dependabot-cargo 0.85.2 → 0.85.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e5abceddd7459f63f5886c515f4d764863579b59046e9cb4ee81e7352fa3ab5e
-  data.tar.gz: b5e880bacd8688f6f193326971de1a6da192539b2e909dab2bb1e4a264a7e934
+  metadata.gz: '03855c61772bf651540878a765df8fc320a53ba5f5e5c2acfc34d0208da1a313'
+  data.tar.gz: c01eaf24d97022cc340dc6f0cace9affb8618dad2b4ffdfd9f9f80a6a5521db3
 SHA512:
-  metadata.gz: 777b4561d595c3fdebe3354cacb569d2cb48ab5a6ce46464636dcb24f0274bea612ce2df5acd3990b832671c6b10a2a929b32b105c359687805957c3c1a3c8ac
-  data.tar.gz: 6f87fc783d549fb93124e4e20ac39722165d119f5e521f88b9af494781d2f2db64703f5db09ac5d417bd988d57879779351e68b8d86f6172fead477d0d7d4a7e
+  metadata.gz: e2a659dc7fa633576a0e0efba866d7fa4646d0fbc9ebce86866d127b2ecae598ac029ba3185228e86edc7bae72fabc22debe6ce4c674eb909cc03b364530d83e
+  data.tar.gz: d43e03a14c3e5e9fcb858334023939baa42a0f7f1c05f7ac163a0f07610904d330272fc3721c1f1bf04c12257453f7c441769607382834649f2345283d211671

data/lib/dependabot/cargo/file_parser.rb

@@ -62,6 +62,7 @@ module Dependabot
         DEPENDENCY_TYPES.each do |type|
           manifest_files.each do |file|
             parsed_file(file).fetch(type, {}).each do |name, requirement|
+              next unless name == name_from_declaration(name, requirement)
               next if lockfile && !version_from_lockfile(name, requirement)
 
               dependency_set << Dependency.new(
@@ -121,6 +122,15 @@ module Dependabot
         nil
       end
 
+      def name_from_declaration(name, declaration)
+        return name if declaration.is_a?(String)
+        unless declaration.is_a?(Hash)
+          raise "Unexpected dependency declaration: #{declaration}"
+        end
+
+        declaration.fetch("package", name)
+      end
+
       def source_from_declaration(declaration)
         return if declaration.is_a?(String)
         unless declaration.is_a?(Hash)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.85.2
+  version: 0.85.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-12-15 00:00:00.000000000 Z
+date: 2018-12-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.85.2
+        version: 0.85.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.85.2
+        version: 0.85.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement