dependabot-common 0.112.29 → 0.112.34

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e272a3d8d5c27d8bd7eeb4a5f7488bc3db9ca4515b9f9bf3a946810cd61bd00b
-  data.tar.gz: 193c4e104b9ceb7740afa1536a8ec62d48c910409f484b382b949a127fbe8c9b
+  metadata.gz: 52615bdb552935a1f3311dfa6d6856d948a8cf5683abe6dbe12be23fcff2654a
+  data.tar.gz: 7752d42bd28f08f0d06265e3f0b4cf893d83249d01b3797b9d78685bfdb4deb4
 SHA512:
-  metadata.gz: 5a3de01fb30f92e94da8875eb18c6b4d8512ad3b1ab74bf24da419f84532f6fd68f5bb2884ecae843aba528b1e1a1f751785ed3a14aa6853497d539930a0c9aa
-  data.tar.gz: e561d85cefbac09f8bd11141f4944025198f27bf14e0b0c4250002e0fa75b9bd34689e7b06979027b749251927ab30e7acb4ae777cca82d0cff450a8b4bb8874
+  metadata.gz: 9da243d7c5ff821d78f0ecd8e87e4dec0025e03bc039f5b43000ad6c4c2a422f5e6732a3ebea46d52fbeb5a2af93ce36dab8f3fecc14bbdf029c58ddc3142579
+  data.tar.gz: 9c9b48f6f7f203a0a20cbf564da9450828fcb38c9f6f05ffaf6ebe517e209653cf502dfe8e1d84a777e62f0497f15cab3de05d06da58ba9ef0c2185835dab9bd

data/lib/dependabot/errors.rb

@@ -98,7 +98,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       msg = "The following source could not be reached as it requires "\
             "authentication (and any provided details were invalid or lacked "\
             "the required permissions): #{source}"
@@ -110,7 +110,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       super("The following source timed out: #{source}")
     end
   end
@@ -119,7 +119,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       super("Could not verify the SSL certificate for #{source}")
     end
   end

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -18,7 +18,7 @@ module Dependabot
         require_relative "commits_finder"
 
         # Earlier entries are preferred
-        CHANGELOG_NAMES = %w(changelog history news changes release).freeze
+        CHANGELOG_NAMES = %w(changelog news changes history release).freeze
 
         attr_reader :source, :dependency, :credentials, :suggested_changelog_url
 

data/lib/dependabot/pull_request_creator/github.rb

@@ -258,6 +258,9 @@ module Dependabot
           team_reviewers: reviewers_hash[:team_reviewers] || []
         )
       rescue Octokit::UnprocessableEntity => e
+        # Special case GitHub bug for team reviewers
+        return if e.message.include?("Could not resolve to a node")
+
         if invalid_reviewer?(e.message)
           comment_with_invalid_reviewer(pull_request, e.message)
           return

data/lib/dependabot/pull_request_updater/github.rb

@@ -168,23 +168,28 @@ module Dependabot
       end
 
       def commit_message
-        @commit_message ||=
+        # Take the commit message from the old commit
+        commit_being_updated.message
+      end
+
+      def commit_being_updated
+        @commit_being_updated ||=
           if pull_request.commits == 1
             github_client_for_source.
-              git_commit(source.repo, pull_request.head.sha).
-              message
+              git_commit(source.repo, pull_request.head.sha)
           else
             author_name = author_details&.fetch(:name, nil) || "dependabot"
             commits =
               github_client_for_source.
-              pull_request_commits(source.repo, pull_request_number)
+              pull_request_commits(source.repo, pull_request_number).
+              reverse
 
             commit =
               commits.find { |c| c.sha == old_commit } ||
               commits.find { |c| c.commit.author.name.include?(author_name) } ||
               commits.first
 
-            commit.commit.message
+            commit.commit
           end
       end
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.112.29"
+  VERSION = "0.112.34"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.112.29
+  version: 0.112.34
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-09-02 00:00:00.000000000 Z
+date: 2019-09-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-ecr