dependabot-pub 0.236.0 → 0.237.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/pub/file_fetcher.rb +7 -2
  3. data/lib/dependabot/pub/metadata_finder.rb +4 -1
  4. metadata +21 -7
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 36f052dd906920fc5c68c2dbf2084d9b337c266751ef973b9f1954d0796d6ba1
4
- data.tar.gz: d1cc31d95ee6656b12e4c95e68ab0b66978af35b5e81a4c92401dc1e9a097c1c
3
+ metadata.gz: d3996df184e645eb823e344e71e60ca1f29fc90180834eb5cc02082ec0e58b27
4
+ data.tar.gz: 36fac6cd7ba5072efd8e3212f7ec3a5198e6b6a1d3550ff8fb58cc7efbe2cbc4
5
5
  SHA512:
6
- metadata.gz: 586a79ca8b49657c7c1cb4eed2f9acad80e42f15928be30783e91f4bf73363030f90cc40e7dd699a3a489d0601ca039de8fbc91cf949ae9ff026072d4f4d1c73
7
- data.tar.gz: 0c342abec6139b397c394aa256a3678b79c4d20181d81178aff74bbaa34a787703e805b59609be092d5e5c11111c67f081b38dbb276a2bcf47edc8bf513bb999
6
+ metadata.gz: 1507d854bec1cf0f39cc3749581af91fe01c7ff29c15f3d0307685d74a1c7d1e91e20fd0a466806f031abd87c8600e52e79722f523541b76182385252680616e
7
+ data.tar.gz: 18f20f5629091b60e035dfc1d7d506e3e952a4d035d111da6a0a533f6fe84edfe3bb9a1e2134093ee9aaeab7e7851ff2aefaf33948744f117a8c0df1b0dab6f1
data/lib/dependabot/pub/file_fetcher.rb CHANGED
@@ -1,6 +1,7 @@
1
1
  # typed: true
2
2
  # frozen_string_literal: true
3
3
 
4
+ require "sorbet-runtime"
4
5
  require "dependabot/file_fetchers"
5
6
  require "dependabot/file_fetchers/base"
6
7
 
@@ -9,6 +10,9 @@ require "dependabot/file_fetchers/base"
9
10
  module Dependabot
10
11
  module Pub
11
12
  class FileFetcher < Dependabot::FileFetchers::Base
13
+ extend T::Sig
14
+ extend T::Helpers
15
+
12
16
  def self.required_files_in?(filenames)
13
17
  filenames.include?("pubspec.yaml")
14
18
  end
@@ -17,8 +21,7 @@ module Dependabot
17
21
  "Repo must contain a pubspec.yaml."
18
22
  end
19
23
 
20
- private
21
-
24
+ sig { override.returns(T::Array[DependencyFile]) }
22
25
  def fetch_files
23
26
  fetched_files = []
24
27
  fetched_files << pubspec_yaml
@@ -33,6 +36,8 @@ module Dependabot
33
36
  fetched_files.uniq
34
37
  end
35
38
 
39
+ private
40
+
36
41
  def pubspec_yaml
37
42
  @pubspec_yaml ||= fetch_file_from_host("pubspec.yaml")
38
43
  end
data/lib/dependabot/pub/metadata_finder.rb CHANGED
@@ -2,19 +2,22 @@
2
2
  # frozen_string_literal: true
3
3
 
4
4
  require "excon"
5
+ require "sorbet-runtime"
5
6
  require "dependabot/metadata_finders"
6
7
  require "dependabot/metadata_finders/base"
7
8
  require "dependabot/registry_client"
8
9
 
9
10
  module Dependabot
10
11
  module Pub
12
+ extend T::Sig
13
+
11
14
  class MetadataFinder < Dependabot::MetadataFinders::Base
12
15
  private
13
16
 
14
17
  def look_up_source
15
18
  source = dependency.requirements&.first&.dig(:source)
16
19
  if source&.dig("type") == "git"
17
- result = Source.from_url(source.dig("description", "url"))
20
+ result = T.must(Source.from_url(source.dig("description", "url")))
18
21
  result.directory = source.dig("description", "path")
19
22
  result.commit = source.dig("description", "resolved-ref")
20
23
  return result
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-pub
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.236.0
4
+ version: 0.237.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-10-26 00:00:00.000000000 Z
11
+ date: 2023-11-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.236.0
19
+ version: 0.237.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.236.0
26
+ version: 0.237.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: webrick
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -108,20 +108,34 @@ dependencies:
108
108
  - - "~>"
109
109
  - !ruby/object:Gem::Version
110
110
  version: '1.3'
111
+ - !ruby/object:Gem::Dependency
112
+ name: rspec-sorbet
113
+ requirement: !ruby/object:Gem::Requirement
114
+ requirements:
115
+ - - "~>"
116
+ - !ruby/object:Gem::Version
117
+ version: 1.9.2
118
+ type: :development
119
+ prerelease: false
120
+ version_requirements: !ruby/object:Gem::Requirement
121
+ requirements:
122
+ - - "~>"
123
+ - !ruby/object:Gem::Version
124
+ version: 1.9.2
111
125
  - !ruby/object:Gem::Dependency
112
126
  name: rubocop
113
127
  requirement: !ruby/object:Gem::Requirement
114
128
  requirements:
115
129
  - - "~>"
116
130
  - !ruby/object:Gem::Version
117
- version: 1.56.0
131
+ version: 1.57.2
118
132
  type: :development
119
133
  prerelease: false
120
134
  version_requirements: !ruby/object:Gem::Requirement
121
135
  requirements:
122
136
  - - "~>"
123
137
  - !ruby/object:Gem::Version
124
- version: 1.56.0
138
+ version: 1.57.2
125
139
  - !ruby/object:Gem::Dependency
126
140
  name: rubocop-performance
127
141
  requirement: !ruby/object:Gem::Requirement
@@ -228,7 +242,7 @@ licenses:
228
242
  - Nonstandard
229
243
  metadata:
230
244
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
231
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.236.0
245
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
232
246
  post_install_message:
233
247
  rdoc_options: []
234
248
  require_paths: