dependabot-common 0.106.15 → 0.106.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9a50686d41bc644c4d8f8861d717e6fe350dcfbeb888fdb0882d5ff1f4a58fc3
-  data.tar.gz: 0755ff3fee07b0aa233fb7bc6868d3eb6a7e2790f168e3f8d8a1f9a82b6bd9e1
+  metadata.gz: 144baf835971a7e5f18ba4b93f83d3a03626a2173c52825f9b39ae6a59f0fa33
+  data.tar.gz: 62a946ed6499692203709bce5cfc20e5a5e77da8e34bc492b8912f759ddede00
 SHA512:
-  metadata.gz: bb8d58ce89384fdd34e763b4c5585fbbc7ee91c3f1b6ba1663b438a29a298f9c4942b751633696729ab9b07bb0ca2a2cc617d9179320f22ef4319a8a06e90162
-  data.tar.gz: 36a6084e096a9dd7b5b4b5f581189b0fb5e6dbe59961e027f2108d4ebf0179e0266590afaf71e16de3f038638630ede5511ecc52fea47482fc6aadcb3c4fac92
+  metadata.gz: f0ada47028ee4319c1eaeaf6267784064f28b7261639026a836f68780370f470e9d3b8c90d2d1e023be57663a6fa8257d93481bd89c8081fc1aa50a7e5ed770d
+  data.tar.gz: 5ac228997f11270d23041e58af21d976e7961e33e2a3d3cb3fb961bdc043cdb313bc20e0e13a5a0bf6757e3e9b59e9285121ed94d456ff631413ececba8849a3

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -408,7 +408,7 @@ module Dependabot
 
         msg = ""
         fixed_vulns.each { |v| msg += serialized_vulnerability_details(v) }
-        msg = sanitize_tags(msg)
+        msg = sanitize_template_tags(msg)
 
         build_details_tag(summary: "Vulnerabilities fixed", body: msg)
       end
@@ -432,7 +432,7 @@ module Dependabot
           text: msg,
           base_url: source_url(dep) + "/blob/HEAD/"
         )
-        msg = sanitize_tags(msg)
+        msg = sanitize_template_tags(msg)
 
         build_details_tag(summary: "Release notes", body: msg)
       end
@@ -451,7 +451,7 @@ module Dependabot
           end
         msg = link_issues(text: msg, dependency: dep)
         msg = fix_relative_links(text: msg, base_url: changelog_url(dep))
-        msg = sanitize_tags(msg)
+        msg = sanitize_template_tags(msg)
 
         build_details_tag(summary: "Changelog", body: msg)
       end
@@ -471,7 +471,7 @@ module Dependabot
           end
         msg = link_issues(text: msg, dependency: dep)
         msg = fix_relative_links(text: msg, base_url: upgrade_url(dep))
-        msg = sanitize_tags(msg)
+        msg = sanitize_template_tags(msg)
 
         build_details_tag(summary: "Upgrade guide", body: msg)
       end
@@ -488,6 +488,8 @@ module Dependabot
           msg += "- [`#{sha}`](#{commit[:html_url]}) #{title}\n"
         end
 
+        msg = msg.gsub(/\<.*?\>/) { |tag| "\\#{tag}" }
+
         msg +=
           if commits(dep).count > 10
             "- Additional commits viewable in "\
@@ -496,7 +498,6 @@ module Dependabot
             "- See full diff in [compare view](#{commits_url(dep)})\n"
           end
         msg = link_issues(text: msg, dependency: dep)
-        msg = sanitize_tags(msg)
 
         build_details_tag(summary: "Commits", body: msg)
       end
@@ -758,15 +759,13 @@ module Dependabot
         end
       end
 
-      def sanitize_tags(text)
-        sanitized_tags = %w(del details ins template)
-
+      def sanitize_template_tags(text)
         text.gsub(/\<.*?\>/) do |tag|
           tag_contents = tag.match(/\<(.*?)\>/).captures.first.strip
 
-          # Unclosed calls to some tags overflow out of the blockquote block,
+          # Unclosed calls to template overflow out of the blockquote block,
           # wrecking the rest of our PRs. Other tags don't share this problem.
-          next "\\#{tag}" if tag_contents.start_with?(*sanitized_tags)
+          next "\\#{tag}" if tag_contents.start_with?("template")
 
           tag
         end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.106.15"
+  VERSION = "0.106.16"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.106.15
+  version: 0.106.16
 platform: ruby
 authors:
 - Dependabot