dependabot-common 0.316.0 → 0.317.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 96bdb5c59d32f26540da409a5dc9052431575832324c353ecb5b6f385962ff8c
-  data.tar.gz: 17ee865c4fe6825bb6e01b3f42e7255e1a283b35bf495a55d570977f529970c8
+  metadata.gz: a8d358807ceadc833ed82dcedc73266e3561d9b717ce53ae649ca51000c69312
+  data.tar.gz: d31ca9ca6aa26c1547bf9670a5addd1010d14731aa1f86cb42f58393aae945c7
 SHA512:
-  metadata.gz: 326849c6620a3a1c87c6f32005010ccfb4bb8dad03bce1edc5c1944f19630a5c2c10119d965055f5c94327dcfec3fab22a09968675c9c4889c38a1f67857c960
-  data.tar.gz: 445ea4329399825e8637a325f2e41e7515732a480a80dd4961c4571ef22469bc361c29c0720a9907a24d661da507eef24f0e515c511290e49386f8b144893dcb
+  metadata.gz: b2cac731eb951f4c7bf1f7756f8024593105964a0c09270415d5af834147807f979c8372a1b904f38e517c9725a76020e5f51d258bc21a2ac1a99459d2abc1ab
+  data.tar.gz: 0cadb251db30a331dead18251239b36862fa6c113f645e9300e4365903262f4fcf7816da49ba937aaf1552f0362879f9907c3e7c12fdd2e80b30efa73c5c85ac

data/lib/dependabot/git_commit_checker.rb

@@ -100,6 +100,17 @@ module Dependabot
       local_repo_git_metadata_fetcher.head_commit_for_ref_sha(T.must(ref))
     end
 
+    sig { returns(Excon::Response) }
+    def ref_details_for_pinned_ref
+      T.must(T.let(
+               GitMetadataFetcher.new(
+                 url: dependency.source_details&.fetch(:url, nil),
+                 credentials: credentials
+               ).ref_details_for_pinned_ref(ref_pinned),
+               T.nilable(Excon::Response)
+             ))
+    end
+
     sig { params(ref: String).returns(T::Boolean) }
     def ref_looks_like_commit_sha?(ref)
       ref.match?(/^[0-9a-f]{6,40}$/)
@@ -618,6 +629,12 @@ module Dependabot
           T.nilable(Dependabot::GitMetadataFetcher)
         )
     end
+
+    sig { returns(String) }
+    def ref_pinned
+      dependency.source_details&.fetch(:ref, nil) ||
+        dependency.source_details&.fetch(:branch, nil) || "HEAD"
+    end
   end
   # rubocop:enable Metrics/ClassLength
 end

data/lib/dependabot/git_metadata_fetcher.rb

@@ -144,6 +144,11 @@ module Dependabot
       raise Dependabot::GitDependenciesNotReachable, [uri]
     end
 
+    sig { params(ref: String).returns(Excon::Response) }
+    def ref_details_for_pinned_ref(ref)
+      Dependabot::RegistryClient.get(url: provider_url(ref))
+    end
+
     private
 
     sig { returns(String) }
@@ -358,5 +363,18 @@ module Dependabot
     rescue Errno::ENOENT => e # Thrown when `git` isn't installed
       OpenStruct.new(body: e.message, status: 500)
     end
+
+    sig do
+      params(ref: String).returns(String)
+    end
+    def provider_url(ref)
+      provider_url = url.gsub(/\.git$/, "")
+
+      api_url = {
+        github: provider_url.gsub("github.com", "api.github.com/repos")
+      }.freeze
+
+      "#{api_url[:github]}/commits?per_page=100&sha=#{ref}"
+    end
   end
 end

data/lib/dependabot/git_tag_with_detail.rb

@@ -10,16 +10,16 @@ module Dependabot
     sig { returns(String) }
     attr_accessor :tag
 
-    sig { returns(String) }
+    sig { returns(T.nilable(String)) }
     attr_accessor :release_date
 
     sig do
       params(
         tag: String,
-        release_date: String
+        release_date: T.nilable(String)
       ).void
     end
-    def initialize(tag:, release_date:)
+    def initialize(tag:, release_date: nil)
       @tag = tag
       @release_date = release_date
     end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.316.0"
+  VERSION = "0.317.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.316.0
+  version: 0.317.0
 platform: ruby
 authors:
 - Dependabot
@@ -625,7 +625,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.316.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.317.0
 rdoc_options: []
 require_paths:
 - lib