dependabot-pub 0.244.0 → 0.246.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d6dbb823eb9ff1d875a7cfb7e40f766e0e1a32e156d638c3a57cc18a62a9c372
-  data.tar.gz: eabd6f17cb7019842cb398ce516973f597e627bd0a9c20b10a5f65f1f515f169
+  metadata.gz: 13881b97957d0429074e6b29683bcc426c68fbf127d316ebca66e63eb11d856a
+  data.tar.gz: 9426bd1a93490e3f1be891271e7c7d43659291a1e8eb5c73a841d8d948f12a31
 SHA512:
-  metadata.gz: 4a6043018aca6022b49b984a2238962c6e4d53d37a8687930b92fa6556f81b5354a6d6cd78eccf70655165fba926649dd6eb878903c1b8142fbe5fbd8cf08d2b
-  data.tar.gz: cf63f178393d82a627f728c465281554ebdc1c326e26937b325fc6e14d8b34fa7acfbb8d6b13b12a8cdd27dd3875abb02f27fc9324a930414f94d6387aec9723
+  metadata.gz: 38b71c5e0c52f49315b208aceccc767282f2ed872599b435b4d14100ae3d79042f717e9922622242edfa831d0cc08e832acc79126b0eec8ba55688031ee01a68
+  data.tar.gz: 15731cc0c819e8c96591b249116330cbaa695fc0de049238a7a9636ed24e49264d11ed41f997c8da677acc0a2c1690b5c5d29ffdccad51f792078bfdc8067b98

data/lib/dependabot/pub/helpers.rb

@@ -335,11 +335,11 @@ module Dependabot
       # strategies.
       def constraint_field_from_update_strategy(requirements_update_strategy)
         case requirements_update_strategy
-        when "widen_ranges"
+        when :widen_ranges
           "constraintWidened"
-        when "bump_versions"
+        when :bump_versions
           "constraintBumped"
-        when "bump_versions_if_necessary"
+        when :bump_versions_if_necessary
           "constraintBumpedIfNeeded"
         end
       end

data/lib/dependabot/pub/update_checker.rb

@@ -5,10 +5,14 @@ require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/update_checkers/version_filters"
 require "dependabot/pub/helpers"
+require "sorbet-runtime"
 require "yaml"
+
 module Dependabot
   module Pub
     class UpdateChecker < Dependabot::UpdateCheckers::Base
+      extend T::Sig
+
       include Dependabot::Pub::Helpers
 
       def latest_version
@@ -112,13 +116,15 @@ module Dependabot
         version_string.match?(/^[0-9a-f]{6,}$/)
       end
 
+      sig { override.returns(T::Boolean) }
       def latest_version_resolvable_with_full_unlock?
         entry = current_report["multiBreaking"].find { |d| d["name"] == dependency.name }
         # This a bit dumb, but full-unlock is only considered if we can get the
         # latest version!
-        entry && ((!git_revision?(entry["version"]) &&
-                  latest_version == Dependabot::Pub::Version.new(entry["version"])) ||
-                  latest_version == entry["version"])
+        return false unless entry
+
+        (!git_revision?(entry["version"]) && latest_version == Dependabot::Pub::Version.new(entry["version"])) ||
+          latest_version == entry["version"]
       end
 
       def updated_dependencies_after_full_unlock
@@ -150,23 +156,23 @@ module Dependabot
 
       def resolve_requirements_update_strategy
         raise "Unexpected requirements_update_strategy #{requirements_update_strategy}" unless
-          [nil, "widen_ranges", "bump_versions", "bump_versions_if_necessary"].include? requirements_update_strategy
+          [nil, :widen_ranges, :bump_versions, :bump_versions_if_necessary].include? requirements_update_strategy
 
         if requirements_update_strategy.nil?
           # Check for a version field in the pubspec.yaml. If it is present
           # we assume the package is a library, and the requirement update
           # strategy is widening. Otherwise we assume it is an application, and
           # go for "bump_versions".
-          pubspec = dependency_files.find { |d| d.name == "pubspec.yaml" }
+          pubspec = T.must(dependency_files.find { |d| d.name == "pubspec.yaml" })
           begin
-            parsed_pubspec = YAML.safe_load(pubspec.content, aliases: false)
+            parsed_pubspec = YAML.safe_load(T.must(pubspec.content), aliases: false)
           rescue ScriptError
-            return "bump_versions"
+            return :bump_versions
           end
           if parsed_pubspec["version"].nil? || parsed_pubspec["publish_to"] == "none"
-            "bump_versions"
+            :bump_versions
           else
-            "widen_ranges"
+            :widen_ranges
           end
         else
           requirements_update_strategy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.244.0
+  version: 0.246.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-15 00:00:00.000000000 Z
+date: 2024-03-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.244.0
+        version: 0.246.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.244.0
+        version: 0.246.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -242,7 +242,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.244.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.246.0
 post_install_message: 
 rdoc_options: []
 require_paths: