dependabot-common 0.115.2 → 0.116.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ab043ac61d68f051ee37b932fd0c13abdab6570877a3daf992c92de594838877
-  data.tar.gz: cab7b77dabfc106e699da58f2c4ddf304a76e60823a3172da2958bcac38f633c
+  metadata.gz: 100592e19e79ca976be5212fd173dae233cb216d37057632382120d7717edcf9
+  data.tar.gz: 605473cb4148339c77bd604ef8c2b1bff894a06f09811661f9ef8ae7446766f7
 SHA512:
-  metadata.gz: 98cfd039b43f695b37c5466925271c39960b445f43349a9202348b8ee7a334653997cd3b47299fcc463a4bc7f3424e27f0057411cdb4775e94378f306d15025e
-  data.tar.gz: f16086153e97711f3adba45dda4745229d2b712a4a4802053bc0a17daebcec23858dbf79ddfaa41723030c672f3f9410854ccd618e0c3296fe81b8ed1f7abd60
+  metadata.gz: 7d5e0befccd09c82e2fbce6b6fcbc80d4c6f92fa379ec88bf6e318c8d77f6098e88c75520711d4bab28b597f1552307d5ed452ccf8622f2057dd1f19fca10988
+  data.tar.gz: deb8403fb9af1c6ca9c2477a78e6145738f409699b3a97b2951642f53af33d0da0f7182303bae5cb22ff017d388bab8f51b973e3c45d709489441712f805785e

data/lib/dependabot/git_metadata_fetcher.rb

@@ -156,16 +156,26 @@ module Dependabot
       cred = credentials.select { |c| c["type"] == "git_source" }.
              find { |c| bare_uri.start_with?(c["host"]) }
 
+      scheme = scheme_for_uri(uri)
+
       if bare_uri.match?(%r{[^/]+:[^/]+@})
         # URI already has authentication details
-        "https://#{bare_uri}"
+        "#{scheme}://#{bare_uri}"
       elsif cred&.fetch("username", nil) && cred&.fetch("password", nil)
         # URI doesn't have authentication details, but we have credentials
         auth_string = "#{cred.fetch('username')}:#{cred.fetch('password')}"
-        "https://#{auth_string}@#{bare_uri}"
+        "#{scheme}://#{auth_string}@#{bare_uri}"
+      else
+        # No credentials, so just return the http(s) URI
+        "#{scheme}://#{bare_uri}"
+      end
+    end
+
+    def scheme_for_uri(uri)
+      if uri.match?(%r{^http://})
+        "http"
       else
-        # No credentials, so just return the https URI
-        "https://#{bare_uri}"
+        "https"
       end
     end
 

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -62,9 +62,12 @@ module Dependabot
           doc.walk do |node|
             if node.type == :link && node.url.match?(GITHUB_REF_REGEX)
               node.each do |subnode|
-                last_match = subnode.string_content.match(GITHUB_REF_REGEX)
-                next unless subnode.type == :text && last_match
+                unless subnode.type == :text &&
+                       subnode.string_content.match?(GITHUB_REF_REGEX)
+                  next
+                end
 
+                last_match = subnode.string_content.match(GITHUB_REF_REGEX)
                 number = last_match.named_captures.fetch("number")
                 repo = last_match.named_captures.fetch("repo")
                 subnode.string_content = "#{repo}##{number}"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.115.2"
+  VERSION = "0.116.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.115.2
+  version: 0.116.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-20 00:00:00.000000000 Z
+date: 2020-01-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -300,14 +300,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.78.0
+        version: 0.79.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.78.0
+        version: 0.79.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement