DjpVEshcIqoEaauuHebaLk1O1forxjxBaVn884JQ=
+golang.org/x/mod v0.37.0/go.mod h1:m8S8VeM9r4dzDwjrKO0a1sZP3YjeMamRRlD+fmR2Q/0=

data/lib/dependabot/go_modules/requirement.rb

@@ -30,7 +30,7 @@ module Dependabot
 
       # Use GoModules::Version rather than Gem::Version to ensure that
       # pre-release versions aren't transformed.
-      sig { params(obj: T.untyped).returns([String, Gem::Version]) }
+      sig { params(obj: T.any(Gem::Version, String)).returns([String, Gem::Version]) }
       def self.parse(obj)
         return ["=", Version.new(obj.to_s)] if obj.is_a?(Gem::Version)
 

data/lib/dependabot/go_modules/requirement_parser.rb

@@ -19,7 +19,7 @@ module Dependabot
       GO_DEP_WITHOUT_VERSION =
         /\A\s*(?<name>#{MODULE_PATH})\s*\z/x
 
-      sig { params(dependency_string: String).returns(T.nilable(T::Hash[Symbol, T.untyped])) }
+      sig { params(dependency_string: String).returns(T.nilable(T::Hash[Symbol, T.nilable(String)])) }
       def self.parse(dependency_string)
         match = dependency_string.strip.match(GO_DEP_WITH_VERSION)
         return nil unless match

data/lib/dependabot/go_modules/update_checker.rb

@@ -47,11 +47,12 @@ module Dependabot
         nil
       end
 
-      sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements
-        dependency.requirements.map do |req|
-          req.merge(requirement: latest_version)
+        updated = dependency.requirements.map do |req|
+          req.merge(requirement: latest_version&.to_s)
         end
+        wrap_requirements(updated)
       end
 
       private

data/lib/dependabot/go_modules/version.rb

@@ -71,15 +71,15 @@ module Dependabot
       # see https://github.com/golang/mod/blob/fa1ba4269bda724bb9f01ec381fbbaf031e45833/semver/semver.go#L333
       # rubocop:disable Metrics/CyclomaticComplexity
       # rubocop:disable Metrics/PerceivedComplexity
-      sig { params(left: T.untyped, right: T.untyped).returns(Integer) }
+      sig { params(left: String, right: String).returns(Integer) }
       def compare_prerelease(left, right)
         return 0 if left == right
         return 1 if left == ""
         return -1 if right == ""
 
         while left != "" && right != ""
-          left = left[1..-1] if left.start_with?(".", "-")
-          right = right[1..-1] if right.start_with?(".", "-")
+          left = T.must(left[1..-1]) if left.start_with?(".", "-")
+          right = T.must(right[1..-1]) if right.start_with?(".", "-")
 
           dx, left = next_ident(left)
           dy, right = next_ident(right)
@@ -108,17 +108,17 @@ module Dependabot
       # rubocop:enable Metrics/CyclomaticComplexity
       # rubocop:enable Metrics/PerceivedComplexity
 
-      sig { params(data: String).returns(T.untyped) }
+      sig { params(data: String).returns([String, String]) }
       def next_ident(data)
         i = 0
         i += 1 while i < data.length && data[i] != "."
-        [data[0..i], data[i..-1]]
+        [T.must(data[0..i]), T.must(data[i..-1])]
       end
 
-      sig { params(data: T.untyped).returns(T::Boolean) }
+      sig { params(data: String).returns(T::Boolean) }
       def num?(data)
         i = 0
-        i += 1 while i < data.length && data[i] >= "0" && data[i] <= "9"
+        i += 1 while i < data.length && T.must(data[i]) >= "0" && T.must(data[i]) <= "9"
         i == data.length
       end
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.381.0
+  version: 0.382.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.381.0
+        version: 0.382.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.381.0
+        version: 0.382.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -275,7 +275,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.381.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.382.0
 rdoc_options: []
 require_paths:
 - lib