Align dry-run.rb blocked_versions with version-requirement rename

Update bin/dry-run.rb (from merged PR #14916) to use 'version-requirement'
instead of 'version' in the blocked_versions data structure, matching the
rename done in job.rb and the API contract.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: kbukum1

bin/dry-run.rb

@@ -228,7 +228,7 @@
 
 unless ENV["BLOCKED_VERSIONS"].to_s.strip.empty?
   # For example:
-  # [{"dependency-name":"event-stream","version":"= 3.3.6","reason":"malware"}]
+  # [{"dependency-name":"event-stream","version-requirement":"= 3.3.6","reason":"malware"}]
   $options[:blocked_versions] = JSON.parse(ENV.fetch("BLOCKED_VERSIONS", nil))
 end
 
@@ -730,9 +730,9 @@ def ignored_versions_for(dep)
 
   def blocked_versions_for(dep)
     $options[:blocked_versions]
-      .select { |bv| bv["dependency-name"] && bv["version"] }
+      .select { |bv| bv["dependency-name"] && bv["version-requirement"] }
       .select { |bv| bv["dependency-name"].casecmp(dep.name).zero? }
-      .map { |bv| bv["version"] }
+      .map { |bv| bv["version-requirement"] }
   end
 
   def security_advisories
@@ -794,7 +794,7 @@ def security_fix?(dependency)
   if $options[:blocked_versions].any?
     puts "=> blocked versions active:"
     $options[:blocked_versions].each do |bv|
-      msg = "   #{bv['dependency-name']} #{bv['version']}"
+      msg = "   #{bv['dependency-name']} #{bv['version-requirement']}"
       msg += " (#{bv['reason']})" if bv["reason"]
       puts msg
     end

updater/lib/dependabot/api_client.rb

@@ -408,7 +408,7 @@ def fetch_blocked_versions(package_manager)
           return []
         end
         data = parsed.fetch("data", [])
-        unless data.is_a?(Array)
+        unless data.is_a?(Array) && data.all?(Hash)
           Dependabot.logger.warn("Unexpected blocked versions format, continuing without them")
           return []
         end

updater/spec/dependabot/api_client_spec.rb

@@ -921,5 +921,23 @@
         expect(result).to eq([])
       end
     end
+
+    context "when the API returns data entries that are not hashes" do
+      before do
+        stub_request(:get, blocked_versions_url)
+          .with(query: { "package-manager": "npm_and_yarn" })
+          .to_return(
+            status: 200,
+            body: { data: [1, "not-a-hash"] }.to_json,
+            headers: headers
+          )
+      end
+
+      it "returns an empty array and logs a warning" do
+        expect(Dependabot.logger).to receive(:warn).with(/Unexpected blocked versions format/)
+        result = client.fetch_blocked_versions("npm_and_yarn")
+        expect(result).to eq([])
+      end
+    end
   end
 end