dependabot-pub 0.236.0 → 0.237.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 36f052dd906920fc5c68c2dbf2084d9b337c266751ef973b9f1954d0796d6ba1
-  data.tar.gz: d1cc31d95ee6656b12e4c95e68ab0b66978af35b5e81a4c92401dc1e9a097c1c
+  metadata.gz: d3996df184e645eb823e344e71e60ca1f29fc90180834eb5cc02082ec0e58b27
+  data.tar.gz: 36fac6cd7ba5072efd8e3212f7ec3a5198e6b6a1d3550ff8fb58cc7efbe2cbc4
 SHA512:
-  metadata.gz: 586a79ca8b49657c7c1cb4eed2f9acad80e42f15928be30783e91f4bf73363030f90cc40e7dd699a3a489d0601ca039de8fbc91cf949ae9ff026072d4f4d1c73
-  data.tar.gz: 0c342abec6139b397c394aa256a3678b79c4d20181d81178aff74bbaa34a787703e805b59609be092d5e5c11111c67f081b38dbb276a2bcf47edc8bf513bb999
+  metadata.gz: 1507d854bec1cf0f39cc3749581af91fe01c7ff29c15f3d0307685d74a1c7d1e91e20fd0a466806f031abd87c8600e52e79722f523541b76182385252680616e
+  data.tar.gz: 18f20f5629091b60e035dfc1d7d506e3e952a4d035d111da6a0a533f6fe84edfe3bb9a1e2134093ee9aaeab7e7851ff2aefaf33948744f117a8c0df1b0dab6f1

data/lib/dependabot/pub/file_fetcher.rb

@@ -1,6 +1,7 @@
 # typed: true
 # frozen_string_literal: true
 
+require "sorbet-runtime"
 require "dependabot/file_fetchers"
 require "dependabot/file_fetchers/base"
 
@@ -9,6 +10,9 @@ require "dependabot/file_fetchers/base"
 module Dependabot
   module Pub
     class FileFetcher < Dependabot::FileFetchers::Base
+      extend T::Sig
+      extend T::Helpers
+
       def self.required_files_in?(filenames)
         filenames.include?("pubspec.yaml")
       end
@@ -17,8 +21,7 @@ module Dependabot
         "Repo must contain a pubspec.yaml."
       end
 
-      private
-
+      sig { override.returns(T::Array[DependencyFile]) }
       def fetch_files
         fetched_files = []
         fetched_files << pubspec_yaml
@@ -33,6 +36,8 @@ module Dependabot
         fetched_files.uniq
       end
 
+      private
+
       def pubspec_yaml
         @pubspec_yaml ||= fetch_file_from_host("pubspec.yaml")
       end

data/lib/dependabot/pub/metadata_finder.rb

@@ -2,19 +2,22 @@
 # frozen_string_literal: true
 
 require "excon"
+require "sorbet-runtime"
 require "dependabot/metadata_finders"
 require "dependabot/metadata_finders/base"
 require "dependabot/registry_client"
 
 module Dependabot
   module Pub
+    extend T::Sig
+
     class MetadataFinder < Dependabot::MetadataFinders::Base
       private
 
       def look_up_source
         source = dependency.requirements&.first&.dig(:source)
         if source&.dig("type") == "git"
-          result = Source.from_url(source.dig("description", "url"))
+          result = T.must(Source.from_url(source.dig("description", "url")))
           result.directory = source.dig("description", "path")
           result.commit = source.dig("description", "resolved-ref")
           return result

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.236.0
+  version: 0.237.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-10-26 00:00:00.000000000 Z
+date: 2023-11-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.236.0
+        version: 0.237.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.236.0
+        version: 0.237.0
 - !ruby/object:Gem::Dependency
   name: webrick
   requirement: !ruby/object:Gem::Requirement
@@ -108,20 +108,34 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.3'
+- !ruby/object:Gem::Dependency
+  name: rspec-sorbet
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.2
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.9.2
 - !ruby/object:Gem::Dependency
   name: rubocop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.56.0
+        version: 1.57.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.56.0
+        version: 1.57.2
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -228,7 +242,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.236.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
 post_install_message: 
 rdoc_options: []
 require_paths: