dependabot-common 0.147.1 → 0.148.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: abae304f54068dfcec44e81919bc0f3290fdfb5ecf0ee9f5f878c8612902315b
-  data.tar.gz: 75018dbfb55e8d3100e863064e7fc1b913cdc8b3b091722b06b307bd94968ee8
+  metadata.gz: 698edfd24a136a52f138920b6408ad3a0c4ad8cb064707b305b1f6d8c0ef1e72
+  data.tar.gz: 1965162f93a649c3a7b867d2b131b5ff2f4723f5d983ebd7ed54907760cfd675
 SHA512:
-  metadata.gz: 0b33fd489354101454ad3ea6a549d3080f47965bd1e8c200b1b380ae22ad219f759b02963d4d7f35f1bfaec97ad2b02dce1494033f89bfc081d2371b74603dfa
-  data.tar.gz: 48311e053bb7efa1be238da5819a86b379fa864e7c23aa4592ff48fa5baa807b982e056b5dd3f8a9bc260addaad552eb5ca00b8565d3133d8435e14937deb026
+  metadata.gz: fd5be8e3e25bacf22b62a205b8c7d2475a32b7893b93697aff05677e50728e2b4b83f22af8d100409ff306136d5655967e36473b964581bb28c82adfc90e7e42
+  data.tar.gz: 71f47aa78ba029fc32b58e146f232c1edb9ea09c3cc1f48491e8769533d73b2519491e6c5eb2f8836710857019641457f2f768fd871247b81e348d15b914b211

data/lib/dependabot/git_commit_checker.rb

@@ -267,7 +267,9 @@ module Dependabot
 
     def dependency_source_details
       sources =
-        dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
+        dependency.requirements.
+        map { |requirement| requirement.fetch(:source) }.uniq.compact.
+        select { |source| source[:type] == "git" }
 
       return sources.first if sources.count <= 1
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.147.1"
+  VERSION = "0.148.4"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.147.1
+  version: 0.148.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-19 00:00:00.000000000 Z
+date: 2021-05-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport