dependabot-pub 0.262.0 → 0.264.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4e79c0c1ba9f6b289b7cfe8bd2982ff68cfd01723e101bd08f1a0bb91e69984c
-  data.tar.gz: 95844b7c8dfaeb35cac7b1d3490f1bd40fe53be021a374b42339da52e462b7ae
+  metadata.gz: 0c380e747352c449e86cb2557960c70d94980e45cb38ce52b09e587b77c5ba01
+  data.tar.gz: b34e347352e1e6251c129b414a526f9660df5c76ef5fc7e25148c6db043ebf60
 SHA512:
-  metadata.gz: 43584142f63b6589188ce00c714a80f8bcdd3d573ff8c4a52e1c8e5af352e6f47f59b772833a83c52d8e8374b8c5394d4fb0acf18b71881436c89e158f5c7c6f
-  data.tar.gz: 428f768666a283ad6098786feab4348f2124dbf3e7c2b85303f8efb00458be487c01343dbf1615b778815e9c32a13df72ff14fdfe60b4e326eed2f8eaa386ee6
+  metadata.gz: 474510bfcee5004bc2cd792e6208e608b506a985d77878a92478afbf3116b3aaf855f8e352cf1dad0453cbb468a5fe0a64cfeb874e76788e3c3addaf3e7b3eb4
+  data.tar.gz: fca0366574c74effb8f7da3e682e61ce2d0045821930dc9c75867ad559516f324e7f175c798a8d4504059406ddb957d5ccf30473d6c0f623af59a9ea6bdb4f43

data/lib/dependabot/pub/file_fetcher.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -13,10 +13,12 @@ module Dependabot
       extend T::Sig
       extend T::Helpers
 
+      sig { override.params(filenames: T::Array[String]).returns(T::Boolean) }
       def self.required_files_in?(filenames)
         filenames.include?("pubspec.yaml")
       end
 
+      sig { override.returns(String) }
       def self.required_files_message
         "Repo must contain a pubspec.yaml."
       end
@@ -38,14 +40,16 @@ module Dependabot
 
       private
 
+      sig { returns(DependencyFile) }
       def pubspec_yaml
-        @pubspec_yaml ||= fetch_file_from_host("pubspec.yaml")
+        @pubspec_yaml ||= T.let(fetch_file_from_host("pubspec.yaml"), T.nilable(Dependabot::DependencyFile))
       end
 
+      sig { returns(T.nilable(DependencyFile)) }
       def pubspec_lock
         return @pubspec_lock if defined?(@pubspec_lock)
 
-        @pubspec_lock = fetch_file_if_present("pubspec.lock")
+        @pubspec_lock = T.let(fetch_file_if_present("pubspec.lock"), T.nilable(Dependabot::DependencyFile))
       end
     end
   end

data/lib/dependabot/pub/requirement.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
 # For details on pub version constraints see:
@@ -20,11 +20,16 @@ module Dependabot
       quoted = OPS.keys.map { |k| Regexp.quote(k) }.join("|")
       version_pattern = Pub::Version::VERSION_PATTERN
 
-      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*".freeze
+      PATTERN_RAW = T.let("\\s*(#{quoted})?\\s*(#{version_pattern})\\s*".freeze, String)
       PATTERN = /\A#{PATTERN_RAW}\z/
 
       # Use Pub::Version rather than Gem::Version to ensure that
       # pre-release versions aren't transformed.
+      sig do
+        params(
+          obj: T.any(String, Gem::Version, Pub::Version)
+        ).returns(T::Array[T.any(String, Pub::Version)])
+      end
       def self.parse(obj)
         return ["=", Pub::Version.new(obj.to_s)] if obj.is_a?(Gem::Version)
 
@@ -43,9 +48,10 @@ module Dependabot
       # contains a single element.
       sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }
       def self.requirements_array(requirement_string)
-        [new(requirement_string)]
+        [new(T.must(requirement_string))]
       end
 
+      sig { params(requirements: T.any(String, T::Array[String]), raw_constraint: T.nilable(String)).void }
       def initialize(*requirements, raw_constraint: nil)
         requirements = requirements.flatten.flat_map do |req_string|
           req_string.split(",").map(&:strip).map do |r|
@@ -57,6 +63,7 @@ module Dependabot
         @raw_constraint = raw_constraint
       end
 
+      sig { returns(String) }
       def to_s
         if @raw_constraint.nil?
           as_list.join " "
@@ -67,6 +74,7 @@ module Dependabot
 
       private
 
+      sig { params(req_string: String).returns(T.any(String, T::Array[T.nilable(String)])) }
       def convert_dart_constraint_to_ruby_constraint(req_string)
         if req_string.empty? || req_string == "any" then ">= 0"
         elsif req_string.match?(/^~[^>]/) then convert_tilde_req(req_string)
@@ -77,18 +85,21 @@ module Dependabot
         end
       end
 
+      sig { params(req_string: String).returns(String) }
       def convert_tilde_req(req_string)
         version = req_string.gsub(/^~/, "")
         parts = version.split(".")
         "~> #{parts.join('.')}"
       end
 
+      sig { params(req_string: String).returns(T::Array[T.nilable(String)]) }
       def convert_range_req(req_string)
         req_string.scan(
           /((?:>|<|=|<=|>=)\s*#{Pub::Version::VERSION_PATTERN})\s*/o
-        ).map { |x| x[0].strip }
+        ).map { |x| x[0]&.strip }
       end
 
+      sig { params(req_string: String).returns(String) }
       def ruby_range(req_string)
         parts = req_string.split(".")
 
@@ -103,6 +114,7 @@ module Dependabot
         "~> #{parts.join('.')}"
       end
 
+      sig { params(req_string: String).returns(T::Array[String]) }
       def convert_caret_req(req_string)
         # Copied from Cargo::Requirement which allows less than 3 components
         # so we could be more strict in the parsing here.
@@ -112,7 +124,7 @@ module Dependabot
         first_non_zero_index =
           first_non_zero ? parts.index(first_non_zero) : parts.count - 1
         upper_bound = parts.map.with_index do |part, i|
-          if i < first_non_zero_index then part
+          if i < T.must(first_non_zero_index) then part
           elsif i == first_non_zero_index then (part.to_i + 1).to_s
           else
             0

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.262.0
+  version: 0.264.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-20 00:00:00.000000000 Z
+date: 2024-07-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.262.0
+        version: 0.264.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.262.0
+        version: 0.264.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -256,7 +256,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.262.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.264.0
 post_install_message: 
 rdoc_options: []
 require_paths: