dependabot-silent 0.333.0 → 0.335.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2f574b13dce9cf6fe21883c08596855b5437af90436c6b7fa8bc2936a443f34c
-  data.tar.gz: 56705202e916231fafa066a1cb0609b93a07419927f1da683cb5325007feb4ca
+  metadata.gz: 2bcb5e6a9e9bbe7a6f0b9f7799e0cdfffcb2ea012b3b7b71583c20fd1dd6cbc7
+  data.tar.gz: 65c82c747c4ff3704391e767169195f5ccd3376c6f1193b0af4a3b95f82b18ac
 SHA512:
-  metadata.gz: fde59f31b44bbfe6c6916882ec738d81cb804cc916b6346608222fc9a8c378ee35af70c03281b23e3ae546cb6d4552340cbce7ed0d0be928886a22fc2fda07b6
-  data.tar.gz: bf1412ff42fb796aec14608a3d11dee45292c68f80460eb6678c2e3ddadf942293948ea8969c7dc9e67bb8f7c41cccc994617b0d1d81ca3be04cee525d772781
+  metadata.gz: d780f6243f2e6a11f1a840cb538dbb91bc1af0a5c9b932e2730b6cf176f016ac9a658db731f71c362ca52f88beeb09c9ba22bd1a73c0d28f2711369eebc4d2c7
+  data.tar.gz: a5ec1adaaa86538d9f9072f5bae0d087d543c3927a36ec07464c87f308d0daeb2a5de850f65f7f580a54b09a2a3b565497434fec7eff8162cae33fd81982690b

data/lib/dependabot/silent/requirement.rb

@@ -1,17 +1,24 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 require "dependabot/requirement"
 require "dependabot/utils"
 
 module SilentPackageManager
   class Requirement < Dependabot::Requirement
+    extend T::Sig
+
     AND_SEPARATOR = /(?<=[a-zA-Z0-9*])\s+(?:&+\s+)?(?!\s*[|-])/
 
+    sig { override.params(requirement_string: T.nilable(String)).returns(T::Array[Dependabot::Requirement]) }
     def self.requirements_array(requirement_string)
+      return [] if requirement_string.nil?
+
       requirements = requirement_string.split(AND_SEPARATOR).map(&:strip)
 
-      [new(*requirements)]
+      [new(requirements)]
     end
   end
 end

data/lib/dependabot/silent/update_checker.rb

@@ -1,6 +1,8 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
+require "sorbet-runtime"
+
 require "dependabot/update_checkers"
 require "dependabot/update_checkers/base"
 require "dependabot/errors"
@@ -8,6 +10,15 @@ require "dependabot/update_checkers/version_filters"
 
 module SilentPackageManager
   class UpdateChecker < Dependabot::UpdateCheckers::Base
+    extend T::Sig
+
+    sig { params(args: T.untyped, kwargs: T.untyped).void }
+    def initialize(*args, **kwargs)
+      super
+      @available_versions = T.let(nil, T.nilable(T::Array[SilentPackageManager::Version]))
+    end
+
+    sig { override.returns(T.nilable(String)) }
     def latest_version
       return next_git_version if git_dependency?
 
@@ -16,6 +27,7 @@ module SilentPackageManager
       versions.max.to_s
     end
 
+    sig { override.returns(T::Boolean) }
     def latest_version_resolvable_with_full_unlock?
       # For ecosystems that have lockfiles, the updater allows an ecosystem to try progressively
       # more aggressive approaches to dependency unlocking. This method represents the most aggressive
@@ -24,29 +36,34 @@ module SilentPackageManager
       false
     end
 
+    sig { override.returns(T.nilable(Gem::Version)) }
     def lowest_security_fix_version
       versions = available_versions
       versions = filter_lower_versions(versions)
       Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(
         versions,
         security_advisories
-      ).min.to_s
+      ).min
     end
 
+    sig { override.returns(T.nilable(Gem::Version)) }
     def lowest_resolvable_security_fix_version
       raise "Dependency not vulnerable!" unless vulnerable?
 
       lowest_security_fix_version
     end
 
+    sig { override.returns(T::Boolean) }
     def up_to_date?
       dependency.version == latest_version
     end
 
+    sig { override.returns(T.nilable(T.any(String, Gem::Version))) }
     def latest_resolvable_version
       latest_version
     end
 
+    sig { override.returns(T::Array[T::Hash[Symbol, T.untyped]]) }
     def updated_requirements
       dependency.requirements.map do |req|
         req.merge(requirement: preferred_resolvable_version)
@@ -55,18 +72,22 @@ module SilentPackageManager
 
     private
 
+    sig { returns(T::Boolean) }
     def git_dependency?
       dependency.version&.length == 40
     end
 
+    sig { returns(T.untyped) }
     def next_git_version
       fetch_dependency_metadata["git"]
     end
 
+    sig { params(versions: T::Array[SilentPackageManager::Version]).returns(T::Array[SilentPackageManager::Version]) }
     def filter_lower_versions(versions)
       versions.reject { |v| v < version_class.new(dependency.version) }
     end
 
+    sig { params(versions: T::Array[SilentPackageManager::Version]).returns(T::Array[SilentPackageManager::Version]) }
     def filter_ignored_versions(versions)
       filtered = versions.reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
       return filtered unless versions.any? && filtered.empty? && raise_on_ignored
@@ -74,6 +95,7 @@ module SilentPackageManager
       raise Dependabot::AllVersionsIgnored
     end
 
+    sig { returns(T::Hash[String, T.untyped]) }
     def fetch_dependency_metadata
       version_file = File.join(repo_contents_path, dependency.name)
       return { "versions" => [] } unless File.exist?(version_file)
@@ -85,11 +107,15 @@ module SilentPackageManager
       raise Dependabot::DependencyFileNotParseable, T.must(dependency_files.first).path
     end
 
+    sig { returns(T::Array[SilentPackageManager::Version]) }
     def available_versions
-      return @available_versions if defined? @available_versions
-
-      versions = fetch_dependency_metadata["versions"]
-      @available_versions = versions.map { |v| SilentPackageManager::Version.new(v) }
+      @available_versions ||= T.let(
+        begin
+          versions = fetch_dependency_metadata["versions"]
+          versions.map { |v| SilentPackageManager::Version.new(v) }
+        end,
+        T.nilable(T::Array[SilentPackageManager::Version])
+      )
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-silent
 version: !ruby/object:Gem::Version
-  version: 0.333.0
+  version: 0.335.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.333.0
+        version: 0.335.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.333.0
+        version: 0.335.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -113,56 +113,56 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.67'
+        version: '1.80'
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.22'
+        version: '1.26'
 - !ruby/object:Gem::Dependency
   name: rubocop-rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.29'
+        version: '3.7'
 - !ruby/object:Gem::Dependency
   name: rubocop-sorbet
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.8'
+        version: '0.10'
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -253,7 +253,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.333.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.335.0
 rdoc_options: []
 require_paths:
 - lib