dependabot-hex 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9587a3a768819d1a9f8f93c794a8fb6f207c7e11505a01ceed45c3ef1b625e2d
-  data.tar.gz: c86ce17c07e9d0ee74fb8acbcb8eb135a46eb066935cdee9cb1d90eb8a97671e
+  metadata.gz: 92323d9c76236c94839493510f99be26235107905a7ad357f959c35decf99ed2
+  data.tar.gz: 4b6bddad28382f25198a679f9ee03618db2770c7b0d1b1ebd552838354b9bbc2
 SHA512:
-  metadata.gz: 4ec2563a4358e608e09046e5ca9c4cc334011211232bab4ec21b2bc00ade4ec0c634e9c8d387c14e20a46f1c85b4b67f58853d045af8a2e707b34afdc61f12b0
-  data.tar.gz: 7a3a452c29f6fc050ba510c5ded29a0b37e0a4e988bccf9d291d7b5d877ee1f420f97e141d4dbd1e35a52ed4813ef7e54bafe97ac219db2643a9b294c0a0804a
+  metadata.gz: eddd39a645ea753ed5c4c77e072f67f3b822442fea1b2f0511c7e6ee2899e23acdb3410edf4174c181dcaff2005069b0ac8fad3bc3efcc0b57c2f1f0834243d5
+  data.tar.gz: 6b09a9b0300bb8b615bd8a21d8a8ec5ac5dae8ddb91ee5fc9cf292c3bd9cff5b4d946a5514ddc7be909db31ff22a99ba5c20e7784e0b067cbfda4656221cb562

data/lib/dependabot/hex/file_updater/lockfile_updater.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -29,13 +29,13 @@ module Dependabot
           @dependencies = dependencies
           @dependency_files = dependency_files
           @credentials = credentials
+          @updated_lockfile_content = T.let(nil, T.nilable(String))
         end
 
         sig { returns(String) }
         def updated_lockfile_content
-          @updated_lockfile_content = T.let(@updated_lockfile_content, T.nilable(String))
-          @updated_lockfile_content ||=
-            SharedHelpers.in_a_temporary_directory do
+          unless @updated_lockfile_content
+            result = SharedHelpers.in_a_temporary_directory do
               write_temporary_dependency_files
               FileUtils.cp(elixir_helper_do_update_path, "do_update.exs")
 
@@ -48,6 +48,9 @@ module Dependabot
                 )
               end
             end
+            content = T.cast(result, String)
+            @updated_lockfile_content = content
+          end
 
           post_process_lockfile(@updated_lockfile_content)
         rescue SharedHelpers::HelperSubprocessFailed => e

data/lib/dependabot/hex/update_checker/version_resolver.rb

@@ -79,12 +79,15 @@ module Dependabot
 
         sig { returns(String) }
         def run_elixir_update_checker
-          SharedHelpers.run_helper_subprocess(
-            env: mix_env,
-            command: "mix run #{elixir_helper_path}",
-            function: "get_latest_resolvable_version",
-            args: [Dir.pwd, dependency.name, CredentialHelpers.hex_credentials(credentials)],
-            stderr_to_stdout: true
+          T.cast(
+            SharedHelpers.run_helper_subprocess(
+              env: mix_env,
+              command: "mix run #{elixir_helper_path}",
+              function: "get_latest_resolvable_version",
+              args: [Dir.pwd, dependency.name, CredentialHelpers.hex_credentials(credentials)],
+              stderr_to_stdout: true
+            ),
+            String
           )
         end
 

data/lib/dependabot/hex/update_checker.rb

@@ -91,7 +91,7 @@ module Dependabot
         if git_commit_checker.pinned_ref_looks_like_version? &&
            latest_git_tag_is_resolvable?
           new_tag = git_commit_checker.local_tag_for_latest_version(update_cooldown)
-          return T.must(new_tag).fetch(:commit_sha)
+          return T.must(new_tag).commit_sha
         end
 
         # If the dependency is pinned then there's nothing we can do.
@@ -126,7 +126,7 @@ module Dependabot
         # of the latest tag that looks like a version.
         if git_commit_checker.pinned_ref_looks_like_version?
           latest_tag = git_commit_checker.local_tag_for_latest_version(update_cooldown)
-          return latest_tag&.fetch(:commit_sha) || dependency.version
+          return latest_tag&.commit_sha || dependency.version
         end
 
         # If the dependency is pinned to a tag that doesn't look like a
@@ -147,7 +147,7 @@ module Dependabot
         prepared_files = FilePreparer.new(
           dependency: dependency,
           dependency_files: dependency_files,
-          replacement_git_pin: T.must(replacement_tag).fetch(:tag)
+          replacement_git_pin: T.must(replacement_tag).tag
         ).prepared_dependency_files
 
         resolver_result = VersionResolver.new(
@@ -178,7 +178,7 @@ module Dependabot
           new_tag = git_commit_checker.local_tag_for_latest_version(update_cooldown)
           return source_with_ref(
             T.must(dependency_source_details),
-            T.cast(T.must(new_tag).fetch(:tag), String)
+            T.must(new_tag).tag
           )
         end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib