RubyGems - dependabot-gradle - Versions diffs - 0.334.0 → 0.335.0 - Mend

dependabot-gradle 0.334.0 → 0.335.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (12) hide show

checksums.yaml +4 -4
data/lib/dependabot/gradle/file_fetcher.rb +20 -12
data/lib/dependabot/gradle/file_parser.rb +21 -11
data/lib/dependabot/gradle/file_updater/dependency_set_updater.rb +6 -4
data/lib/dependabot/gradle/file_updater/property_value_updater.rb +12 -8
data/lib/dependabot/gradle/file_updater.rb +6 -2
data/lib/dependabot/gradle/package/package_details_fetcher.rb +4 -2
data/lib/dependabot/gradle/update_checker/multi_dependency_updater.rb +8 -3
data/lib/dependabot/gradle/update_checker/requirements_updater.rb +6 -2
data/lib/dependabot/gradle/update_checker/version_finder.rb +35 -17
data/lib/dependabot/gradle/version.rb +20 -14
metadata +14 -14

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ffdf7c068ec935c5bd554067e92ed7efaa498a1e8d097107495246c99437b627
-  data.tar.gz: 99736409d4304738f2f67193128abb7dda0ae7fc057b6adad23ca01cb30c2828
+  metadata.gz: 3e5db2f80726e1896f83ad3a9099e569064076753a55803ca0c2e90a7f0ce0ea
+  data.tar.gz: c0adb86d9832452722f650f3386a5d98c11c8a2e8d95e2edc77cac9173419d9e
 SHA512:
-  metadata.gz: 54fb4fe73c14100e872a1ba552c5ffd42189e6ed9fb4c347d04141171cd34dce9a0d2b1cc48abaed616df569a4c20d79cae1ce4b1ea152933b46712fa958cf0c
-  data.tar.gz: bafe43926c62b0e2331f916a1b7149d30d92b79f57c3a6fe3dceb7d6bdaa9da02a3533fa49bc589e6551a3d21e341f17b446512d35929a2906936627428cdad9
+  metadata.gz: 817b0b2f6c34c2c49da76d1e395ecb4ee57647ba0e8ad0c7e50df9388a296d735104492f562de13975098da31930616ae6936d88a41bd7c651b12b5b5a5c7d13
+  data.tar.gz: 15853ff156b8f21b7d62870c5019a7f1a3fb50befe79210fbff1f72008f3022c3c64f1ed445a4c873eb90527151b96bcd3956704875c62292466f27117b46eae

data/lib/dependabot/gradle/file_fetcher.rb CHANGED Viewed

@@ -120,9 +120,11 @@ module Dependabot
           lockfile_path = File.join(root_dir, path, @lockfile_name)
           # Skip excluded subproject lockfiles
-          next nil if Dependabot::FileFiltering.should_exclude_path?(lockfile_path,
-                                                                     "subproject lockfile in subproject '#{path}'",
-                                                                     @exclude_paths)
+          next nil if Dependabot::FileFiltering.should_exclude_path?(
+            lockfile_path,
+            "subproject lockfile in subproject '#{path}'",
+            @exclude_paths
+          )
           fetch_file_from_host(lockfile_path)
         rescue Dependabot::DependencyFileNotFound
@@ -145,18 +147,22 @@ module Dependabot
             buildfile_path = File.join(root_dir, path, @buildfile_name)
             # Skip excluded subproject buildfiles
-            next nil if Dependabot::FileFiltering.should_exclude_path?(buildfile_path,
-                                                                       "subproject buildfile in subproject '#{path}'",
-                                                                       @exclude_paths)
+            next nil if Dependabot::FileFiltering.should_exclude_path?(
+              buildfile_path,
+              "subproject buildfile in subproject '#{path}'",
+              @exclude_paths
+            )
             fetch_file_from_host(buildfile_path)
           else
             subproject_dir = File.join(root_dir, path)
             # Skip excluded subproject directories
-            next nil if Dependabot::FileFiltering.should_exclude_path?(subproject_dir,
-                                                                       "subproject directory for subproject '#{path}'",
-                                                                       @exclude_paths)
+            next nil if Dependabot::FileFiltering.should_exclude_path?(
+              subproject_dir,
+              "subproject directory for subproject '#{path}'",
+              @exclude_paths
+            )
             buildfile(subproject_dir)
           end
@@ -189,9 +195,11 @@ module Dependabot
         dependency_plugin_paths.filter_map do |path|
           # Skip excluded dependency script plugins
-          next nil if Dependabot::FileFiltering.should_exclude_path?(path,
-                                                                     "dependency script plugin",
-                                                                     @exclude_paths)
+          next nil if Dependabot::FileFiltering.should_exclude_path?(
+            path,
+            "dependency script plugin",
+            @exclude_paths
+          )
           fetch_file_from_host(path)
         rescue Dependabot::DependencyFileNotFound

data/lib/dependabot/gradle/file_parser.rb CHANGED Viewed

@@ -27,8 +27,10 @@ module Dependabot
       require "dependabot/file_parsers/base/dependency_set"
       require_relative "file_parser/property_value_finder"
-      SUPPORTED_BUILD_FILE_NAMES = T.let(%w(build.gradle build.gradle.kts settings.gradle settings.gradle.kts).freeze,
-                                         T::Array[String])
+      SUPPORTED_BUILD_FILE_NAMES = T.let(
+        %w(build.gradle build.gradle.kts settings.gradle settings.gradle.kts).freeze,
+        T::Array[String]
+      )
       PROPERTY_REGEX = T.let(
         /
@@ -109,9 +111,12 @@ module Dependabot
       sig { returns(T.nilable(Ecosystem::VersionManager)) }
       def language
-        @language ||= T.let(begin
-          Language.new("NOT-AVAILABLE")
-        end, T.nilable(Dependabot::Gradle::Language))
+        @language ||= T.let(
+          begin
+            Language.new("NOT-AVAILABLE")
+          end,
+          T.nilable(Dependabot::Gradle::Language)
+        )
       end
       sig { params(toml_file: Dependabot::DependencyFile).returns(DependencySet) }
@@ -460,10 +465,13 @@ module Dependabot
         metadata = T.let({}, T::Hash[Symbol, T.any(String, T::Hash[Symbol, String])])
         metadata[:property_name] = version_property_name if version_property_name
         if in_dependency_set
-          metadata[:dependency_set] = T.let({
-            group: details_hash[:group],
-            version: details_hash[:version]
-          }, T::Hash[Symbol, String])
+          metadata[:dependency_set] = T.let(
+            {
+              group: details_hash[:group],
+              version: details_hash[:version]
+            },
+            T::Hash[Symbol, String]
+          )
         end
         metadata
       end
@@ -472,8 +480,10 @@ module Dependabot
       def evaluated_value(value, buildfile)
         return value unless value&.scan(PROPERTY_REGEX)&.one?
-        property_name  = T.must(T.must(value).match(PROPERTY_REGEX)
-                          &.named_captures&.fetch("property_name"))
+        property_name = T.must(
+          T.must(value).match(PROPERTY_REGEX)
+                                    &.named_captures&.fetch("property_name")
+        )
         property_value = property_value_finder.property_value(
           property_name: property_name,
           callsite_buildfile: buildfile

data/lib/dependabot/gradle/file_updater/dependency_set_updater.rb CHANGED Viewed

@@ -25,10 +25,12 @@ module Dependabot
             updated_requirement: String
           ).returns(T::Array[Dependabot::DependencyFile])
         end
-        def update_files_for_dep_set_change(dependency_set:,
-                                            buildfile:,
-                                            previous_requirement:,
-                                            updated_requirement:)
+        def update_files_for_dep_set_change(
+          dependency_set:,
+          buildfile:,
+          previous_requirement:,
+          updated_requirement:
+        )
           declaration_string =
             original_declaration_string(dependency_set, buildfile)

data/lib/dependabot/gradle/file_updater/property_value_updater.rb CHANGED Viewed

@@ -27,14 +27,18 @@ module Dependabot
           )
             .returns(T::Array[DependencyFile])
         end
-        def update_files_for_property_change(property_name:,
-                                             callsite_buildfile:,
-                                             previous_value:,
-                                             updated_value:)
-          declaration_details = T.must(property_value_finder.property_details(
-                                         property_name: property_name,
-                                         callsite_buildfile: callsite_buildfile
-                                       ))
+        def update_files_for_property_change(
+          property_name:,
+          callsite_buildfile:,
+          previous_value:,
+          updated_value:
+        )
+          declaration_details = T.must(
+            property_value_finder.property_details(
+              property_name: property_name,
+              callsite_buildfile: callsite_buildfile
+            )
+          )
           declaration_string = declaration_details.fetch(:declaration_string)
           filename = declaration_details.fetch(:file)

