dependabot-common 0.156.6 → 0.157.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 02ce33c72dc474e777e3501d8595d859ffd3682992a83972815b655720b05c2e
-  data.tar.gz: 5e142e57878d0d754027055758c8dd48739817572dd53491e14dafbecad491ab
+  metadata.gz: 5831bae189a8c8ef6ca3228200619713c26796d12e386366b0adaac8ff780f5c
+  data.tar.gz: bc8609335377eb25dc925f5a0989ca38cfb1caf838070b7cd82573e0937ea35d
 SHA512:
-  metadata.gz: dd44be8282356dcfaaaa76603730b2cc7a6e5c17ba87be886c015ad30629d86fea8ab29fd0cf5e3889f1f5fd37940656c66c2d3b832f8dd8f17fbafd75b4b1c4
-  data.tar.gz: bc44087b4f239e53bd327f356f0942fd0c114e4e5027c351a34f8ed3583142faac22d917688297d384bc1fac79e1869582c076b6c569e278287f123ea1617ef6
+  metadata.gz: 52142cdea6a769412aae08d5016a93f8cdbcd9a040bc4123fe800b2831d6242cd8f6712b495b0a4e8f7e4c7845a8a9be515fd95b7616fa6c945b7596cb58c20e
+  data.tar.gz: fa41e2f269c01215d391c4e537b6a27d39071a3919126e8b0923b1ab301068c441d1fe1676084be728e884e8036c8c9e3ec94c50fb787656d0c1fcf7c47209a8

data/lib/dependabot/file_fetchers/base.rb

@@ -157,11 +157,12 @@ module Dependabot
         path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
-        @repo_contents[dir] ||= _fetch_repo_contents(
-          path,
-          raise_errors: raise_errors,
-          fetch_submodules: fetch_submodules
-        )
+        @repo_contents[dir] ||= if repo_contents_path
+                                  _cloned_repo_contents(path)
+                                else
+                                  _fetch_repo_contents(path, raise_errors: raise_errors,
+                                                             fetch_submodules: fetch_submodules)
+                                end
       end
 
       #################################################
@@ -225,6 +226,31 @@ module Dependabot
         github_response.map { |f| _build_github_file_struct(f) }
       end
 
+      def _cloned_repo_contents(relative_path)
+        repo_path = File.join(clone_repo_contents, relative_path)
+        return [] unless Dir.exist?(repo_path)
+
+        Dir.entries(repo_path).map do |name|
+          next if [".", ".."].include?(name)
+
+          absolute_path = File.join(repo_path, name)
+          type = if File.symlink?(absolute_path)
+                   "symlink"
+                 elsif Dir.exist?(absolute_path)
+                   "dir"
+                 else
+                   "file"
+                 end
+
+          OpenStruct.new(
+            name: name,
+            path: Pathname.new(File.join(relative_path, name)).cleanpath.to_path,
+            type: type,
+            size: 0 # NOTE: added for parity with github contents API
+          )
+        end.compact
+      end
+
       def update_linked_paths(repo, path, commit, github_response)
         case github_response.type
         when "submodule"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.156.6"
+  VERSION = "0.157.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.156.6
+  version: 0.157.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-13 00:00:00.000000000 Z
+date: 2021-07-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers