dependabot-common 0.129.4 → 0.130.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: afed21fb500f1de6d025f3824fa4a64eff41d0816d44106e044f4a54de984bfe
-  data.tar.gz: 3c8c4a17267398cc4efbdc4974a1f8dc78e71aa74f08e194029cb01438938457
+  metadata.gz: 889c7cdfb93fde44a0e2cb10e58398473df94c50d08d7c2df9a83c23ba702dba
+  data.tar.gz: 834cd265bccb91d3d81cb93ae359e5e1fe1afb1f6f1afe1a1c000e44529a5d57
 SHA512:
-  metadata.gz: 7539dc5753d2f66e23cc7b2f5f77b8d7a01e39480b08df5362e08e5012c7249613edc0e25c2dbce80968e40034fdd64b3c4d10adb5ac190a7e870d2288786f05
-  data.tar.gz: 6e776353cf20627d05453b2334dbd112f7ab1bf48e959be8f88093d4a4ea74416c557161e14eafc9ef0dd8049d10c52aef7474f2c95541378a0470d34bb047dd
+  metadata.gz: 1c2115d4f4e1346bab763822bfe559f115a474b1806b0cd8ccf13463bf176735946ffc04447d63e1ac38ef33d1d8a74ff5de87bc8994c012997cad5a101c0e24
+  data.tar.gz: d45f0899db3a5fcaaf1666476216bc3c83794b0ca2dddcd253499c688ffa82fef4a2de95fe17c904051cc6c7c8ab654b757e48c9c466fb7e8f1766a6b8aa76ac

data/lib/dependabot/logger.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+require "logger"
+
+module Dependabot
+  def self.logger
+    @logger ||= Logger.new(nil)
+  end
+
+  def self.logger=(logger)
+    @logger = logger
+  end
+end

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -45,9 +45,13 @@ module Dependabot
 
         def sanitize_mentions(doc)
           doc.walk do |node|
-            if !parent_node_link?(node) && node.type == :text &&
+            if node.type == :text &&
                node.string_content.match?(MENTION_REGEX)
-              nodes = build_mention_nodes(node.string_content)
+              nodes = if !parent_node_link?(node)
+                        build_mention_nodes(node.string_content)
+                      else
+                        build_mention_link_text_nodes(node.string_content)
+                      end
 
               nodes.each do |n|
                 node.insert_before(n)
@@ -113,12 +117,18 @@ module Dependabot
           nodes
         end
 
+        def build_mention_link_text_nodes(text)
+          code_node = CommonMarker::Node.new(:code)
+          code_node.string_content = text
+          [code_node]
+        end
+
         def create_link_node(url, text)
           link_node = CommonMarker::Node.new(:link)
-          text_node = CommonMarker::Node.new(:text)
+          code_node = CommonMarker::Node.new(:code)
           link_node.url = url
-          text_node.string_content = text
-          link_node.append_child(text_node)
+          code_node.string_content = text
+          link_node.append_child(code_node)
           link_node
         end
 

data/lib/dependabot/utils.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "set"
+
 # TODO: in due course, these "registries" should live in a wrapper gem, not
 #       dependabot-core.
 module Dependabot

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.129.4"
+  VERSION = "0.130.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.129.4
+  version: 0.130.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-06 00:00:00.000000000 Z
+date: 2021-01-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -172,16 +172,22 @@ dependencies:
   name: parser
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: '2.5'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '4.0'
 - !ruby/object:Gem::Dependency
   name: toml-rb
   requirement: !ruby/object:Gem::Requirement
@@ -278,14 +284,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.0
+        version: 1.8.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.0
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -373,6 +379,7 @@ files:
 - lib/dependabot/file_updaters/vendor_updater.rb
 - lib/dependabot/git_commit_checker.rb
 - lib/dependabot/git_metadata_fetcher.rb
+- lib/dependabot/logger.rb
 - lib/dependabot/metadata_finders.rb
 - lib/dependabot/metadata_finders/README.md
 - lib/dependabot/metadata_finders/base.rb