dependabot-julia 0.400.0 → 0.401.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 22c71ce1df7cae71a73e4cf03663b35be32f1026a1f84f4615450ba449062261
-  data.tar.gz: 408a55df020bd8588d50a2cc0db837e524bf2a3dc3d59588ec3bf20aed071d5b
+  metadata.gz: 398595cb4fa23d10fc7222d9efabbe19233383ad331a3db60cdf9d7d4305db42
+  data.tar.gz: 9017711a76c26f29f4d783028772647ad3977291ce08d63e73cb47889dfba4ce
 SHA512:
-  metadata.gz: f714959e016ac030a54c39aa8d59e3302ad06419dc812e466a755a746f68e0f25a42e2762da0f8d92889b082c098bfff9946284e6584801561fc2eb56437ae4d
-  data.tar.gz: f5175b774a60457d5e84d8f68aefb54a985bc05f6a6859f1d9ded13aae32109442d72ae3f27998916062e96fc4bafd87d1d78b0735ad2e8c3129ce72dd4d651f
+  metadata.gz: c0bdb2c5caeb3e37db65702f1eaa3713b16687772fef049aea556d60c33946bd445aca6eb1ba6aaa8c55bfc814172d6dbf9107a27ed9db063c151ddab4737870
+  data.tar.gz: 0b409f8b384e0690a26fb697750e30551d7f4e8fb07f246f276d068dfa2225d9027d99bd088fb1fa0fc8d3e577ec2d977c5ea0b737b1cbb531237df49b7e2f1d

data/lib/dependabot/julia/file_updater.rb

@@ -224,28 +224,27 @@ module Dependabot
 
       private
 
-      # A "<0.0.1" bound on a stdlib looks like a bug unless explained
+      # A "<0.0.1" bound on a stdlib looks like a bug unless explained.
+      # The text names no packages, so a PR across several directories shows it only once.
       sig { void }
       def add_zero_version_bound_notice
-        names = dependencies.filter_map do |dependency|
-          next unless dependency.metadata.key?(:julia_stdlib_versions)
-          next if zero_version_bound?(dependency.previous_requirements)
-          next unless zero_version_bound?(dependency.requirements)
-
-          "`#{dependency.name}`"
+        bound_added = dependencies.any? do |dependency|
+          dependency.metadata.key?(:julia_stdlib_versions) &&
+            !zero_version_bound?(dependency.previous_requirements) &&
+            zero_version_bound?(dependency.requirements)
         end
-        return if names.empty?
+        return unless bound_added
 
-        subject = names.one? ? "#{names.first} is a standard library" : "#{names.join(', ')} are standard libraries"
         @notices << Dependabot::Notice.new(
           mode: Dependabot::Notice::NoticeMode::INFO,
           type: "julia_stdlib_zero_version_bound",
           package_manager_name: "Pkg",
           title: "Why stdlib compat entries include `<0.0.1`",
-          description: "#{subject}. Before Julia 1.10, `Pkg.test()` gave standard libraries version 0.0.0, " \
-                       "so while the `julia` compat entry admits those releases, a stdlib compat entry needs " \
-                       "`<0.0.1` for tests to resolve. Raising the `julia` compat entry to `1.10` or later " \
-                       "removes the need for it. See the [stdlib compat PSA](#{STDLIB_COMPAT_PSA_URL}).",
+          description: "This update adds `<0.0.1` to standard library compat entries. Before Julia 1.10, " \
+                       "`Pkg.test()` gave standard libraries version 0.0.0, so while the `julia` compat entry " \
+                       "admits those releases, a stdlib compat entry needs `<0.0.1` for tests to resolve. " \
+                       "Raising the `julia` compat entry to `1.10` or later removes the need for it. " \
+                       "See the [stdlib compat PSA](#{STDLIB_COMPAT_PSA_URL}).",
           show_in_pr: true,
           show_alert: false
         )

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-julia
 version: !ruby/object:Gem::Version
-  version: 0.400.0
+  version: 0.401.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.400.0
+        version: 0.401.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.400.0
+        version: 0.401.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.400.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.401.0
 rdoc_options: []
 require_paths:
 - lib