dependabot-common 0.156.6 → 0.156.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 02ce33c72dc474e777e3501d8595d859ffd3682992a83972815b655720b05c2e
-  data.tar.gz: 5e142e57878d0d754027055758c8dd48739817572dd53491e14dafbecad491ab
+  metadata.gz: a254e2e3ea31fb9c9b91abeb1d5d6a4e83f32f2b86034f6833d5f8ac6cc346b9
+  data.tar.gz: 00e44b2bab13764530fd614c9bcb568167a28b757d6bf289ae465ed511d79bb5
 SHA512:
-  metadata.gz: dd44be8282356dcfaaaa76603730b2cc7a6e5c17ba87be886c015ad30629d86fea8ab29fd0cf5e3889f1f5fd37940656c66c2d3b832f8dd8f17fbafd75b4b1c4
-  data.tar.gz: bc44087b4f239e53bd327f356f0942fd0c114e4e5027c351a34f8ed3583142faac22d917688297d384bc1fac79e1869582c076b6c569e278287f123ea1617ef6
+  metadata.gz: 4978fc17911c5354112095f2f4a9710311d3bc6e69bb27e9b77d505bea897508a979fe0e99197b6c73c128c297ba3b9176d724435c6bbe85c1c912137ef104aa
+  data.tar.gz: ecae02c62c69d47bfc658d0c5f249caaa2aa376d3404f79b9030956c281fc1dd286eda17222cbb270c893b19d02654e8b2c66b97a296cc90a9ee33e1a8d9cd32

data/lib/dependabot/file_fetchers/base.rb

@@ -157,11 +157,12 @@ module Dependabot
         path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
-        @repo_contents[dir] ||= _fetch_repo_contents(
-          path,
-          raise_errors: raise_errors,
-          fetch_submodules: fetch_submodules
-        )
+        @repo_contents[dir] ||= if repo_contents_path
+                                  _cloned_repo_contents(path)
+                                else
+                                  _fetch_repo_contents(path, raise_errors: raise_errors,
+                                                             fetch_submodules: fetch_submodules)
+                                end
       end
 
       #################################################
@@ -225,6 +226,31 @@ module Dependabot
         github_response.map { |f| _build_github_file_struct(f) }
       end
 
+      def _cloned_repo_contents(relative_path)
+        repo_path = File.join(clone_repo_contents, relative_path)
+        return [] unless Dir.exist?(repo_path)
+
+        Dir.entries(repo_path).map do |name|
+          next if [".", ".."].include?(name)
+
+          absolute_path = File.join(repo_path, name)
+          type = if File.symlink?(absolute_path)
+                   "symlink"
+                 elsif Dir.exist?(absolute_path)
+                   "dir"
+                 else
+                   "file"
+                 end
+
+          OpenStruct.new(
+            name: name,
+            path: Pathname.new(File.join(relative_path, name)).cleanpath.to_path,
+            type: type,
+            size: 0 # NOTE: added for parity with github contents API
+          )
+        end.compact
+      end
+
       def update_linked_paths(repo, path, commit, github_response)
         case github_response.type
         when "submodule"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.156.6"
+  VERSION = "0.156.10"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.156.6
+  version: 0.156.10
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-13 00:00:00.000000000 Z
+date: 2021-07-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers