dependabot-silent 0.332.0 → 0.334.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 05c477860c8be8628001941a61f3b7468ecbce950ce45eb2483b51ececa06866
-  data.tar.gz: 56705202e916231fafa066a1cb0609b93a07419927f1da683cb5325007feb4ca
+  metadata.gz: ad4555f3fc0aeace8b6b505fe47a04e1e9b4c859c7804a0f880c26dd073a389c
+  data.tar.gz: c848eac3bde69d73dfd9dfd0191806e5bd019e0a41793a4e25b5d4a8768e4975
 SHA512:
-  metadata.gz: ea12571d83f88fea2f4375a28b9f956ae21705c7a86d5a35b3d2abee2dcbb84daada286908e0ef76d65457c95a686584fcb48dc8f332c7fd7f426cdd5d8b5163
-  data.tar.gz: bf1412ff42fb796aec14608a3d11dee45292c68f80460eb6678c2e3ddadf942293948ea8969c7dc9e67bb8f7c41cccc994617b0d1d81ca3be04cee525d772781
+  metadata.gz: d330b5413838d9f4f54d8739858bee0104f1b5a4f48fd159a6d9a3fabc9b5c2344fdeed4d975268151591a18420ec5582ad8cced93e1aa48ae40ca5ebc887a09
+  data.tar.gz: 055fe8ab5cccff9c4f3177be758c8693b935a8be1439f1760030d1658ec0a6e059cdf925807182ff6e429c7059148fe37f0d8f88ddd38d8b7fc92901117330ab

data/lib/dependabot/silent/requirement.rb

@@ -1,17 +1,24 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 require "dependabot/requirement"
 require "dependabot/utils"
 
 module SilentPackageManager
   class Requirement < Dependabot::Requirement
+    extend T::Sig
+
     AND_SEPARATOR = /(?<=[a-zA-Z0-9*])\s+(?:&+\s+)?(?!\s*[|-])/
 
+    sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Dependabot::Requirement]) }
     def self.requirements_array(requirement_string)
+      return [] if requirement_string.nil?
+
       requirements = requirement_string.split(AND_SEPARATOR).map(&:strip)
 
-      [new(*requirements)]
+      [new(requirements)]
     end
   end
 end

data/lib/dependabot/silent/update_checker.rb

@@ -1,6 +1,8 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/errors"
@@ -8,6 +10,15 @@ require "dependabot/update_checkers/version_filters"
 
 module SilentPackageManager
   class UpdateChecker < Dependabot::UpdateCheckers::Base
+    extend T::Sig
+
+    sig { params(args: T.untyped, kwargs: T.untyped).void }
+    def initialize(*args, **kwargs)
+      super
+      @available_versions = T.let(nil, T.nilable(T::Array[SilentPackageManager::Version]))
+    end
+
+    sig { override.returns(T.nilable(String)) }
     def latest_version
       return next_git_version if git_dependency?
 
@@ -16,6 +27,7 @@ module SilentPackageManager
       versions.max.to_s
     end
 
+    sig { override.returns(T::Boolean) }
     def latest_version_resolvable_with_full_unlock?
       # For ecosystems that have lockfiles, the updater allows an ecosystem to try progressively
       # more aggressive approaches to dependency unlocking. This method represents the most aggressive
@@ -24,29 +36,34 @@ module SilentPackageManager
       false
     end
 
+    sig { override.returns(T.nilable(Gem::Version)) }
     def lowest_security_fix_version
       versions = available_versions
       versions = filter_lower_versions(versions)
       Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(
         versions,
         security_advisories
-      ).min.to_s
+      ).min
     end
 
+    sig { override.returns(T.nilable(Gem::Version)) }
     def lowest_resolvable_security_fix_version
       raise "Dependency not vulnerable!" unless vulnerable?
 
       lowest_security_fix_version
     end
 
+    sig { override.returns(T::Boolean) }
     def up_to_date?
       dependency.version == latest_version
     end
 
+    sig { override.returns(T.nilable(T.any(String, Gem::Version))) }
     def latest_resolvable_version
       latest_version
     end
 
+    sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
     def updated_requirements
       dependency.requirements.map do |req|
         req.merge(requirement: preferred_resolvable_version)
@@ -55,18 +72,22 @@ module SilentPackageManager
 
     private
 
+    sig { returns(T::Boolean) }
     def git_dependency?
       dependency.version&.length == 40
     end
 
+    sig { returns(T.untyped) }
     def next_git_version
       fetch_dependency_metadata["git"]
     end
 
+    sig { params(versions: T::Array[SilentPackageManager::Version]).returns(T::Array[SilentPackageManager::Version]) }
     def filter_lower_versions(versions)
       versions.reject { |v| v < version_class.new(dependency.version) }
     end
 
+    sig { params(versions: T::Array[SilentPackageManager::Version]).returns(T::Array[SilentPackageManager::Version]) }
     def filter_ignored_versions(versions)
       filtered = versions.reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
       return filtered unless versions.any? && filtered.empty? && raise_on_ignored
@@ -74,6 +95,7 @@ module SilentPackageManager
       raise Dependabot::AllVersionsIgnored
     end
 
+    sig { returns(T::Hash[String, T.untyped]) }
     def fetch_dependency_metadata
       version_file = File.join(repo_contents_path, dependency.name)
       return { "versions" => [] } unless File.exist?(version_file)
@@ -85,11 +107,12 @@ module SilentPackageManager
       raise Dependabot::DependencyFileNotParseable, T.must(dependency_files.first).path
     end
 
+    sig { returns(T::Array[SilentPackageManager::Version]) }
     def available_versions
-      return @available_versions if defined? @available_versions
-
-      versions = fetch_dependency_metadata["versions"]
-      @available_versions = versions.map { |v| SilentPackageManager::Version.new(v) }
+      @available_versions ||= T.let(begin
+        versions = fetch_dependency_metadata["versions"]
+        versions.map { |v| SilentPackageManager::Version.new(v) }
+      end, T.nilable(T::Array[SilentPackageManager::Version]))
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-silent
 version: !ruby/object:Gem::Version
-  version: 0.332.0
+  version: 0.334.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.332.0
+        version: 0.334.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.332.0
+        version: 0.334.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -211,14 +211,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.18'
+        version: '3.25'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.18'
+        version: '3.25'
 - !ruby/object:Gem::Dependency
   name: webrick
   requirement: !ruby/object:Gem::Requirement
@@ -253,7 +253,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.332.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.334.0
 rdoc_options: []
 require_paths:
 - lib