dependabot-common 0.130.0 → 0.130.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9596b7a320fde06da6b9c1e9b05157d13fd4e050d5aeb98a3bfca5f79d8bec74
-  data.tar.gz: b99489bd81b0a0dfbe2e8d761c8492bdaaa83c20f415b1ebdcfc6a0f0d441938
+  metadata.gz: 1824c73ccafb3e95ab20e310365a7d2242b7c11d9ca4baf8d78a85754c7874fc
+  data.tar.gz: d024003cc13c297a07a528f404fe9b32d731302a543e827ec1c25abdff93209a
 SHA512:
-  metadata.gz: a74e83789a437b03c0692e51a375fc6c73715a86795e61ba0aea1b13107812137590fc23516787b6ae622636b88e48f8d4485ab7c3a0955cd948b53f5bbe774f
-  data.tar.gz: b8ebfd9b8b48beaeb3d0b9d0c28872143a1acd99cb41028efe4c2707d4ccd1c46fa197d8c24ffb2818df9545f0151051114edd79c08f914610d4ec2b40a2bcb2
+  metadata.gz: b0e6f725691d7c40f0c5e93ae28ccb765b03e0d39191d73cd66e9c94d166634ba04420a2ce4b5efb68de7f2188081a1a5ae72819384a1a86dc27eb6b9cb29bef
+  data.tar.gz: 2334d9e4713a924b67af19f699054b79f8bc36d4854228f0eaafa82047133850fe28cc9a20dd64fa758983d726e180c0c71ab53cda2bdd3208cc11aca7b435ce

data/lib/dependabot/logger.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+
+require "logger"
+
+module Dependabot
+  def self.logger
+    @logger ||= Logger.new(nil)
+  end
+
+  def self.logger=(logger)
+    @logger = logger
+  end
+end

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -45,9 +45,13 @@ module Dependabot
 
         def sanitize_mentions(doc)
           doc.walk do |node|
-            if !parent_node_link?(node) && node.type == :text &&
+            if node.type == :text &&
                node.string_content.match?(MENTION_REGEX)
-              nodes = build_mention_nodes(node.string_content)
+              nodes = if !parent_node_link?(node)
+                        build_mention_nodes(node.string_content)
+                      else
+                        build_mention_link_text_nodes(node.string_content)
+                      end
 
               nodes.each do |n|
                 node.insert_before(n)
@@ -113,12 +117,18 @@ module Dependabot
           nodes
         end
 
+        def build_mention_link_text_nodes(text)
+          code_node = CommonMarker::Node.new(:code)
+          code_node.string_content = text
+          [code_node]
+        end
+
         def create_link_node(url, text)
           link_node = CommonMarker::Node.new(:link)
-          text_node = CommonMarker::Node.new(:text)
+          code_node = CommonMarker::Node.new(:code)
           link_node.url = url
-          text_node.string_content = text
-          link_node.append_child(text_node)
+          code_node.string_content = text
+          link_node.append_child(code_node)
           link_node
         end
 

data/lib/dependabot/utils.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require "set"
+
 # TODO: in due course, these "registries" should live in a wrapper gem, not
 #       dependabot-core.
 module Dependabot

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.130.0"
+  VERSION = "0.130.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.130.0
+  version: 0.130.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-13 00:00:00.000000000 Z
+date: 2021-01-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -379,6 +379,7 @@ files:
 - lib/dependabot/file_updaters/vendor_updater.rb
 - lib/dependabot/git_commit_checker.rb
 - lib/dependabot/git_metadata_fetcher.rb
+- lib/dependabot/logger.rb
 - lib/dependabot/metadata_finders.rb
 - lib/dependabot/metadata_finders/README.md
 - lib/dependabot/metadata_finders/base.rb
@@ -431,7 +432,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.3
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers