dependabot-gradle 0.229.0 → 0.231.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ec10cbaf26ca6ee6e1385f3296e3f84bc8c4497b84beda401b47cc28ce501fc3
-  data.tar.gz: a604d5aa3af2bcb090c689aacb837681deae9312d51cce7fc3c7cac989db2cdf
+  metadata.gz: 47665c602abc02d8d5acba44ae67cd12fff529cb3704feabf5e2f397e05ceeac
+  data.tar.gz: 6a2e3df82e2418f3ea6e44141d406c3a40c84ff43e028d82e58bd595a496f1bd
 SHA512:
-  metadata.gz: 5b09f8ee9c8a474dda7d7d6460a9ea47fe3f8b6f3a05ae976adae82192fcc067e027152794418b273f477aee5b356dad949f60f86e887b8baf3802e591a923a4
-  data.tar.gz: c0362857c065869764c16f9d4c62facc697167d6b4075316897c3f726e5a75c72f972cd89a7bb5de6ceca94de957b50a88893ac7dc0971775589a627617ce406
+  metadata.gz: 1e847fb00397f323673e5fa3fff4afb5c94864ae42acb5dc0bbc2c683faa5f4f37d045e009d0467463236eba15c567fbdd69aa180de4b46ab88f36bd33a8727c
+  data.tar.gz: 6e5024177b1582b4913560fb38de0d0aac5a02f30cfb3d46be3de255f092d1251da6aa45b766a0d0b817c4d2de0f3ca00aae52804160bd4d9ce8d0f26635f6af

data/lib/dependabot/gradle/file_fetcher/settings_file_parser.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/gradle/file_fetcher"
@@ -33,8 +34,8 @@ module Dependabot
 
           subproject_dirs = subprojects.map do |proj|
             if comment_free_content.match?(project_dir_regex(proj))
-              comment_free_content.match(project_dir_regex(proj)).
-                named_captures.fetch("path").sub(%r{^/}, "")
+              comment_free_content.match(project_dir_regex(proj))
+                                  .named_captures.fetch("path").sub(%r{^/}, "")
             else
               proj.tr(":", "/").sub(%r{^/}, "")
             end
@@ -48,9 +49,9 @@ module Dependabot
         attr_reader :settings_file
 
         def comment_free_content
-          settings_file.content.
-            gsub(%r{(?<=^|\s)//.*$}, "\n").
-            gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
+          settings_file.content
+                       .gsub(%r{(?<=^|\s)//.*$}, "\n")
+                       .gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
         end
 
         def function_regex(function_name)

data/lib/dependabot/gradle/file_fetcher.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/file_fetchers"
@@ -41,24 +42,24 @@ module Dependabot
         files = [buildfile(root_dir), settings_file(root_dir), version_catalog_file(root_dir)].compact
         files += subproject_buildfiles(root_dir)
         files += dependency_script_plugins(root_dir)
-        files + included_builds(root_dir).
-                flat_map { |dir| all_buildfiles_in_build(dir) }
+        files + included_builds(root_dir)
+                .flat_map { |dir| all_buildfiles_in_build(dir) }
       end
 
       def included_builds(root_dir)
         builds = []
 
         # buildSrc is implicit: included but not declared in settings.gradle
-        buildsrc = repo_contents(dir: root_dir, raise_errors: false).
-                   find { |item| item.type == "dir" && item.name == "buildSrc" }
+        buildsrc = repo_contents(dir: root_dir, raise_errors: false)
+                   .find { |item| item.type == "dir" && item.name == "buildSrc" }
         builds << clean_join(root_dir, "buildSrc") if buildsrc
 
         return builds unless settings_file(root_dir)
 
