dependabot-swift 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c6a333247d7e23cf5e8864c7f83ace86688a723b74ef1a0c25211fddbbde92f9
-  data.tar.gz: d22ef8c29b754afb10ce11b98f8010da8a32c81803ce4a6e8122c3569827bd62
+  metadata.gz: 6e00ccec6ddd544f4f22c09938a9c1da9c8417075b47d6e4eb73cf0180b295bb
+  data.tar.gz: a90680a12b1dcc7c9f4eb39495de35964337ea3f8bbc2d986880101b15664160
 SHA512:
-  metadata.gz: '078abe54878e9667b261411ded8caffd38717dc8f620dcffb9806aca36bf9fa23bf71562b4d7297954d05b8b0c1d8f503d1401ade54da804b79c96079a0bbb0f'
-  data.tar.gz: aa477876d59ba302ae34d79d93b7c7e0299818a92d293190aab22cecf8561e04d9213f1f7c335db33dc992d10246b55afda15c4b37ce555c9161dbf1b67744c3
+  metadata.gz: 3180f0538499b7b2829f66797dd1630c5bcf89efc2169f11237b191c93b975e3fedd86e76d88f299fe5423ab3cc660f39dbdfe877131db1d252024795b671ec4
+  data.tar.gz: fb75ad4ce85c4b70e2f3abd674e19fbe57367ed2252b1daea9fe0960ec870e83a9b0dedc2927b1772514107ad0ca6e7d368424a293c090c2b704367ddc7fd47c

data/lib/dependabot/swift/file_fetcher.rb

@@ -1,4 +1,4 @@
-# typed: strict
+# typed: strong
 # frozen_string_literal: true
 
 require "sorbet-runtime"

data/lib/dependabot/swift/update_checker/xcode_version_resolver.rb

@@ -101,7 +101,7 @@ module Dependabot
           tag = git_commit_checker.local_tag_for_latest_version
           return nil unless tag
 
-          version = tag.fetch(:version)
+          version = tag_version(tag)
           return nil unless version_meets_requirements?(version)
 
           tag
@@ -116,9 +116,9 @@ module Dependabot
           return nil unless requirement
 
           tags = git_commit_checker.local_tags_for_allowed_versions
-          matching_tags = tags.select { |tag| requirement.satisfied_by?(tag.fetch(:version)) }
+          matching_tags = tags.select { |tag| requirement.satisfied_by?(T.must(tag_version(tag))) }
 
-          matching_tags.max_by { |tag| tag.fetch(:version) }
+          matching_tags.max_by { |tag| T.must(tag_version(tag)) }
         end
 
         sig { returns(T.nilable(Dependabot::Swift::Requirement)) }
@@ -193,6 +193,8 @@ module Dependabot
 
         sig { params(tag: T::Hash[Symbol, Object]).returns(T.nilable(Gem::Version)) }
         def tag_version(tag)
+          return tag.version if tag.is_a?(Dependabot::GitTagDetails)
+
           version = tag[:version]
           version if version.is_a?(Gem::Version)
         end

data/lib/dependabot/swift/update_checker.rb

@@ -269,7 +269,10 @@ module Dependabot
         find_lowest_secure_version(tags)
       end
 
-      sig { params(tags: T::Array[T::Hash[Symbol, Object]]).returns(T.nilable(T::Hash[Symbol, Object])) }
+      sig do
+        params(tags: T::Array[T::Hash[Symbol, Object]])
+          .returns(T.nilable(T::Hash[Symbol, Object]))
+      end
       def find_lowest_secure_version(tags)
         relevant_versions = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(
           tags.filter_map { |tag| tag_version(tag) },
@@ -281,7 +284,10 @@ module Dependabot
         relevant_tags.min_by { |tag| T.must(tag_version(tag)) }
       end
 
-      sig { params(tags_array: T::Array[T::Hash[Symbol, Object]]).returns(T::Array[T::Hash[Symbol, Object]]) }
+      sig do
+        params(tags_array: T::Array[T::Hash[Symbol, Object]])
+          .returns(T::Array[T::Hash[Symbol, Object]])
+      end
       def filter_lower_tags(tags_array)
         return tags_array unless current_version
 
@@ -294,7 +300,7 @@ module Dependabot
 
       sig { params(tag: T::Hash[Symbol, Object]).returns(T.nilable(Dependabot::Version)) }
       def tag_version(tag)
-        version = tag[:version]
+        version = tag.is_a?(Dependabot::GitTagDetails) ? tag.version : tag[:version]
         Dependabot::Swift::Version.new(version.to_s) if version.is_a?(Gem::Version)
       end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-swift
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -272,7 +272,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib