dependabot-common 0.148.0 → 0.148.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9e2dfebda37fda8f57a5b23574d9eac6906aef7c27fe59067ca7a9b7cac32c29
-  data.tar.gz: 5bfa25849873dba68c6e5b9ecc707fb1638a88f8e023f8d80c3648651ec48981
+  metadata.gz: c94a9d1b0c62c0ac68f5d1ad06e33753ef2653cd3afa145fff06aeec6bfbd89e
+  data.tar.gz: 29dd2014563ffd3f4625f58ebbc2c295c7433275d09a867e676e6e51bcd81294
 SHA512:
-  metadata.gz: 8e608134523661f73b9f75f88f4e6e3d14261f92d5c746356566ea07c2efebd2571122f292af88579a1a5874a8b9b68cfdc84e3e6216afb7ccfe2f0736480ec1
-  data.tar.gz: b7b3f0e2163b8972214a52de596f3c0e6e0fd5e605804018e3be7d94ef73e9f85ee6c385b9840ba0999bb2edeb2955d0e2f952b6a700baf1cfa66e4b15e5bef9
+  metadata.gz: e87ae87692f0c7d60bcfbc878d8bfb47df6882e833997d6bc5826c19b3db61c32bfdca8dacc0530aa0f50d932a98a21e114096aa449b7b2adb9494b33d6e28a4
+  data.tar.gz: 4266cde9d6bcf27778b1e5df8624c9fffee370db9e2cb372652db6933bd17a7d4ab6b92fa7c7a1684363e63b317e6f1903e3a581c973b81f8c3fe15ee78aa3f6

data/lib/dependabot/git_commit_checker.rb

@@ -267,7 +267,9 @@ module Dependabot
 
     def dependency_source_details
       sources =
-        dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
+        dependency.requirements.
+        map { |requirement| requirement.fetch(:source) }.uniq.compact.
+        select { |source| source[:type] == "git" }
 
       return sources.first if sources.count <= 1
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.148.0"
+  VERSION = "0.148.5"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.148.0
+  version: 0.148.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-19 00:00:00.000000000 Z
+date: 2021-05-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport