dependabot-common 0.156.5 → 0.156.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '04196eaeff8bc941ffd504cfbba6c5a3cb5b04b55b3ca7d8f48ca93210873503'
-  data.tar.gz: c71029bee9231be559e3e45f017d59d9da2ff1f15a7ecebd88375bff59db8b8c
+  metadata.gz: 5b64bbea756471ef6276ee683a9b8894f0b80b4760836f47ce7e3d0b17b3c2ae
+  data.tar.gz: 3c36bcac93cbaa601e439c5b532c3797bb556fb89b763900f4163cdc9660fdc8
 SHA512:
-  metadata.gz: e124fd94802c5430215bce88b2b1eb9465022364d99b8841dee7c97b55734b18e409ec858c35e15d22b02bde8d97b8200267bc45551a20b7db93e2529862b84a
-  data.tar.gz: b1cdebbd613eb84535719fe377ae96cfeaefe74e4970182add66f565b8b659ad81840e285c8876208158b5988c8cec27e4cd8f3de9534372a06a6b59ca6bfe25
+  metadata.gz: bb4f58dfc6a6702618ca7d5cc8bb2cbdd6901e14960d8fdca43ac10f8b133a850935a7d833e59933d51d57b0882c2717bdfcc49ee8d11507de6bfdd5da926778
+  data.tar.gz: eae3d48724ce62134cf290d7fbd8d7becc9d935f36bb3e1f54d3b5278056eadb5cfce53e6851ecc4045e1b9d5f77a68d9edee3dd4c8c12eacfc5426ea04e8f76

data/lib/dependabot/file_fetchers/base.rb

@@ -157,11 +157,12 @@ module Dependabot
         path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
-        @repo_contents[dir] ||= _fetch_repo_contents(
-          path,
-          raise_errors: raise_errors,
-          fetch_submodules: fetch_submodules
-        )
+        @repo_contents[dir] ||= if repo_contents_path
+                                  _cloned_repo_contents(path)
+                                else
+                                  _fetch_repo_contents(path, raise_errors: raise_errors,
+                                                             fetch_submodules: fetch_submodules)
+                                end
       end
 
       #################################################
@@ -225,6 +226,31 @@ module Dependabot
         github_response.map { |f| _build_github_file_struct(f) }
       end
 
+      def _cloned_repo_contents(relative_path)
+        repo_path = File.join(clone_repo_contents, relative_path)
+        return [] unless Dir.exist?(repo_path)
+
+        Dir.entries(repo_path).map do |name|
+          next if [".", ".."].include?(name)
+
+          absolute_path = File.join(repo_path, name)
+          type = if File.symlink?(absolute_path)
+                   "symlink"
+                 elsif Dir.exist?(absolute_path)
+                   "dir"
+                 else
+                   "file"
+                 end
+
+          OpenStruct.new(
+            name: name,
+            path: Pathname.new(File.join(relative_path, name)).cleanpath.to_path,
+            type: type,
+            size: 0 # NOTE: added for parity with github contents API
+          )
+        end.compact
+      end
+
       def update_linked_paths(repo, path, commit, github_response)
         case github_response.type
         when "submodule"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.156.5"
+  VERSION = "0.156.9"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.156.5
+  version: 0.156.9
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-12 00:00:00.000000000 Z
+date: 2021-07-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers