dependabot-gradle 0.239.0 → 0.241.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 63e8e39c8268a8230fc199170e110a9cf3c2091e412a325decf124c1eff0621e
-  data.tar.gz: b8f7c1f2257af45a1948528cc979fdab820b68ac75ed053d62da29a13ba6427a
+  metadata.gz: a38e4914e2e31d21c059dbb70e0d2e780d6729c669fd344f4c9ed2670ca1f39b
+  data.tar.gz: fe455d63441700f7c4ca9548a62d108aff64dcf1ddd445ad7e98816e492ff00d
 SHA512:
-  metadata.gz: 16792e65936029689adafa0896e7da514fde1baa1f992b4521ea56025a24790e479b1ea1eb2afaf5412c5fcf4489598f32acebe6c4ea09f075baa9180497bb72
-  data.tar.gz: 414264783e8bd7185b9a8f1b144e24845601a1d6d5b3b6f9dc6817b4081a0b656f45249812d54b1ed55eadc52d101a6cea2979974c4a6ae8b9cecc7890fa750d
+  metadata.gz: 4c2288bf7bdc933c3a6d439b088b63100a277020b956a9c83baf1bca6752efa75dd53b91b9472ba2dda2f25c353a98415d1c617ef049bef708ee20a76978c628
+  data.tar.gz: 1d1f9a103b0609a09195205378675946ce30a7ba854fe73304282686c08a4173107559cb451d71a5edba118e24e09f9b4a49bead90ed0ffc344867306b0a35d9

data/lib/dependabot/gradle/file_fetcher.rb

@@ -26,7 +26,7 @@ module Dependabot
 
       def self.required_files_in?(filenames)
         filenames.any? do |filename|
-          SUPPORTED_BUILD_FILE_NAMES.include?(filename)
+          SUPPORTED_BUILD_FILE_NAMES.any? { |supported| filename.end_with?(supported) }
         end
       end
 
@@ -36,9 +36,7 @@ module Dependabot
 
       sig { override.returns(T::Array[DependencyFile]) }
       def fetch_files
-        files = all_buildfiles_in_build(".")
-        check_required_files_present(files)
-        files
+        all_buildfiles_in_build(".")
       end
 
       private
@@ -123,14 +121,6 @@ module Dependabot
       end
       # rubocop:enable Metrics/PerceivedComplexity
 
-      def check_required_files_present(files)
-        return if files.any?
-
-        path = clean_join(directory, "build.gradle")
-        path += "(.kts)?"
-        raise Dependabot::DependencyFileNotFound, path
-      end
-
       def file_exists_in_submodule?(path)
         fetch_file_from_host(path, fetch_submodules: true)
         true

data/lib/dependabot/gradle/metadata_finder.rb

@@ -47,7 +47,7 @@ module Dependabot
         @repo_has_subdir_for_dep[tmp_source] =
           fetcher.send(:repo_contents, raise_errors: false)
                  .select { |f| f.type == "dir" }
-                 .any? { |f| artifact.end_with?(f.name) }
+                 .any? { |f| artifact&.end_with?(f.name) }
       rescue Dependabot::BranchNotFound
         tmp_source.branch = nil
         retry
@@ -101,7 +101,7 @@ module Dependabot
 
         github_urls.find do |url|
           repo = T.must(Source.from_url(url)).repo
-          repo.end_with?(dependency.name.split(":").last)
+          repo.end_with?(T.must(dependency.name.split(":").last))
         end
       end
 
@@ -145,7 +145,7 @@ module Dependabot
 
       def maven_repo_url
         source = dependency.requirements
-                           .find { |r| r&.fetch(:source) }&.fetch(:source)
+                           .find { |r| r.fetch(:source) }&.fetch(:source)
 
         source&.fetch(:url, nil) ||
           source&.fetch("url") ||
@@ -162,7 +162,7 @@ module Dependabot
             dependency.name.split(":")
           end
 
-        "#{maven_repo_url}/#{group_id.tr('.', '/')}/#{artifact_id}"
+        "#{maven_repo_url}/#{group_id&.tr('.', '/')}/#{artifact_id}"
       end
 
       def plugin?

data/lib/dependabot/gradle/requirement.rb

@@ -27,7 +27,7 @@ module Dependabot
 
         return DefaultRequirement if matches[1] == ">=" && matches[2] == "0"
 
-        [matches[1] || "=", Gradle::Version.new(matches[2])]
+        [matches[1] || "=", Gradle::Version.new(T.must(matches[2]))]
       end
 
       sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-gradle
 version: !ruby/object:Gem::Version
-  version: 0.239.0
+  version: 0.241.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-28 00:00:00.000000000 Z
+date: 2024-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
 - !ruby/object:Gem::Dependency
   name: dependabot-maven
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -220,6 +220,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Gradle provides support for bumping Gradle packages via Dependabot.
   If you want support for multiple package managers, you probably want the meta-gem
   dependabot-omnibus.
@@ -249,7 +263,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.241.0
 post_install_message: 
 rdoc_options: []
 require_paths: