dependabot-hex 0.237.0 → 0.239.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 414c4b2f5239f177009341dd8d59d0c4408c503982fd68cd055f177202c42f91
-  data.tar.gz: 4ef0cb25d1e1f5cf52ceaf948392a52746967945e386f86912303c1dcecba257
+  metadata.gz: d63ff5323f74e8ab59e4fa5d7b17d220d5490a3c787e03d10db57167cec01073
+  data.tar.gz: ebb38208e8019c59e5313c8709dea032e8a1677b203e7b60ac088cc6704ee4f3
 SHA512:
-  metadata.gz: 8fab77c3038e431fb297b275278e031d3dccc31df5c0fd51b268eb69fa82b708f4c973eddf0b9c0ddd6e10006c8efe404b7f888d5c80dd524bfcbb6b183aca2a
-  data.tar.gz: 4e90d558e6550b3c0797e922e0197eda154689debc514712d9f8a8d2fa32121d63529ad17ccda3c04219427335ec9d36a8369c0cfeea33ce58886e5a2530e9ba
+  metadata.gz: c00a3393b2e4a11de1db395de68258ca408e6ec4a6cc3a9948f43fe6c747528d410b9072a1549e2b15c69c4ca30d54ecb6c7aeb517a20c78b002afea758429c5
+  data.tar.gz: fa334fc715f2d5f6ff1702279d8775e2e88e00d78a69f821fea90562699381440105d52bd518e0908997833f352b3318dce3b6d765b5f2a61190713199dc2976

data/helpers/build

@@ -1,4 +1,4 @@
-#!/bin/bash
+#!/usr/bin/env bash
 
 set -e
 

data/helpers/lib/run.exs

@@ -118,7 +118,7 @@ defmodule DependencyHelper do
   end
 
   defp fetch_public_key(repo, repo_url, auth_key, fingerprint) do
-    case Hex.Repo.get_public_key(repo_url, auth_key) do
+    case Hex.Repo.get_public_key(%{trusted: true, url: repo_url, auth_key: auth_key}) do
       {:ok, {200, key, _}} ->
         if public_key_matches?(key, fingerprint) do
           {:ok, key}

data/lib/dependabot/hex/requirement.rb

@@ -1,12 +1,17 @@
 # typed: true
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
+require "dependabot/requirement"
 require "dependabot/utils"
 require "dependabot/hex/version"
 
 module Dependabot
   module Hex
-    class Requirement < Gem::Requirement
+    class Requirement < Dependabot::Requirement
+      extend T::Sig
+
       AND_SEPARATOR = /\s+and\s+/
       OR_SEPARATOR = /\s+or\s+/
 
@@ -20,8 +25,9 @@ module Dependabot
 
       # Returns an array of requirements. At least one requirement from the
       # returned array must be satisfied for a version to be valid.
+      sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }
       def self.requirements_array(requirement_string)
-        requirement_string.strip.split(OR_SEPARATOR).map do |req_string|
+        T.must(requirement_string).strip.split(OR_SEPARATOR).map do |req_string|
           requirements = req_string.strip.split(AND_SEPARATOR)
           new(requirements)
         end

data/lib/dependabot/hex/update_checker/version_resolver.rb

@@ -76,7 +76,7 @@ module Dependabot
             raise Dependabot::PrivateSourceAuthenticationFailure, match[:repo]
           end
 
-          if (match = error.message.match(/Failed to fetch record for '(?<repo>[a-z_]+)(?::(?<org>[a-z_]+))?/))
+          if (match = error.message.match(/Failed to fetch record for (?<repo>[a-z_]+)(?::(?<org>[a-z_]+))?/))
             name = match[:org] || match[:repo]
             raise Dependabot::PrivateSourceAuthenticationFailure, name
           end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.237.0
+  version: 0.239.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-11-21 00:00:00.000000000 Z
+date: 2023-12-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.237.0
+        version: 0.239.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.237.0
+        version: 0.239.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -114,14 +114,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -244,7 +244,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
 post_install_message: 
 rdoc_options: []
 require_paths: