dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.
https://docs.github.com/en/code-security/dependabot
MIT License
4.74k stars 1.03k forks source link

Fix Sorbet Typings for `npm_and_yarn` Ecosystem Package Manager and Helpers #10975

Closed kbukum1 closed 1 week ago

kbukum1 commented 1 week ago

What are you trying to accomplish?

This PR addresses issues related to Sorbet typings in the npm_and_yarn ecosystem package manager. The goal is to ensure proper type safety and consistency across the codebase, reducing potential runtime errors and improving maintainability.

Key Changes:

  1. Fixed incorrect Sorbet type annotations for methods in the package manager helpers.
  2. Ensured consistent handling of method signatures and parameters for all package manager classes (NpmPackageManager, YarnPackageManager, PNPMPackageManager).
  3. Resolved errors caused by type mismatches in installed_version, setup, and other helper methods.

What issues does this affect or fix?

Anything you want to highlight for special attention from reviewers?

How will you know you've accomplished your goal?

Checklist