dependabot-hex 0.381.0 → 0.383.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d22b8e7cd629d5ffe61f583867006c234e0dcfe56096e695499dccde4a95109a
-  data.tar.gz: 05a29f5880ac5109faf59287e70e13e31ca14ddf60ee6a7f63566ec9b9d605b1
+  metadata.gz: 2b20fcffb21d285f6a822c0fe9eac1f71475215bfea771a2a4249a86e11f8f78
+  data.tar.gz: e9f9031cdfac162522bdb9313b98f553cf733c0e01bb6a78dbeba4bd0992b0d6
 SHA512:
-  metadata.gz: 1973342d7305345db5e25214cc19cc1f3afc1636d79da4adaeffb7e461afa6ec182390dd37ad5ded574e3f0c278fc7bd047ecf40c0800774d4ed2cfff8dc5f8b
-  data.tar.gz: 294dc65e3324b6050f6eaf1370e209e5e36365129106bdf87742545d09a53ea5d419da22a2d9a1bcd133dec46d27e0c4aa5a8439e5b795942c3efdbc594d2bda
+  metadata.gz: 1cda2121146c2a3f9a8496653d9ffb16e19053dfc41bf83af73753381ebf4a7cca02d5236801527ff92b887a3da63e0dc8262bda5771912dda80c93231e200c0
+  data.tar.gz: 2be433fa3a02061982c3dcf3177d7e6269edf1c5294cd2f1052cf204a9d9e112e017e4ba078ff2e15ed5f21ea2c54b3857eb097978c42cf6f4f0ebb171dda51e

data/lib/dependabot/hex/update_checker/requirements_updater.rb

@@ -3,6 +3,7 @@
 
 require "sorbet-runtime"
 
+require "dependabot/dependency_requirement"
 require "dependabot/hex/version"
 require "dependabot/hex/requirement"
 require "dependabot/hex/update_checker"
@@ -20,7 +21,7 @@ module Dependabot
 
         sig do
           params(
-            requirements: T::Array[T::Hash[Symbol, T.untyped]],
+            requirements: T::Array[Dependabot::DependencyRequirement],
             latest_resolvable_version: T.nilable(String),
             updated_source: T.nilable(T::Hash[Symbol, T.nilable(String)])
           ).void
@@ -30,7 +31,10 @@ module Dependabot
           latest_resolvable_version:,
           updated_source:
         )
-          @requirements = T.let(requirements, T::Array[T::Hash[Symbol, T.untyped]])
+          @requirements = T.let(
+            requirements.map { |req| Dependabot::DependencyRequirement.create(req) },
+            T::Array[Dependabot::DependencyRequirement]
+          )
           @updated_source = T.let(updated_source, T.nilable(T::Hash[Symbol, T.nilable(String)]))
           @latest_resolvable_version = T.let(nil, T.nilable(Dependabot::Version))
 
@@ -40,14 +44,14 @@ module Dependabot
           @latest_resolvable_version = Hex::Version.new(latest_resolvable_version)
         end
 
-        sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+        sig { returns(T::Array[Dependabot::DependencyRequirement]) }
         def updated_requirements
           requirements.map { |req| updated_mixfile_requirement(req) }
         end
 
         private
 
-        sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+        sig { returns(T::Array[Dependabot::DependencyRequirement]) }
         attr_reader :requirements
 
         sig { returns(T.nilable(Dependabot::Version)) }
@@ -58,7 +62,7 @@ module Dependabot
 
         # rubocop:disable Metrics/PerceivedComplexity
         # rubocop:disable Metrics/AbcSize
-        sig { params(req: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped]) }
+        sig { params(req: Dependabot::DependencyRequirement).returns(Dependabot::DependencyRequirement) }
         def updated_mixfile_requirement(req)
           req = update_source(req)
           return req unless latest_resolvable_version && req[:requirement]
@@ -81,18 +85,20 @@ module Dependabot
 
           new_requirement = req[:requirement] + " or " + new_requirement if or_string_reqs.count > 1
 
-          req.merge(requirement: new_requirement)
+          Dependabot::DependencyRequirement.create(req.merge(requirement: new_requirement))
         end
         # rubocop:enable Metrics/AbcSize
         # rubocop:enable Metrics/PerceivedComplexity
 
-        sig { params(requirement_hash: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped]) }
+        sig do
+          params(requirement_hash: Dependabot::DependencyRequirement).returns(Dependabot::DependencyRequirement)
+        end
         def update_source(requirement_hash)
           # Only git sources ever need to be updated. Anything else should be
           # left alone.
           return requirement_hash unless requirement_hash.dig(:source, :type) == "git"
 
-          requirement_hash.merge(source: updated_source)
+          Dependabot::DependencyRequirement.create(requirement_hash.merge(source: updated_source))
         end
 
         sig { params(requirement_string: String).returns(T::Boolean) }

data/lib/dependabot/hex/update_checker.rb

@@ -57,7 +57,7 @@ module Dependabot
           end
       end
 
-      sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements
         RequirementsUpdater.new(
           requirements: dependency.requirements,

data/lib/dependabot/hex/version.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -48,7 +48,7 @@ module Dependabot
         "#<#{self.class} #{@version_string}>"
       end
 
-      sig { params(other: T.untyped).returns(T.nilable(Integer)) }
+      sig { params(other: Object).returns(T.nilable(Integer)) }
       def <=>(other)
         version_comparison = super
         return version_comparison unless version_comparison&.zero?

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.381.0
+  version: 0.383.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.381.0
+        version: 0.383.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.381.0
+        version: 0.383.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.381.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.383.0
 rdoc_options: []
 require_paths:
 - lib