dependabot-swift 0.293.0 → 0.294.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fbddee66036ca2547c65d0f0d1d2fb9f777e67b44d9c2e976598c66f0925f899
-  data.tar.gz: 2d783a10cfcdbe77a1e281067bebe89476a293d082f532f04c8785a2c68fe0fc
+  metadata.gz: 030d3f9255d770e7b983ac6539608ba45317b7fc3ff8319494ca6f6bb65f0206
+  data.tar.gz: 9318fe70f279434466963c21e14d696ea15e4321508de1cac618eb22061e724e
 SHA512:
-  metadata.gz: cb0f5a0fc7c4b8419af86757140ec6928c9fc3e45f295808cfd4361a0487b2c0c2862bfbaea3c6da2b0fb3f642d161e42d32d66eeab5fe0b4f9f02effc13d3f8
-  data.tar.gz: 92cfab8a92c3ad4fff55f3888a8daa4dfb5926f4ef24b96525bba8f34cedbf57e3cde6b433f3081e20012d755737d99e906fbb2c63cbcf728cd15dcbde19c0cf
+  metadata.gz: 02a176d7ec78e4eeab9166ed0b2293fd8d851477d27f7d21722334a57205758cd7cb24151472d256099e859ebb4d4a2aa1a30d5048ab5d4213fd3f9d7724c827
+  data.tar.gz: 7db9f1634b43520157285b646e40931bc87fb61bfa40fc15b8360c1940176450cb96252d2c7b96a3015978c74d62e94b1a84b851fca05a2c7599b41c7c166e46

data/lib/dependabot/swift/file_parser/manifest_parser.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strong
 # frozen_string_literal: true
 
 require "dependabot/file_parsers/base"
@@ -8,25 +8,35 @@ module Dependabot
   module Swift
     class FileParser < Dependabot::FileParsers::Base
       class ManifestParser
+        extend T::Sig
+        extend T::Helpers
+
         DEPENDENCY =
           /(?<declaration>\.package\(\s*
             (?:name:\s+"[^"]+",\s*)?url:\s+"(?<url>[^"]+)",\s*(?<requirement>#{NativeRequirement::REGEXP})\s*
            \))/x
 
+        sig do
+          params(
+            manifest: Dependabot::DependencyFile,
+            source: T::Hash[Symbol, String]
+          ).void
+        end
         def initialize(manifest, source:)
           @manifest = manifest
           @source = source
         end
 
+        sig { returns(T::Array[T::Hash[Symbol, T.untyped]]) }
         def requirements
-          found = manifest.content.scan(DEPENDENCY).find do |_declaration, url, _requirement|
-            SharedHelpers.scp_to_standard(url) == source[:url]
+          found = manifest.content&.scan(DEPENDENCY)&.find do |_declaration, url, _requirement|
+            SharedHelpers.scp_to_standard(url.to_s) == source[:url]
           end
 
           return [] unless found
 
-          declaration = found.first
-          requirement = NativeRequirement.new(found.last)
+          declaration = T.cast(found, T::Array[String]).first
+          requirement = NativeRequirement.new(T.cast(found, T::Array[String]).last)
 
           [
             {
@@ -41,7 +51,10 @@ module Dependabot
 
         private
 
+        sig { returns(Dependabot::DependencyFile) }
         attr_reader :manifest
+
+        sig { returns(T::Hash[Symbol, String]) }
         attr_reader :source
       end
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-swift
 version: !ruby/object:Gem::Version
-  version: 0.293.0
+  version: 0.294.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-16 00:00:00.000000000 Z
+date: 2025-01-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.293.0
+        version: 0.294.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.293.0
+        version: 0.294.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -265,7 +265,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.293.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.294.0
 post_install_message:
 rdoc_options: []
 require_paths: