dependabot-pub 0.391.0 → 0.392.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77b5955d5025ed13a3ba90569db1fa52f83613ae5dc3b9b03934c6bf241727a5
-  data.tar.gz: fc5611b1be9aee08c4e477c04e58f760daa73397dfad07c53df25275ff6d41b2
+  metadata.gz: 9b39deceee9e7e4be52a1fb5ade31bdff9297df770a3b626b96dad32734d2e65
+  data.tar.gz: 55f79fa60dfde8fa7600a6d1e74c1228476614ecd8813e5ef81a03c76c369c80
 SHA512:
-  metadata.gz: 051dc47abb9fff13ca855e35087516be53f00c21cfcb5cb6afb82cc57cf4c9546b82d32bfa24181d4a9dac8e35a6bc43a454e673502e1f69b0e2de54fd55843b
-  data.tar.gz: e004a01a8bf9b731f150248b34f7f2bec346a418df6556112e027baa3163b45f121020e0c960f7c6ec469b07f5f0889bc365d7a31d5de7f5c789c232514a9025
+  metadata.gz: 3264a592f1daa1440d650ff1f93992592793cd5235a02ff583f99746c5f1fcff63d69524e48ca7ae175a71c2400dda41f748b0f3ed2164cc20830aa9385a75aa
+  data.tar.gz: 909ad21285948af17082a8b8ba14996bd20d04d1dc7d2d1ae14b43922903d4becb570d6536e8428fdd73b9d23483e1e6349173fcc7911aa5fa33f8a989930f96

data/lib/dependabot/pub/helpers.rb

@@ -9,6 +9,7 @@ require "sorbet-runtime"
 require "dependabot/errors"
 require "dependabot/logger"
 require "dependabot/pub/requirement"
+require "dependabot/pub/requirement_source"
 require "dependabot/requirements_update_strategy"
 require "dependabot/shared_helpers"
 
@@ -62,8 +63,8 @@ module Dependabot
 
       sig { params(dependency: Dependabot::Dependency).returns(String) }
       def repository_url(dependency)
-        source = dependency.requirements.first&.dig(:source)
-        source&.dig("description", "url") || options[:pub_hosted_url] || "https://pub.dev"
+        RequirementSource.new(dependency.requirements.first).description_string("url") || options[:pub_hosted_url] ||
+          "https://pub.dev"
       end
 
       sig { params(dependency: Dependabot::Dependency).returns(T::Hash[String, T.untyped]) }

data/lib/dependabot/pub/metadata_finder.rb

@@ -5,6 +5,7 @@ require "excon"
 require "sorbet-runtime"
 require "dependabot/metadata_finders"
 require "dependabot/metadata_finders/base"
+require "dependabot/pub/requirement_source"
 require "dependabot/registry_client"
 
 module Dependabot
@@ -16,14 +17,14 @@ module Dependabot
 
       sig { override.returns(T.nilable(Dependabot::Source)) }
       def look_up_source
-        source = dependency.requirements.first&.dig(:source)
-        if source&.dig("type") == "git"
-          result = T.must(Source.from_url(source.dig("description", "url")))
-          result.directory = source.dig("description", "path")
-          result.commit = source.dig("description", "resolved-ref")
+        source = RequirementSource.new(dependency.requirements.first)
+        if source.type == "git"
+          result = T.must(Source.from_url(source.description_string("url")))
+          result.directory = source.description_string("path")
+          result.commit = source.description_string("resolved-ref")
           return result
         end
-        repository_url = source&.dig("description", "url") || "https://pub.dev"
+        repository_url = source.description_string("url") || "https://pub.dev"
 
         listing = repository_listing(repository_url)
         repo = listing.dig("latest", "pubspec", "repository")

data/lib/dependabot/pub/requirement_source.rb

@@ -0,0 +1,53 @@
+# typed: strict
+# frozen_string_literal: true
+
+require "dependabot/dependency_requirement"
+
+module Dependabot
+  module Pub
+    class RequirementSource
+      extend T::Sig
+
+      sig { params(requirement: T.nilable(Dependabot::DependencyRequirement)).void }
+      def initialize(requirement)
+        @requirement = requirement
+      end
+
+      sig { returns(T.nilable(String)) }
+      def type
+        requirement&.source_string("type")
+      end
+
+      sig { params(key: String).returns(T.nilable(String)) }
+      def description_string(key)
+        description = description_hash
+        return unless description
+
+        value = description.key?(key.to_sym) ? description[key.to_sym] : description[key]
+        return if value.nil?
+        return value if value.is_a?(String)
+
+        raise TypeError, "source description #{key} must be a string or nil"
+      end
+
+      private
+
+      sig { returns(T.nilable(Dependabot::DependencyRequirement)) }
+      attr_reader :requirement
+
+      sig { returns(T.nilable(Dependabot::DependencyRequirement::ObjectHash)) }
+      def description_hash
+        source = requirement&.source_hash
+        return unless source
+
+        value = source.key?(:description) ? source[:description] : source["description"]
+        return if value.nil?
+        unless value.is_a?(Hash) && value.keys.all? { |key| key.is_a?(String) || key.is_a?(Symbol) }
+          raise TypeError, "source description must be a hash with string or symbol keys"
+        end
+
+        value
+      end
+    end
+  end
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-pub
 version: !ruby/object:Gem::Version
-  version: 0.391.0
+  version: 0.392.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.391.0
+        version: 0.392.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.391.0
+        version: 0.392.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -251,6 +251,7 @@ files:
 - lib/dependabot/pub/package/package_details_fetcher.rb
 - lib/dependabot/pub/package_manager.rb
 - lib/dependabot/pub/requirement.rb
+- lib/dependabot/pub/requirement_source.rb
 - lib/dependabot/pub/update_checker.rb
 - lib/dependabot/pub/update_checker/latest_version_finder.rb
 - lib/dependabot/pub/version.rb
@@ -259,7 +260,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.391.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
 rdoc_options: []
 require_paths:
 - lib