dependabot-common 0.111.7 → 0.111.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce86ca8da2147ad678284d744654e9e42e0615f20849b8ccf174add656152d10
-  data.tar.gz: d4b57371efc6d0ced3aa75e81c77eb24ec11aa51ee9e20e55d47c735221c6a12
+  metadata.gz: ae9ed2a8c00e2bc0ffd58eca5a2888e2839acdb1343b7abac949706248ab0ef9
+  data.tar.gz: 1909a0f9f38c07f6363c67082e5c5dc6fdf58013e072c7835bdf2e37025fa025
 SHA512:
-  metadata.gz: 7d2f7a722cc8c55afaab3e1f1a7fcc409174a854a418cc2422aefc4bd10632a640fb2848cde77ca150ac615a3a7882648a18958c135d6543c9d154942fde6af0
-  data.tar.gz: 7ab9ecc2578c551aee6cc8b477afa4bb1bf9aa328d460189d429e6b94aaf421ab86648fe9090b59cec3ceb90873b3aeb865d2e89475c2a3e33b2144d72e5ee6b
+  metadata.gz: 828d1fdeb75149f654a256fdb33a6c182401e290ede80afe31f17ccf76a3a97322bb8982d39e29c4973f6446ab0f7d8b09b66b421671bc3a277e19eb19beabd7
+  data.tar.gz: 49f80611a1a04c834f30334d94ddc902fec59ec3dd90f2d1a46d1787f2f495e5c76b547d9e417ba3b54a470f65630e4abc5b7dbbfb6925aad544eaab3054b662

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -6,9 +6,10 @@ module Dependabot
   class PullRequestCreator
     class MessageBuilder
       class LinkAndMentionSanitizer
+        GITHUB_USERNAME = /[a-z0-9]+(-[a-z0-9]+)*/i.freeze
         GITHUB_REF_REGEX = %r{
           (?:https?://)?
-          github\.com/[^/\s]+/[^/\s]+/
+          github\.com/#{GITHUB_USERNAME}/[^/\s]+/
           (?:issue|pull)s?/(?<number>\d+)
         }x.freeze
 
@@ -49,8 +50,8 @@ module Dependabot
         private
 
         def sanitize_mentions(text)
-          text.gsub(%r{(?<![A-Za-z0-9`~])@[\w][\w.-/]*}) do |mention|
-            next mention if mention.include?("/")
+          text.gsub(%r{(?<![A-Za-z0-9`~])@#{GITHUB_USERNAME}/?}) do |mention|
+            next mention if mention.end_with?("/")
 
             last_match = Regexp.last_match
 

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.111.7"
+  VERSION = "0.111.8"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.111.7
+  version: 0.111.8
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-07-14 00:00:00.000000000 Z
+date: 2019-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-ecr