dependabot-pub 0.245.0 → 0.247.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '05490fa0c9cd227af37b57771d9dc438423cc475f82861f100c2446caed1e6fc'
-  data.tar.gz: 49cd2973712900d72cf45aa345d24b327c043206c0257f5a39a13c5d95a47072
+  metadata.gz: f6e215dc7de64450cf2e318770e5bd616c18c869711c7d447fbb92a015c667dc
+  data.tar.gz: dc5b5e7e53a289cb8cb3c739bc53fab506f9c4991432b61a87d1656f5ebb5b77
 SHA512:
-  metadata.gz: 01d0adaa01ab0c843cdf9eef7397dd294e8fa290da515e692b37d02bb099e52333eefa867042f071bb9545bf00279ab6f1e3502a2d8230be4f7c5f75a5aef7ad
-  data.tar.gz: 6b492c689d999d661ca37dc3a7420b2f33d7aac3b60f265b587ffd25caa9b9fdd8a7a2fb444b50e59e38a91446e3d1a73350f31d99e3488f54284676aba20935
+  metadata.gz: 3cc484ac858a8b60c58029f558436d4bc937bdd19dc3315100d50062e96a3fdf1f02106e2a7ad92bc9b6510e76cd8bb033c886a798ec318a3b9987e7b0b76918
+  data.tar.gz: 3a28dfff5eb5f4bb05f8635924a52b73cfb565226607a983d9e398c07ae22ac9b535e42bbcc35be95bfe610daf15b572e1d991863a04dcac69eb5823b9f3b6bd

data/lib/dependabot/pub/helpers.rb

@@ -7,8 +7,9 @@ require "digest"
 
 require "dependabot/errors"
 require "dependabot/logger"
-require "dependabot/shared_helpers"
 require "dependabot/pub/requirement"
+require "dependabot/requirements_update_strategy"
+require "dependabot/shared_helpers"
 
 module Dependabot
   module Pub
@@ -335,11 +336,11 @@ module Dependabot
       # strategies.
       def constraint_field_from_update_strategy(requirements_update_strategy)
         case requirements_update_strategy
-        when "widen_ranges"
+        when RequirementsUpdateStrategy::WidenRanges
           "constraintWidened"
-        when "bump_versions"
+        when RequirementsUpdateStrategy::BumpVersions
           "constraintBumped"
-        when "bump_versions_if_necessary"
+        when RequirementsUpdateStrategy::BumpVersionsIfNecessary
           "constraintBumpedIfNeeded"
         end
       end

data/lib/dependabot/pub/update_checker.rb

@@ -1,14 +1,20 @@
 # typed: true
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+require "yaml"
+
+require "dependabot/pub/helpers"
+require "dependabot/requirements_update_strategy"
 require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/update_checkers/version_filters"
-require "dependabot/pub/helpers"
-require "yaml"
+
 module Dependabot
   module Pub
     class UpdateChecker < Dependabot::UpdateCheckers::Base
+      extend T::Sig
+
       include Dependabot::Pub::Helpers
 
       def latest_version
@@ -112,13 +118,15 @@ module Dependabot
         version_string.match?(/^[0-9a-f]{6,}$/)
       end
 
+      sig { override.returns(T::Boolean) }
       def latest_version_resolvable_with_full_unlock?
         entry = current_report["multiBreaking"].find { |d| d["name"] == dependency.name }
         # This a bit dumb, but full-unlock is only considered if we can get the
         # latest version!
-        entry && ((!git_revision?(entry["version"]) &&
-                  latest_version == Dependabot::Pub::Version.new(entry["version"])) ||
-                  latest_version == entry["version"])
+        return false unless entry
+
+        (!git_revision?(entry["version"]) && latest_version == Dependabot::Pub::Version.new(entry["version"])) ||
+          latest_version == entry["version"]
       end
 
       def updated_dependencies_after_full_unlock
@@ -150,23 +158,24 @@ module Dependabot
 
       def resolve_requirements_update_strategy
         raise "Unexpected requirements_update_strategy #{requirements_update_strategy}" unless
-          [nil, "widen_ranges", "bump_versions", "bump_versions_if_necessary"].include? requirements_update_strategy
+          [nil, RequirementsUpdateStrategy::WidenRanges, RequirementsUpdateStrategy::BumpVersions,
+           RequirementsUpdateStrategy::BumpVersionsIfNecessary].include? requirements_update_strategy
 
         if requirements_update_strategy.nil?
           # Check for a version field in the pubspec.yaml. If it is present
           # we assume the package is a library, and the requirement update
           # strategy is widening. Otherwise we assume it is an application, and
-          # go for "bump_versions".
-          pubspec = dependency_files.find { |d| d.name == "pubspec.yaml" }
+          # go for RequirementsUpdateStrategy::BumpVersions.
+          pubspec = T.must(dependency_files.find { |d| d.name == "pubspec.yaml" })
           begin
-            parsed_pubspec = YAML.safe_load(pubspec.content, aliases: false)
+            parsed_pubspec = YAML.safe_load(T.must(pubspec.content), aliases: false)
           rescue ScriptError
-            return "bump_versions"
+            return RequirementsUpdateStrategy::BumpVersions
           end
           if parsed_pubspec["version"].nil? || parsed_pubspec["publish_to"] == "none"
-            "bump_versions"
+            RequirementsUpdateStrategy::BumpVersions
           else
-            "widen_ranges"
+            RequirementsUpdateStrategy::WidenRanges
           end
         else
           requirements_update_strategy

data/lib/dependabot/pub/version.rb

@@ -25,20 +25,7 @@ module Dependabot
       sig { returns(String) }
       attr_reader :build_info
 
-      sig do
-        override
-          .overridable
-          .params(
-            version: T.any(
-              String,
-              Integer,
-              Float,
-              Gem::Version,
-              NilClass
-            )
-          )
-          .void
-      end
+      sig { override.params(version: VersionParameter).void }
       def initialize(version)
         @version_string = T.let(version.to_s, String)
         version, @build_info = version.to_s.split("+") if version.to_s.include?("+")
@@ -46,6 +33,11 @@ module Dependabot
         super(T.must(version))
       end
 
+      sig { override.params(version: VersionParameter).returns(Dependabot::Pub::Version) }
+      def self.new(version)
+        T.cast(super, Dependabot::Pub::Version)
+      end
+
       sig { override.returns(String) }
       def to_s
         @version_string
@@ -56,20 +48,7 @@ module Dependabot
         "#<#{self.class} #{@version_string}>"
       end
 
-      sig do
-        override
-          .overridable
-          .params(
-            version: T.any(
-              String,
-              Integer,
-              Float,
-              Gem::Version,
-              NilClass
-            )
-          )
-          .returns(T::Boolean)
-      end
+      sig { override.params(version: VersionParameter).returns(T::Boolean) }
       def self.correct?(version)
         return false if version.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.245.0
+  version: 0.247.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-22 00:00:00.000000000 Z
+date: 2024-03-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.245.0
+        version: 0.247.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.245.0
+        version: 0.247.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -242,7 +256,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.245.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.247.0
 post_install_message: 
 rdoc_options: []
 require_paths: