dependabot-maven 0.334.0 → 0.335.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 335b5be614b54bc7da3e9fe4232a82577deeb359f8578441b1bc9bc76d42c3a2
-  data.tar.gz: fd7bca083ca599e5569bfab2a20ef6dcf83809238b07232779bfc616bd9c1022
+  metadata.gz: 3589833a72c748e0b0b44bc1ea4e93eaeb811e08d901c6d26330875c579bd790
+  data.tar.gz: 1a2e5ea242adb1bd815d524a16fadacae9f40989c80943221aa9060f8666210c
 SHA512:
-  metadata.gz: 2de9fd3c56fd3990c48d2d2f00201283038d51606de0c8061e0107aab6e707990a22923160589fdb6917564c2af0e58e13f9aaa6e75044e0f0825c6dd097775c
-  data.tar.gz: c3a8ae5ff7a8ec424d56d4750c6ce6f98b7fbef17f00ec58cadd37c63128b46d38b80c1abfe981b41286c318dd4063b12597c196f015026be723725787bcc574
+  metadata.gz: ea807d85d33999f9f002e9fd68d48482d3a39bc353b6297a7bafcfc7d17cb2ecfd408260da55067d1187808c527dd5f19c031ed21c898298bb1100420ad2c1ba
+  data.tar.gz: 05b039f34911d5aadbba4fa9a54be56839b7c3992fed21dc587fdc78b7d3169c3a54be58eccdef1d11cb8f997928e7bde618a071002f0ca6e1da81dbb5467301

data/lib/dependabot/maven/file_fetcher.rb

@@ -71,8 +71,10 @@ module Dependabot
       end
 
       sig do
-        params(pom: Dependabot::DependencyFile,
-               fetched_filenames: T::Array[String]).returns(T::Array[Dependabot::DependencyFile])
+        params(
+          pom: Dependabot::DependencyFile,
+          fetched_filenames: T::Array[String]
+        ).returns(T::Array[Dependabot::DependencyFile])
       end
       def recursively_fetch_child_poms(pom, fetched_filenames:)
         base_path = File.dirname(pom.name)
@@ -109,8 +111,10 @@ module Dependabot
       end
 
       sig do
-        params(pom: Dependabot::DependencyFile,
-               fetched_filenames: T::Array[String]).returns(T::Array[Dependabot::DependencyFile])
+        params(
+          pom: Dependabot::DependencyFile,
+          fetched_filenames: T::Array[String]
+        ).returns(T::Array[Dependabot::DependencyFile])
       end
       def recursively_fetch_relative_path_parents(pom, fetched_filenames:)
         path = parent_path_for_pom(pom)

data/lib/dependabot/maven/file_parser/maven_dependency_parser.rb

@@ -64,9 +64,11 @@ module Dependabot
         end
 
         sig do
-          params(pom: Dependabot::DependencyFile,
-                 dependency_set: Dependabot::FileParsers::Base::DependencySet,
-                 dependency_tree: T::Hash[String, T.untyped]).void
+          params(
+            pom: Dependabot::DependencyFile,
+            dependency_set: Dependabot::FileParsers::Base::DependencySet,
+            dependency_tree: T::Hash[String, T.untyped]
+          ).void
         end
         def self.extract_dependencies_from_tree(pom, dependency_set, dependency_tree)
           traverse_tree = T.let(-> {}, T.proc.params(node: T::Hash[String, T.untyped]).void)

data/lib/dependabot/maven/file_parser/pom_fetcher.rb

@@ -95,8 +95,13 @@ module Dependabot
         end
 
         sig do
-          params(group_id: String, artifact_id: String, version: String, snapshot_version: String,
-                 base_repo_url: String).returns(String)
+          params(
+            group_id: String,
+            artifact_id: String,
+            version: String,
+            snapshot_version: String,
+            base_repo_url: String
+          ).returns(String)
         end
         def remote_pom_snapshot_url(group_id, artifact_id, version, snapshot_version, base_repo_url)
           "#{base_repo_url}/" \

data/lib/dependabot/maven/file_parser/property_value_finder.rb

@@ -31,8 +31,10 @@ module Dependabot
         def initialize(dependency_files:, credentials: [])
           @dependency_files = dependency_files
           @credentials = credentials
-          @pom_fetcher = T.let(PomFetcher.new(dependency_files: dependency_files),
-                               Dependabot::Maven::FileParser::PomFetcher)
+          @pom_fetcher = T.let(
+            PomFetcher.new(dependency_files: dependency_files),
+            Dependabot::Maven::FileParser::PomFetcher
+          )
         end
 
         sig do

data/lib/dependabot/maven/file_parser.rb

@@ -95,9 +95,12 @@ module Dependabot
 
       sig { returns(T.nilable(Ecosystem::VersionManager)) }
       def language
-        @language ||= T.let(begin
-          Language.new("NOT-AVAILABLE")
-        end, T.nilable(Dependabot::Maven::Language))
+        @language ||= T.let(
+          begin
+            Language.new("NOT-AVAILABLE")
+          end,
+          T.nilable(Dependabot::Maven::Language)
+        )
       end
 
       sig { params(pom: Dependabot::DependencyFile).returns(DependencySet) }
@@ -148,8 +151,10 @@ module Dependabot
       end
 
       sig do
-        params(pom: Dependabot::DependencyFile,
-               dependency_node: Nokogiri::XML::Element).returns(T.nilable(Dependabot::Dependency))
+        params(
+          pom: Dependabot::DependencyFile,
+          dependency_node: Nokogiri::XML::Element
+        ).returns(T.nilable(Dependabot::Dependency))
       end
       def dependency_from_dependency_node(pom, dependency_node)
         return unless (name = dependency_name(dependency_node, pom))
@@ -159,8 +164,10 @@ module Dependabot
       end
 
       sig do
-        params(pom: Dependabot::DependencyFile,
-               dependency_node: Nokogiri::XML::Element).returns(T.nilable(Dependabot::Dependency))
+        params(
+          pom: Dependabot::DependencyFile,
+          dependency_node: Nokogiri::XML::Element
+        ).returns(T.nilable(Dependabot::Dependency))
       end
       def dependency_from_plugin_node(pom, dependency_node)
         return unless (name = plugin_name(dependency_node, pom))
@@ -170,8 +177,11 @@ module Dependabot
       end
 
       sig do
-        params(pom: Dependabot::DependencyFile, dependency_node: Nokogiri::XML::Element,
-               name: String).returns(T.nilable(Dependabot::Dependency))
+        params(
+          pom: Dependabot::DependencyFile,
+          dependency_node: Nokogiri::XML::Element,
+          name: String
+        ).returns(T.nilable(Dependabot::Dependency))
       end
       def build_dependency(pom, dependency_node, name)
         property_details =
@@ -198,8 +208,10 @@ module Dependabot
       end
 
       sig do
-        params(dependency_node: Nokogiri::XML::Element,
-               pom: Dependabot::DependencyFile).returns(T.nilable(String))
+        params(
+          dependency_node: Nokogiri::XML::Element,
+          pom: Dependabot::DependencyFile
+        ).returns(T.nilable(String))
       end
       def dependency_name(dependency_node, pom)
         return unless dependency_node.at_xpath("./groupId")
@@ -463,8 +475,10 @@ module Dependabot
 
       # Merge metadata from two requirements, combining all keys
       sig do
-        params(metadata1: T::Hash[Symbol, T.untyped],
-               metadata2: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped])
+        params(
+          metadata1: T::Hash[Symbol, T.untyped],
+          metadata2: T::Hash[Symbol, T.untyped]
+        ).returns(T::Hash[Symbol, T.untyped])
       end
       def merge_metadata(metadata1, metadata2)
         metadata1.merge(metadata2) do |_key, old_value, new_value|

data/lib/dependabot/maven/file_updater.rb

@@ -157,8 +157,10 @@ module Dependabot
         # Detect indentation of the file from indentation of the project tag children
         indentation_config = detect_indentation_config(project)
 
-        dependency_management, dependency_management_created = ensure_dependency_management_element(project,
-                                                                                                    indentation_config)
+        dependency_management, dependency_management_created = ensure_dependency_management_element(
+          project,
+          indentation_config
+        )
         dependencies, dependencies_created = ensure_dependencies_element(dependency_management, indentation_config)
 
         if dependencies.children.last&.to_s&.start_with?("\n")
@@ -168,8 +170,13 @@ module Dependabot
         end
 
         # Create the dependency element with the required fields, adding the appropriate indentation as text nodes
-        add_dependency_entry(dependency, requirement, dependencies, indentation_config[:levels][:dependency],
-                             indentation_config[:levels][:dependencies])
+        add_dependency_entry(
+          dependency,
+          requirement,
+          dependencies,
+          indentation_config[:levels][:dependency],
+          indentation_config[:levels][:dependencies]
+        )
 
         # Close all sections with appropriate indentation
         dependencies.add_text("\n#{indentation_config[:levels][:dependency_management]}")
@@ -182,8 +189,10 @@ module Dependabot
 
         # If dependencyManagement was not created, we just replace the existing dependencyManagement element
         # with the updated one, preserving the rest of the document
-        content.gsub(%r{\<dependencyManagement\>[\s\S]*\</dependencyManagement\>},
-                     dependency_management.to_s)
+        content.gsub(
+          %r{\<dependencyManagement\>[\s\S]*\</dependencyManagement\>},
+          dependency_management.to_s
+        )
       end
 
       sig do
@@ -267,8 +276,10 @@ module Dependabot
       end
 
       sig do
-        params(project: REXML::Element,
-               indent_config: T::Hash[Symbol, T.untyped]).returns([REXML::Element, T::Boolean])
+        params(
+          project: REXML::Element,
+          indent_config: T::Hash[Symbol, T.untyped]
+        ).returns([REXML::Element, T::Boolean])
       end
       def ensure_dependency_management_element(project, indent_config)
         dependency_management = project.get_elements("dependencyManagement").first
@@ -284,8 +295,10 @@ module Dependabot
       end
 
       sig do
-        params(dependency_management: REXML::Element,
-               indent_config: T::Hash[Symbol, T.untyped]).returns([REXML::Element, T::Boolean])
+        params(
+          dependency_management: REXML::Element,
+          indent_config: T::Hash[Symbol, T.untyped]
+        ).returns([REXML::Element, T::Boolean])
       end
       def ensure_dependencies_element(dependency_management, indent_config)
         dependencies = dependency_management.get_elements("dependencies").first
@@ -301,12 +314,21 @@ module Dependabot
       end
 
       sig do
-        params(dependency: Dependabot::Dependency, requirement: T::Hash[Symbol, T.untyped],
-               dependencies_node: REXML::Element, current_indentation_level: String,
-               parent_indentation_level: String).void
+        params(
+          dependency: Dependabot::Dependency,
+          requirement: T::Hash[Symbol, T.untyped],
+          dependencies_node: REXML::Element,
+          current_indentation_level: String,
+          parent_indentation_level: String
+        ).void
       end
-      def add_dependency_entry(dependency, requirement, dependencies_node, current_indentation_level,
-                               parent_indentation_level)
+      def add_dependency_entry(
+        dependency,
+        requirement,
+        dependencies_node,
+        current_indentation_level,
+        parent_indentation_level
+      )
         dependency_node = REXML::Element.new("dependency", dependencies_node)
         dependency_node.add_text("\n#{current_indentation_level}")
         group_id = REXML::Element.new("groupId", dependency_node)

data/lib/dependabot/maven/metadata_finder.rb

@@ -167,8 +167,10 @@ module Dependabot
           source&.fetch("url") ||
           # TODO: Move central_repo_url method to a more appropriate place
           # Then we can remove T.nilable from pom_fetcher
-          Dependabot::Maven::FileParser::RepositoriesFinder.new(credentials: credentials,
-                                                                pom_fetcher: nil).central_repo_url
+          Dependabot::Maven::FileParser::RepositoriesFinder.new(
+            credentials: credentials,
+            pom_fetcher: nil
+          ).central_repo_url
       end
 
       sig { returns(String) }

data/lib/dependabot/maven/package/package_details_fetcher.rb

@@ -57,6 +57,7 @@ module Dependabot
 
         sig { returns(T::Array[T.untyped]) }
         attr_reader :credentials
+
         sig { returns(T::Array[T.untyped]) }
         attr_reader :forbidden_urls
 

data/lib/dependabot/maven/update_checker/property_updater.rb

@@ -27,8 +27,11 @@ module Dependabot
           ).void
         end
         def initialize(
-          dependency:, dependency_files:, credentials:,
-          ignored_versions:, target_version_details:,
+          dependency:,
+          dependency_files:,
+          credentials:,
+          ignored_versions:,
+          target_version_details:,
           update_cooldown: nil
         )
           @dependency       = dependency

data/lib/dependabot/maven/update_checker/requirements_updater.rb

@@ -31,8 +31,12 @@ module Dependabot
             properties_to_update: T::Array[String]
           ).void
         end
-        def initialize(requirements:, latest_version:, source_url:,
-                       properties_to_update:)
+        def initialize(
+          requirements:,
+          latest_version:,
+          source_url:,
+          properties_to_update:
+        )
           @requirements = requirements
           @source_url = source_url
           @properties_to_update = properties_to_update

data/lib/dependabot/maven/update_checker/version_finder.rb

@@ -27,9 +27,15 @@ module Dependabot
             raise_on_ignored: T::Boolean
           ).void
         end
-        def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions:, security_advisories:,
-                       cooldown_options: nil, raise_on_ignored: false)
+        def initialize(
+          dependency:,
+          dependency_files:,
+          credentials:,
+          ignored_versions:,
+          security_advisories:,
+          cooldown_options: nil,
+          raise_on_ignored: false
+        )
           @forbidden_urls      = T.let([], T::Array[String])
           @dependency_metadata = T.let({}, T::Hash[T.untyped, Nokogiri::XML::Document])
           @auth_headers_finder = T.let(nil, T.nilable(Utils::AuthHeadersFinder))

data/lib/dependabot/maven/update_checker.rb

@@ -28,12 +28,19 @@ module Dependabot
         )
           .void
       end
-      def initialize(dependency:, dependency_files:, credentials:,
-                     repo_contents_path: nil, ignored_versions: [],
-                     raise_on_ignored: false, security_advisories: [],
-                     requirements_update_strategy: nil, dependency_group: nil,
-                     update_cooldown: nil,
-                     options: {})
+      def initialize(
+        dependency:,
+        dependency_files:,
+        credentials:,
+        repo_contents_path: nil,
+        ignored_versions: [],
+        raise_on_ignored: false,
+        security_advisories: [],
+        requirements_update_strategy: nil,
+        dependency_group: nil,
+        update_cooldown: nil,
+        options: {}
+      )
         super
 
         @version_finder = T.let(nil, T.nilable(VersionFinder))

data/lib/dependabot/maven/version.rb

@@ -13,13 +13,16 @@ module Dependabot
       extend T::Sig
       extend T::Helpers
 
-      PRERELEASE_QUALIFIERS = T.let([
-        Dependabot::Maven::VersionParser::ALPHA,
-        Dependabot::Maven::VersionParser::BETA,
-        Dependabot::Maven::VersionParser::MILESTONE,
-        Dependabot::Maven::VersionParser::RC,
-        Dependabot::Maven::VersionParser::SNAPSHOT
-      ].freeze, T::Array[Integer])
+      PRERELEASE_QUALIFIERS = T.let(
+        [
+          Dependabot::Maven::VersionParser::ALPHA,
+          Dependabot::Maven::VersionParser::BETA,
+          Dependabot::Maven::VersionParser::MILESTONE,
+          Dependabot::Maven::VersionParser::RC,
+          Dependabot::Maven::VersionParser::SNAPSHOT
+        ].freeze,
+        T::Array[Integer]
+      )
 
       VERSION_PATTERN =
         "[0-9a-zA-Z]+" \

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.334.0
+  version: 0.335.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.334.0
+        version: 0.335.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -113,56 +113,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -271,7 +271,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.335.0
 rdoc_options: []
 require_paths:
 - lib