dependabot-go_modules 0.392.0 → 0.393.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/go.mod +1 -1
  3. data/helpers/go.sum +2 -2
  4. data/lib/dependabot/go_modules/update_checker.rb +3 -3
  5. data/lib/dependabot/go_modules/version.rb +6 -3
  6. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b469b9cc4958ca941af2b3a56d3c862f6ef6c4f441cdc44a427f4736164c0ec3
4
- data.tar.gz: bee61985bb3cae16ad15499fb3134c15baa7c325d70fb70ae8a86b184d055a0e
3
+ metadata.gz: 555802f73e144b78c43db55be55ad6231ac5d9f0c0985cf89906605263e01471
4
+ data.tar.gz: 427b58ab6bbedca3ca5195bb7bb4050b06975941a45d77749a735067447a7788
5
5
  SHA512:
6
- metadata.gz: a89f12262f4a1f9a1c4250a6fc00e50334ce28fcf2c6605a6aa939b4927d7703246be9e805ecc71292f2d186d2f32eaf4f32e6efe031e5a8c553bf1889a12060
7
- data.tar.gz: 3abf10e2ffb1d9fe6282d0136ffb4bb1165eb5204282c5be00dc59fc70df000d4d5d9bb71b6072dc8c4d1f1ac3eddebb04c7bf0888d544d04f0b654829b52d81
6
+ metadata.gz: be87c092842025cf4ff4e71beabab84cdb72faf384cce8b5997d699fc5daaa0b6409ee0d3046826d4270523be54deffb735dc01a6479c126b2cd3e6a357c7f56
7
+ data.tar.gz: d254db8c9a45bf0a4a2f4245fdfe30ff1050f7ba22717407cbc4d8309bd1af9dfb8e84452b9731718449efcd3239ad1a11cebe33022f5b7d1b37f67b3b7a3175
data/helpers/go.mod CHANGED
@@ -4,5 +4,5 @@ go 1.26.0
4
4
 
5
5
  require (
6
6
  github.com/Masterminds/vcs v1.13.3
7
- golang.org/x/mod v0.39.0
7
+ golang.org/x/mod v0.40.0
8
8
  )
data/helpers/go.sum CHANGED
@@ -1,4 +1,4 @@
1
1
  github.com/Masterminds/vcs v1.13.3 h1:IIA2aBdXvfbIM+yl/eTnL4hb1XwdpvuQLglAix1gweE=
2
2
  github.com/Masterminds/vcs v1.13.3/go.mod h1:TiE7xuEjl1N4j016moRd6vezp6e6Lz23gypeXfzXeW8=
3
- golang.org/x/mod v0.39.0 h1:UF5zwQdCRRUpHfyPwr7d4UrGiVeldIsogtzWVnczL74=
4
- golang.org/x/mod v0.39.0/go.mod h1:bvIbwjQ0HUFFf5AKukeeYQG4ZBUG9yxQbR9aEweIwYY=
3
+ golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs=
4
+ golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE=
data/lib/dependabot/go_modules/update_checker.rb CHANGED
@@ -90,13 +90,13 @@ module Dependabot
90
90
  false
91
91
  end
92
92
 
93
- sig { params(tag: T.nilable(T::Hash[Symbol, String])).returns(T.nilable(String)) }
93
+ sig { params(tag: T.nilable(Dependabot::GitTagDetails)).returns(T.nilable(String)) }
94
94
  def version_from_tag(tag)
95
95
  # To compare with the current version we either use the commit SHA
96
96
  # (if that's what the parser picked up) or the tag name.
97
- return tag&.fetch(:commit_sha) if dependency.version&.match?(/^[0-9a-f]{40}$/)
97
+ return tag&.commit_sha if dependency.version&.match?(/^[0-9a-f]{40}$/)
98
98
 
99
- tag&.fetch(:tag)
99
+ tag&.tag
100
100
  end
101
101
 
102
102
  sig { returns(T::Hash[Symbol, String]) }
data/lib/dependabot/go_modules/version.rb CHANGED
@@ -1,4 +1,4 @@
1
- # typed: strict
1
+ # typed: strong
2
2
  # frozen_string_literal: true
3
3
 
4
4
  # Go pre-release versions use 1.0.1-rc1 syntax, which Gem::Version
@@ -72,8 +72,11 @@ module Dependabot
72
72
  return if result.nil?
73
73
  return result unless result.zero?
74
74
 
75
- other = self.class.new(other.to_s) unless other.is_a?(Version)
76
- compare_prerelease(@prerelease_suffix || "", T.unsafe(other).prerelease_suffix || "")
75
+ other_version = T.cast(
76
+ other.is_a?(Dependabot::GoModules::Version) ? other : self.class.new(other.to_s),
77
+ Dependabot::GoModules::Version
78
+ )
79
+ compare_prerelease(@prerelease_suffix || "", other_version.prerelease_suffix || "")
77
80
  end
78
81
 
79
82
  protected
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-go_modules
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.392.0
4
+ version: 0.393.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.392.0
18
+ version: 0.393.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.392.0
25
+ version: 0.393.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -275,7 +275,7 @@ licenses:
275
275
  - MIT
276
276
  metadata:
277
277
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
278
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
278
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
279
279
  rdoc_options: []
280
280
  require_paths:
281
281
  - lib