-        builds += SettingsFileParser.
-                  new(settings_file: settings_file(root_dir)).
-                  included_build_paths.
-                  map { |p| clean_join(root_dir, p) }
+        builds += SettingsFileParser
+                  .new(settings_file: settings_file(root_dir))
+                  .included_build_paths
+                  .map { |p| clean_join(root_dir, p) }
 
         builds.uniq
       end
@@ -71,9 +72,9 @@ module Dependabot
         return [] unless settings_file(root_dir)
 
         subproject_paths =
-          SettingsFileParser.
-          new(settings_file: settings_file(root_dir)).
-          subproject_paths
+          SettingsFileParser
+          .new(settings_file: settings_file(root_dir))
+          .subproject_paths
 
         subproject_paths.filter_map do |path|
           if @buildfile_name
@@ -98,13 +99,13 @@ module Dependabot
         return [] unless buildfile(root_dir)
 
         dependency_plugin_paths =
-          FileParser.find_include_names(buildfile(root_dir)).
-          reject { |path| path.include?("://") }.
-          reject { |path| !path.include?("/") && path.split(".").count > 2 }.
-          select { |filename| filename.include?("dependencies") }.
-          map { |path| path.gsub("$rootDir", ".") }.
-          map { |path| File.join(root_dir, path) }.
-          uniq
+          FileParser.find_include_names(buildfile(root_dir))
+                    .reject { |path| path.include?("://") }
+                    .reject { |path| !path.include?("/") && path.split(".").count > 2 }
+                    .select { |filename| filename.include?("dependencies") }
+                    .map { |path| path.gsub("$rootDir", ".") }
+                    .map { |path| File.join(root_dir, path) }
+                    .uniq
 
         dependency_plugin_paths.filter_map do |path|
           fetch_file_from_host(path)
@@ -147,9 +148,9 @@ module Dependabot
       end
 
       def find_first(dir, supported_names)
-        paths = supported_names.
-                map { |name| clean_join(dir, name) }.
-                each do |path|
+        paths = supported_names
+                .map { |name| clean_join(dir, name) }
+                .each do |path|
           return cached_files[path] || next
         end
         fetch_first_if_present(paths)

data/lib/dependabot/gradle/file_parser/property_value_finder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/gradle/file_parser"
@@ -111,14 +112,14 @@ module Dependabot
 
           @properties[buildfile.name] = {}
 
-          @properties[buildfile.name].
-            merge!(fetch_single_property_declarations(buildfile))
+          @properties[buildfile.name]
+            .merge!(fetch_single_property_declarations(buildfile))
 
-          @properties[buildfile.name].
-            merge!(fetch_kotlin_block_property_declarations(buildfile))
+          @properties[buildfile.name]
+            .merge!(fetch_kotlin_block_property_declarations(buildfile))
 
-          @properties[buildfile.name].
-            merge!(fetch_multi_property_declarations(buildfile))
+          @properties[buildfile.name]
+            .merge!(fetch_multi_property_declarations(buildfile))
 
           @properties[buildfile.name]
         end
@@ -146,28 +147,28 @@ module Dependabot
         def fetch_kotlin_block_property_declarations(buildfile)
           properties = {}
 
-          prepared_content(buildfile).
-            scan(KOTLIN_BLOCK_PROPERTY_DECLARATION_REGEX) do
+          prepared_content(buildfile)
+            .scan(KOTLIN_BLOCK_PROPERTY_DECLARATION_REGEX) do
               captures = Regexp.last_match.named_captures
               namespace = captures.fetch("namespace")
 
-              captures.fetch("values").
-                scan(KOTLIN_SINGLE_PROPERTY_SET_REGEX) do
-                  declaration_string = Regexp.last_match.to_s.strip
-                  sub_captures = Regexp.last_match.named_captures
-                  name = sub_captures.fetch("name")
-                  full_name = if namespace == "extra"
-                                name
-                              else
-                                [namespace, name].join(".")
-                              end
-
-                  properties[full_name] = {
-                    value: sub_captures.fetch("value"),
-                    declaration_string: declaration_string,
-                    file: buildfile.name
-                  }
-                end
+              captures.fetch("values")
+                      .scan(KOTLIN_SINGLE_PROPERTY_SET_REGEX) do
+                declaration_string = Regexp.last_match.to_s.strip
+                sub_captures = Regexp.last_match.named_captures
+                name = sub_captures.fetch("name")
+                full_name = if namespace == "extra"
+                              name
+                            else
+                              [namespace, name].join(".")
+                            end
+
+                properties[full_name] = {
+                  value: sub_captures.fetch("value"),
+                  declaration_string: declaration_string,
+                  file: buildfile.name
+                }
+              end
             end
 
           properties
@@ -199,9 +200,9 @@ module Dependabot
 
         def prepared_content(buildfile)
           # Remove any comments
-          buildfile.content.
-            gsub(%r{(?<=^|\s)//.*$}, "\n").
-            gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
+          buildfile.content
+                   .gsub(%r{(?<=^|\s)//.*$}, "\n")
+                   .gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
         end
 
         def top_level_buildfile

data/lib/dependabot/gradle/file_parser/repositories_finder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/gradle/file_parser"
@@ -108,10 +109,10 @@ module Dependabot
             end
           end
 
-          repository_urls.
-            map { |url| url.strip.gsub(%r{/$}, "") }.
-            select { |url| valid_url?(url) }.
-            uniq
+          repository_urls
+            .map { |url| url.strip.gsub(%r{/$}, "") }
+            .select { |url| valid_url?(url) }
+            .uniq
         end
 
         def closing_bracket_index(string)
@@ -137,9 +138,9 @@ module Dependabot
         end
 
         def comment_free_content(buildfile)
-          buildfile.content.
-            gsub(%r{(?<=^|\s)//.*$}, "\n").
-            gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
+          buildfile.content
+                   .gsub(%r{(?<=^|\s)//.*$}, "\n")
+                   .gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
         end
 
         def top_level_buildfile

data/lib/dependabot/gradle/file_parser.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "toml-rb"
@@ -57,14 +58,14 @@ module Dependabot
       def self.find_include_names(buildfile)
         return [] unless buildfile
 
-        buildfile.content.
-          scan(/apply(\(| )\s*from(\s+=|:)\s+['"]([^'"]+)['"]/).
-          map { |match| match[2] }
+        buildfile.content
+                 .scan(/apply(\(| )\s*from(\s+=|:)\s+['"]([^'"]+)['"]/)
+                 .map { |match| match[2] }
       end
 
       def self.find_includes(buildfile, dependency_files)
-        FileParser.find_include_names(buildfile).
-          filter_map { |f| dependency_files.find { |bf| bf.name == f } }
+        FileParser.find_include_names(buildfile)
+                  .filter_map { |f| dependency_files.find { |bf| bf.name == f } }
       end
 
       private
@@ -248,10 +249,10 @@ module Dependabot
       end
 
       def argument_from_string(string, arg_name)
-        string.
-          match(map_value_regex(arg_name))&.
-          named_captures&.
-          fetch("value")
+        string
+          .match(map_value_regex(arg_name))
+          &.named_captures
+          &.fetch("value")
       end
 
       def dependency_from(details_hash:, buildfile:, in_dependency_set: false)
@@ -307,9 +308,9 @@ module Dependabot
 
       def dependency_metadata(details_hash, in_dependency_set)
         version_property_name =
-          details_hash[:version].
-          match(PROPERTY_REGEX)&.
-          named_captures&.fetch("property_name")
+          details_hash[:version]
+          .match(PROPERTY_REGEX)
+          &.named_captures&.fetch("property_name")
 
         return unless version_property_name || in_dependency_set
 
@@ -327,8 +328,8 @@ module Dependabot
       def evaluated_value(value, buildfile)
         return value unless value.scan(PROPERTY_REGEX).count == 1
 
-        property_name  = value.match(PROPERTY_REGEX).
-                         named_captures.fetch("property_name")
+        property_name  = value.match(PROPERTY_REGEX)
+                              .named_captures.fetch("property_name")
         property_value = property_value_finder.property_value(
           property_name: property_name,
           callsite_buildfile: buildfile
@@ -347,9 +348,9 @@ module Dependabot
       def prepared_content(buildfile)
         # Remove any comments
         prepared_content =
-          buildfile.content.
-          gsub(%r{(?<=^|\s)//.*$}, "\n").
-          gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
+          buildfile.content
+                   .gsub(%r{(?<=^|\s)//.*$}, "\n")
+                   .gsub(%r{(?<=^|\s)/\*.*?\*/}m, "")
 
         # Remove the dependencyVerification section added by Gradle Witness
         # (TODO: Support updating this in the FileUpdater)
@@ -390,8 +391,8 @@ module Dependabot
         @script_plugin_files ||=
           buildfiles.flat_map do |buildfile|
             FileParser.find_includes(buildfile, dependency_files)
-          end.
-          uniq
+          end
+                    .uniq
       end
 
       def check_required_files

data/lib/dependabot/gradle/file_updater/dependency_set_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/gradle/file_parser"

data/lib/dependabot/gradle/file_updater/property_value_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/gradle/file_updater"
@@ -44,8 +45,8 @@ module Dependabot
 
         def property_value_finder
           @property_value_finder ||=
-            Gradle::FileParser::PropertyValueFinder.
-            new(dependency_files: dependency_files)
+            Gradle::FileParser::PropertyValueFinder
+            .new(dependency_files: dependency_files)
         end
 
         def update_file(file:, content:)

data/lib/dependabot/gradle/file_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/file_updaters"
@@ -54,8 +55,8 @@ module Dependabot
 
         # The UpdateChecker ensures the order of requirements is preserved
         # when updating, so we can zip them together in new/old pairs.
-        reqs = dependency.requirements.zip(dependency.previous_requirements).
-               reject { |new_req, old_req| new_req == old_req }
+        reqs = dependency.requirements.zip(dependency.previous_requirements)
+                         .reject { |new_req, old_req| new_req == old_req }
 
         # Loop through each changed requirement and update the buildfiles
         reqs.each do |new_req, old_req|
@@ -87,13 +88,13 @@ module Dependabot
         property_name = new_req.fetch(:metadata).fetch(:property_name)
         buildfile = files.find { |f| f.name == new_req.fetch(:file) }
 
-        PropertyValueUpdater.new(dependency_files: files).
-          update_files_for_property_change(
-            property_name: property_name,
-            callsite_buildfile: buildfile,
-            previous_value: old_req.fetch(:requirement),
-            updated_value: new_req.fetch(:requirement)
-          )
+        PropertyValueUpdater.new(dependency_files: files)
+                            .update_files_for_property_change(
+                              property_name: property_name,
+                              callsite_buildfile: buildfile,
+                              previous_value: old_req.fetch(:requirement),
+                              updated_value: new_req.fetch(:requirement)
+                            )
       end
 
       def update_files_for_dep_set_change(buildfiles, old_req, new_req)
@@ -101,13 +102,13 @@ module Dependabot
         dependency_set = new_req.fetch(:metadata).fetch(:dependency_set)
         buildfile = files.find { |f| f.name == new_req.fetch(:file) }
 
-        DependencySetUpdater.new(dependency_files: files).
-          update_files_for_dep_set_change(
-            dependency_set: dependency_set,
-            buildfile: buildfile,
-            previous_requirement: old_req.fetch(:requirement),
-            updated_requirement: new_req.fetch(:requirement)
-          )
+        DependencySetUpdater.new(dependency_files: files)
+                            .update_files_for_dep_set_change(
+                              dependency_set: dependency_set,
+                              buildfile: buildfile,
+                              previous_requirement: old_req.fetch(:requirement),
+                              updated_requirement: new_req.fetch(:requirement)
+                            )
       end
 
       def update_version_in_buildfile(dependency, buildfile, previous_req,
@@ -173,8 +174,8 @@ module Dependabot
 
       def property_value_finder
         @property_value_finder ||=
-          Gradle::FileParser::PropertyValueFinder.
-          new(dependency_files: dependency_files)
+          Gradle::FileParser::PropertyValueFinder
+          .new(dependency_files: dependency_files)
       end
 
       def updated_buildfile_declaration(original_buildfile_declaration, previous_req, requirement)

data/lib/dependabot/gradle/metadata_finder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "nokogiri"
@@ -41,9 +42,9 @@ module Dependabot
           FileFetchers::Base.new(source: tmp_source, credentials: credentials)
 
         @repo_has_subdir_for_dep[tmp_source] =
-          fetcher.send(:repo_contents, raise_errors: false).
-          select { |f| f.type == "dir" }.
-          any? { |f| artifact.end_with?(f.name) }
+          fetcher.send(:repo_contents, raise_errors: false)
+                 .select { |f| f.type == "dir" }
+                 .any? { |f| artifact.end_with?(f.name) }
       rescue Dependabot::BranchNotFound
         tmp_source.branch = nil
         retry
@@ -140,8 +141,8 @@ module Dependabot
       end
 
       def maven_repo_url
-        source = dependency.requirements.
-                 find { |r| r&.fetch(:source) }&.fetch(:source)
+        source = dependency.requirements
+                           .find { |r| r&.fetch(:source) }&.fetch(:source)
 
         source&.fetch(:url, nil) ||
           source&.fetch("url") ||
@@ -176,5 +177,5 @@ module Dependabot
   end
 end
 
-Dependabot::MetadataFinders.
-  register("gradle", Dependabot::Gradle::MetadataFinder)
+Dependabot::MetadataFinders
+  .register("gradle", Dependabot::Gradle::MetadataFinder)

data/lib/dependabot/gradle/requirement.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/utils"
@@ -114,5 +115,5 @@ module Dependabot
   end
 end
 
-Dependabot::Utils.
-  register_requirement_class("gradle", Dependabot::Gradle::Requirement)
+Dependabot::Utils
+  .register_requirement_class("gradle", Dependabot::Gradle::Requirement)

data/lib/dependabot/gradle/update_checker/multi_dependency_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/gradle/file_parser"
@@ -34,9 +35,9 @@ module Dependabot
                 ignored_versions: ignored_versions,
                 raise_on_ignored: @raise_on_ignored,
                 security_advisories: []
-              ).versions.
-                map { |v| v.fetch(:version) }.
-                include?(target_version)
+              ).versions
+                           .map { |v| v.fetch(:version) }
+                           .include?(target_version)
             end
         end
 
@@ -78,15 +79,15 @@ module Dependabot
         end
 
         def property_name
-          @property_name ||= dependency.requirements.
-                             find { |r| r.dig(:metadata, :property_name) }&.
-                             dig(:metadata, :property_name)
+          @property_name ||= dependency.requirements
+                                       .find { |r| r.dig(:metadata, :property_name) }
+                             &.dig(:metadata, :property_name)
         end
 
         def dependency_set
-          @dependency_set ||= dependency.requirements.
-                              find { |r| r.dig(:metadata, :dependency_set) }&.
-                              dig(:metadata, :dependency_set)
+          @dependency_set ||= dependency.requirements
+                                        .find { |r| r.dig(:metadata, :dependency_set) }
+                              &.dig(:metadata, :dependency_set)
         end
 
         def updated_requirements(dep)

data/lib/dependabot/gradle/update_checker/requirements_updater.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 #######################################################
@@ -56,16 +57,16 @@ module Dependabot
         end
 
         def update_exact_requirement(req_string)
-          old_version = requirement_class.new(req_string).
-                        requirements.first.last
+          old_version = requirement_class.new(req_string)
+                                         .requirements.first.last
           req_string.gsub(old_version.to_s, latest_version.to_s)
         end
 
         def update_dynamic_requirement(req_string)
           version = req_string.split(/\.?\+/).first || "+"
 
-          precision = version.split(".").
-                      take_while { |s| !s.include?("+") }.count
+          precision = version.split(".")
+                             .take_while { |s| !s.include?("+") }.count
 
           version_parts = latest_version.segments.first(precision)
 

data/lib/dependabot/gradle/update_checker/version_finder.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "nokogiri"
@@ -59,10 +60,10 @@ module Dependabot
               url = repository_details.fetch("url")
               next google_version_details if url == Gradle::FileParser::RepositoriesFinder::GOOGLE_MAVEN_REPO
 
-              dependency_metadata(repository_details).css("versions > version").
-                select { |node| version_class.correct?(node.content) }.
-                map { |node| version_class.new(node.content) }.
-                map { |version| { version: version, source_url: url } }
+              dependency_metadata(repository_details).css("versions > version")
+                                                     .select { |node| version_class.correct?(node.content) }
+                                                     .map { |node| version_class.new(node.content) }
+                                                     .map { |version| { version: version, source_url: url } }
             end.flatten.compact
 
           raise PrivateSourceAuthenticationFailure, forbidden_urls.first if version_details.none? && forbidden_urls.any?
@@ -84,13 +85,13 @@ module Dependabot
         def filter_date_based_versions(possible_versions)
           return possible_versions if wants_date_based_version?
 
-          possible_versions.
-            reject { |v| v.fetch(:version) > version_class.new(1900) }
+          possible_versions
+            .reject { |v| v.fetch(:version) > version_class.new(1900) }
         end
 
         def filter_version_types(possible_versions)
-          possible_versions.
-            select { |v| matches_dependency_version_type?(v.fetch(:version)) }
+          possible_versions
+            .select { |v| matches_dependency_version_type?(v.fetch(:version)) }
         end
 
         def filter_ignored_versions(possible_versions)
@@ -99,8 +100,8 @@ module Dependabot
           ignored_versions.each do |req|
             ignore_requirements = Gradle::Requirement.requirements_array(req)
             filtered =
-              filtered.
-              reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v.fetch(:version)) } }
+              filtered
+              .reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v.fetch(:version)) } }
           end
 
           if @raise_on_ignored && filter_lower_versions(filtered).empty? &&
@@ -148,12 +149,12 @@ module Dependabot
           xpath = "/#{group_id}/#{artifact_id}"
           return unless @google_version_details.at_xpath(xpath)
 
-          @google_version_details.at_xpath(xpath).
-            attributes.fetch("versions").
-            value.split(",").
-            select { |v| version_class.correct?(v) }.
-            map { |v| version_class.new(v) }.
-            map { |version| { version: version, source_url: url } }
+          @google_version_details.at_xpath(xpath)
+                                 .attributes.fetch("versions")
+                                 .value.split(",")
+                                 .select { |v| version_class.correct?(v) }
+                                 .map { |v| version_class.new(v) }
+                                 .map { |version| { version: version, source_url: url } }
         rescue Nokogiri::XML::XPath::SyntaxError
           nil
         end
@@ -211,9 +212,9 @@ module Dependabot
         end
 
         def credentials_repository_details
-          credentials.
-            select { |cred| cred["type"] == "maven_repository" }.
-            map do |cred|
+          credentials
+            .select { |cred| cred["type"] == "maven_repository" }
+            .map do |cred|
             {
               "url" => cred.fetch("url").gsub(%r{/+$}, ""),
               "auth_headers" => auth_headers(cred.fetch("url").gsub(%r{/+$}, ""))
@@ -223,19 +224,19 @@ module Dependabot
 
         def dependency_repository_details
           requirement_files =
-            dependency.requirements.
-            map { |r| r.fetch(:file) }.
-            map { |nm| dependency_files.find { |f| f.name == nm } }
+            dependency.requirements
+                      .map { |r| r.fetch(:file) }
+                      .map { |nm| dependency_files.find { |f| f.name == nm } }
 
           @dependency_repository_details ||=
             requirement_files.flat_map do |target_file|
               Gradle::FileParser::RepositoriesFinder.new(
                 dependency_files: dependency_files,
                 target_dependency_file: target_file
-              ).repository_urls.
-                map do |url|
-                  { "url" => url, "auth_headers" => {} }
-                end
+              ).repository_urls
+                                                    .map do |url|
+                { "url" => url, "auth_headers" => {} }
+              end
             end.uniq
         end
 
@@ -249,19 +250,19 @@ module Dependabot
         def matches_dependency_version_type?(comparison_version)
           return true unless dependency.version
 
-          current_type = dependency.version.
-                         gsub("native-mt", "native_mt").
-                         split(/[.\-]/).
-                         find do |type|
-                           TYPE_SUFFICES.find { |s| type.include?(s) }
-                         end
+          current_type = dependency.version
+                                   .gsub("native-mt", "native_mt")
+                                   .split(/[.\-]/)
+                                   .find do |type|
+            TYPE_SUFFICES.find { |s| type.include?(s) }
+          end
 
-          version_type = comparison_version.to_s.
-                         gsub("native-mt", "native_mt").
-                         split(/[.\-]/).
-                         find do |type|
-                           TYPE_SUFFICES.find { |s| type.include?(s) }
-                         end
+          version_type = comparison_version.to_s
+                                           .gsub("native-mt", "native_mt")
+                                           .split(/[.\-]/)
+                                           .find do |type|
+            TYPE_SUFFICES.find { |s| type.include?(s) }
+          end
 
           current_type == version_type
         end
@@ -301,8 +302,8 @@ module Dependabot
 
         def central_repo_urls
           central_url_without_protocol =
-            Gradle::FileParser::RepositoriesFinder::CENTRAL_REPO_URL.
-            gsub(%r{^.*://}, "")
+            Gradle::FileParser::RepositoriesFinder::CENTRAL_REPO_URL
+            .gsub(%r{^.*://}, "")
 
           %w(http:// https://).map { |p| p + central_url_without_protocol }
         end

data/lib/dependabot/gradle/update_checker.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/update_checkers"
@@ -55,8 +56,8 @@ module Dependabot
 
       def updated_requirements
         property_names =
-          declarations_using_a_property.
-          map { |req| req.dig(:metadata, :property_name) }
+          declarations_using_a_property
+          .map { |req| req.dig(:metadata, :property_name) }
 
         RequirementsUpdater.new(
           requirements: dependency.requirements,
@@ -172,8 +173,8 @@ module Dependabot
 
       def declarations_using_a_property
         @declarations_using_a_property ||=
-          dependency.requirements.
-          select { |req| req.dig(:metadata, :property_name) }
+          dependency.requirements
+                    .select { |req| req.dig(:metadata, :property_name) }
       end
 
       def all_property_based_dependencies

data/lib/dependabot/gradle/version.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/version"
@@ -153,6 +154,10 @@ module Dependabot
       end
 
       def compare_prefixed_token(prefix:, token:, other_prefix:, other_token:)
+        return 1 if token == "+" && other_token != "+"
+        return -1 if other_token == "+" && token != "+"
+        return 0 if token == "+" && other_token == "+"
+
         token_type = token.match?(/^\d+$/) ? :number : :qualifier
         other_token_type = other_token.match?(/^\d+$/) ? :number : :qualifier
 

data/lib/dependabot/gradle.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 # These all need to be required so the various classes can be registered in a
@@ -11,14 +12,14 @@ require "dependabot/gradle/requirement"
 require "dependabot/gradle/version"
 
 require "dependabot/pull_request_creator/labeler"
-Dependabot::PullRequestCreator::Labeler.
-  register_label_details("gradle", name: "java", colour: "ffa221")
+Dependabot::PullRequestCreator::Labeler
+  .register_label_details("gradle", name: "java", colour: "ffa221")
 
 require "dependabot/dependency"
 Dependabot::Dependency.register_production_check("gradle", ->(_) { true })
 
-Dependabot::Dependency.
-  register_display_name_builder(
+Dependabot::Dependency
+  .register_display_name_builder(
     "gradle",
     lambda { |name|
       artifact_id = name.split(":").last

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-gradle
 version: !ruby/object:Gem::Version
-  version: 0.229.0
+  version: 0.231.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-08-30 00:00:00.000000000 Z
+date: 2023-09-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.229.0
+        version: 0.231.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.229.0
+        version: 0.231.0
 - !ruby/object:Gem::Dependency
   name: dependabot-maven
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.229.0
+        version: 0.231.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.229.0
+        version: 0.231.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -150,6 +150,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -221,7 +235,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.229.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.231.0
 post_install_message: 
 rdoc_options: []
 require_paths: