dependabot-pub 0.333.0 → 0.335.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37456497229758cc49d7736920965447abf03f756b710e069ec8e281bf807198
-  data.tar.gz: 5b9bcf4c7ddd567c03da21decba2aee418b23d2adb7b5f60f0362b4008cebd57
+  metadata.gz: 988058eb7eb6c7b67796e9e4b8123ae1225eb8f540746ae2f8ee104c746208e0
+  data.tar.gz: 806eb44928dc19044c3fdbb27650032abed64aedbd82b88ae330a19a1f326503
 SHA512:
-  metadata.gz: 8e2575d494debb71fcff341d89bba0f0bd9b36e5b891fad46a02d5efcef4a8d705ae405b53efe7c80c4609e606c7e2c3db20b1ea38f6f409c9e50bf619f0d8de
-  data.tar.gz: 6f72a3ac8507bf2014f100ee3a249fa17405731322a4acdc622e64bad4306c4ada7b3505ce60f206746edc780792f3834e2549ae6decc51e2c24baa9a6e245dd
+  metadata.gz: a4b78ca08d2873c6f383df75d7e4bf9dc271f0a195c471407775af65b07918ebcac7dfe5e2d86b2f11d97731f0bda54308aa6be14a17bc93ee2689c0929faff2
+  data.tar.gz: c78d569eb0957ef3d26043494e53044fa5af812398236240b20b5bd4852021d6c169ff92409950f8359c1bce4411d4ff7f58c8a51ef7a2ca0ecc1b26d94896ee

data/lib/dependabot/pub/file_fetcher.rb

@@ -36,9 +36,11 @@ module Dependabot
           relative_name = Pathname.new("/#{pubspec}").relative_path_from(directory)
 
           # Skip excluded workspace pubspec files
-          next nil if Dependabot::FileFiltering.should_exclude_path?(relative_name.to_s,
-                                                                     "workspace pubspec file",
-                                                                     @exclude_paths)
+          next nil if Dependabot::FileFiltering.should_exclude_path?(
+            relative_name.to_s,
+            "workspace pubspec file",
+            @exclude_paths
+          )
 
           fetch_file_from_host(relative_name)
         end
@@ -46,9 +48,11 @@ module Dependabot
         # Filter excluded files from final collection
         filtered_files = fetched_files.uniq.reject do |file|
           file_name = T.cast(file, DependencyFile).name
-          Dependabot::FileFiltering.should_exclude_path?(file_name,
-                                                         "file from final collection",
-                                                         @exclude_paths)
+          Dependabot::FileFiltering.should_exclude_path?(
+            file_name,
+            "file from final collection",
+            @exclude_paths
+          )
         end
 
         filtered_files

data/lib/dependabot/pub/file_parser.rb

@@ -49,9 +49,12 @@ module Dependabot
 
       sig { returns(T.nilable(Ecosystem::VersionManager)) }
       def language
-        @language ||= T.let(begin
-          Language.new(T.must(dart_raw_version))
-        end, T.nilable(Dependabot::Pub::Language))
+        @language ||= T.let(
+          begin
+            Language.new(T.must(dart_raw_version))
+          end,
+          T.nilable(Dependabot::Pub::Language)
+        )
       end
 
       sig { returns(T.nilable(String)) }

data/lib/dependabot/pub/helpers.rb

@@ -425,9 +425,11 @@ module Dependabot
             end
             obj
           end
-          JSON.generate({
-            "dependencyChanges" => deps
-          })
+          JSON.generate(
+            {
+              "dependencyChanges" => deps
+            }
+          )
         end
       end
     end

data/lib/dependabot/pub/package/package_details_fetcher.rb

@@ -47,9 +47,14 @@ module Dependabot
           )
             .void
         end
-        def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions: [],
-                       security_advisories: [], options: {})
+        def initialize(
+          dependency:,
+          dependency_files:,
+          credentials:,
+          ignored_versions: [],
+          security_advisories: [],
+          options: {}
+        )
           @dependency = dependency
           @dependency_files = dependency_files
           @credentials = credentials
@@ -80,8 +85,10 @@ module Dependabot
             package_details_metadata = JSON.parse(response.body)
 
             package_details_metadata["versions"].select do |v|
-              package_releases << package_release(version: v["version"],
-                                                  publish_date: Time.parse(v["published"]))
+              package_releases << package_release(
+                version: v["version"],
+                publish_date: Time.parse(v["published"])
+              )
             end
 
             package_releases

data/lib/dependabot/pub/update_checker/latest_version_finder.rb

@@ -30,10 +30,15 @@ module Dependabot
             cooldown_options: T.nilable(Dependabot::Package::ReleaseCooldownOptions)
           ).void
         end
-        def initialize(dependency:, dependency_files:, credentials:,
-                       ignored_versions: [],
-                       security_advisories: [], options: {},
-                       cooldown_options: nil)
+        def initialize(
+          dependency:,
+          dependency_files:,
+          credentials:,
+          ignored_versions: [],
+          security_advisories: [],
+          options: {},
+          cooldown_options: nil
+        )
           @dependency = dependency
           @dependency_files = dependency_files
           @credentials = credentials
@@ -45,14 +50,19 @@ module Dependabot
 
         sig { returns(T::Hash[String, T.untyped]) }
         def current_report
-          @current_report ||= T.let(T.must(PackageDetailsFetcher.new(
-            dependency: dependency,
-            dependency_files: dependency_files,
-            credentials: credentials,
-            ignored_versions: ignored_versions,
-            security_advisories: security_advisories,
-            options: options
-          ).report.find { |d| d["name"] == dependency.name }), T.nilable(T::Hash[String, T.untyped]))
+          @current_report ||= T.let(
+            T.must(
+              PackageDetailsFetcher.new(
+                dependency: dependency,
+                dependency_files: dependency_files,
+                credentials: credentials,
+                ignored_versions: ignored_versions,
+                security_advisories: security_advisories,
+                options: options
+              ).report.find { |d| d["name"] == dependency.name }
+            ),
+            T.nilable(T::Hash[String, T.untyped])
+          )
         end
 
         sig { returns(T.nilable(String)) }
@@ -108,14 +118,17 @@ module Dependabot
           return unparsed_version unless cooldown_enabled?
           return unparsed_version unless cooldown_options
 
-          @package_details ||= T.let(PackageDetailsFetcher.new(
-            dependency: dependency,
-            dependency_files: dependency_files,
-            credentials: credentials,
-            ignored_versions: ignored_versions,
-            security_advisories: security_advisories,
-            options: options
-          ).package_details_metadata, T.nilable(T::Array[Dependabot::Package::PackageRelease]))
+          @package_details ||= T.let(
+            PackageDetailsFetcher.new(
+              dependency: dependency,
+              dependency_files: dependency_files,
+              credentials: credentials,
+              ignored_versions: ignored_versions,
+              security_advisories: security_advisories,
+              options: options
+            ).package_details_metadata,
+            T.nilable(T::Array[Dependabot::Package::PackageRelease])
+          )
 
           return unparsed_version unless @package_details.any?
 
@@ -126,9 +139,9 @@ module Dependabot
           return unparsed_version unless in_cooldown_period?(version_release)
 
           dependency.version
-          rescue StandardError => e
-            Dependabot.logger.error("Failed to filter cooldown versions for \"#{dependency.name}\": #{e.backtrace}")
-            unparsed_version
+        rescue StandardError => e
+          Dependabot.logger.error("Failed to filter cooldown versions for \"#{dependency.name}\": #{e.backtrace}")
+          unparsed_version
         end
 
         sig { params(release: Dependabot::Package::PackageRelease).returns(T::Boolean) }
@@ -146,8 +159,10 @@ module Dependabot
           passed_days = passed_seconds / DAY_IN_SECONDS
 
           if passed_days < days
-            Dependabot.logger.info("Version #{release.version}, Release date: #{release.released_at}." \
-                                   " Days since release: #{passed_days} (cooldown days: #{days})")
+            Dependabot.logger.info(
+              "Version #{release.version}, Release date: #{release.released_at}." \
+              " Days since release: #{passed_days} (cooldown days: #{days})"
+            )
           end
 
           # Check if the release is within the cooldown period
@@ -197,16 +212,22 @@ module Dependabot
 
         sig { returns(Dependabot::Dependency) }
         attr_reader :dependency
+
         sig { returns(T::Array[Dependabot::DependencyFile]) }
         attr_reader :dependency_files
+
         sig { returns(T::Array[Dependabot::Credential]) }
         attr_reader :credentials
+
         sig { returns(T::Array[String]) }
         attr_reader :ignored_versions
+
         sig { returns(T::Array[Dependabot::SecurityAdvisory]) }
         attr_reader :security_advisories
+
         sig { returns(T::Hash[Symbol, T.untyped]) }
         attr_reader :options
+
         sig { returns(T.nilable(Dependabot::Package::ReleaseCooldownOptions)) }
         attr_reader :cooldown_options
       end

data/lib/dependabot/pub/update_checker.rb

@@ -85,7 +85,7 @@ module Dependabot
                   # This security update would require unlocking other packages, which is not currently supported.
                   # Because of that, return original requirements, so that no requirements are actually updated and
                   # the error bubbles up as security_update_not_possible to the user.
-                  return dependency.requirements if breaking_changes&.size&. > 1
+                  return dependency.requirements if breaking_changes&.size&.> 1
 
                   updates&.find { |u| u["name"] == dependency.name }
                 else
@@ -198,16 +198,18 @@ module Dependabot
       sig { returns(Dependabot::Pub::UpdateChecker::LatestVersionFinder) }
       def version_report
         @version_report ||=
-          T.let(LatestVersionFinder.new(
-                  dependency: dependency,
-                  dependency_files: dependency_files,
-                  credentials: credentials,
-                  ignored_versions: ignored_versions,
-                  security_advisories: security_advisories,
-                  options: options,
-                  cooldown_options: update_cooldown
-                ),
-                T.nilable(Dependabot::Pub::UpdateChecker::LatestVersionFinder))
+          T.let(
+            LatestVersionFinder.new(
+              dependency: dependency,
+              dependency_files: dependency_files,
+              credentials: credentials,
+              ignored_versions: ignored_versions,
+              security_advisories: security_advisories,
+              options: options,
+              cooldown_options: update_cooldown
+            ),
+            T.nilable(Dependabot::Pub::UpdateChecker::LatestVersionFinder)
+          )
       end
 
       sig { returns(Dependabot::RequirementsUpdateStrategy) }

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.333.0
+  version: 0.335.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.333.0
+        version: 0.335.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.333.0
+        version: 0.335.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -113,56 +113,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.333.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.335.0
 rdoc_options: []
 require_paths:
 - lib