dependabot-common 0.148.2 → 0.148.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09dda22fc18daffbc2e952600647d7db5d895d84de7abcdc81ced991a5510c4f'
-  data.tar.gz: 714e5fa264dc3f96cc8847e1d86b99cbb3ace2a961ef1b09b9e4d999d3695cba
+  metadata.gz: cb72fd4453a2f10f98e21e507281ba06a1e4f5ab35c8fd8d72ed0f5d98d40644
+  data.tar.gz: 68fba756569aa2e237073c4d3bd7869d29211cfd6c8107163e5e691b13a17d4d
 SHA512:
-  metadata.gz: a7421f55426978e32b1278a5bfa066f4e26ee56a62e5e09c0c6f4a6e33aff9d193c6eba1cb8c3c62d36b149889415bf05c0bf2a6574dc6aa38a40e7ac3e0356e
-  data.tar.gz: bd17df2cadaacb5125850680512b2f383df44b2660e10a356e0f0c03764b1d50545c1d843460323c4a645df101068cdbe4f5752465be6fb9329f4c625f586614
+  metadata.gz: 89de15ebde1e0b5f4c1cfb7434035f7bda2ab2b43c73210e29a72775eca19ca93aae7a8aaa9eb96c1e6e6c6299b6abcaf54455ec7453117e2e1c2a58bfde9f46
+  data.tar.gz: 733f85083416b65620cb31308d697e818b680e199a9fe96e3851b4819d374fbfbbdfec17ffe07a08f580518677f620bafb0adf5f5b47db6710af8e7e5401f74b

data/lib/dependabot/git_commit_checker.rb

@@ -267,7 +267,9 @@ module Dependabot
 
     def dependency_source_details
       sources =
-        dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact
+        dependency.requirements.
+        map { |requirement| requirement.fetch(:source) }.uniq.compact.
+        select { |source| source[:type] == "git" }
 
       return sources.first if sources.count <= 1
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.148.2"
+  VERSION = "0.148.7"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.148.2
+  version: 0.148.7
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-19 00:00:00.000000000 Z
+date: 2021-05-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport