dependabot-gradle 0.236.0 → 0.237.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/gradle/file_fetcher.rb +7 -2
  3. data/lib/dependabot/gradle/metadata_finder.rb +5 -2
  4. metadata +23 -9
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: be59ab42a4118ef71b198db0499ec33a0d45196013b1d09ade6f8e83ddb3e3b0
4
- data.tar.gz: 52c0288c9678a0d79e67669a94842bb3f1cb78d530060c0500d0cf9a6db253d7
3
+ metadata.gz: 985d1b809eb50f71ddc79529a1f5350bfbf52f4a754b5cf8686dcf8fe4bfed91
4
+ data.tar.gz: 31d0b2d659e74b7b8e23bfaa35b700e0e55a84b120e958bab5a3f7bdce15798d
5
5
  SHA512:
6
- metadata.gz: ad73291e552817ddb59f4b2f9e98f4c607834dde8f029c0b56ce8c014ef84d6ab672d2fa7c33504b43faae72090d5d514757fb766e5ad349df345150d0bc2f2f
7
- data.tar.gz: d2ba0530b4abdc8510b148cbe9b8347e03e53535ebfe2ba8da5ed2c8fb3100db07060dab6401f42de4f813b8f99bc99f15e2c7c5423c86b5f232e875c7846654
6
+ metadata.gz: d9126ce6ba683381892767b20315e40a3151727d08b6bc43abe5c21298bbdf7ac30228792232e3f2eccb40406849f62a23f3c422c02d48a4141c71d91ff35c19
7
+ data.tar.gz: a7a4f77c2231d1bf8b74734a63c72796edaea09310784ae2c77c7ac9f7aced0d4c335ee111ba0b9ba21d0990d8796dc250fcba6c67f29e3c7e639a5a1c4f3dee
data/lib/dependabot/gradle/file_fetcher.rb CHANGED
@@ -1,12 +1,16 @@
1
1
  # typed: false
2
2
  # frozen_string_literal: true
3
3
 
4
+ require "sorbet-runtime"
4
5
  require "dependabot/file_fetchers"
5
6
  require "dependabot/file_fetchers/base"
6
7
 
7
8
  module Dependabot
8
9
  module Gradle
9
10
  class FileFetcher < Dependabot::FileFetchers::Base
11
+ extend T::Sig
12
+ extend T::Helpers
13
+
10
14
  require_relative "file_parser"
11
15
  require_relative "file_fetcher/settings_file_parser"
12
16
 
@@ -30,14 +34,15 @@ module Dependabot
30
34
  "Repo must contain a build.gradle / build.gradle.kts file."
31
35
  end
32
36
 
33
- private
34
-
37
+ sig { override.returns(T::Array[DependencyFile]) }
35
38
  def fetch_files
36
39
  files = all_buildfiles_in_build(".")
37
40
  check_required_files_present(files)
38
41
  files
39
42
  end
40
43
 
44
+ private
45
+
41
46
  def all_buildfiles_in_build(root_dir)
42
47
  files = [buildfile(root_dir), settings_file(root_dir), version_catalog_file(root_dir)].compact
43
48
  files += subproject_buildfiles(root_dir)
data/lib/dependabot/gradle/metadata_finder.rb CHANGED
@@ -2,6 +2,7 @@
2
2
  # frozen_string_literal: true
3
3
 
4
4
  require "nokogiri"
5
+ require "sorbet-runtime"
5
6
  require "dependabot/metadata_finders"
6
7
  require "dependabot/metadata_finders/base"
7
8
  require "dependabot/file_fetchers/base"
@@ -12,6 +13,8 @@ require "dependabot/registry_client"
12
13
  module Dependabot
13
14
  module Gradle
14
15
  class MetadataFinder < Dependabot::MetadataFinders::Base
16
+ extend T::Sig
17
+
15
18
  DOT_SEPARATOR_REGEX = %r{\.(?!\d+([.\/_\-]|$)+)}
16
19
  PROPERTY_REGEX = /\$\{(?<property>.*?)\}/
17
20
  KOTLIN_PLUGIN_REPO_PREFIX = "org.jetbrains.kotlin"
@@ -39,7 +42,7 @@ module Dependabot
39
42
 
40
43
  artifact = dependency.name.split(":").last
41
44
  fetcher =
42
- FileFetchers::Base.new(source: tmp_source, credentials: credentials)
45
+ Dependabot::Gradle::FileFetcher.new(source: tmp_source, credentials: credentials)
43
46
 
44
47
  @repo_has_subdir_for_dep[tmp_source] =
45
48
  fetcher.send(:repo_contents, raise_errors: false)
@@ -97,7 +100,7 @@ module Dependabot
97
100
  end
98
101
 
99
102
  github_urls.find do |url|
100
- repo = Source.from_url(url).repo
103
+ repo = T.must(Source.from_url(url)).repo
101
104
  repo.end_with?(dependency.name.split(":").last)
102
105
  end
103
106
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-gradle
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.236.0
4
+ version: 0.237.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-10-26 00:00:00.000000000 Z
11
+ date: 2023-11-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.236.0
19
+ version: 0.237.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.236.0
26
+ version: 0.237.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: dependabot-maven
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 0.236.0
33
+ version: 0.237.0
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: 0.236.0
40
+ version: 0.237.0
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: debug
43
43
  requirement: !ruby/object:Gem::Requirement
@@ -108,20 +108,34 @@ dependencies:
108
108
  - - "~>"
109
109
  - !ruby/object:Gem::Version
110
110
  version: '1.3'
111
+ - !ruby/object:Gem::Dependency
112
+ name: rspec-sorbet
113
+ requirement: !ruby/object:Gem::Requirement
114
+ requirements:
115
+ - - "~>"
116
+ - !ruby/object:Gem::Version
117
+ version: 1.9.2
118
+ type: :development
119
+ prerelease: false
120
+ version_requirements: !ruby/object:Gem::Requirement
121
+ requirements:
122
+ - - "~>"
123
+ - !ruby/object:Gem::Version
124
+ version: 1.9.2
111
125
  - !ruby/object:Gem::Dependency
112
126
  name: rubocop
113
127
  requirement: !ruby/object:Gem::Requirement
114
128
  requirements:
115
129
  - - "~>"
116
130
  - !ruby/object:Gem::Version
117
- version: 1.56.0
131
+ version: 1.57.2
118
132
  type: :development
119
133
  prerelease: false
120
134
  version_requirements: !ruby/object:Gem::Requirement
121
135
  requirements:
122
136
  - - "~>"
123
137
  - !ruby/object:Gem::Version
124
- version: 1.56.0
138
+ version: 1.57.2
125
139
  - !ruby/object:Gem::Dependency
126
140
  name: rubocop-performance
127
141
  requirement: !ruby/object:Gem::Requirement
@@ -235,7 +249,7 @@ licenses:
235
249
  - Nonstandard
236
250
  metadata:
237
251
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
238
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.236.0
252
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
239
253
  post_install_message:
240
254
  rdoc_options: []
241
255
  require_paths: