dependabot-common 0.376.0 → 0.377.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2649607c4b50e0d3447b6127fee079597d0f6c404347195ef0e7283b9017d528
-  data.tar.gz: 29f1fbfd4fc78fe8ac967bc5d77c01ad1de766e65ed7a6f36408e63226ebf7f4
+  metadata.gz: 6be97d14c40d59ea74fe9f48f02e95c13c734175d7eee00543924af96a216516
+  data.tar.gz: daf82ec144a7a3e8eb766988dec53b09e000dc34117d75c8ec220ccda7114d0f
 SHA512:
-  metadata.gz: 55b79ec0676c883d3533f361215d3c704c96a297c717c2f9c721567391875990f726079c6873e442f86424c2858ecb545499639e5ce0987154743ea68689351c
-  data.tar.gz: e67f0a9ef1254c6747743f6ab56234ffe720ae4e0d56440fe8ab85220ecf3a5761c1545b7743bfbc65ea90c2ce6f72d6d2bbe4d6ad80ad486e69833eef69e01e
+  metadata.gz: 4cc34b89173ce3b43c688f5692a0a5c19b1bf66e3c527c5409e2e7699e7a15f7888feab422b4cda76f3c720be69463f4699fd4fba2d6491c10be5455811d194d
+  data.tar.gz: f74a92a16c5fd939ed7121f8f2a5e47fc6dbcce641bb572909cda4be83782a00ad715eb5c4d19d5e6ff7055bc1d4aab595c57a835d3f9860758844dc2d1542ba

data/lib/dependabot/shared_helpers.rb

@@ -303,13 +303,20 @@ module Dependabot
       previous_config = ENV.fetch("GIT_CONFIG_GLOBAL", nil)
       # adding a random suffix to avoid conflicts when running in parallel
       # some package managers like bundler will modify the global git config
-      git_config_global_path = File.expand_path("#{SecureRandom.hex(16)}.gitconfig", Utils::BUMP_TMP_DIR_PATH)
+      random_suffix = SecureRandom.hex(16)
+      git_config_global_path = File.expand_path("#{random_suffix}.gitconfig", Utils::BUMP_TMP_DIR_PATH)
+      git_store_path = File.join(Dir.pwd, "#{random_suffix}.git.store")
       previous_terminal_prompt = ENV.fetch("GIT_TERMINAL_PROMPT", nil)
 
       begin
         ENV["GIT_CONFIG_GLOBAL"] = git_config_global_path
         ENV["GIT_TERMINAL_PROMPT"] = "false"
-        configure_git_to_use_https_with_credentials(credentials, safe_directories, git_config_global_path)
+        configure_git_to_use_https_with_credentials(
+          credentials,
+          safe_directories,
+          git_config_global_path,
+          git_store_path
+        )
         yield
       ensure
         ENV["GIT_CONFIG_GLOBAL"] = previous_config
@@ -319,6 +326,7 @@ module Dependabot
       raise Dependabot::OutOfDisk, e.message
     ensure
       FileUtils.rm_f(T.must(git_config_global_path))
+      FileUtils.rm_f(T.must(git_store_path))
     end
 
     # Handle SCP-style git URIs
@@ -339,10 +347,16 @@ module Dependabot
       params(
         credentials: T::Array[Dependabot::Credential],
         safe_directories: T::Array[String],
-        git_config_global_path: String
+        git_config_global_path: String,
+        git_store_path: String
       ).void
     end
-    def self.configure_git_to_use_https_with_credentials(credentials, safe_directories, git_config_global_path)
+    def self.configure_git_to_use_https_with_credentials(
+      credentials,
+      safe_directories,
+      git_config_global_path,
+      git_store_path
+    )
       File.open(git_config_global_path, "w") do |file|
         file << "# Generated by dependabot/dependabot-core"
       end
@@ -353,7 +367,7 @@ module Dependabot
       # whenever the credentials are deemed to be invalid, they're erased.
       run_shell_command(
         "git config --global credential.helper " \
-        "'!#{credential_helper_path} --file #{Dir.pwd}/git.store'",
+        "'!#{credential_helper_path} --file #{git_store_path}'",
         allow_unsafe_shell_command: true,
         fingerprint: "git config --global credential.helper '<helper_command>'"
       )
@@ -398,7 +412,7 @@ module Dependabot
       end
 
       # Save the file
-      File.write("git.store", git_store_content)
+      File.write(git_store_path, git_store_content)
     end
     # rubocop:enable Metrics/AbcSize
     # rubocop:enable Metrics/PerceivedComplexity

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.376.0"
+  VERSION = "0.377.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.376.0
+  version: 0.377.0
 platform: ruby
 authors:
 - Dependabot
@@ -617,7 +617,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.376.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.377.0
 rdoc_options: []
 require_paths:
 - lib