dependabot-maven 0.382.0 → 0.384.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9949b8b19d460ff8b07e5d322fd98c5f5ba0df32c357edf4ba549b0590939b29
-  data.tar.gz: 2c7445b4d2522a3a33d10b8c4329d9deb4b883c0f71c8fd8f6fe1f8b61f073b2
+  metadata.gz: 1468ff99034fd07059864a4daa0c90b57ef302c00f80951de1211d7c6aa469f4
+  data.tar.gz: 16d1cfdad816dfc6a74054fc77d8387a770ac43336aa2b9f8e57c88edfad7ef9
 SHA512:
-  metadata.gz: 56ca26ba8eeb0f759985db8185a72814e38f931fc39d591289af09b7b319c60078dd8d26a8a4fa373c4b7f843c7bb749604d908612ec49bbbbdbbc7638909384
-  data.tar.gz: 277835bdc875c4a745a31c6dff74ce0d2dc720b4c9eb445c8f2890e3182089a7b25c7df197ac40a5edd7a27268ad4c46789148f5d746ef8bd45d987c07669d25
+  metadata.gz: 7bf0bc32b3932773e54347de3c1a2491bb613e46cfe615d25eb1014d7bab8695b9787ef5551cf3db8b997f6d83b4edd4693e871e76ed72b3366b4c22b1f23f15
+  data.tar.gz: ad7158fb4e4c40605f0b83c84589b9278d3c8d5eb9f791fffa6438d59a365a53001447a831a1463cfde8d763e3d2c9af4a6fe9df3f07d982410ae6ee1bce50a4

data/lib/dependabot/maven/file_parser/repositories_finder.rb

@@ -102,6 +102,11 @@ module Dependabot
           }
         end
 
+        sig { params(entry: T::Hash[Symbol, T.untyped]).returns(T::Boolean) }
+        def disabled_repo?(entry)
+          entry[:releases] == "false" && entry[:snapshots] == "false"
+        end
+
         sig { params(entry: T::Hash[Symbol, T.untyped]).returns(T::Boolean) }
         def snapshot_repo(entry)
           entry[:releases] == "false" && (entry[:snapshots].nil? || entry[:snapshots] == "true")
@@ -168,6 +173,7 @@ module Dependabot
 
           return if property_blocked?(entry)
           return unless http_url?(entry)
+          return if disabled_repo?(entry)
 
           serialize_urls(entry, pom)
         end

data/lib/dependabot/maven/requirement.rb

@@ -29,7 +29,7 @@ module Dependabot
         RUBY_STYLE_PATTERN
       end
 
-      sig { params(obj: T.any(String, Gem::Version)).returns(T::Array[T.any(String, T.untyped)]) }
+      sig { params(obj: T.any(String, Gem::Version)).returns(T::Array[T.any(String, Gem::Version)]) }
       def self.parse(obj)
         return ["=", Maven::Version.new(obj.to_s)] if obj.is_a?(Gem::Version)
 
@@ -50,7 +50,7 @@ module Dependabot
         end
       end
 
-      sig { params(version: T.untyped).returns(T::Boolean) }
+      sig { params(version: Object).returns(T::Boolean) }
       def satisfied_by?(version)
         version = Maven::Version.new(version.to_s)
         super

data/lib/dependabot/maven/update_checker/requirements_updater.rb

@@ -6,6 +6,7 @@
 # https://maven.apache.org/pom.html#Dependencies      #
 #######################################################
 
+require "dependabot/dependency_requirement"
 require "dependabot/requirements_updater/base"
 require "dependabot/maven/update_checker"
 require "dependabot/maven/version"
@@ -25,7 +26,7 @@ module Dependabot
 
         sig do
           params(
-            requirements: T::Array[T::Hash[Symbol, T.untyped]],
+            requirements: T::Array[Dependabot::DependencyRequirement],
             latest_version: T.nilable(T.any(Version, String)),
             source_url: T.nilable(String),
             properties_to_update: T::Array[String]
@@ -45,7 +46,7 @@ module Dependabot
           @latest_version = T.let(version_class.new(latest_version), Version)
         end
 
-        sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+        sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
         def updated_requirements
           return requirements unless latest_version
 
@@ -62,13 +63,13 @@ module Dependabot
             new_req = update_requirement(req[:requirement])
             next req if new_req == req[:requirement]
 
-            req.merge(requirement: new_req, source: updated_source)
+            Dependabot::DependencyRequirement.create(req.merge(requirement: new_req, source: updated_source))
           end
         end
 
         private
 
-        sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+        sig { returns(T::Array[Dependabot::DependencyRequirement]) }
         attr_reader :requirements
 
         sig { returns(T.nilable(Version)) }

data/lib/dependabot/maven/update_checker.rb

@@ -96,14 +96,12 @@ module Dependabot
           declarations_using_a_property
           .map { |req| req.dig(:metadata, :property_name) }
 
-        wrap_requirements(
-          RequirementsUpdater.new(
-            requirements: dependency.requirements,
-            latest_version: preferred_resolvable_version&.to_s,
-            source_url: preferred_version_details&.fetch(:source_url),
-            properties_to_update: property_names
-          ).updated_requirements
-        )
+        RequirementsUpdater.new(
+          requirements: dependency.requirements,
+          latest_version: preferred_resolvable_version&.to_s,
+          source_url: preferred_version_details&.fetch(:source_url),
+          properties_to_update: property_names
+        ).updated_requirements
       end
 
       sig { override.returns(T::Boolean) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.382.0
+  version: 0.384.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.382.0
+        version: 0.384.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.382.0
+        version: 0.384.0
 - !ruby/object:Gem::Dependency
   name: rexml
   requirement: !ruby/object:Gem::Requirement
@@ -291,7 +291,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.382.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.384.0
 rdoc_options: []
 require_paths:
 - lib
@@ -306,7 +306,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 3.3.0
 requirements: []
-rubygems_version: 3.7.2
+rubygems_version: 4.0.14
 specification_version: 4
 summary: Provides Dependabot support for Maven
 test_files: []