data/lib/dependabot/gradle/file_updater.rb CHANGED Viewed

@@ -184,8 +184,12 @@ module Dependabot
         )
           .returns(Dependabot::DependencyFile)
       end
-      def update_version_in_buildfile(dependency, buildfile, previous_req,
-                                      requirement)
+      def update_version_in_buildfile(
+        dependency,
+        buildfile,
+        previous_req,
+        requirement
+      )
         original_content = T.must(buildfile.content.dup)
         updated_content =

data/lib/dependabot/gradle/package/package_details_fetcher.rb CHANGED Viewed

@@ -352,8 +352,10 @@ module Dependabot
         sig { returns(Dependabot::Maven::Utils::AuthHeadersFinder) }
         def auth_headers_finder
-          @auth_headers_finder ||= T.let(Dependabot::Maven::Utils::AuthHeadersFinder.new(credentials),
-                                         T.nilable(Dependabot::Maven::Utils::AuthHeadersFinder))
+          @auth_headers_finder ||= T.let(
+            Dependabot::Maven::Utils::AuthHeadersFinder.new(credentials),
+            T.nilable(Dependabot::Maven::Utils::AuthHeadersFinder)
+          )
         end
         sig { params(maven_repo_url: String).returns(T::Hash[String, String]) }

data/lib/dependabot/gradle/update_checker/multi_dependency_updater.rb CHANGED Viewed

@@ -25,9 +25,14 @@ module Dependabot
             raise_on_ignored: T::Boolean
           ).void
         end
-        def initialize(dependency:, dependency_files:, credentials:,
-                       target_version_details:, ignored_versions:,
-                       raise_on_ignored: false)
+        def initialize(
+          dependency:,
+          dependency_files:,
+          credentials:,
+          target_version_details:,
+          ignored_versions:,
+          raise_on_ignored: false
+        )
           @dependency = T.let(dependency, Dependabot::Dependency)
           @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
           @credentials = T.let(credentials, T::Array[Dependabot::Credential])

data/lib/dependabot/gradle/update_checker/requirements_updater.rb CHANGED Viewed

@@ -34,8 +34,12 @@ module Dependabot
           )
             .void
         end
-        def initialize(requirements:, latest_version:, source_url:,
-                       properties_to_update:)
+        def initialize(
+          requirements:,
+          latest_version:,
+          source_url:,
+          properties_to_update:
+        )
           @requirements = requirements
           @source_url = source_url
           @properties_to_update = properties_to_update

data/lib/dependabot/gradle/update_checker/version_finder.rb CHANGED Viewed

@@ -23,14 +23,25 @@ module Dependabot
         TYPE_SUFFICES = %w(jre android java native_mt agp).freeze
         sig do
-          params(dependency: Dependabot::Dependency, dependency_files: T::Array[Dependabot::DependencyFile],
-                 credentials: T::Array[Dependabot::Credential], ignored_versions: T::Array[String],
-                 security_advisories: T::Array[Dependabot::SecurityAdvisory], raise_on_ignored: T::Boolean,
-                 cooldown_options: T.nilable(Dependabot::Package::ReleaseCooldownOptions)).void
+          params(
+            dependency: Dependabot::Dependency,
+            dependency_files: T::Array[Dependabot::DependencyFile],
+            credentials: T::Array[Dependabot::Credential],
+            ignored_versions: T::Array[String],
+            security_advisories: T::Array[Dependabot::SecurityAdvisory],
+            raise_on_ignored: T::Boolean,
+            cooldown_options: T.nilable(Dependabot::Package::ReleaseCooldownOptions)
+          ).void
         end
-        def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:,
-                       security_advisories:, raise_on_ignored: false, cooldown_options: nil)
+        def initialize(
+          dependency:,
+          dependency_files:,
+          credentials:,
+          ignored_versions:,
+          security_advisories:,
+          raise_on_ignored: false,
+          cooldown_options: nil
+        )
           @security_advisories = security_advisories
           @dependency          = dependency
           @dependency_files    = dependency_files
@@ -86,8 +97,10 @@ module Dependabot
           possible_versions = filter_prerelease_versions(possible_versions)
           possible_versions = filter_date_based_versions(possible_versions)
           possible_versions = filter_version_types(possible_versions)
-          possible_versions = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(possible_versions,
-                                                                                                    security_advisories)
+          possible_versions = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(
+            possible_versions,
+            security_advisories
+          )
           possible_versions = filter_ignored_versions(possible_versions)
           possible_versions = filter_lower_versions(possible_versions)
@@ -171,12 +184,15 @@ module Dependabot
         sig { returns(Package::PackageDetailsFetcher) }
         def package_details_fetcher
-          @package_details_fetcher ||= T.let(Package::PackageDetailsFetcher.new(
-                                               dependency: dependency,
-                                               dependency_files: dependency_files,
-                                               credentials: credentials,
-                                               forbidden_urls: []
-                                             ), T.nilable(Dependabot::Gradle::Package::PackageDetailsFetcher))
+          @package_details_fetcher ||= T.let(
+            Package::PackageDetailsFetcher.new(
+              dependency: dependency,
+              dependency_files: dependency_files,
+              credentials: credentials,
+              forbidden_urls: []
+            ),
+            T.nilable(Dependabot::Gradle::Package::PackageDetailsFetcher)
+          )
         end
         sig { params(possible_versions: T::Array[T.untyped]).returns(T::Array[T.untyped]) }
@@ -249,8 +265,10 @@ module Dependabot
           passed_days = passed_seconds / DAY_IN_SECONDS
           if passed_days < days
-            Dependabot.logger.info("Version #{release.version}, Release date: #{release.released_at}." \
-                                   " Days since release: #{passed_days} (cooldown days: #{days})")
+            Dependabot.logger.info(
+              "Version #{release.version}, Release date: #{release.released_at}." \
+              " Days since release: #{passed_days} (cooldown days: #{days})"
+            )
           end
           # Check if the release is within the cooldown period

data/lib/dependabot/gradle/version.rb CHANGED Viewed

@@ -16,20 +16,26 @@ module Dependabot
       extend T::Sig
       NULL_VALUES = T.let(%w(0 final ga).freeze, T::Array[String])
-      PREFIXED_TOKEN_HIERARCHY = T.let({
-        "." => { qualifier: 1, number: 4 },
-        "-" => { qualifier: 2, number: 3 },
-        "_" => { qualifier: 2, number: 3 }
-      }.freeze, T::Hash[String, T::Hash[Symbol, Integer]])
-      NAMED_QUALIFIERS_HIERARCHY = T.let({
-        "a" => 1, "alpha"     => 1,
-        "b" => 2, "beta"      => 2,
-        "m" => 3, "milestone" => 3,
-        "rc" => 4, "cr" => 4, "pr" => 4, "pre" => 4,
-        "snapshot" => 5, "dev" => 5,
-        "ga" => 6, "" => 6, "final" => 6,
-        "sp" => 7
-      }.freeze, T::Hash[String, Integer])
+      PREFIXED_TOKEN_HIERARCHY = T.let(
+        {
+          "." => { qualifier: 1, number: 4 },
+          "-" => { qualifier: 2, number: 3 },
+          "_" => { qualifier: 2, number: 3 }
+        }.freeze,
+        T::Hash[String, T::Hash[Symbol, Integer]]
+      )
+      NAMED_QUALIFIERS_HIERARCHY = T.let(
+        {
+          "a" => 1, "alpha" => 1,
+          "b" => 2, "beta"      => 2,
+          "m" => 3, "milestone" => 3,
+          "rc" => 4, "cr" => 4, "pr" => 4, "pre" => 4,
+          "snapshot" => 5, "dev" => 5,
+          "ga" => 6, "" => 6, "final" => 6,
+          "sp" => 7
+        }.freeze,
+        T::Hash[String, Integer]
+      )
       VERSION_PATTERN = T.let(
         "[0-9a-zA-Z]+" \
         '(?>\.[0-9a-zA-Z]*)*' \

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-gradle
 version: !ruby/object:Gem::Version
-  version: 0.334.0
+  version: 0.335.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,28 +15,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
 - !ruby/object:Gem::Dependency
   name: dependabot-maven
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -127,56 +127,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -280,7 +280,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.335.0
 rdoc_options: []
 require_paths:
 - lib