dependabot-common 0.112.32 → 0.112.37

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a78e51c3d204cf2337c5c444c03b88811db1145d21d7869147512446261e661d
-  data.tar.gz: 9b68fbf315cfbc71672b77e5415e51771b449607de0001daf24f6e4f547d3d45
+  metadata.gz: d7430df3fea7dd40e4688df4f0ae33d1ad870fa722f03662ff2c743d45c9efcc
+  data.tar.gz: b2646081ac5939afea56a79e87db4bb7fa4c50f603326f53c758f1acae9c32ee
 SHA512:
-  metadata.gz: 967b7b6db6731b6966edff912d69be0ddcbe88d4aff4d45cde6f1d662ca45ce2428aaa74e8857b3bda09f7855b7c9385e92a21d5029a31f8b56e859bd3175069
-  data.tar.gz: 9e012a0ad238a17901d427af8696ecba7c280899cfc0aec2f7cb0e1a11a9f1f451c936b95d6f6ebc417736443c2af20e69a79c541f963d6bb19df5dbf4f6e5d9
+  metadata.gz: 4e5c2230afc16c8cf1a0bbce111bf980bddd5eec9318efecaa95107f1b6d2ea571e3323fe23929af37cb65c6ae42fa4ab6a6671eb34f85fdc2ee84869545a24a
+  data.tar.gz: f2c387692a362cdb132094a8f1a6d6639b3fbd1c59eb45b92e3f9183440ca2696f411caeed1f80edbbd932d22fbdbd3d034131f611ae3a4aef108fc690e92cac

data/lib/dependabot/errors.rb

@@ -98,7 +98,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       msg = "The following source could not be reached as it requires "\
             "authentication (and any provided details were invalid or lacked "\
             "the required permissions): #{source}"
@@ -110,7 +110,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       super("The following source timed out: #{source}")
     end
   end
@@ -119,7 +119,7 @@ module Dependabot
     attr_reader :source
 
     def initialize(source)
-      @source = source
+      @source = source.gsub(%r{(?<=\.fury\.io)/[A-Za-z0-9]{20}(?=/)}, "")
       super("Could not verify the SSL certificate for #{source}")
     end
   end

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -18,7 +18,7 @@ module Dependabot
         require_relative "commits_finder"
 
         # Earlier entries are preferred
-        CHANGELOG_NAMES = %w(changelog history news changes release).freeze
+        CHANGELOG_NAMES = %w(changelog news changes history release).freeze
 
         attr_reader :source, :dependency, :credentials, :suggested_changelog_url
 

data/lib/dependabot/pull_request_creator/github.rb

@@ -61,7 +61,9 @@ module Dependabot
         raise(RepoNotFound, source.url) unless repo_exists?
 
         retrying ||= false
-        raise "Unexpected git error!" if retrying
+
+        msg = "Unexpected git error!\n\n#{e.cause&.class}: #{e.cause&.message}"
+        raise msg if retrying
 
         retrying = true
         retry
@@ -258,6 +260,9 @@ module Dependabot
           team_reviewers: reviewers_hash[:team_reviewers] || []
         )
       rescue Octokit::UnprocessableEntity => e
+        # Special case GitHub bug for team reviewers
+        return if e.message.include?("Could not resolve to a node")
+
         if invalid_reviewer?(e.message)
           comment_with_invalid_reviewer(pull_request, e.message)
           return

data/lib/dependabot/pull_request_updater/github.rb

@@ -168,23 +168,28 @@ module Dependabot
       end
 
       def commit_message
-        @commit_message ||=
+        # Take the commit message from the old commit
+        commit_being_updated.message
+      end
+
+      def commit_being_updated
+        @commit_being_updated ||=
           if pull_request.commits == 1
             github_client_for_source.
-              git_commit(source.repo, pull_request.head.sha).
-              message
+              git_commit(source.repo, pull_request.head.sha)
           else
             author_name = author_details&.fetch(:name, nil) || "dependabot"
             commits =
               github_client_for_source.
-              pull_request_commits(source.repo, pull_request_number)
+              pull_request_commits(source.repo, pull_request_number).
+              reverse
 
             commit =
               commits.find { |c| c.sha == old_commit } ||
               commits.find { |c| c.commit.author.name.include?(author_name) } ||
               commits.first
 
-            commit.commit.message
+            commit.commit
           end
       end
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.112.32"
+  VERSION = "0.112.37"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.112.32
+  version: 0.112.37
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-09-02 00:00:00.000000000 Z
+date: 2019-09-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-ecr