dependabot-common 0.148.1 → 0.148.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9031efd50722306076135ea5fcc36c50d4581bf1becdf7831da352ae2177ec0
-  data.tar.gz: 98997a2789d968d1e541130a87c7d93602e9b051381e3fd3cc521a885f49e8ae
+  metadata.gz: 0f88857b63d16c958481c22764854b14e37347bf6f0ebbcc25b17cc9f238744f
+  data.tar.gz: c8cb9b3a366ffeaa0dea4cbd04db1d5877e584ff290c7f4fc3bcc37dec2f50cd
 SHA512:
-  metadata.gz: '01954c879c284c20fe9ec390e8dd23f49cf887aedf4c194833bb1632b362ef225270b990fdabad9b0365c56078faba5a1f26968a9bfa551cfa47d50110e01b63'
-  data.tar.gz: 231a8e2235ca56e6a01a57a28f87d5b373a6bd8bde4f99aaf7f43596f547d18cca659d7345d93c371a10274e705830a9acfe9b35ca21ec9bfdb8ed952abf0542
+  metadata.gz: 92a4565e071f0f3f40f5d0b369c3f8e19e37f8e48e3699f38b7d1a8dd00bb24346773f62c5bcd94dab08182e0464e3ddf5bf7a5953a7369fb741c4da0c9d78a9
+  data.tar.gz: 7657b680342c9516fce87edec226084e426cf52bdd41022d2e60e9180f68762c8c8065762d99d476851a1c7e8c3160c6adb47d3dbbda7c843dead76b98b7cecf

data/lib/dependabot/git_commit_checker.rb

@@ -267,7 +267,9 @@ module Dependabot
 
     def dependency_source_details
       sources =
-        dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
+        dependency.requirements.
+        map { |requirement| requirement.fetch(:source) }.uniq.compact.
+        select { |source| source[:type] == "git" }
 
       return sources.first if sources.count <= 1
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.148.1"
+  VERSION = "0.148.6"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.148.1
+  version: 0.148.6
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-19 00:00:00.000000000 Z
+date: 2021-05-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport