dependabot-common 0.115.3 → 0.116.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 524828b3e39edf6bb3ea473618264a5aa08f0ebd662bcc4bd43d2b738869a665
-  data.tar.gz: 0d1b2c9612269e22b531f057c6af4647e0e6e27d525ada678ce04b793fa0690c
+  metadata.gz: cc9c801dd8d34a9ad6fb93e748fedee23cdffb9c012ef9aafbd42df9c2e4bc7f
+  data.tar.gz: 98a7de5e3e4b01c99c33b71137444650bb16b45c9bb2fffff95e5743e2279c43
 SHA512:
-  metadata.gz: 534faf192642a6304a1838c0b2f08694313609d8a1ca12ce6893c8fbdddf0619425610364fe11e95b79543486bb8dbdb3cc94267e772cd174d8346409401427a
-  data.tar.gz: c253b19aa6b7df502cb636fa4926a2282cd4021e79cc62b60ef2dc5d2db15a03a914fd826e99bdad240c369c898214f2da57da2e9145de7f83d6eba812ca7079
+  metadata.gz: fc36aed6817893c7075dae17aeeec7c4ba7fc87ead545e741fa71af7a3aeb50e0e428bb7e69f12eef3aab851a1034e84903c2072149096931d0e80cb01a0e157
+  data.tar.gz: daefa307368c8c706b1bff6cef31b65c2aa234c5aa99c8c92c29130998cec6022eeaf31ad287f3a6611792e731fe91a041973e5b1f911b4ad65d04123993e5d6

data/lib/dependabot/git_metadata_fetcher.rb

@@ -156,16 +156,26 @@ module Dependabot
       cred = credentials.select { |c| c["type"] == "git_source" }.
              find { |c| bare_uri.start_with?(c["host"]) }
 
+      scheme = scheme_for_uri(uri)
+
       if bare_uri.match?(%r{[^/]+:[^/]+@})
         # URI already has authentication details
-        "https://#{bare_uri}"
+        "#{scheme}://#{bare_uri}"
       elsif cred&.fetch("username", nil) && cred&.fetch("password", nil)
         # URI doesn't have authentication details, but we have credentials
         auth_string = "#{cred.fetch('username')}:#{cred.fetch('password')}"
-        "https://#{auth_string}@#{bare_uri}"
+        "#{scheme}://#{auth_string}@#{bare_uri}"
+      else
+        # No credentials, so just return the http(s) URI
+        "#{scheme}://#{bare_uri}"
+      end
+    end
+
+    def scheme_for_uri(uri)
+      if uri.match?(%r{^http://})
+        "http"
       else
-        # No credentials, so just return the https URI
-        "https://#{bare_uri}"
+        "https"
       end
     end
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.115.3"
+  VERSION = "0.116.4"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.115.3
+  version: 0.116.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-12-20 00:00:00.000000000 Z
+date: 2020-01-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -62,16 +62,22 @@ dependencies:
   name: commonmarker
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 0.20.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 0.22.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 0.20.1
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: 0.22.0
 - !ruby/object:Gem::Dependency
   name: docker_registry2
   requirement: !ruby/object:Gem::Requirement
@@ -300,14 +306,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.78.0
+        version: 0.79.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.78.0
+        version: 0.79.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement