dependabot-hex 0.334.0 → 0.335.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (12) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/hex/file_parser.rb +20 -14
  3. data/lib/dependabot/hex/file_updater/mixfile_git_pin_updater.rb +6 -2
  4. data/lib/dependabot/hex/file_updater/mixfile_requirement_updater.rb +7 -3
  5. data/lib/dependabot/hex/metadata_finder.rb +9 -6
  6. data/lib/dependabot/hex/requirement.rb +5 -3
  7. data/lib/dependabot/hex/update_checker/file_preparer.rb +7 -4
  8. data/lib/dependabot/hex/update_checker/latest_version_finder.rb +11 -3
  9. data/lib/dependabot/hex/update_checker/requirements_updater.rb +6 -2
  10. data/lib/dependabot/hex/update_checker/version_resolver.rb +13 -4
  11. data/lib/dependabot/hex/update_checker.rb +20 -14
  12. metadata +12 -12
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4601b435cbd2ac41666122f4cf1d7a7fef50f068b34c719aaec9f14cda6e819c
4
- data.tar.gz: 2a9ad6bb806461c48df4d401301752ab0a61aa0f602f7c3c4940634ccd7da268
3
+ metadata.gz: '0408fd2d1dbeb05e27bf112418e790057b632b92b5c927203b11b23ce62887f2'
4
+ data.tar.gz: 7ea6e6005776877e4c844ca9e9abbe981e07b9d76bdaeb37d2c6905765f56501
5
5
  SHA512:
6
- metadata.gz: 8b20113cb279f56636f8a9f926fd390030111ad0e2c0040c17af9b0e93a101f3507ed1829d0f63d49af9d1964c69d500f678b84364e259701f1c4f9405079ece
7
- data.tar.gz: 3af81cc43c90df269cd7ddb72c3e740e7e399324978abf48da0b6483bb9805b6a444f21d49a218f8e8fa9550a7b47e72a6ef7cb95eeba4bf5ee3f5516f3772d1
6
+ metadata.gz: 1e64205185e77eb1f0c6639251ed6142d0226fd3ddca34140b1a7df5239eb72063f1b5b184adcd6928e89bfbfb670d465b399db35b9322d983799b0044dfa894
7
+ data.tar.gz: bbaab68e713191fb95b1f2a989f9cae3a81a42ff14a7691404f0b73ca8c90023cceab192d6b7751d782791f12318d6e641770a25668aad6ad96cda717319be19
data/lib/dependabot/hex/file_parser.rb CHANGED
@@ -52,13 +52,16 @@ module Dependabot
52
52
 
53
53
  sig { returns(Ecosystem) }
54
54
  def ecosystem
55
- @ecosystem ||= T.let(begin
56
- Ecosystem.new(
57
- name: ECOSYSTEM,
58
- package_manager: package_manager,
59
- language: language
60
- )
61
- end, T.nilable(Dependabot::Ecosystem))
55
+ @ecosystem ||= T.let(
56
+ begin
57
+ Ecosystem.new(
58
+ name: ECOSYSTEM,
59
+ package_manager: package_manager,
60
+ language: language
61
+ )
62
+ end,
63
+ T.nilable(Dependabot::Ecosystem)
64
+ )
62
65
  end
63
66
 
64
67
  private
@@ -181,13 +184,16 @@ module Dependabot
181
184
 
182
185
  sig { returns(T.nilable(T::Hash[Symbol, T.nilable(String)])) }
183
186
  def hex_info
184
- @hex_info ||= T.let(begin
185
- version = SharedHelpers.run_shell_command("mix hex.info")
186
- {
187
- hex_version: version.match(/Hex: \s*(\d+\.\d+(.\d+)*)/)&.captures&.first,
188
- elixir_version: version.match(/Elixir: \s*(\d+\.\d+(.\d+)*)/)&.captures&.first
189
- }
190
- end, T.nilable(T::Hash[Symbol, T.nilable(String)]))
187
+ @hex_info ||= T.let(
188
+ begin
189
+ version = SharedHelpers.run_shell_command("mix hex.info")
190
+ {
191
+ hex_version: version.match(/Hex: \s*(\d+\.\d+(.\d+)*)/)&.captures&.first,
192
+ elixir_version: version.match(/Elixir: \s*(\d+\.\d+(.\d+)*)/)&.captures&.first
193
+ }
194
+ end,
195
+ T.nilable(T::Hash[Symbol, T.nilable(String)])
196
+ )
191
197
  end
192
198
  end
193
199
  end
data/lib/dependabot/hex/file_updater/mixfile_git_pin_updater.rb CHANGED
@@ -12,8 +12,12 @@ module Dependabot
12
12
  extend T::Sig
13
13
 
14
14
  sig { params(dependency_name: String, mixfile_content: String, previous_pin: String, updated_pin: String).void }
15
- def initialize(dependency_name:, mixfile_content:,
16
- previous_pin:, updated_pin:)
15
+ def initialize(
16
+ dependency_name:,
17
+ mixfile_content:,
18
+ previous_pin:,
19
+ updated_pin:
20
+ )
17
21
  @dependency_name = dependency_name
18
22
  @mixfile_content = mixfile_content
19
23
  @previous_pin = previous_pin
data/lib/dependabot/hex/file_updater/mixfile_requirement_updater.rb CHANGED
@@ -21,9 +21,13 @@ module Dependabot
21
21
  insert_if_bare: T::Boolean
22
22
  ).void
23
23
  end
24
- def initialize(dependency_name:, mixfile_content:,
25
- previous_requirement:, updated_requirement:,
26
- insert_if_bare: false)
24
+ def initialize(
25
+ dependency_name:,
26
+ mixfile_content:,
27
+ previous_requirement:,
28
+ updated_requirement:,
29
+ insert_if_bare: false
30
+ )
27
31
  @dependency_name = T.let(dependency_name, String)
28
32
  @mixfile_content = T.let(mixfile_content, String)
29
33
  @previous_requirement = T.let(previous_requirement, T.nilable(String))
data/lib/dependabot/hex/metadata_finder.rb CHANGED
@@ -12,12 +12,15 @@ module Dependabot
12
12
  class MetadataFinder < Dependabot::MetadataFinders::Base
13
13
  extend T::Sig
14
14
 
15
- SOURCE_KEYS = T.let(%w(
16
- GitHub Github github
17
- GitLab Gitlab gitlab
18
- BitBucket Bitbucket bitbucket
19
- Source source
20
- ).freeze, T::Array[String])
15
+ SOURCE_KEYS = T.let(
16
+ %w(
17
+ GitHub Github github
18
+ GitLab Gitlab gitlab
19
+ BitBucket Bitbucket bitbucket
20
+ Source source
21
+ ).freeze,
22
+ T::Array[String]
23
+ )
21
24
 
22
25
  private
23
26
 
data/lib/dependabot/hex/requirement.rb CHANGED
@@ -17,9 +17,11 @@ module Dependabot
17
17
 
18
18
  # Add the double-equality matcher to the list of allowed operations
19
19
  OPS = T.let(
20
- OPS.merge("==" => lambda { |v, r|
21
- v == r
22
- }),
20
+ OPS.merge(
21
+ "==" => lambda { |v, r|
22
+ v == r
23
+ }
24
+ ),
23
25
  T::Hash[String, T.proc.params(arg0: Gem::Version, arg1: Gem::Version).returns(T::Boolean)]
24
26
  )
25
27
 
data/lib/dependabot/hex/update_checker/file_preparer.rb CHANGED
@@ -27,10 +27,13 @@ module Dependabot
27
27
  latest_allowable_version: T.nilable(Gem::Version)
28
28
  ).void
29
29
  end
30
- def initialize(dependency_files:, dependency:,
31
- unlock_requirement: true,
32
- replacement_git_pin: nil,
33
- latest_allowable_version: nil)
30
+ def initialize(
31
+ dependency_files:,
32
+ dependency:,
33
+ unlock_requirement: true,
34
+ replacement_git_pin: nil,
35
+ latest_allowable_version: nil
36
+ )
34
37
  @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
35
38
  @dependency = T.let(dependency, Dependabot::Dependency)
36
39
  @unlock_requirement = T.let(unlock_requirement ? true : false, T::Boolean)
data/lib/dependabot/hex/update_checker/latest_version_finder.rb CHANGED
@@ -56,14 +56,19 @@ module Dependabot
56
56
 
57
57
  sig { returns(Dependabot::Dependency) }
58
58
  attr_reader :dependency
59
+
59
60
  sig { returns(T::Array[Dependabot::Credential]) }
60
61
  attr_reader :credentials
62
+
61
63
  sig { returns(T.nilable(Dependabot::Package::ReleaseCooldownOptions)) }
62
64
  attr_reader :cooldown_options
65
+
63
66
  sig { returns(T::Array[String]) }
64
67
  attr_reader :ignored_versions
68
+
65
69
  sig { returns(T::Array[Dependabot::SecurityAdvisory]) }
66
70
  attr_reader :security_advisories
71
+
67
72
  sig { override.returns(T.nilable(Dependabot::Package::PackageDetails)) }
68
73
  def package_details; end
69
74
 
@@ -82,9 +87,12 @@ module Dependabot
82
87
 
83
88
  sig { returns(T.nilable(T::Array[Dependabot::Package::PackageRelease])) }
84
89
  def package_releases
85
- @package_releases = T.let(Dependabot::Hex::Package::PackageDetailsFetcher
86
- .new(dependency: dependency)
87
- .fetch_package_releases, T.nilable(T::Array[Dependabot::Package::PackageRelease]))
90
+ @package_releases = T.let(
91
+ Dependabot::Hex::Package::PackageDetailsFetcher
92
+ .new(dependency: dependency)
93
+ .fetch_package_releases,
94
+ T.nilable(T::Array[Dependabot::Package::PackageRelease])
95
+ )
88
96
  end
89
97
 
90
98
  sig { override.returns(T::Boolean) }
data/lib/dependabot/hex/update_checker/requirements_updater.rb CHANGED
@@ -25,8 +25,11 @@ module Dependabot
25
25
  updated_source: T.nilable(T::Hash[Symbol, T.nilable(String)])
26
26
  ).void
27
27
  end
28
- def initialize(requirements:, latest_resolvable_version:,
29
- updated_source:)
28
+ def initialize(
29
+ requirements:,
30
+ latest_resolvable_version:,
31
+ updated_source:
32
+ )
30
33
  @requirements = T.let(requirements, T::Array[T::Hash[Symbol, T.untyped]])
31
34
  @updated_source = T.let(updated_source, T.nilable(T::Hash[Symbol, T.nilable(String)]))
32
35
  @latest_resolvable_version = T.let(nil, T.nilable(Dependabot::Version))
@@ -52,6 +55,7 @@ module Dependabot
52
55
 
53
56
  sig { returns(T.nilable(T::Hash[Symbol, T.nilable(String)])) }
54
57
  attr_reader :updated_source
58
+
55
59
  # rubocop:disable Metrics/PerceivedComplexity
56
60
  # rubocop:disable Metrics/AbcSize
57
61
  sig { params(req: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped]) }
data/lib/dependabot/hex/update_checker/version_resolver.rb CHANGED
@@ -25,8 +25,12 @@ module Dependabot
25
25
  prepared_dependency_files: T::Array[Dependabot::DependencyFile]
26
26
  ).void
27
27
  end
28
- def initialize(dependency:, credentials:,
29
- original_dependency_files:, prepared_dependency_files:)
28
+ def initialize(
29
+ dependency:,
30
+ credentials:,
31
+ original_dependency_files:,
32
+ prepared_dependency_files:
33
+ )
30
34
  @dependency = T.let(dependency, Dependabot::Dependency)
31
35
  @original_dependency_files = T.let(original_dependency_files, T::Array[Dependabot::DependencyFile])
32
36
  @prepared_dependency_files = T.let(prepared_dependency_files, T::Array[Dependabot::DependencyFile])
@@ -126,8 +130,13 @@ module Dependabot
126
130
  end
127
131
 
128
132
  sig do
129
- params(error: Dependabot::SharedHelpers::HelperSubprocessFailed).returns(T.any(Dependabot::Version, String,
130
- T::Boolean))
133
+ params(error: Dependabot::SharedHelpers::HelperSubprocessFailed).returns(
134
+ T.any(
135
+ Dependabot::Version,
136
+ String,
137
+ T::Boolean
138
+ )
139
+ )
131
140
  end
132
141
  def error_result(error)
133
142
  return false unless includes_result?(error)
data/lib/dependabot/hex/update_checker.rb CHANGED
@@ -219,12 +219,16 @@ module Dependabot
219
219
  end
220
220
 
221
221
  sig do
222
- params(unlock_requirement: T.any(T.nilable(Symbol), T::Boolean),
223
- latest_allowable_version: T.nilable(Dependabot::Version))
222
+ params(
223
+ unlock_requirement: T.any(T.nilable(Symbol), T::Boolean),
224
+ latest_allowable_version: T.nilable(Dependabot::Version)
225
+ )
224
226
  .returns(T::Array[Dependabot::DependencyFile])
225
227
  end
226
- def prepared_dependency_files(unlock_requirement:,
227
- latest_allowable_version: nil)
228
+ def prepared_dependency_files(
229
+ unlock_requirement:,
230
+ latest_allowable_version: nil
231
+ )
228
232
  FilePreparer.new(
229
233
  dependency: dependency,
230
234
  dependency_files: dependency_files,
@@ -236,16 +240,18 @@ module Dependabot
236
240
  sig { returns(T.nilable(Dependabot::Version)) }
237
241
  def latest_release_from_hex_registry
238
242
  @latest_release_from_hex_registry ||=
239
- T.let(LatestVersionFinder.new(
240
- dependency: dependency,
241
- credentials: credentials,
242
- dependency_files: dependency_files,
243
- security_advisories: security_advisories,
244
- ignored_versions: ignored_versions,
245
- raise_on_ignored: raise_on_ignored,
246
- cooldown_options: update_cooldown
247
- ).release_version,
248
- T.nilable(T.nilable(Dependabot::Version)))
243
+ T.let(
244
+ LatestVersionFinder.new(
245
+ dependency: dependency,
246
+ credentials: credentials,
247
+ dependency_files: dependency_files,
248
+ security_advisories: security_advisories,
249
+ ignored_versions: ignored_versions,
250
+ raise_on_ignored: raise_on_ignored,
251
+ cooldown_options: update_cooldown
252
+ ).release_version,
253
+ T.nilable(T.nilable(Dependabot::Version))
254
+ )
249
255
  end
250
256
 
251
257
  sig { returns(Dependabot::GitCommitChecker) }
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-hex
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.334.0
4
+ version: 0.335.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.334.0
18
+ version: 0.335.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.334.0
25
+ version: 0.335.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -113,56 +113,56 @@ dependencies:
113
113
  requirements:
114
114
  - - "~>"
115
115
  - !ruby/object:Gem::Version
116
- version: '1.67'
116
+ version: '1.80'
117
117
  type: :development
118
118
  prerelease: false
119
119
  version_requirements: !ruby/object:Gem::Requirement
120
120
  requirements:
121
121
  - - "~>"
122
122
  - !ruby/object:Gem::Version
123
- version: '1.67'
123
+ version: '1.80'
124
124
  - !ruby/object:Gem::Dependency
125
125
  name: rubocop-performance
126
126
  requirement: !ruby/object:Gem::Requirement
127
127
  requirements:
128
128
  - - "~>"
129
129
  - !ruby/object:Gem::Version
130
- version: '1.22'
130
+ version: '1.26'
131
131
  type: :development
132
132
  prerelease: false
133
133
  version_requirements: !ruby/object:Gem::Requirement
134
134
  requirements:
135
135
  - - "~>"
136
136
  - !ruby/object:Gem::Version
137
- version: '1.22'
137
+ version: '1.26'
138
138
  - !ruby/object:Gem::Dependency
139
139
  name: rubocop-rspec
140
140
  requirement: !ruby/object:Gem::Requirement
141
141
  requirements:
142
142
  - - "~>"
143
143
  - !ruby/object:Gem::Version
144
- version: '2.29'
144
+ version: '3.7'
145
145
  type: :development
146
146
  prerelease: false
147
147
  version_requirements: !ruby/object:Gem::Requirement
148
148
  requirements:
149
149
  - - "~>"
150
150
  - !ruby/object:Gem::Version
151
- version: '2.29'
151
+ version: '3.7'
152
152
  - !ruby/object:Gem::Dependency
153
153
  name: rubocop-sorbet
154
154
  requirement: !ruby/object:Gem::Requirement
155
155
  requirements:
156
156
  - - "~>"
157
157
  - !ruby/object:Gem::Version
158
- version: '0.8'
158
+ version: '0.10'
159
159
  type: :development
160
160
  prerelease: false
161
161
  version_requirements: !ruby/object:Gem::Requirement
162
162
  requirements:
163
163
  - - "~>"
164
164
  - !ruby/object:Gem::Version
165
- version: '0.8'
165
+ version: '0.10'
166
166
  - !ruby/object:Gem::Dependency
167
167
  name: simplecov
168
168
  requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
274
274
  - MIT
275
275
  metadata:
276
276
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
277
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
277
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.335.0
278
278
  rdoc_options: []
279
279
  require_paths:
280
280
  - lib