dependabot-pub 0.239.0 → 0.241.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 27c545d7cbbee279a3be39328875de74645d283257f144eb0322be46899a819b
-  data.tar.gz: cbd7a64fc8877de379708619cc7f94f8c837e06e2f3137dd28b7ebdcba7ddd13
+  metadata.gz: 0bc019561f5004668c6403b99242034de561bf3b2fb83c2764116272e9bb633d
+  data.tar.gz: f98d76811e67c6d28c3c8345cf0b9dffcbd79b64d33199221c3316a909d8f292
 SHA512:
-  metadata.gz: 976733d47811afd159ba88b8035642c3ebbe99f0a5e002959a21d4ea287392a26b988b73dade8afd9ba53715c755cd8d968ea8e0f1fd3c1d8578183734260753
-  data.tar.gz: 238308a5411664ea47dd365b5fb8b514b33ebcf8885408e2571a6dd8987013b8994ce5251717d201a6f9014cd6bc9ea128ca1446a114cadb564cac78a6dc600f
+  metadata.gz: 7fbb01fbc6426265917e295c18d64e46865c2162e859585ede71bc9e75854f13d0eb2391fdfbae32c69f5b994c4fa1568407c0f1348c92efc4fc8a8b1c86bc30
+  data.tar.gz: 5f8ddf5ae24189b1c3e81c5dc29bcc048766dfa1e2a64b1b650974dafdffd02d656aa0e5685c68c96e3597609117e031f47540312dcfa4ddfbd579006ee2776e

data/lib/dependabot/pub/metadata_finder.rb

@@ -15,7 +15,7 @@ module Dependabot
       private
 
       def look_up_source
-        source = dependency.requirements&.first&.dig(:source)
+        source = dependency.requirements.first&.dig(:source)
         if source&.dig("type") == "git"
           result = T.must(Source.from_url(source.dig("description", "url")))
           result.directory = source.dig("description", "path")

data/lib/dependabot/pub/requirement.rb

@@ -35,7 +35,7 @@ module Dependabot
 
         return DefaultRequirement if matches[1] == ">=" && matches[2] == "0"
 
-        [matches[1] || "=", Pub::Version.new(matches[2])]
+        [matches[1] || "=", Pub::Version.new(T.must(matches[2]))]
       end
 
       # For consistency with other languages, we define a requirements array.

data/lib/dependabot/pub/version.rb

@@ -25,12 +25,25 @@ module Dependabot
       sig { returns(String) }
       attr_reader :build_info
 
-      sig { override.params(version: T.any(String, Gem::Version)).void }
+      sig do
+        override
+          .overridable
+          .params(
+            version: T.any(
+              String,
+              Integer,
+              Float,
+              Gem::Version,
+              NilClass
+            )
+          )
+          .void
+      end
       def initialize(version)
         @version_string = T.let(version.to_s, String)
         version, @build_info = version.to_s.split("+") if version.to_s.include?("+")
 
-        super
+        super(T.must(version))
       end
 
       sig { override.returns(String) }
@@ -43,7 +56,20 @@ module Dependabot
         "#<#{self.class} #{@version_string}>"
       end
 
-      sig { override.params(version: T.any(String, Gem::Version)).returns(T::Boolean) }
+      sig do
+        override
+          .overridable
+          .params(
+            version: T.any(
+              String,
+              Integer,
+              Float,
+              Gem::Version,
+              NilClass
+            )
+          )
+          .returns(T::Boolean)
+      end
       def self.correct?(version)
         return false if version.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.239.0
+  version: 0.241.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-28 00:00:00.000000000 Z
+date: 2024-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,28 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
-- !ruby/object:Gem::Dependency
-  name: webrick
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '1.7'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '1.7'
+        version: 0.241.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -220,6 +206,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Pub provides support for bumping Dart (pub) packages via Dependabot.
   If you want support for multiple package managers, you probably want the meta-gem
   dependabot-omnibus.
@@ -242,7 +242,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.241.0
 post_install_message: 
 rdoc_options: []
 require_paths: