dependabot-nix 0.388.0 → 0.390.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9b1bbe415750b2bde6421c3f39021bbb7b7e5c6a2f8c4c66a179e8c099b64a17
-  data.tar.gz: c80b5a3ab67b4298536611b0643ffc039aab2ec0b553e17343de57743ebbfc8a
+  metadata.gz: d202c6b73e3df1be5c7bdc71f0d6564a085e6b7ba02c8eda3f9a3beb6f266add
+  data.tar.gz: 11d046b5db10a8adbcad03ff2ac21e6ddace3e4e7a77be2d8f3acbef1a461e0f
 SHA512:
-  metadata.gz: d33f39c1729c6897b25f5aafb0720e8793a294dd7d9bd0c56e9694e627b48b66feb16808c2dc6b2b6a529039b0494201ba12ecc99caa41e06467b89eaf30c583
-  data.tar.gz: b97f0fe3ef4bb86e2c9ee294266fb03ede084e38f3bcb53baba2701963b0357695ba441c6bdb6af32d294f3dd517d3d7cf3e6adbc9540757de703a93814dcf5d
+  metadata.gz: 3c0b4b039bd9e35dff8cc7b16ac79fe3f8a23a4251b657bc36eda04ddbcda17e4034259836ead7f4dcb7ec9848d9f935d940efb3b21fa44db0e4c91b780f2972
+  data.tar.gz: 894e814193007e5d30772aa4806e1598bc77527bb50a3d29105be421f3d69d007436d479f9475699effa2647d5db99718b0c20bdf620c29a7ae791c7453d6d6b

data/lib/dependabot/nix/package/package_details_fetcher.rb

@@ -168,12 +168,12 @@ module Dependabot
 
         sig { returns(T.nilable(String)) }
         def source_url
-          dependency.source_details(allowed_types: ["git"])&.fetch(:url, nil)
+          dependency.source_string("url", allowed_types: ["git"])
         end
 
         sig { returns(T.nilable(String)) }
         def branch_ref
-          dependency.source_details(allowed_types: ["git"])&.fetch(:ref, nil)
+          dependency.source_string("ref", allowed_types: ["git"])
         end
 
         sig { returns(Dependabot::Clients::GithubWithRetries) }

data/lib/dependabot/nix/update_checker/versioned_branch_finder.rb

@@ -105,7 +105,7 @@ module Dependabot
         def git_metadata_fetcher
           @git_metadata_fetcher ||= T.let(
             Dependabot::GitMetadataFetcher.new(
-              url: dependency.source_details&.fetch(:url, nil),
+              url: T.must(dependency.source_string("url")),
               credentials: credentials
             ),
             T.nilable(Dependabot::GitMetadataFetcher)

data/lib/dependabot/nix/update_checker.rb

@@ -80,10 +80,10 @@ module Dependabot
 
       sig { returns(T::Boolean) }
       def tarball_channel_input?
-        source = dependency.source_details(allowed_types: ["tarball"])
-        return false unless source
+        url = dependency.source_string("url", allowed_types: ["tarball"])
+        return false unless url
 
-        Channel.channel_url?(source[:url] || source["url"])
+        Channel.channel_url?(url)
       end
 
       sig { returns(T.nilable(String)) }
@@ -91,7 +91,7 @@ module Dependabot
         latest_channel&.fetch(:commit_sha) || channel_version_finder.current_channel_revision
       end
 
-      sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements_for_channel
         result = latest_channel
         return dependency.requirements unless result
@@ -100,7 +100,9 @@ module Dependabot
           source = req[:source]
           next req unless source
 
-          req.merge(source: source.merge(ref: result[:channel], url: result[:url]))
+          Dependabot::DependencyRequirement.create(
+            req.merge(source: source.merge(ref: result[:channel], url: result[:url]))
+          )
         end
       end
 
@@ -127,27 +129,23 @@ module Dependabot
 
       sig { returns(T.nilable(String)) }
       def tarball_channel_name
-        source = dependency.source_details(allowed_types: ["tarball"])
-        return unless source
-
-        ref = source[:ref] || source["ref"]
+        ref = dependency.source_string("ref", allowed_types: ["tarball"])
         return ref if ref
 
         # Fall back to the URL's channel when the source omits a ref.
-        Channel.channel_name_from_url(source[:url] || source["url"])
+        Channel.channel_name_from_url(dependency.source_string("url", allowed_types: ["tarball"]))
       end
 
       # Preserve the flake's existing tarball suffix (xz, gz, bz2) on a bump.
       sig { returns(String) }
       def tarball_channel_extension
-        source = dependency.source_details(allowed_types: ["tarball"])
-        url = source && (source[:url] || source["url"])
+        url = dependency.source_string("url", allowed_types: ["tarball"])
         Channel.extension_from_url(url) || Channel::DEFAULT_EXTENSION
       end
 
       # --- Tag-pinned ref support ---
 
-      sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements_for_tag
         new_tag = latest_version_tag
         return dependency.requirements unless new_tag
@@ -156,7 +154,7 @@ module Dependabot
           source = req[:source]
           next req unless source
 
-          req.merge(source: source.merge(ref: new_tag[:tag], branch: nil))
+          Dependabot::DependencyRequirement.create(req.merge(source: source.merge(ref: new_tag[:tag], branch: nil)))
         end
       end
 
@@ -176,7 +174,7 @@ module Dependabot
 
       # --- Versioned branch support ---
 
-      sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements_for_versioned_branch
         result = latest_versioned_branch
         return dependency.requirements unless result
@@ -185,7 +183,7 @@ module Dependabot
           source = req[:source]
           next req unless source
 
-          req.merge(source: source.merge(ref: result[:branch], branch: nil))
+          Dependabot::DependencyRequirement.create(req.merge(source: source.merge(ref: result[:branch], branch: nil)))
         end
       end
 
@@ -241,7 +239,7 @@ module Dependabot
 
       sig { returns(T.nilable(String)) }
       def dependency_source_ref
-        dependency.source_details(allowed_types: ["git"])&.fetch(:ref, nil)
+        dependency.source_string("ref", allowed_types: ["git"])
       end
 
       sig { returns(T.nilable(VersionedBranchFinder)) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nix
 version: !ruby/object:Gem::Version
-  version: 0.388.0
+  version: 0.390.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.388.0
+        version: 0.390.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.388.0
+        version: 0.390.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -263,7 +263,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.388.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.390.0
 rdoc_options: []
 require_paths:
 - lib