dependabot-common 0.112.31 → 0.112.36

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6f926c781649fede49de9c618f56a22c4280455e87ba2bacc192a92486130082
-  data.tar.gz: 94d11fdf1d7667b384c711b1852061584e7da52b227ecc6876e2f8495796ac0c
+  metadata.gz: a8a1f65145b29981706b141f25ee93c4717a61f36359250e4783ff06f7bbc1dd
+  data.tar.gz: 13570d5213a2f593a09baec66d17acd006e8c1ac6a91baf61c4680f984ac1248
 SHA512:
-  metadata.gz: b6e8fb3155113ab41c7d9cc33a016c98bdc5bce8d4d617ee467e9fed3f70b55800eacfe65cc549b30b78254a985b449b8be5c3318ad2caf33f7fbca26c74df02
-  data.tar.gz: 13a84fac1e5ebbfe5e29a9d8d4ad1f6d97c52d3ab2175145c66c546dd23abaf912bf443f9c841ec4717d8843d1bb0a0ec4e492d9250e7dd3b0a8ece6b4f4b4bc
+  metadata.gz: dc9720630a4b7bcf91e47589bdd951a3eda947d8fb4b04bf42a381772b61b5e0a786def81b62ae3e005a993dfb17c9be0a2685141eb01ab2ee20708ea988b50e
+  data.tar.gz: a4672dee9a49d8eb4088c482c3c767f8ec0ee9b9265034fd835beaa195a2d26e1d4459dd0b1eecbfcfedebe6d44d49ab6524b811d1a0f21294942d5d423545be

data/lib/dependabot/errors.rb

@@ -98,7 +98,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       msg = "The following source could not be reached as it requires "\
             "authentication (and any provided details were invalid or lacked "\
             "the required permissions): #{source}"
@@ -110,7 +110,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       super("The following source timed out: #{source}")
     end
   end
@@ -119,7 +119,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       super("Could not verify the SSL certificate for #{source}")
     end
   end

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -18,7 +18,7 @@ module Dependabot
         require_relative "commits_finder"
 
         # Earlier entries are preferred
-        CHANGELOG_NAMES = %w(changelog history news changes release).freeze
+        CHANGELOG_NAMES = %w(changelog news changes history release).freeze
 
         attr_reader :source, :dependency, :credentials, :suggested_changelog_url
 

data/lib/dependabot/pull_request_creator/github.rb

@@ -61,7 +61,9 @@ module Dependabot
         raise(RepoNotFound, source.url) unless repo_exists?
 
         retrying ||= false
-        raise "Unexpected git error!" if retrying
+
+        msg = "Unexpected git error!\n\n#{e.cause&.class}: #{e.cause&.message}"
+        raise msg if retrying
 
         retrying = true
         retry
@@ -258,6 +260,9 @@ module Dependabot
           team_reviewers: reviewers_hash[:team_reviewers] || []
         )
       rescue Octokit::UnprocessableEntity => e
+        # Special case GitHub bug for team reviewers
+        return if e.message.include?("Could not resolve to a node")
+
         if invalid_reviewer?(e.message)
           comment_with_invalid_reviewer(pull_request, e.message)
           return

data/lib/dependabot/pull_request_updater/github.rb

@@ -168,23 +168,28 @@ module Dependabot
       end
 
       def commit_message
-        @commit_message ||=
+        # Take the commit message from the old commit
+        commit_being_updated.message
+      end
+
+      def commit_being_updated
+        @commit_being_updated ||=
           if pull_request.commits == 1
             github_client_for_source.
-              git_commit(source.repo, pull_request.head.sha).
-              message
+              git_commit(source.repo, pull_request.head.sha)
           else
             author_name = author_details&.fetch(:name, nil) || "dependabot"
             commits =
               github_client_for_source.
-              pull_request_commits(source.repo, pull_request_number)
+              pull_request_commits(source.repo, pull_request_number).
+              reverse
 
             commit =
               commits.find { |c| c.sha == old_commit } ||
               commits.find { |c| c.commit.author.name.include?(author_name) } ||
               commits.first
 
-            commit.commit.message
+            commit.commit
           end
       end
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.112.31"
+  VERSION = "0.112.36"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.112.31
+  version: 0.112.36
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-09-02 00:00:00.000000000 Z
+date: 2019-09-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-ecr