dependabot-common 0.112.1 → 0.112.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f7914dcfafa765b6f8890291bb9ad90f696a33b4c2103056bfb2c38bd51f891d
-  data.tar.gz: cbea4ec6a9351135c3ba91bd7fc0970c3590ce26ebbc0c0417c6bb529fb58a4a
+  metadata.gz: b9c1b409eefe151a39267df4d64c54d948d4b395c4ff2f358679686394016aee
+  data.tar.gz: 51e297f97a8ae38bbd2ec46be093a68c1f21ff6e562ad096485363a3caac6017
 SHA512:
-  metadata.gz: 893ac9c0d0e83541d7a85d1c7c3dc05d8233fc099c84f754ebe13800f54b388ef35dc0e7972f356b672a1953e067cc742a8166b989e5a5294b59b17f2a9ee909
-  data.tar.gz: ff56e081b07534629ac9e127af91366fc42291eb6b377883ade0809b88338ae3e12bbd67ec1280b977a21794a39055bf405c0af5cf20763492da0b3ab5c03455
+  metadata.gz: 6886ca987112530341fbb228d1cc934927dd41cdd3b8cd38ffbf677d0b2d3970819624cad335616694449928a508b934c9533d5f024f2063acdbb4bb24bb0fac
+  data.tar.gz: 40fa2fe0dbece30ff0a7c6c6db87def7ed975ae89489edfe7f28288757450891c219918a107e3b53193e413ff5fa1ff10920f7ad01623a31ba245c6ac4b9c11b

data/lib/dependabot/pull_request_creator/message_builder.rb

@@ -543,22 +543,28 @@ module Dependabot
           )
       end
 
+      # rubocop:disable Metrics/PerceivedComplexity
       def previous_version(dependency)
+        # If we don't have a previous version, we *may* still be able to figure
+        # one out if a ref was provided and has been changed (in which case the
+        # previous ref was essentially the version).
+        if dependency.previous_version.nil?
+          return ref_changed?(dependency) ? previous_ref(dependency) : nil
+        end
+
         if dependency.previous_version.match?(/^[0-9a-f]{40}$/)
           return previous_ref(dependency) if ref_changed?(dependency)
 
           "`#{dependency.previous_version[0..6]}`"
         elsif dependency.version == dependency.previous_version &&
               package_manager == "docker"
-          digest =
-            dependency.previous_requirements.
-            map { |r| r.dig(:source, "digest") || r.dig(:source, :digest) }.
-            compact.first
+          digest = docker_digest_from_reqs(dependency.previous_requirements)
           "`#{digest.split(':').last[0..6]}`"
         else
           dependency.previous_version
         end
       end
+      # rubocop:enable Metrics/PerceivedComplexity
 
       def new_version(dependency)
         if dependency.version.match?(/^[0-9a-f]{40}$/)
@@ -567,16 +573,19 @@ module Dependabot
           "`#{dependency.version[0..6]}`"
         elsif dependency.version == dependency.previous_version &&
               package_manager == "docker"
-          digest =
-            dependency.requirements.
-            map { |r| r.dig(:source, "digest") || r.dig(:source, :digest) }.
-            compact.first
+          digest = docker_digest_from_reqs(dependency.requirements)
           "`#{digest.split(':').last[0..6]}`"
         else
           dependency.version
         end
       end
 
+      def docker_digest_from_reqs(requirements)
+        requirements.
+          map { |r| r.dig(:source, "digest") || r.dig(:source, :digest) }.
+          compact.first
+      end
+
       def previous_ref(dependency)
         dependency.previous_requirements.map do |r|
           r.dig(:source, "ref") || r.dig(:source, :ref)
@@ -668,11 +677,14 @@ module Dependabot
       def library?
         return true if files.map(&:name).any? { |nm| nm.end_with?(".gemspec") }
 
-        dependencies.any? { |d| !d.appears_in_lockfile? }
+        dependencies.any? { |d| previous_version(d).nil? }
       end
 
       def switching_from_ref_to_release?(dependency)
-        return false unless dependency.previous_version.match?(/^[0-9a-f]{40}$/)
+        unless dependency.previous_version&.match?(/^[0-9a-f]{40}$/) ||
+               dependency.previous_version.nil? && previous_ref(dependency)
+          return false
+        end
 
         Gem::Version.correct?(dependency.version)
       end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.112.1"
+  VERSION = "0.112.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.112.1
+  version: 0.112.2
 platform: ruby
 authors:
 - Dependabot