dependabot-hex 0.362.0 → 0.363.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b351a6e8c2d2dd21ca2b7b0352cb6c7532c1bb8bc2fbc637da2c32b69a9c560d
-  data.tar.gz: 992fd47208f7268cafdff3be6d5fbfed45a4001310197f4724756893a2c13891
+  metadata.gz: ddeca41feb6742cc3e8437f231c6f216940377a57147f2a3110da7b7352e9d93
+  data.tar.gz: c91f26dd952e63eccc559a01dd931186d30bdbcf754821d6a5f7ba82cda874a6
 SHA512:
-  metadata.gz: 50bcc2a872378edfb7b55b4b44c2de01293e379f4e44adb705356fbc3ed5d2b4f47ea1ad117e77eb802fc3680e0a72f85fcb6003bbbfc6366a228d608fde3e5c
-  data.tar.gz: 5a6ee7f8bb8994df4a6b9c9e9b8d69bf2a2ac9139d6505ba543dc5d91c6a0ab669ce69ba446260b27467ce5b103c0ed0ebfdc59add5b61ad3d4cbfdea2538f00
+  metadata.gz: a444f26c839b5063deb787ae939c0cbcd8033ce7541095953688a0098213944a7153c0e0421289ecf5192fe473cffd32f5e1b5df6392b82c137f3a924b23cac0
+  data.tar.gz: d81abb9e009de4f7b6e76ac2bc9a9cdba386266e16cbc9c5a7907252558596f3466c03c7ad7f855b5cfa678b2e85edbafe83b29f906c24ea5150be2d85f452c1

data/helpers/lib/parse_deps.exs

@@ -29,6 +29,7 @@ defmodule Parser do
   defp build_dependency(nil, dep) do
     %{
       name: dep.app,
+      package_name: dep.opts[:hex] || dep.app,
       from: Path.relative_to_cwd(dep.from),
       groups: [],
       requirement: normalise_requirement(dep.requirement),
@@ -42,6 +43,7 @@ defmodule Parser do
 
     %{
       name: dep.app,
+      package_name: dep.opts[:hex] || dep.app,
       from: Path.relative_to_cwd(dep.from),
       version: version,
       groups: groups,

data/lib/dependabot/hex/file_parser.rb

@@ -43,7 +43,8 @@ module Dependabot
                 source: dep["source"] && symbolize_keys(dep["source"]),
                 file: dep["from"]
               }],
-              package_manager: "hex"
+              package_manager: "hex",
+              metadata: { hex_package: dep["package_name"] }
             )
         end
 

data/lib/dependabot/hex/file_updater/mixfile_updater.rb

@@ -63,7 +63,7 @@ module Dependabot
         def update_requirement(content:, filename:, dependency:)
           updated_req =
             dependency.requirements.find { |r| r[:file] == filename }
-                      &.fetch(:requirement)
+                                   &.fetch(:requirement)
 
           old_req =
             dependency.previous_requirements
@@ -84,7 +84,7 @@ module Dependabot
         def update_git_pin(content:, filename:, dependency:)
           updated_pin =
             dependency.requirements.find { |r| r[:file] == filename }
-                      &.dig(:source, :ref)
+                                   &.dig(:source, :ref)
 
           old_pin =
             dependency.previous_requirements

data/lib/dependabot/hex/metadata_finder.rb

@@ -60,7 +60,9 @@ module Dependabot
       def hex_listing
         return @hex_listing unless @hex_listing.nil?
 
-        response = Dependabot::RegistryClient.get(url: "https://hex.pm/api/packages/#{dependency.name}")
+        response = Dependabot::RegistryClient.get(
+          url: "https://hex.pm/api/packages/#{dependency.metadata[:hex_package] || dependency.name}"
+        )
         @hex_listing = T.let(JSON.parse(response.body), T.nilable(T::Hash[String, T.untyped]))
       end
     end

data/lib/dependabot/hex/package/package_details_fetcher.rb

@@ -27,7 +27,10 @@ module Dependabot
         def initialize(dependency:)
           @dependency = dependency
 
-          @dependency_url = T.let("https://hex.pm/api/packages/#{dependency.name}", T.nilable(String))
+          @dependency_url = T.let(
+            "https://hex.pm/api/packages/#{dependency.metadata[:hex_package] || dependency.name}",
+            T.nilable(String)
+          )
         end
 
         sig { returns(Dependabot::Dependency) }

data/lib/dependabot/hex/update_checker/file_preparer.rb

@@ -96,7 +96,7 @@ module Dependabot
         def relax_version(content, filename:)
           old_requirement =
             dependency.requirements.find { |r| r.fetch(:file) == filename }
-                      &.fetch(:requirement)
+                                   &.fetch(:requirement)
           updated_requirement = updated_version_requirement_string(filename)
 
           Hex::FileUpdater::MixfileRequirementUpdater.new(
@@ -133,11 +133,11 @@ module Dependabot
           else
             version_for_requirement =
               dependency.requirements.filter_map { |r| r[:requirement] }
-                        .reject { |req_string| req_string.start_with?("<") }
-                        .select { |req_string| req_string.match?(version_regex) }
-                        .map { |req_string| req_string.match(version_regex) }
-                        .select { |version| version_class.correct?(version.to_s) }
-                        .max_by { |version| version_class.new(version.to_s) }
+                                     .reject { |req_string| req_string.start_with?("<") }
+                                     .select { |req_string| req_string.match?(version_regex) }
+                                     .map { |req_string| req_string.match(version_regex) }
+                                     .select { |version| version_class.correct?(version.to_s) }
+                                     .max_by { |version| version_class.new(version.to_s) }
 
             return ">= 0" unless version_for_requirement
 
@@ -156,7 +156,7 @@ module Dependabot
         def replace_git_pin(content, filename:)
           old_pin =
             dependency.requirements.find { |r| r.fetch(:file) == filename }
-                      &.dig(:source, :ref)
+                                   &.dig(:source, :ref)
 
           return content unless old_pin
           return content if old_pin == replacement_git_pin

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.362.0
+  version: 0.363.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.363.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.363.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -85,14 +85,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rspec-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.362.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.363.0
 rdoc_options: []
 require_paths:
 - lib