dependabot-common 0.148.2 → 0.148.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09dda22fc18daffbc2e952600647d7db5d895d84de7abcdc81ced991a5510c4f'
-  data.tar.gz: 714e5fa264dc3f96cc8847e1d86b99cbb3ace2a961ef1b09b9e4d999d3695cba
+  metadata.gz: 8e23001348e3d66c28b7c3de2d3f4d89bb8e354982dc19d59b723abeb18df7b6
+  data.tar.gz: c01c3974f71da9938d6566f8eed6af7fc1a9ed4f81c0c0a3b0369f0ece0aea31
 SHA512:
-  metadata.gz: a7421f55426978e32b1278a5bfa066f4e26ee56a62e5e09c0c6f4a6e33aff9d193c6eba1cb8c3c62d36b149889415bf05c0bf2a6574dc6aa38a40e7ac3e0356e
-  data.tar.gz: bd17df2cadaacb5125850680512b2f383df44b2660e10a356e0f0c03764b1d50545c1d843460323c4a645df101068cdbe4f5752465be6fb9329f4c625f586614
+  metadata.gz: 88eb29dc290fc206465f4cecc0bb732231b7530186d6ed059010f94c059a56129fd5ba320fc14e2739246d93ec5812bc329e4f515b3a66bdfaee50d4e56e5956
+  data.tar.gz: 59660885b7f92e5052d79c874a3d7cea68518fb59387d3e3f19d0094cf426f13441d7e33d0e83dc5274130426781f11b14f4038579c8294f73d42181ab90ccd3

data/lib/dependabot/git_commit_checker.rb

@@ -267,7 +267,9 @@ module Dependabot
 
     def dependency_source_details
       sources =
-        dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
+        dependency.requirements.
+        map { |requirement| requirement.fetch(:source) }.uniq.compact.
+        select { |source| source[:type] == "git" }
 
       return sources.first if sources.count <= 1
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.148.2"
+  VERSION = "0.148.3"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.148.2
+  version: 0.148.3
 platform: ruby
 authors:
 - Dependabot