dependabot-opentofu 0.381.0 → 0.383.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9efa83d2521520806e2c6cd3d6370dc8e1d49b6e68a93d219551dc3f2fa3ded6
-  data.tar.gz: 7217d56fdd25eb1c25b0b0002cf8422b751319a595c63e44d785f6f0bf22c9f2
+  metadata.gz: fc4253cdce3171a37489fb046de7882875e655c15b56732bebf43a754546ab4a
+  data.tar.gz: ea6af31292e7683f9a0d5948efe78df36a4cdb1f77589bc86fb2f18e6a6bcb05
 SHA512:
-  metadata.gz: 9d8763467a857b853c291d35e6cd778eb6f901f2097c9d1bc1e0e02603b02b1aa0c93d35d4c9afc0ea348f8a8c77d180acabec66e6d3280dc402587ce069ce63
-  data.tar.gz: 02bbe67e8ebb9bc9385465c5cc68be15d1f410271490d4467338293c53e2fb2d612bd4a27ef87ffbbed1da5225ffba531a369d39a2e19348a4fb4d46edcefa37
+  metadata.gz: 7d9d8a564be61e229656b4d3e86a0bd366e07aa2cffdda3e244f067db8f5d2b640c8301cee04362eb60189674a5affe9c148a0408370884771667cd9bd3a7bc7
+  data.tar.gz: 3250c78283dbe1f3f045bec1e1be132464038696c9ddf16feab9b5181310a1f8fee05070e33cc9fd8dea179b99baf2ec39ba8e5eae5d26bc46cb13a4a50a6163

data/lib/dependabot/opentofu/requirements_updater.rb

@@ -8,6 +8,7 @@
 
 require "sorbet-runtime"
 
+require "dependabot/dependency_requirement"
 require "dependabot/opentofu/version"
 require "dependabot/opentofu/requirement"
 
@@ -50,18 +51,21 @@ module Dependabot
     class RequirementsUpdater
       extend T::Sig
 
-      # @param requirements [Hash{Symbol => String, Array, Hash}]
+      # @param requirements [Array<Dependabot::DependencyRequirement>]
       # @param latest_version [Dependabot::Opentofu::Version]
       # @param tag_for_latest_version [String, NilClass]
       sig do
         params(
-          requirements: T::Array[T::Hash[Symbol, T.untyped]],
+          requirements: T::Array[Dependabot::DependencyRequirement],
           latest_version: T.nilable(Dependabot::Version::VersionParameter),
           tag_for_latest_version: T.nilable(String)
         ).void
       end
       def initialize(requirements:, latest_version:, tag_for_latest_version:)
-        @requirements = requirements
+        @requirements = T.let(
+          requirements.map { |req| Dependabot::DependencyRequirement.create(req) },
+          T::Array[Dependabot::DependencyRequirement]
+        )
         @tag_for_latest_version = tag_for_latest_version
 
         return unless latest_version
@@ -70,12 +74,12 @@ module Dependabot
         @latest_version = T.let(version_class.new(latest_version), Dependabot::Opentofu::Version)
       end
 
-      # @return requirements [Hash{Symbol => String, Array, Hash}]
+      # @return requirements [Array<Dependabot::DependencyRequirement>]
       #   * requirement [String, NilClass] the updated version constraint
       #   * groups [Array] no-op for OpenTofu
       #   * file [String] the file that specified this dependency
       #   * source [Hash{Symbol => String}] The updated git or registry source details
-      sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements
         # NOTE: Order is important here. The FileUpdater needs the updated
         # requirement at index `i` to correspond to the previous requirement
@@ -92,7 +96,7 @@ module Dependabot
 
       private
 
-      sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       attr_reader :requirements
 
       sig { returns(Dependabot::Opentofu::Version) }
@@ -101,15 +105,15 @@ module Dependabot
       sig { returns(T.nilable(String)) }
       attr_reader :tag_for_latest_version
 
-      sig { params(req: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped]) }
+      sig { params(req: Dependabot::DependencyRequirement).returns(Dependabot::DependencyRequirement) }
       def update_git_requirement(req)
         return req unless req.dig(:source, :ref)
         return req unless tag_for_latest_version
 
-        req.merge(source: req[:source].merge(ref: tag_for_latest_version))
+        Dependabot::DependencyRequirement.create(req.merge(source: req[:source].merge(ref: tag_for_latest_version)))
       end
 
-      sig { params(req: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped]) }
+      sig { params(req: Dependabot::DependencyRequirement).returns(Dependabot::DependencyRequirement) }
       def update_oci_requirement(req)
         return req unless defined?(@latest_version) && @latest_version
         return req if req.dig(:source, :digest)
@@ -118,12 +122,14 @@ module Dependabot
         new_tag = latest_version.to_s
         return req if req.dig(:source, :tag) == new_tag
 
-        req.merge(
-          source: req[:source].merge(tag: new_tag, version: new_tag)
+        Dependabot::DependencyRequirement.create(
+          req.merge(
+            source: req[:source].merge(tag: new_tag, version: new_tag)
+          )
         )
       end
 
-      sig { params(req: T::Hash[Symbol, T.untyped]).returns(T::Hash[Symbol, T.untyped]) }
+      sig { params(req: Dependabot::DependencyRequirement).returns(Dependabot::DependencyRequirement) }
       def update_registry_requirement(req)
         return req if req.fetch(:requirement).nil?
 
@@ -139,7 +145,7 @@ module Dependabot
             update_range(string_req).join(", ")
           end
 
-        req.merge(requirement: new_req)
+        Dependabot::DependencyRequirement.create(req.merge(requirement: new_req))
       end
 
       # Updates the version in a "~>" constraint to allow the given version

data/lib/dependabot/opentofu/update_checker.rb

@@ -46,7 +46,7 @@ module Dependabot
         nil
       end
 
-      sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { override.returns(T::Array[Dependabot::DependencyRequirement]) }
       def updated_requirements
         RequirementsUpdater.new(
           requirements: dependency.requirements,

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-opentofu
 version: !ruby/object:Gem::Version
-  version: 0.381.0
+  version: 0.383.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.381.0
+        version: 0.383.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.381.0
+        version: 0.383.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.381.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.383.0
 rdoc_options: []
 require_paths:
 - lib