dependabot-go_modules 0.246.0 → 0.247.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0aa95e6a02b761020d32e76225b9237400c1c6f81c72cb29e50753fa20197e46
-  data.tar.gz: cb999eea307817d7138f1305ff11e5b791dc6bd8aabb6c32ad2e8becd19d9c26
+  metadata.gz: d36e0c5c346b44ce52f74be080cf7997e5d035d0b2bbe5ddb6fd0d7385663afd
+  data.tar.gz: b6f09acb8cc803d1ccc895c67e99f8a9e440a6942c015db60e192917f8129de0
 SHA512:
-  metadata.gz: 98afdc03ee45b5b2697a1c2b143008d63b9ba96ab5160ff3291b9eaeaa2b355b80683e86066efbb8037b1aa6a14f75446aa411f3ea3fbf8caf7de61e5a2159e0
-  data.tar.gz: 4877a525a0aca109ded8be8a29f321bca44178071200e2cb63a45184dfa0f97d03cac53c0069b400d01230c86bea15da0d4000a06702099d6ac4c2fa5df20d09
+  metadata.gz: a283d1c8db253f1e43e83778263ad3989cab65b91a9acfdd152fee674ea98d70a22558cdef913f7b2f737e7bd59c2e20df7c6254ce20ff9d5de603fc6f45fb4a
+  data.tar.gz: 76605e017c9eb5db43a1a3ca73d5d83ae51f858058bfa5de59a06965387105057e858ef57d843efe1c339e100d0edf7e3e90d0b923dd799904a67ed36c7cf105

data/lib/dependabot/go_modules/file_fetcher.rb

@@ -55,10 +55,6 @@ module Dependabot
 
         @go_sum = fetch_file_if_present("go.sum")
       end
-
-      def recurse_submodules_when_cloning?
-        true
-      end
     end
   end
 end

data/lib/dependabot/go_modules/update_checker/latest_version_finder.rb

@@ -9,11 +9,14 @@ require "dependabot/shared_helpers"
 require "dependabot/errors"
 require "dependabot/go_modules/requirement"
 require "dependabot/go_modules/resolvability_errors"
+require "sorbet-runtime"
 
 module Dependabot
   module GoModules
     class UpdateChecker
       class LatestVersionFinder
+        extend T::Sig
+
         RESOLVABILITY_ERROR_REGEXES = [
           # Package url/proxy doesn't include any redirect meta tags
           /no go-import meta tags/,
@@ -136,10 +139,15 @@ module Dependabot
           end
         end
 
+        sig { params(versions_array: T::Array[Gem::Version]).returns(T::Array[Gem::Version]) }
         def filter_prerelease_versions(versions_array)
           return versions_array if wants_prerelease?
 
-          versions_array.reject(&:prerelease?)
+          filtered = versions_array.reject(&:prerelease?)
+          if versions_array.count > filtered.count
+            Dependabot.logger.info("Filtered out #{versions_array.count - filtered.count} pre-release versions")
+          end
+          filtered
         end
 
         def filter_lower_versions(versions_array)
@@ -149,6 +157,7 @@ module Dependabot
             .select { |version| version > dependency.numeric_version }
         end
 
+        sig { params(versions_array: T::Array[Gem::Version]).returns(T::Array[Gem::Version]) }
         def filter_ignored_versions(versions_array)
           filtered = versions_array
                      .reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
@@ -156,6 +165,10 @@ module Dependabot
             raise AllVersionsIgnored
           end
 
+          if versions_array.count > filtered.count
+            Dependabot.logger.info("Filtered out #{versions_array.count - filtered.count} ignored versions")
+          end
+
           filtered
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.246.0
+  version: 0.247.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-03-01 00:00:00.000000000 Z
+date: 2024-03-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.246.0
+        version: 0.247.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.246.0
+        version: 0.247.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -253,7 +267,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.246.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.247.0
 post_install_message: 
 rdoc_options: []
 require_paths: