dependabot-hex 0.221.0 → 0.222.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bc54bf3538419fd8ad7dd49f6f8a06600278ebf18ab7866dcaf2727c18e53c82
-  data.tar.gz: 5bdad1ddd9e61ff314d10d519284cb83eb3e68947836ac9227078ee6d54bdcee
+  metadata.gz: 3e0ac8f31268af6200b37a368e2d87b45598b2a59ca8611773b1dd535cc3af65
+  data.tar.gz: 9ebc83f62a5e6b3e489cd880ad8b695e1fc915708878645ab95eff4070b913eb
 SHA512:
-  metadata.gz: '08b4768f5996dd25b186d6201da4e338a81748219ae74aa9c87d13162f757cecd8dbb06a286585baa6687be1a655530be18cf32610ceb4be0b23fe36c27262c5'
-  data.tar.gz: 44f1d823aee8225b063083e83578523e2b55220fc32b71c7ec1683424cd428d21fb9cb73bc92be059885b106bb4bd9c53073fd1820bf2b0924ed0473c3b5e498
+  metadata.gz: 3427555eefbfad5bd8e74938c985a485491b71a275d51f703aa833bca50b6a7552ab2f5d793f82fbd542b85ae9a6706f3b791842a18d4b289220e0e9fd6da2d5
+  data.tar.gz: 8d1772570934d84dad29cc9822ab4f112a72416dc5223e512145049ea293fa8811ca38416c16107181617d253fdad147562f2747a53f8089887b841a9edeebc9

data/lib/dependabot/hex/metadata_finder.rb

@@ -26,13 +26,7 @@ module Dependabot
       end
 
       def new_source_type
-        sources =
-          dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
-
-        return "default" if sources.empty?
-        raise "Multiple sources! #{sources.join(', ')}" if sources.count > 1
-
-        sources.first[:type] || sources.first.fetch("type")
+        dependency.source_type
       end
 
       def find_source_from_hex_listing

data/lib/dependabot/hex/requirement.rb

@@ -14,7 +14,7 @@ module Dependabot
 
       # Override the version pattern to allow local versions
       quoted = OPS.keys.map { |k| Regexp.quote k }.join "|"
-      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{Hex::Version::VERSION_PATTERN})\\s*"
+      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{Hex::Version::VERSION_PATTERN})\\s*".freeze
       PATTERN = /\A#{PATTERN_RAW}\z/
 
       # Returns an array of requirements. At least one requirement from the

data/lib/dependabot/hex/update_checker.rb

@@ -162,12 +162,7 @@ module Dependabot
       end
 
       def dependency_source_details
-        sources =
-          dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
-
-        raise "Multiple sources! #{sources.join(', ')}" if sources.count > 1
-
-        sources.first
+        dependency.source_details
       end
 
       def fetch_latest_resolvable_version(unlock_requirement:)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.221.0
+  version: 0.222.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-07-13 00:00:00.000000000 Z
+date: 2023-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.222.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.221.0
+        version: 0.222.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -216,7 +216,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.222.0
 post_install_message: 
 rdoc_options: []
 require_paths: