dependabot-go_modules 0.383.0 → 0.384.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b413e26c998c666b1e7d8c8eba8153e146d37621b1bd7c7265c8909ff081e8e2
4
- data.tar.gz: 3ac8f0be34ae4d134fc2b7bab16b20348f5d974639efcded7d18442e987db719
3
+ metadata.gz: 01f9e1169a6dea236ec86455d358d4c0c4ad5f500c612ed503af13c028f33e90
4
+ data.tar.gz: f25406565c4078b61c8e6de8ea0c2ee84e0cd6841f978f433e6cd22a7332ad2d
5
5
  SHA512:
6
- metadata.gz: d00ad1a766ca11dc865cf98fac55d2eb8f95db67a12dd38797bde99de6d0aef0896306d195bbcdc14c6488d6417ea7f5309753cae4543844e5cc359d2da10633
7
- data.tar.gz: eda15cb96be95e17a881f5ce6c0c4a2667a12aa44dd0d924f162aff40a28a02a1e65c9c3e0e371aa2e0676e73305cc2010d5fbede371b30a7948338ec331c65a
6
+ metadata.gz: f3166125fa94fd81dfc4a60be872570c18feabd020ebc0e36923846c707fb3b53e278adeda62fb174cdd772426da777086c445325005d3fe3a0b007c329fcd91
7
+ data.tar.gz: 23f462bc7870cc42837a8664c1683a99057f9229a0cf38c37d622f9f6faaba996d4d102ca46a0e342c667b69e72be8a7daa394ed224ad85ae5fc99613ef10e5f
@@ -305,7 +305,7 @@ module Dependabot
305
305
  @wants_prerelease ||= T.let(
306
306
  begin
307
307
  current_version = dependency.numeric_version
308
- !current_version&.prerelease?.nil?
308
+ current_version&.prerelease? || false
309
309
  end,
310
310
  T.nilable(T::Boolean)
311
311
  )
@@ -34,8 +34,11 @@ module Dependabot
34
34
  @version_string = T.let(version.to_s.gsub(/^v/, ""), String)
35
35
  version = version.gsub(/^v/, "") if version.is_a?(String)
36
36
  version = version.to_s.split("+").first if version.to_s.include?("+")
37
- @prerelease = T.let(nil, T.nilable(String))
38
- version, @prerelease = version.to_s.split("-", 2) if version.to_s.include?("-")
37
+ # NOTE: avoid the name `@prerelease`; RubyGems 4's Gem::Version#prerelease?
38
+ # memoizes its boolean result into an `@prerelease` ivar, so reusing that
39
+ # name here would corrupt the inherited prerelease? check.
40
+ @prerelease_suffix = T.let(nil, T.nilable(String))
41
+ version, @prerelease_suffix = version.to_s.split("-", 2) if version.to_s.include?("-")
39
42
 
40
43
  super
41
44
  end
@@ -50,6 +53,19 @@ module Dependabot
50
53
  @version_string
51
54
  end
52
55
 
56
+ # Go represents prereleases as a dash-suffix (e.g. "1.2.0-pre2"), which is
57
+ # stripped off before being handed to Gem::Version. As a result the parent's
58
+ # prerelease? check (which looks for alphabetic characters in the version it
59
+ # was given) can't see the suffix, so we report the suffix here and otherwise
60
+ # delegate to Gem::Version for dot-style prereleases such as "1.0.0.pre1".
61
+ sig { returns(T::Boolean) }
62
+ def prerelease?
63
+ suffix = @prerelease_suffix
64
+ return true if suffix && !suffix.empty?
65
+
66
+ super
67
+ end
68
+
53
69
  sig { params(other: Object).returns(T.nilable(Integer)) }
54
70
  def <=>(other)
55
71
  result = super
@@ -57,13 +73,13 @@ module Dependabot
57
73
  return result unless result.zero?
58
74
 
59
75
  other = self.class.new(other.to_s) unless other.is_a?(Version)
60
- compare_prerelease(@prerelease || "", T.unsafe(other).prerelease || "")
76
+ compare_prerelease(@prerelease_suffix || "", T.unsafe(other).prerelease_suffix || "")
61
77
  end
62
78
 
63
79
  protected
64
80
 
65
81
  sig { returns(T.nilable(String)) }
66
- attr_reader :prerelease
82
+ attr_reader :prerelease_suffix
67
83
 
68
84
  private
69
85
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-go_modules
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.383.0
4
+ version: 0.384.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.383.0
18
+ version: 0.384.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.383.0
25
+ version: 0.384.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -275,7 +275,7 @@ licenses:
275
275
  - MIT
276
276
  metadata:
277
277
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
278
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.383.0
278
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.384.0
279
279
  rdoc_options: []
280
280
  require_paths:
281
281
  - lib
@@ -290,7 +290,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
290
290
  - !ruby/object:Gem::Version
291
291
  version: 3.3.0
292
292
  requirements: []
293
- rubygems_version: 3.7.2
293
+ rubygems_version: 4.0.14
294
294
  specification_version: 4
295
295
  summary: Provides Dependabot support for Go Modules
296
296
  test_files: []