dependabot-sbt 0.390.0 → 0.391.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: edecd17328f64b8c80449fb7082455a6da0cc8ae36055307a4b7c13915e0ad38
-  data.tar.gz: 692d9c9373387aac513d9f76907b9c26b6da15ca13eb608c344b34ff5ace2a0d
+  metadata.gz: 78259b05fed1ee05bac16119e0d128fa9f015f5714b3021f154e94bfe0bb1749
+  data.tar.gz: 4f9cfe14ace89b6684ccec6cb7d26077b598a0a99478b78d1655561146580c75
 SHA512:
-  metadata.gz: d6341883bcfc7677446a1bf9e2c1078a514fc908260693f1234952d8139ac0f79b019e34aceac81d90dfc25e4600782302061e831ad8fba068b26eb1f608cabb
-  data.tar.gz: 740fbe0aa8d5941aa5bba86eb79c0c84c2658bb178df90075eafb85ee490b56b60fea5270ca25a2a32b75bf8fc3f6e8927fcc2dcc058b817e69db7058d866589
+  metadata.gz: 579e6171ebc1a87d544fb5bed7d4d4faf1210eb82b88da50dc8fe16df75943801d1d5de2ad69c0ad266b68885865144a4b043ffc93b0a2e52dc5914b36242a64
+  data.tar.gz: 45a61970aaada52e31be1e621b06d1de3c22f1e6fe186a61d243dea1934a80daa8ca14a827a36673d89d10407e54c675980dca157c69a6d9e57527d32e00267a

data/lib/dependabot/sbt/file_fetcher.rb

@@ -17,7 +17,7 @@ module Dependabot
       PLUGINS_SBT_FILENAME = "project/plugins.sbt"
       BUILD_PROPERTIES_FILENAME = "project/build.properties"
       # Directories that are part of the SBT build structure, not subprojects
-      NON_SUBPROJECT_DIRS = T.let(%w(project target .git .github).freeze, T::Array[String])
+      NON_SUBPROJECT_DIRS = %w(project target .git .github).freeze
 
       sig { override.params(filenames: T::Array[String]).returns(T::Boolean) }
       def self.required_files_in?(filenames)

data/lib/dependabot/sbt/file_parser/property_value_finder.rb

@@ -17,14 +17,11 @@ module Dependabot
         # Matches: val someVersion = "1.2.3"
         # Also:   val someVersion: String = "1.2.3"
         # Also:   lazy val someVersion = "1.2.3"
-        VAL_DECLARATION_REGEX = T.let(
-          /(?:^|\s)(?:lazy\s+)?val\s+(?<name>\w+)(?:\s*:\s*String)?\s*=\s*"(?<value>[^"]+)"/,
-          Regexp
-        )
+        VAL_DECLARATION_REGEX = /(?:^|\s)(?:lazy\s+)?val\s+(?<name>\w+)(?:\s*:\s*String)?\s*=\s*"(?<value>[^"]+)"/
 
         sig { params(dependency_files: T::Array[Dependabot::DependencyFile]).void }
         def initialize(dependency_files:)
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
+          @dependency_files = dependency_files
           @properties = T.let({}, T::Hash[String, T::Hash[String, T::Hash[Symbol, String]]])
         end
 

data/lib/dependabot/sbt/file_parser/repositories_finder.rb

@@ -14,28 +14,16 @@ module Dependabot
         CENTRAL_REPO_URL = "https://repo.maven.apache.org/maven2"
 
         # Matches: resolvers += "Name" at "https://url"
-        RESOLVER_AT_REGEX = T.let(
-          /resolvers\s*\+?=\s*(?:Seq\s*\()?\s*"[^"]*"\s+at\s+"(?<url>[^"]+)"/,
-          Regexp
-        )
+        RESOLVER_AT_REGEX = /resolvers\s*\+?=\s*(?:Seq\s*\()?\s*"[^"]*"\s+at\s+"(?<url>[^"]+)"/
 
         # Matches: resolvers ++= Seq("Name" at "url", ...)
-        RESOLVER_SEQ_AT_REGEX = T.let(
-          /"[^"]*"\s+at\s+"(?<url>[^"]+)"/,
-          Regexp
-        )
+        RESOLVER_SEQ_AT_REGEX = /"[^"]*"\s+at\s+"(?<url>[^"]+)"/
 
         # Matches: Resolver.url("name", url("https://url"))
-        RESOLVER_URL_REGEX = T.let(
-          /Resolver\.url\(\s*"[^"]*"\s*,\s*url\(\s*"(?<url>[^"]+)"\s*\)/,
-          Regexp
-        )
+        RESOLVER_URL_REGEX = /Resolver\.url\(\s*"[^"]*"\s*,\s*url\(\s*"(?<url>[^"]+)"\s*\)/
 
         # Matches: MavenRepository("name", "https://url")
-        MAVEN_REPOSITORY_REGEX = T.let(
-          /MavenRepository\(\s*"[^"]*"\s*,\s*"(?<url>[^"]+)"\s*\)/,
-          Regexp
-        )
+        MAVEN_REPOSITORY_REGEX = /MavenRepository\(\s*"[^"]*"\s*,\s*"(?<url>[^"]+)"\s*\)/
 
         sig do
           params(
@@ -44,8 +32,8 @@ module Dependabot
           ).void
         end
         def initialize(dependency_files:, credentials: [])
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
+          @dependency_files = dependency_files
+          @credentials = credentials
         end
 
         sig { returns(T::Array[String]) }

data/lib/dependabot/sbt/file_parser.rb

@@ -24,56 +24,38 @@ module Dependabot
       BUILD_PROPERTIES_FILENAME = "project/build.properties"
 
       # Matches a simple identifier or dotted reference (e.g. myVal, V.scala212)
-      IDENT_OR_DOTTED = T.let(
-        "[a-zA-Z_]\\w*(?:\\.[a-zA-Z_]\\w*)*",
-        String
-      )
+      IDENT_OR_DOTTED = "[a-zA-Z_]\\w*(?:\\.[a-zA-Z_]\\w*)*"
 
       # "org" % "artifact" % "version"  or  "org" %% "artifact" % "version"
       # Optionally followed by % "scope" (e.g. % "test", % "provided")
-      LIBRARY_DEP_REGEX = T.let(
-        /"(?<group>[^"]+)"\s+(?<op>%%?)\s+"(?<artifact>[^"]+)"\s+%\s+"(?<version>[^"]+)"(?:\s+%\s+"[^"]*")*/,
-        Regexp
-      )
+      LIBRARY_DEP_REGEX =
+        /"(?<group>[^"]+)"\s+(?<op>%%?)\s+"(?<artifact>[^"]+)"\s+%\s+"(?<version>[^"]+)"(?:\s+%\s+"[^"]*")*/
 
       # "org" % "artifact" % valName  or  "org" %% "artifact" % valName
       # Also handles dotted references like Object.member
-      VAL_REF_DEP_REGEX = T.let(
-        /"(?<group>[^"]+)"\s+(?<op>%%?)\s+"(?<artifact>[^"]+)"\s+%\s+(?<val_name>[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*)/,
-        Regexp
-      )
+      VAL_REF_DEP_REGEX =
+        /"(?<group>[^"]+)"\s+(?<op>%%?)\s+"(?<artifact>[^"]+)"\s+%\s+(?<val_name>[a-zA-Z_]\w*(?:\.[a-zA-Z_]\w*)*)/
 
       # addSbtPlugin("org" % "name" % "version")
-      PLUGIN_DEP_REGEX = T.let(
-        /addSbtPlugin\(\s*"(?<group>[^"]+)"\s+%\s+"(?<artifact>[^"]+)"\s+%\s+"(?<version>[^"]+)"\s*\)/,
-        Regexp
-      )
+      PLUGIN_DEP_REGEX =
+        /addSbtPlugin\(\s*"(?<group>[^"]+)"\s+%\s+"(?<artifact>[^"]+)"\s+%\s+"(?<version>[^"]+)"\s*\)/
 
       # addSbtPlugin("org" % "name" % valName)
       # Also handles dotted references like Object.member
-      PLUGIN_VAL_REF_REGEX = T.let(
-        /addSbtPlugin\(\s*"(?<group>[^"]+)"\s+%\s+"(?<artifact>[^"]+)"\s+%\s+(?<val_name>#{IDENT_OR_DOTTED})\s*\)/,
-        Regexp
-      )
+      PLUGIN_VAL_REF_REGEX =
+        /addSbtPlugin\(\s*"(?<group>[^"]+)"\s+%\s+"(?<artifact>[^"]+)"\s+%\s+(?<val_name>#{IDENT_OR_DOTTED})\s*\)/
 
       # sbt.version=1.x.y in build.properties
-      SBT_VERSION_REGEX = T.let(
-        /\Asbt\.version\s*=\s*(?<version>.+)\z/,
-        Regexp
-      )
+      SBT_VERSION_REGEX = /\Asbt\.version\s*=\s*(?<version>.+)\z/
 
       # scalaVersion := "2.13.12"  or  ThisBuild / scalaVersion := "2.13.12"
       # Also: scalaVersion in ThisBuild := "2.13.12" (older SBT syntax)
-      SCALA_VERSION_REGEX = T.let(
-        %r{(?:ThisBuild\s*/\s*)?(?:scalaVersion\s+in\s+ThisBuild|scalaVersion)\s*:=\s*"(?<version>[^"]+)"},
-        Regexp
-      )
+      SCALA_VERSION_REGEX =
+        %r{(?:ThisBuild\s*/\s*)?(?:scalaVersion\s+in\s+ThisBuild|scalaVersion)\s*:=\s*"(?<version>[^"]+)"}
 
       # scalaVersion := valRef  or  scalaVersion in ThisBuild := V.scala212
-      SCALA_VERSION_VAL_REGEX = T.let(
-        %r{(?:ThisBuild\s*/\s*)?(?:scalaVersion\s+in\s+ThisBuild|scalaVersion)\s*:=\s*(?<val_name>#{IDENT_OR_DOTTED})},
-        Regexp
-      )
+      SCALA_VERSION_VAL_REGEX =
+        %r{(?:ThisBuild\s*/\s*)?(?:scalaVersion\s+in\s+ThisBuild|scalaVersion)\s*:=\s*(?<val_name>#{IDENT_OR_DOTTED})}
 
       sig { override.returns(T::Array[Dependabot::Dependency]) }
       def parse

data/lib/dependabot/sbt/file_updater.rb

@@ -15,12 +15,9 @@ module Dependabot
       require_relative "file_updater/property_value_updater"
 
       # Regex matching scalaVersion declarations in all supported SBT syntaxes
-      SCALA_VERSION_DECL = T.let(
-        "(?:ThisBuild\\s*/\\s*)?" \
-        "(?:scalaVersion\\s+in\\s+ThisBuild|scalaVersion)" \
-        '\\s*:=\\s*"',
-        String
-      )
+      SCALA_VERSION_DECL = "(?:ThisBuild\\s*/\\s*)?" \
+                           "(?:scalaVersion\\s+in\\s+ThisBuild|scalaVersion)" \
+                           '\\s*:=\\s*"'
 
       sig { override.returns(T::Array[Dependabot::DependencyFile]) }
       def updated_dependency_files
@@ -60,8 +57,8 @@ module Dependabot
                          .reject { |new_req, old_req| new_req == old_req }
 
         reqs.each do |new_req, old_req|
-          raise "Bad req match" unless new_req[:file] == T.must(old_req)[:file]
-          next if new_req[:requirement] == T.must(old_req)[:requirement]
+          raise "Bad req match" unless new_req.file == T.must(old_req).file
+          next if new_req.requirement == T.must(old_req).requirement
 
           files = apply_requirement_update(files, dependency, new_req, T.must(old_req))
         end
@@ -73,21 +70,21 @@ module Dependabot
         params(
           files: T::Array[Dependabot::DependencyFile],
           dependency: Dependabot::Dependency,
-          new_req: T::Hash[Symbol, T.untyped],
-          old_req: T::Hash[Symbol, T.untyped]
+          new_req: Dependabot::DependencyRequirement,
+          old_req: Dependabot::DependencyRequirement
         ).returns(T::Array[Dependabot::DependencyFile])
       end
       def apply_requirement_update(files, dependency, new_req, old_req)
-        if new_req.dig(:metadata, :property_name)
+        if new_req.metadata_string("property_name")
           update_files_for_property_change(files, old_req, new_req)
-        elsif T.let(new_req[:file], String).end_with?("build.properties")
+        elsif T.must(new_req.file).end_with?("build.properties")
           update_build_properties(files, old_req, new_req)
         elsif scala_version_requirement?(new_req)
-          file = T.must(files.find { |f| f.name == new_req[:file] })
+          file = T.must(files.find { |f| f.name == new_req.file })
           idx = T.must(files.index(file))
           files.dup.tap { |updated| updated[idx] = update_scala_version(file, old_req, new_req) }
         else
-          file = T.must(files.find { |f| f.name == new_req[:file] })
+          file = T.must(files.find { |f| f.name == new_req.file })
           idx = T.must(files.index(file))
           files.dup.tap { |updated| updated[idx] = update_version_in_buildfile(dependency, file, old_req, new_req) }
         end
@@ -96,34 +93,34 @@ module Dependabot
       sig do
         params(
           files: T::Array[Dependabot::DependencyFile],
-          old_req: T::Hash[Symbol, T.untyped],
-          new_req: T::Hash[Symbol, T.untyped]
+          old_req: Dependabot::DependencyRequirement,
+          new_req: Dependabot::DependencyRequirement
         ).returns(T::Array[Dependabot::DependencyFile])
       end
       def update_files_for_property_change(files, old_req, new_req)
-        property_name = T.let(new_req.dig(:metadata, :property_name), String)
-        callsite = T.must(files.find { |f| f.name == new_req[:file] })
+        property_name = T.must(new_req.metadata_string("property_name"))
+        callsite = T.must(files.find { |f| f.name == new_req.file })
 
         PropertyValueUpdater.new(dependency_files: files)
                             .update_files_for_property_change(
                               property_name: property_name,
                               callsite_buildfile: callsite,
-                              previous_value: T.let(old_req.fetch(:requirement), String),
-                              updated_value: T.let(new_req.fetch(:requirement), String)
+                              previous_value: T.must(old_req.requirement_string),
+                              updated_value: T.must(new_req.requirement_string)
                             )
       end
 
       sig do
         params(
           files: T::Array[Dependabot::DependencyFile],
-          old_req: T::Hash[Symbol, T.untyped],
-          new_req: T::Hash[Symbol, T.untyped]
+          old_req: Dependabot::DependencyRequirement,
+          new_req: Dependabot::DependencyRequirement
         ).returns(T::Array[Dependabot::DependencyFile])
       end
       def update_build_properties(files, old_req, new_req)
-        file = T.must(files.find { |f| f.name == new_req[:file] })
-        old_version = T.let(old_req.fetch(:requirement), String)
-        new_version = T.let(new_req.fetch(:requirement), String)
+        file = T.must(files.find { |f| f.name == new_req.file })
+        old_version = T.must(old_req.requirement_string)
+        new_version = T.must(new_req.requirement_string)
 
         updated_content = T.must(file.content).sub(
           /(sbt\.version\s*=\s*)#{Regexp.quote(old_version)}/,
@@ -141,13 +138,13 @@ module Dependabot
       sig do
         params(
           file: Dependabot::DependencyFile,
-          old_req: T::Hash[Symbol, T.untyped],
-          new_req: T::Hash[Symbol, T.untyped]
+          old_req: Dependabot::DependencyRequirement,
+          new_req: Dependabot::DependencyRequirement
         ).returns(Dependabot::DependencyFile)
       end
       def update_scala_version(file, old_req, new_req)
-        old_version = T.let(old_req.fetch(:requirement), String)
-        new_version = T.let(new_req.fetch(:requirement), String)
+        old_version = T.must(old_req.requirement_string)
+        new_version = T.must(new_req.requirement_string)
 
         updated_content = T.must(file.content).sub(
           /(#{SCALA_VERSION_DECL})#{Regexp.quote(old_version)}(")/,
@@ -163,8 +160,8 @@ module Dependabot
         params(
           dependency: Dependabot::Dependency,
           buildfile: Dependabot::DependencyFile,
-          previous_req: T::Hash[Symbol, T.untyped],
-          requirement: T::Hash[Symbol, T.untyped]
+          previous_req: Dependabot::DependencyRequirement,
+          requirement: Dependabot::DependencyRequirement
         ).returns(Dependabot::DependencyFile)
       end
       def update_version_in_buildfile(dependency, buildfile, previous_req, requirement)
@@ -185,18 +182,18 @@ module Dependabot
       sig do
         params(
           dependency: Dependabot::Dependency,
-          requirement: T::Hash[Symbol, T.untyped]
+          requirement: Dependabot::DependencyRequirement
         ).returns(T::Array[String])
       end
       def original_buildfile_declarations(dependency, requirement)
-        buildfile = T.must(dependency_files.find { |f| f.name == T.let(requirement.fetch(:file), String) })
+        buildfile = T.must(dependency_files.find { |f| f.name == requirement.file })
         group, artifact = dependency_group_and_artifact(dependency)
 
         T.must(buildfile.content).lines.select do |line|
           next false unless line.include?(group)
           next false unless line.include?(artifact)
 
-          line.include?(T.let(requirement.fetch(:requirement), String))
+          line.include?(T.must(requirement.requirement_string))
         end
       end
 
@@ -215,13 +212,13 @@ module Dependabot
       sig do
         params(
           old_declaration: String,
-          previous_req: T::Hash[Symbol, T.untyped],
-          requirement: T::Hash[Symbol, T.untyped]
+          previous_req: Dependabot::DependencyRequirement,
+          requirement: Dependabot::DependencyRequirement
         ).returns(String)
       end
       def updated_buildfile_declaration(old_declaration, previous_req, requirement)
-        original_req_string = T.let(previous_req.fetch(:requirement), String)
-        new_req_string = T.let(requirement.fetch(:requirement), String)
+        original_req_string = T.must(previous_req.requirement_string)
+        new_req_string = T.must(requirement.requirement_string)
 
         old_declaration.gsub(
           /"#{Regexp.quote(original_req_string)}"/,
@@ -229,9 +226,9 @@ module Dependabot
         )
       end
 
-      sig { params(req: T::Hash[Symbol, T.untyped]).returns(T::Boolean) }
+      sig { params(req: Dependabot::DependencyRequirement).returns(T::Boolean) }
       def scala_version_requirement?(req)
-        req.dig(:metadata, :property_source) == "scalaVersion"
+        req.metadata_string("property_source") == "scalaVersion"
       end
     end
   end

data/lib/dependabot/sbt/package/package_details_fetcher.rb

@@ -26,9 +26,9 @@ module Dependabot
           ).void
         end
         def initialize(dependency:, dependency_files:, credentials:)
-          @dependency = T.let(dependency, Dependabot::Dependency)
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
+          @dependency = dependency
+          @dependency_files = dependency_files
+          @credentials = credentials
 
           @repositories_cache = T.let(nil, T.nilable(T::Array[T::Hash[String, T.untyped]]))
           @repository_finder = T.let(nil, T.nilable(Sbt::FileParser::RepositoriesFinder))
@@ -140,7 +140,7 @@ module Dependabot
         # SBT plugins are identified by having "plugins" in their groups.
         sig { returns(T::Boolean) }
         def sbt_plugin?
-          dependency.requirements.any? { |req| req.fetch(:groups, []).include?("plugins") }
+          dependency.requirements.any? { |req| req.groups&.include?("plugins") }
         end
 
         # SBT 1.x plugins use Scala 2.12; SBT 2.x plugins use Scala 3.

data/lib/dependabot/sbt/requirement.rb

@@ -18,8 +18,8 @@ module Dependabot
 
       quoted = OPS.keys.map { |k| Regexp.quote k }.join("|")
       PATTERN_RAW = T.let("\\s*(#{quoted})?\\s*(#{Sbt::Version::VERSION_PATTERN})\\s*".freeze, String)
-      PATTERN = T.let(/\A#{PATTERN_RAW}\z/, Regexp)
-      RUBY_STYLE_PATTERN = T.let(/\A\s*(#{quoted})\s*(#{Sbt::Version::VERSION_PATTERN})\s*\z/, Regexp)
+      PATTERN = /\A#{PATTERN_RAW}\z/
+      RUBY_STYLE_PATTERN = /\A\s*(#{quoted})\s*(#{Sbt::Version::VERSION_PATTERN})\s*\z/
 
       sig { override.returns(Regexp) }
       def self.pattern

data/lib/dependabot/sbt/update_checker/requirements_updater.rb

@@ -47,13 +47,14 @@ module Dependabot
           return requirements unless latest_version
 
           requirements.map do |req|
-            next req if req.fetch(:requirement).nil?
-            next req if req.fetch(:requirement).include?(",")
+            requirement = req.requirement_string
+            next req if requirement.nil?
+            next req if requirement.include?(",")
 
-            property_name = req.dig(:metadata, :property_name)
+            property_name = req.metadata_string("property_name")
             next req if property_name && !properties_to_update.include?(property_name)
 
-            new_req = update_requirement(req[:requirement])
+            new_req = update_requirement(requirement)
             Dependabot::DependencyRequirement.create(req.merge(requirement: new_req, source: updated_source))
           end
         end

data/lib/dependabot/sbt/update_checker.rb

@@ -51,7 +51,7 @@ module Dependabot
       def updated_requirements
         property_names =
           declarations_using_a_property
-          .filter_map { |req| req.dig(:metadata, :property_name) }
+          .filter_map { |req| req.metadata_string("property_name") }
 
         RequirementsUpdater.new(
           requirements: dependency.requirements,
@@ -132,8 +132,8 @@ module Dependabot
       sig { returns(T::Boolean) }
       def version_comes_from_multi_dependency_property?
         declarations_using_a_property.any? do |requirement|
-          property_name = requirement.dig(:metadata, :property_name)
-          property_source = requirement.dig(:metadata, :property_source)
+          property_name = requirement.metadata_string("property_name")
+          property_source = requirement.metadata_string("property_source")
 
           next false unless property_name
 
@@ -141,20 +141,20 @@ module Dependabot
             next false if dep.name == dependency.name
 
             dep.requirements.any? do |req|
-              next unless req.dig(:metadata, :property_name) == property_name
+              next unless req.metadata_string("property_name") == property_name
 
-              req.dig(:metadata, :property_source) == property_source
+              req.metadata_string("property_source") == property_source
             end
           end
         end
       end
 
-      sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
+      sig { returns(T::Array[Dependabot::DependencyRequirement]) }
       def declarations_using_a_property
         @declarations_using_a_property ||= T.let(
           dependency.requirements
-                    .select { |req| req.dig(:metadata, :property_name) },
-          T.nilable(T::Array[T::Hash[Symbol, T.untyped]])
+                    .select { |req| req.metadata_string("property_name") },
+          T.nilable(T::Array[Dependabot::DependencyRequirement])
         )
       end
 
@@ -165,7 +165,7 @@ module Dependabot
             dependency_files: dependency_files,
             source: nil
           ).parse.select do |dep|
-            dep.requirements.any? { |req| req.dig(:metadata, :property_name) }
+            dep.requirements.any? { |req| req.metadata_string("property_name") }
           end,
           T.nilable(T::Array[Dependabot::Dependency])
         )

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-sbt
 version: !ruby/object:Gem::Version
-  version: 0.390.0
+  version: 0.391.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,28 +15,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
 - !ruby/object:Gem::Dependency
   name: dependabot-maven
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -277,7 +277,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.390.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.391.0
 rdoc_options: []
 require_paths:
 - lib