dependabot-vcpkg 0.392.0 → 0.393.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d9adda37faba7a4ba0d78122d2b340d3abe3b66033c4629341f6ad6027aa23fb
-  data.tar.gz: c17e3c6abdb537d697c86d20f9defc2a78384cabcb334f77c7124c09d8f64cb8
+  metadata.gz: 1f725856a20a9032c73a10c4bae879a92a0dfe627e1f17d01a0a089605de7a4f
+  data.tar.gz: 317d51a65e62f67b835a6f9cabb754c0743c44783de8d4077383dd68926b935e
 SHA512:
-  metadata.gz: 3a6431124969298347d410137b294da0fe3cfa94061fd6f1aeb625f79ebae6a89ab39d4b2c92ee9d0bcb992c987bee812007b824249d44a668f4e75aa66a0f6a
-  data.tar.gz: 6dae72dd089b071f0a4494c914d82ee47bb3e0656176846dd9bdb5057f7a81fe936e1fc9c4d55f7a1cfb1634f6b6688a42e05342743804d4f1f899047a48a46e
+  metadata.gz: 42a8c1a4dc0282b7cf4973172426fa8073c9bb28a39e1113c7afba9ca9f214a3b749ed60ee599eb67a9cc125cf59ed149becae69a922b21a82044a2b00dbd8a4
+  data.tar.gz: ce1479969c093e4cc2d1cf1ceb39ab508f1e4be18110ed7980baf7b7787c858357e9edfed793444edf23c13ccd46976aec9f81ba6213694276711871ed82f927

data/lib/dependabot/vcpkg/package/package_details_fetcher.rb

@@ -91,20 +91,38 @@ module Dependabot
           Dependabot::Package::PackageDetails.new(dependency: dependency, releases: releases)
         end
 
-        sig { params(tag_info: T::Hash[Symbol, T.untyped]).returns(Dependabot::Package::PackageRelease) }
+        sig { params(tag_info: T::Hash[Symbol, Object]).returns(Dependabot::Package::PackageRelease) }
         def create_registry_package_release(tag_info)
+          tag = tag_name(tag_info)
           Dependabot::Package::PackageRelease.new(
-            version: Dependabot::Vcpkg::Version.new(tag_info.fetch(:tag)),
-            tag: tag_info.fetch(:tag),
+            version: Dependabot::Vcpkg::Version.new(tag),
+            tag: tag,
             url: dependency.source_string("url"),
-            released_at: extract_release_date_from_tag(tag_info.fetch(:tag)),
+            released_at: extract_release_date_from_tag(tag),
             details: {
-              "commit_sha" => tag_info.fetch(:commit_sha),
-              "tag_sha" => tag_info.fetch(:tag_sha)
+              "commit_sha" => tag_string(tag_info, :commit_sha),
+              "tag_sha" => tag_string(tag_info, :tag_sha)
             }
           )
         end
 
+        sig { params(tag_info: T::Hash[Symbol, Object]).returns(String) }
+        def tag_name(tag_info)
+          return tag_info.tag if tag_info.is_a?(Dependabot::GitTagDetails)
+
+          T.cast(tag_info.fetch(:tag), String)
+        end
+
+        sig { params(tag_info: T::Hash[Symbol, Object], key: Symbol).returns(T.nilable(String)) }
+        def tag_string(tag_info, key)
+          if tag_info.is_a?(Dependabot::GitTagDetails)
+            return tag_info.commit_sha if key == :commit_sha
+            return tag_info.tag_sha if key == :tag_sha
+          end
+
+          T.cast(tag_info[key], T.nilable(String))
+        end
+
         sig do
           params(
             port_version: Dependabot::Vcpkg::Package::VersionsDatabase::PortVersion,

data/lib/dependabot/vcpkg/update_checker.rb

@@ -52,7 +52,7 @@ module Dependabot
 
       # The release tag for the current baseline commit SHA (else the SHA), so the
       # PR title's "from" shows the tag, not the "master" ref.
-      sig { params(_updated_version: String).returns(T.nilable(String)) }
+      sig { params(_updated_version: T.any(String, Gem::Version)).returns(T.nilable(String)) }
       def latest_resolvable_previous_version(_updated_version)
         current_version = dependency.version
         return current_version unless registry_dependency? && current_version&.match?(/\A[0-9a-f]{40}\z/)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-vcpkg
 version: !ruby/object:Gem::Version
-  version: 0.392.0
+  version: 0.393.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.392.0
+        version: 0.393.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.392.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.393.0
 rdoc_options: []
 require_paths:
 - lib