dependabot-hex 0.230.0 → 0.232.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 27f1f6c28d4ee1d575abf61d2cb7ed03a14a7ea22671992d290079a9c90aa884
-  data.tar.gz: a5fdf7d6c69b62362b3cff31b5ce344fcbebddd6e641e21d99e172c400d78232
+  metadata.gz: 3c4e725a49570b74af51d9a38ff83e0c70ec2b402056fe8444601d04a7936f42
+  data.tar.gz: 74dab06801b40fa379455542723541c8e29face859a2c788c94b7f58aaf71812
 SHA512:
-  metadata.gz: 3cbb801deb8706ae7bfccb701480fed8a4ae7ddb43b0a4b2b8b13655c586281e692088a8e935f734279c495e6470ed7bfa1eee1b3092608b93a3c10c9535eef5
-  data.tar.gz: 4fb4f6e8d4b2dc8ab967cfbd648874677a3ef2e9498ef09faa7392a246956d07107b0e6cc7bf2e2b5a014415a93b0f358daa7efdc9955a4ad4c9f2c6f02fe626
+  metadata.gz: 8283cc495e59ffe4b17c2e8964e8d74b7c1f01c30cf4b227f238a2550968b3f13c4bde86bfd2b8b87fa6af21421f0c5e5136707bbbe84c0de59add4503d8a1d1
+  data.tar.gz: 90dae00bcf4026eeb18350b1c9ffd5c7d57c1d8410b8c14a6881c6da8b8b7e6e8f3cd92e6f4f8270d12fd3fb52454e98bce55028aa2352f802920962ef27bd65

data/lib/dependabot/hex/credential_helpers.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 module Dependabot
@@ -11,9 +12,9 @@ module Dependabot
         defaults = { "organization" => "", "token" => "" }
         keys = %w(type organization token)
 
-        credentials.
-          select { |cred| cred["type"] == "hex_organization" }.
-          flat_map { |cred| defaults.merge(cred).slice(*keys).values }
+        credentials
+          .select { |cred| cred["type"] == "hex_organization" }
+          .flat_map { |cred| defaults.merge(cred).slice(*keys).values }
       end
 
       def self.repo_credentials(credentials)
@@ -22,9 +23,9 @@ module Dependabot
         defaults = { "url" => "", "auth_key" => "", "public_key_fingerprint" => "" }
         keys = %w(type repo url auth_key public_key_fingerprint)
 
-        credentials.
-          select { |cred| cred["type"] == "hex_repository" }.
-          flat_map { |cred| defaults.merge(cred).slice(*keys).values }
+        credentials
+          .select { |cred| cred["type"] == "hex_repository" }
+          .flat_map { |cred| defaults.merge(cred).slice(*keys).values }
       end
     end
   end

data/lib/dependabot/hex/file_fetcher.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/file_fetchers"
@@ -48,13 +49,13 @@ module Dependabot
       end
 
       def umbrella_app_directories
-        apps_path = mixfile.content.match(APPS_PATH_REGEX)&.
-                    named_captures&.fetch("path")
+        apps_path = mixfile.content.match(APPS_PATH_REGEX)
+                    &.named_captures&.fetch("path")
         return [] unless apps_path
 
-        repo_contents(dir: apps_path).
-          select { |f| f.type == "dir" }.
-          map { |f| File.join(apps_path, f.name) }
+        repo_contents(dir: apps_path)
+          .select { |f| f.type == "dir" }
+          .map { |f| File.join(apps_path, f.name) }
       end
 
       def sub_project_directories
@@ -87,8 +88,8 @@ module Dependabot
           mixfile_dir = mixfile.path.to_s.delete_prefix("/").delete_suffix("/mix.exs")
 
           mixfile.content.gsub("__DIR__", "\"#{mixfile_dir}\"").scan(SUPPORT_FILE).map do |support_file_args|
-            path = Pathname.new(File.join(*support_file_args.compact.reverse)).
-                   cleanpath.to_path
+            path = Pathname.new(File.join(*support_file_args.compact.reverse))
+                           .cleanpath.to_path
             fetch_file_from_host(path).tap { |f| f.support_file = true }
           end
         end

data/lib/dependabot/hex/file_parser.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/dependency"
@@ -59,9 +60,9 @@ module Dependabot
         end
       rescue Dependabot::SharedHelpers::HelperSubprocessFailed => e
         result_json =
-          e.message.lines.
-          drop_while { |l| !l.start_with?('{"result":') }.
-          join
+          e.message.lines
+           .drop_while { |l| !l.start_with?('{"result":') }
+           .join
 
         raise DependencyFileNotEvaluatable, e.message if result_json.empty?
 

data/lib/dependabot/hex/file_updater/lockfile_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/file_updater"
@@ -85,8 +86,8 @@ module Dependabot
         end
 
         def lock_mixfile_dependency_versions(mixfile_content, filename)
-          dependencies.
-            reduce(mixfile_content.dup) do |content, dep|
+          dependencies
+            .reduce(mixfile_content.dup) do |content, dep|
               # Run on the updated mixfile content, so we're updating from the
               # updated requirements
               req_details = dep.requirements.find { |r| r[:file] == filename }

data/lib/dependabot/hex/file_updater/mixfile_git_pin_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/file_updater"

data/lib/dependabot/hex/file_updater/mixfile_requirement_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/file_updater"

data/lib/dependabot/hex/file_updater/mixfile_sanitizer.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/file_updater"
@@ -23,9 +24,9 @@ module Dependabot
 
         # rubocop:disable Performance/MethodObjectAsBlock
         def sanitized_content
-          mixfile_content.
-            then(&method(:prevent_version_file_loading)).
-            then(&method(:prevent_config_path_loading))
+          mixfile_content
+            .then(&method(:prevent_version_file_loading))
+            .then(&method(:prevent_config_path_loading))
         end
         # rubocop:enable Performance/MethodObjectAsBlock
 
@@ -34,16 +35,16 @@ module Dependabot
         attr_reader :mixfile_content
 
         def prevent_version_file_loading(configuration)
-          configuration.
-            gsub(NESTED_VERSION_FILE_READ_BANG, 'String.trim("0.0.1")').
-            gsub(NESTED_VERSION_FILE_READ, 'String.trim({:ok, "0.0.1"})').
-            gsub(PIPED_VERSION_FILE_READ, '{:ok, "0.0.1"}').
-            gsub(PIPED_VERSION_FILE_READ_BANG, '"0.0.1"')
+          configuration
+            .gsub(NESTED_VERSION_FILE_READ_BANG, 'String.trim("0.0.1")')
+            .gsub(NESTED_VERSION_FILE_READ, 'String.trim({:ok, "0.0.1"})')
+            .gsub(PIPED_VERSION_FILE_READ, '{:ok, "0.0.1"}')
+            .gsub(PIPED_VERSION_FILE_READ_BANG, '"0.0.1"')
         end
 
         def prevent_config_path_loading(configuration)
-          configuration.
-            gsub(/^\s*config_path:.*(?:,|$)/, "")
+          configuration
+            .gsub(/^\s*config_path:.*(?:,|$)/, "")
         end
       end
     end

data/lib/dependabot/hex/file_updater/mixfile_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/file_updater"
@@ -14,9 +15,9 @@ module Dependabot
         end
 
         def updated_mixfile_content
-          dependencies.
-            select { |dep| requirement_changed?(mixfile, dep) }.
-            reduce(mixfile.content.dup) do |content, dep|
+          dependencies
+            .select { |dep| requirement_changed?(mixfile, dep) }
+            .reduce(mixfile.content.dup) do |content, dep|
               updated_content = content
 
               updated_content = update_requirement(
@@ -50,13 +51,13 @@ module Dependabot
 
         def update_requirement(content:, filename:, dependency:)
           updated_req =
-            dependency.requirements.find { |r| r[:file] == filename }.
-            fetch(:requirement)
+            dependency.requirements.find { |r| r[:file] == filename }
+                      .fetch(:requirement)
 
           old_req =
-            dependency.previous_requirements.
-            find { |r| r[:file] == filename }.
-            fetch(:requirement)
+            dependency.previous_requirements
+                      .find { |r| r[:file] == filename }
+                      .fetch(:requirement)
 
           return content unless old_req
 
@@ -70,13 +71,13 @@ module Dependabot
 
         def update_git_pin(content:, filename:, dependency:)
           updated_pin =
-            dependency.requirements.find { |r| r[:file] == filename }&.
-            dig(:source, :ref)
+            dependency.requirements.find { |r| r[:file] == filename }
+            &.dig(:source, :ref)
 
           old_pin =
-            dependency.previous_requirements.
-            find { |r| r[:file] == filename }&.
-            dig(:source, :ref)
+            dependency.previous_requirements
+                      .find { |r| r[:file] == filename }
+            &.dig(:source, :ref)
 
           return content unless old_pin
           return content if old_pin == updated_pin

data/lib/dependabot/hex/file_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/file_updaters"

data/lib/dependabot/hex/metadata_finder.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "excon"
@@ -31,8 +32,8 @@ module Dependabot
 
       def find_source_from_hex_listing
         potential_source_urls =
-          SOURCE_KEYS.
-          filter_map { |key| hex_listing.dig("meta", "links", key) }
+          SOURCE_KEYS
+          .filter_map { |key| hex_listing.dig("meta", "links", key) }
 
         source_url = potential_source_urls.find { |url| Source.from_url(url) }
         Source.from_url(source_url)

data/lib/dependabot/hex/native_helpers.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 module Dependabot

data/lib/dependabot/hex/requirement.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/utils"
@@ -59,5 +60,5 @@ module Dependabot
   end
 end
 
-Dependabot::Utils.
-  register_requirement_class("hex", Dependabot::Hex::Requirement)
+Dependabot::Utils
+  .register_requirement_class("hex", Dependabot::Hex::Requirement)

data/lib/dependabot/hex/update_checker/file_preparer.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/dependency_file"
@@ -64,8 +65,8 @@ module Dependabot
 
         def relax_version(content, filename:)
           old_requirement =
-            dependency.requirements.find { |r| r.fetch(:file) == filename }.
-            fetch(:requirement)
+            dependency.requirements.find { |r| r.fetch(:file) == filename }
+                      .fetch(:requirement)
           updated_requirement = updated_version_requirement_string(filename)
 
           Hex::FileUpdater::MixfileRequirementUpdater.new(
@@ -90,21 +91,21 @@ module Dependabot
         # rubocop:disable Metrics/PerceivedComplexity
         # rubocop:disable Metrics/CyclomaticComplexity
         def updated_version_req_lower_bound(filename)
-          original_req = dependency.requirements.
-                         find { |r| r.fetch(:file) == filename }&.
-                         fetch(:requirement)
+          original_req = dependency.requirements
+                                   .find { |r| r.fetch(:file) == filename }
+                         &.fetch(:requirement)
 
           if original_req && !unlock_requirement? then original_req
           elsif dependency.version&.match?(/^[0-9a-f]{40}$/) then ">= 0"
           elsif dependency.version then ">= #{dependency.version}"
           else
             version_for_requirement =
-              dependency.requirements.filter_map { |r| r[:requirement] }.
-              reject { |req_string| req_string.start_with?("<") }.
-              select { |req_string| req_string.match?(version_regex) }.
-              map { |req_string| req_string.match(version_regex) }.
-              select { |version| version_class.correct?(version.to_s) }.
-              max_by { |version| version_class.new(version.to_s) }
+              dependency.requirements.filter_map { |r| r[:requirement] }
+                        .reject { |req_string| req_string.start_with?("<") }
+                        .select { |req_string| req_string.match?(version_regex) }
+                        .map { |req_string| req_string.match(version_regex) }
+                        .select { |version| version_class.correct?(version.to_s) }
+                        .max_by { |version| version_class.new(version.to_s) }
 
             return ">= 0" unless version_for_requirement
 
@@ -121,8 +122,8 @@ module Dependabot
 
         def replace_git_pin(content, filename:)
           old_pin =
-            dependency.requirements.find { |r| r.fetch(:file) == filename }&.
-            dig(:source, :ref)
+            dependency.requirements.find { |r| r.fetch(:file) == filename }
+            &.dig(:source, :ref)
 
           return content unless old_pin
           return content if old_pin == replacement_git_pin
@@ -143,8 +144,8 @@ module Dependabot
 
         def mixfiles
           mixfiles =
-            dependency_files.
-            select { |f| f.name.end_with?("mix.exs") }
+            dependency_files
+            .select { |f| f.name.end_with?("mix.exs") }
           raise "No mix.exs!" if mixfiles.none?
 
           mixfiles

data/lib/dependabot/hex/update_checker/requirements_updater.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/version"
@@ -40,8 +41,8 @@ module Dependabot
           return req if req_satisfied_by_latest_resolvable?(req[:requirement])
 
           or_string_reqs = req[:requirement].split(OR_SEPARATOR)
-          last_string_reqs = or_string_reqs.last.split(AND_SEPARATOR).
-                             map(&:strip)
+          last_string_reqs = or_string_reqs.last.split(AND_SEPARATOR)
+                                           .map(&:strip)
 
           new_requirement =
             if last_string_reqs.any? { |r| r.match(/^(?:\d|=)/) }
@@ -70,8 +71,8 @@ module Dependabot
         end
 
         def req_satisfied_by_latest_resolvable?(requirement_string)
-          ruby_requirements(requirement_string).
-            any? { |r| r.satisfied_by?(latest_resolvable_version) }
+          ruby_requirements(requirement_string)
+            .any? { |r| r.satisfied_by?(latest_resolvable_version) }
         end
 
         def ruby_requirements(requirement_string)

data/lib/dependabot/hex/update_checker/version_resolver.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/hex/version"

data/lib/dependabot/hex/update_checker.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 require "excon"
@@ -168,8 +169,8 @@ module Dependabot
       def fetch_latest_resolvable_version(unlock_requirement:)
         @latest_resolvable_version_hash ||= {}
         @latest_resolvable_version_hash[unlock_requirement] ||=
-          version_resolver(unlock_requirement: unlock_requirement).
-          latest_resolvable_version
+          version_resolver(unlock_requirement: unlock_requirement)
+          .latest_resolvable_version
       end
 
       def version_resolver(unlock_requirement:)
@@ -206,9 +207,9 @@ module Dependabot
           begin
             versions = hex_registry_response&.fetch("releases", []) || []
             versions =
-              versions.
-              select { |release| version_class.correct?(release["version"]) }.
-              map { |release| version_class.new(release["version"]) }
+              versions
+              .select { |release| version_class.correct?(release["version"]) }
+              .map { |release| version_class.new(release["version"]) }
 
             versions.reject!(&:prerelease?) unless wants_prerelease?
 

data/lib/dependabot/hex/version.rb

@@ -1,3 +1,4 @@
+# typed: false
 # frozen_string_literal: true
 
 require "dependabot/version"

data/lib/dependabot/hex.rb

@@ -1,3 +1,4 @@
+# typed: true
 # frozen_string_literal: true
 
 # These all need to be required so the various classes can be registered in a
@@ -11,8 +12,8 @@ require "dependabot/hex/requirement"
 require "dependabot/hex/version"
 
 require "dependabot/pull_request_creator/labeler"
-Dependabot::PullRequestCreator::Labeler.
-  register_label_details("hex", name: "elixir", colour: "9380dd")
+Dependabot::PullRequestCreator::Labeler
+  .register_label_details("hex", name: "elixir", colour: "9380dd")
 
 require "dependabot/dependency"
 Dependabot::Dependency.register_production_check(

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.230.0
+  version: 0.232.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-08 00:00:00.000000000 Z
+date: 2023-09-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.232.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.230.0
+        version: 0.232.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
 - !ruby/object:Gem::Dependency
   name: stackprof
   requirement: !ruby/object:Gem::Requirement
@@ -216,7 +230,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.230.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.232.0
 post_install_message: 
 rdoc_options: []
 require_paths: