dependabot-pub 0.246.0 → 0.248.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 13881b97957d0429074e6b29683bcc426c68fbf127d316ebca66e63eb11d856a
-  data.tar.gz: 9426bd1a93490e3f1be891271e7c7d43659291a1e8eb5c73a841d8d948f12a31
+  metadata.gz: b4f8ff545c9900c79f579533364606ea5e54f45be25d29259d6271d7091d8619
+  data.tar.gz: cfa34000800b96a467a2853094166beaff98f26944a7e6d7a1114b2488162ff7
 SHA512:
-  metadata.gz: 38b71c5e0c52f49315b208aceccc767282f2ed872599b435b4d14100ae3d79042f717e9922622242edfa831d0cc08e832acc79126b0eec8ba55688031ee01a68
-  data.tar.gz: 15731cc0c819e8c96591b249116330cbaa695fc0de049238a7a9636ed24e49264d11ed41f997c8da677acc0a2c1690b5c5d29ffdccad51f792078bfdc8067b98
+  metadata.gz: 6f85e150c942a1e363663d332e205696d128e017655205596e7810264ec9a1a504e54ab8dc60f1007db4aa170e077dd36a86e4cd4002b47ceb897f38fb3d1df9
+  data.tar.gz: da9d4188cc360691b6c1edf6702f362728cb7c05accc0caa48256755660ccf3be0b5010b8294885dc9308f4c439345ffb2c1bc21a84829ce0d69ab0b462f9e4d

data/lib/dependabot/pub/helpers.rb

@@ -7,8 +7,9 @@ require "digest"
 
 require "dependabot/errors"
 require "dependabot/logger"
-require "dependabot/shared_helpers"
 require "dependabot/pub/requirement"
+require "dependabot/requirements_update_strategy"
+require "dependabot/shared_helpers"
 
 module Dependabot
   module Pub
@@ -335,11 +336,11 @@ module Dependabot
       # strategies.
       def constraint_field_from_update_strategy(requirements_update_strategy)
         case requirements_update_strategy
-        when :widen_ranges
+        when RequirementsUpdateStrategy::WidenRanges
           "constraintWidened"
-        when :bump_versions
+        when RequirementsUpdateStrategy::BumpVersions
           "constraintBumped"
-        when :bump_versions_if_necessary
+        when RequirementsUpdateStrategy::BumpVersionsIfNecessary
           "constraintBumpedIfNeeded"
         end
       end

data/lib/dependabot/pub/update_checker.rb

@@ -1,12 +1,14 @@
 # typed: true
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+require "yaml"
+
+require "dependabot/pub/helpers"
+require "dependabot/requirements_update_strategy"
 require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/update_checkers/version_filters"
-require "dependabot/pub/helpers"
-require "sorbet-runtime"
-require "yaml"
 
 module Dependabot
   module Pub
@@ -156,23 +158,24 @@ module Dependabot
 
       def resolve_requirements_update_strategy
         raise "Unexpected requirements_update_strategy #{requirements_update_strategy}" unless
-          [nil, :widen_ranges, :bump_versions, :bump_versions_if_necessary].include? requirements_update_strategy
+          [nil, RequirementsUpdateStrategy::WidenRanges, RequirementsUpdateStrategy::BumpVersions,
+           RequirementsUpdateStrategy::BumpVersionsIfNecessary].include? requirements_update_strategy
 
         if requirements_update_strategy.nil?
           # Check for a version field in the pubspec.yaml. If it is present
           # we assume the package is a library, and the requirement update
           # strategy is widening. Otherwise we assume it is an application, and
-          # go for "bump_versions".
+          # go for RequirementsUpdateStrategy::BumpVersions.
           pubspec = T.must(dependency_files.find { |d| d.name == "pubspec.yaml" })
           begin
             parsed_pubspec = YAML.safe_load(T.must(pubspec.content), aliases: false)
           rescue ScriptError
-            return :bump_versions
+            return RequirementsUpdateStrategy::BumpVersions
           end
           if parsed_pubspec["version"].nil? || parsed_pubspec["publish_to"] == "none"
-            :bump_versions
+            RequirementsUpdateStrategy::BumpVersions
           else
-            :widen_ranges
+            RequirementsUpdateStrategy::WidenRanges
           end
         else
           requirements_update_strategy

data/lib/dependabot/pub/version.rb

@@ -25,20 +25,7 @@ module Dependabot
       sig { returns(String) }
       attr_reader :build_info
 
-      sig do
-        override
-          .overridable
-          .params(
-            version: T.any(
-              String,
-              Integer,
-              Float,
-              Gem::Version,
-              NilClass
-            )
-          )
-          .void
-      end
+      sig { override.params(version: VersionParameter).void }
       def initialize(version)
         @version_string = T.let(version.to_s, String)
         version, @build_info = version.to_s.split("+") if version.to_s.include?("+")
@@ -46,6 +33,11 @@ module Dependabot
         super(T.must(version))
       end
 
+      sig { override.params(version: VersionParameter).returns(Dependabot::Pub::Version) }
+      def self.new(version)
+        T.cast(super, Dependabot::Pub::Version)
+      end
+
       sig { override.returns(String) }
       def to_s
         @version_string
@@ -56,20 +48,7 @@ module Dependabot
         "#<#{self.class} #{@version_string}>"
       end
 
-      sig do
-        override
-          .overridable
-          .params(
-            version: T.any(
-              String,
-              Integer,
-              Float,
-              Gem::Version,
-              NilClass
-            )
-          )
-          .returns(T::Boolean)
-      end
+      sig { override.params(version: VersionParameter).returns(T::Boolean) }
       def self.correct?(version)
         return false if version.nil?
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.246.0
+  version: 0.248.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-03-01 00:00:00.000000000 Z
+date: 2024-03-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.246.0
+        version: 0.248.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.246.0
+        version: 0.248.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -136,6 +136,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: 1.19.0
+- !ruby/object:Gem::Dependency
+  name: rubocop-rspec
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 2.27.1
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -242,7 +256,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.246.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.248.0
 post_install_message: 
 rdoc_options: []
 require_paths: