dependabot-pub 0.263.0 → 0.265.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bb3e8b020709a5af01e82ae675ffb36d5fce01d07746e29b8100f7a6755c88b2
-  data.tar.gz: 06d7eed27c3f2f3b17a5ca01b0b29461b8157d1389156038d1a9229dd5214fe3
+  metadata.gz: 1ff67319598cc88610c0f9d8c4fb72ef2e859d974b953b3a4cf44e7f8363865d
+  data.tar.gz: da3645b2454ef5dfd6f592d7dc4c547c97b3fef57681ee87dae7c6f53ee4ff18
 SHA512:
-  metadata.gz: 67a4926854e15c9a6c21cbd899b2b769021e11b7b85233d48fa9a7a58a67467fdbe744a5708ca860f34ad5df5f9765327ca391259c0b0bae67595c098ab44679
-  data.tar.gz: d6a68ce90f75be9b0460184e3ad0d60564827a3823a313991de92346a1f33fb95d23dc8d2ae639d8f73ef0a19342680e1ff71fdb4b3a4edbfd54d1b173086897
+  metadata.gz: 70330bcd1086311ef806697e46171556592ba39ad1728729c670395dbf2b8c84e6185e573280457778e8eae4a7cbd9710ffc3f3ec19a25b2d4aca6ad72b9cf50
+  data.tar.gz: 3d10cb7afffc04b48a3d1700dfcdcd1ca60d681ecb8b6de173a98a473b4ed55ae9e18d4cd274da8b78aa899c8957f7ab9177f73640321083dcefa6e356efe41f

data/lib/dependabot/pub/file_fetcher.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"
@@ -13,10 +13,12 @@ module Dependabot
       extend T::Sig
       extend T::Helpers
 
+      sig { override.params(filenames: T::Array[String]).returns(T::Boolean) }
       def self.required_files_in?(filenames)
         filenames.include?("pubspec.yaml")
       end
 
+      sig { override.returns(String) }
       def self.required_files_message
         "Repo must contain a pubspec.yaml."
       end
@@ -38,14 +40,16 @@ module Dependabot
 
       private
 
+      sig { returns(DependencyFile) }
       def pubspec_yaml
-        @pubspec_yaml ||= fetch_file_from_host("pubspec.yaml")
+        @pubspec_yaml ||= T.let(fetch_file_from_host("pubspec.yaml"), T.nilable(Dependabot::DependencyFile))
       end
 
+      sig { returns(T.nilable(DependencyFile)) }
       def pubspec_lock
         return @pubspec_lock if defined?(@pubspec_lock)
 
-        @pubspec_lock = fetch_file_if_present("pubspec.lock")
+        @pubspec_lock = T.let(fetch_file_if_present("pubspec.lock"), T.nilable(Dependabot::DependencyFile))
       end
     end
   end

data/lib/dependabot/pub/requirement.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
 # For details on pub version constraints see:
@@ -20,11 +20,16 @@ module Dependabot
       quoted = OPS.keys.map { |k| Regexp.quote(k) }.join("|")
       version_pattern = Pub::Version::VERSION_PATTERN
 
-      PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*".freeze
+      PATTERN_RAW = T.let("\\s*(#{quoted})?\\s*(#{version_pattern})\\s*".freeze, String)
       PATTERN = /\A#{PATTERN_RAW}\z/
 
       # Use Pub::Version rather than Gem::Version to ensure that
       # pre-release versions aren't transformed.
+      sig do
+        params(
+          obj: T.any(String, Gem::Version, Pub::Version)
+        ).returns(T::Array[T.any(String, Pub::Version)])
+      end
       def self.parse(obj)
         return ["=", Pub::Version.new(obj.to_s)] if obj.is_a?(Gem::Version)
 
@@ -43,9 +48,10 @@ module Dependabot
       # contains a single element.
       sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Requirement]) }
       def self.requirements_array(requirement_string)
-        [new(requirement_string)]
+        [new(T.must(requirement_string))]
       end
 
+      sig { params(requirements: T.any(String, T::Array[String]), raw_constraint: T.nilable(String)).void }
       def initialize(*requirements, raw_constraint: nil)
         requirements = requirements.flatten.flat_map do |req_string|
           req_string.split(",").map(&:strip).map do |r|
@@ -57,6 +63,7 @@ module Dependabot
         @raw_constraint = raw_constraint
       end
 
+      sig { returns(String) }
       def to_s
         if @raw_constraint.nil?
           as_list.join " "
@@ -67,6 +74,7 @@ module Dependabot
 
       private
 
+      sig { params(req_string: String).returns(T.any(String, T::Array[T.nilable(String)])) }
       def convert_dart_constraint_to_ruby_constraint(req_string)
         if req_string.empty? || req_string == "any" then ">= 0"
         elsif req_string.match?(/^~[^>]/) then convert_tilde_req(req_string)
@@ -77,18 +85,21 @@ module Dependabot
         end
       end
 
+      sig { params(req_string: String).returns(String) }
       def convert_tilde_req(req_string)
         version = req_string.gsub(/^~/, "")
         parts = version.split(".")
         "~> #{parts.join('.')}"
       end
 
+      sig { params(req_string: String).returns(T::Array[T.nilable(String)]) }
       def convert_range_req(req_string)
         req_string.scan(
           /((?:>|<|=|<=|>=)\s*#{Pub::Version::VERSION_PATTERN})\s*/o
-        ).map { |x| x[0].strip }
+        ).map { |x| x[0]&.strip }
       end
 
+      sig { params(req_string: String).returns(String) }
       def ruby_range(req_string)
         parts = req_string.split(".")
 
@@ -103,6 +114,7 @@ module Dependabot
         "~> #{parts.join('.')}"
       end
 
+      sig { params(req_string: String).returns(T::Array[String]) }
       def convert_caret_req(req_string)
         # Copied from Cargo::Requirement which allows less than 3 components
         # so we could be more strict in the parsing here.
@@ -112,7 +124,7 @@ module Dependabot
         first_non_zero_index =
           first_non_zero ? parts.index(first_non_zero) : parts.count - 1
         upper_bound = parts.map.with_index do |part, i|
-          if i < first_non_zero_index then part
+          if i < T.must(first_non_zero_index) then part
           elsif i == first_non_zero_index then (part.to_i + 1).to_s
           else
             0

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.263.0
+  version: 0.265.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-27 00:00:00.000000000 Z
+date: 2024-07-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.263.0
+        version: 0.265.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.263.0
+        version: 0.265.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -256,7 +256,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.263.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.265.0
 post_install_message: 
 rdoc_options: []
 require_paths: