dependabot-pre_commit 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0098eceacf0a179706e514f8c6379b00a3a49e2ae94e37e45a413cf211632962'
-  data.tar.gz: 6fcdb95b29f47a4ed8c5919c05f0a79ec76cb3947b849b6a8731abfa775bb07a
+  metadata.gz: 2bfe9bb22dc185a3f722c6fdcbe055916d6f397b93056d5f7bb82f38a6d1722e
+  data.tar.gz: 14564e38830155479234245206f051bbed756090da8eae6f20d8757d41188471
 SHA512:
-  metadata.gz: 073542743a4eab72eb4f8da4b0ea8570d16c17ec68b5033bc4ea6a45c7e513678b80856427b4b86709688c2c917448014fd2e49960daf31d915db4159ac2a69c
-  data.tar.gz: 9f09ffc14a9102a583f8d1d455ce2b70b6de767c976b249110134a3cbb944a8fea17ebd596f7252b4416cc6daba3f8de9826d300ecf056cba4926b48580811a5
+  metadata.gz: 0a978739dd13991e522432c9ce44186414a713b4366dfa9f023199e3b54413ffc86e850d21c9544235435980bd0419f8aa97c7e96ed7a31a6d789318ba50028b
+  data.tar.gz: da754260a6103bfc2575d468c92c9313e93ddccd78215d524e85f9537461709f1186e2d0b6fa833ddaf4279edd73dc305f893c3eb28d6baf381c55d6d63f6216

data/lib/dependabot/pre_commit/file_parser/hook_language_fetcher.rb

@@ -99,15 +99,14 @@ module Dependabot
           ).returns(T.nilable(T::Array[T::Hash[String, Object]]))
         end
         def fetch_from_github(source, revision)
-          response = github_client.send(
-            :contents,
+          response = github_client.contents(
             source.repo,
             path: HOOKS_FILE,
             ref: revision
           )
-          return nil unless response
 
-          content = Base64.decode64(response.content)
+          resource = T.cast(response, Sawyer::Resource)
+          content = Base64.decode64(T.cast(resource[:content], String))
           parse_hooks_yaml(content)
         rescue Octokit::NotFound
           Dependabot.logger.debug("#{HOOKS_FILE} not found in #{source.repo}@#{revision}")

data/lib/dependabot/pre_commit/package/package_details_fetcher.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -62,7 +62,7 @@ module Dependabot
         def version_tag_release
           return unless git_commit_checker.pinned_ref_looks_like_version? && latest_version_tag
 
-          latest_version = pre_commit_version(latest_version_tag&.fetch(:version))
+          latest_version = pre_commit_version(tag_version(T.must(latest_version_tag)))
           return unless latest_version
 
           return current_version if shortened_semver_eq?(dependency.version, latest_version.to_s)
@@ -76,7 +76,7 @@ module Dependabot
 
           if latest_version_tag
             if git_commit_checker.local_tag_for_pinned_sha || version_comment?
-              return pre_commit_version(T.must(latest_version_tag).fetch(:version))
+              return pre_commit_version(tag_version(T.must(latest_version_tag)))
             end
 
             return latest_commit_for_pinned_ref
@@ -94,7 +94,7 @@ module Dependabot
               end
 
               ref = git_commit_checker.local_ref_for_latest_version_matching_existing_precision
-              return ref if ref && current_version && ref.fetch(:version) > current_version
+              return ref if ref && current_version && tag_version(ref) && T.must(tag_version(ref)) > current_version
 
               git_commit_checker.local_ref_for_latest_version_lower_precision
             end,
@@ -126,6 +126,14 @@ module Dependabot
           git_commit_checker.max_local_tag(matching)
         end
 
+        sig { params(tag: T::Hash[Symbol, Object]).returns(T.nilable(Gem::Version)) }
+        def tag_version(tag)
+          return tag.version if tag.is_a?(Dependabot::GitTagDetails)
+
+          version = tag[:version]
+          version if version.is_a?(Gem::Version)
+        end
+
         sig do
           params(
             prefix: String,

data/lib/dependabot/pre_commit/update_checker.rb

@@ -172,7 +172,7 @@ module Dependabot
         # Return the git tag if updating a pinned version
         if source_git_commit_checker.pinned_ref_looks_like_version? &&
            (new_tag = T.must(latest_version_finder).latest_version_tag)
-          return T.cast(new_tag.fetch(:tag), String)
+          return tag_name(new_tag)
         end
 
         # Return the pinned git commit if one is available
@@ -189,9 +189,7 @@ module Dependabot
         new_tag = T.must(latest_version_finder).latest_version_tag
 
         if new_tag
-          if version_from_comment || git_commit_checker.local_tag_for_pinned_sha
-            return T.cast(new_tag.fetch(:commit_sha), String)
-          end
+          return tag_commit_sha(new_tag) if version_from_comment || git_commit_checker.local_tag_for_pinned_sha
 
           return latest_commit_for_pinned_ref
         end
@@ -203,6 +201,20 @@ module Dependabot
         nil
       end
 
+      sig { params(tag: T::Hash[Symbol, Object]).returns(String) }
+      def tag_name(tag)
+        return tag.tag if tag.is_a?(Dependabot::GitTagDetails)
+
+        T.cast(tag.fetch(:tag), String)
+      end
+
+      sig { params(tag: T::Hash[Symbol, Object]).returns(String) }
+      def tag_commit_sha(tag)
+        return T.must(tag.commit_sha) if tag.is_a?(Dependabot::GitTagDetails)
+
+        T.cast(tag.fetch(:commit_sha), String)
+      end
+
       sig { returns(Dependabot::GitCommitChecker) }
       def git_commit_checker
         @git_commit_checker ||= T.let(git_helper.git_commit_checker, T.nilable(Dependabot::GitCommitChecker))

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pre_commit
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,84 +15,84 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: dependabot-cargo
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: dependabot-common
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: dependabot-go_modules
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: dependabot-npm_and_yarn
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: dependabot-python
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -338,7 +338,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib