dependabot-common 0.112.4 → 0.112.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fbf2274156cc28509f96194dce8c78ea07de0943ab2db3b70b78138e0501c58f
-  data.tar.gz: d50a99fb6342a789ce3f3d9616fa13d23180bc17a51cb47afcd80506cb975877
+  metadata.gz: 84580f0a337f80188ce7b44563868e1fb00ce0c044434f0df44d1c5b5e745b2b
+  data.tar.gz: baae6191d5ce5cec40000a01b8808d781eca7324f51d58d2821ba5dad81b2773
 SHA512:
-  metadata.gz: 6e4838a12e36374bbf59903af57e4c53da077e0e30d0093a338948e1f1408f849378e3762c4f9b50a3bd246eab735a67e960ae38048372d09f9c2ff4c623e48f
-  data.tar.gz: f75748771795fec8edae255031ac4e1f3eddca5f5e0401a2aa990b59df6d6e71913ef8c52b5b26486cca0e10e2439890a24039376456f808c002cea8b1735c01
+  metadata.gz: 404ba99bd520185d8b0995d4e4e94d7724f7157270e96530ceea42b3e26f24675e287d21a8969fda38c61bd19ad80a11d50edf478c599daf6c55c8758b075a62
+  data.tar.gz: 26317185e7935ccd04e9308118ed403a80fe60db038b8ef4b0c3cbf833ac2d2ca0628ef7f1a642d92c0ba6d37e4c9be4f088cf4dda07e0dc5d8c66c70c69344e

data/lib/dependabot/git_commit_checker.rb

@@ -14,7 +14,13 @@ require "dependabot/git_metadata_fetcher"
 
 module Dependabot
   class GitCommitChecker
-    VERSION_REGEX = /(?<version>[0-9]+\.[0-9]+(?:\.[a-zA-Z0-9\-]+)*)$/.freeze
+    VERSION_REGEX = /
+      (?<version>
+        (?<=^v)[0-9]+(?:\-[a-z0-9]+)?
+        |
+        [0-9]+\.[0-9]+(?:\.[a-z0-9\-]+)*
+      )$
+    /ix.freeze
 
     def initialize(dependency:, credentials:, ignored_versions: [],
                    requirement_class: nil, version_class: nil)
@@ -57,9 +63,13 @@ module Dependabot
     end
 
     def head_commit_for_current_branch
-      return dependency.version if pinned?
-
       ref = ref_or_branch || "HEAD"
+
+      if pinned?
+        return dependency.version ||
+               local_repo_git_metadata_fetcher.head_commit_for_ref(ref)
+      end
+
       sha = local_repo_git_metadata_fetcher.head_commit_for_ref(ref)
       return sha if sha
 
@@ -233,8 +243,8 @@ module Dependabot
     def matches_existing_prefix?(tag)
       return true unless ref_or_branch&.match?(VERSION_REGEX)
 
-      ref_or_branch.gsub(VERSION_REGEX, "").gsub(/v$/, "") ==
-        tag.gsub(VERSION_REGEX, "").gsub(/v$/, "")
+      ref_or_branch.gsub(VERSION_REGEX, "").gsub(/v$/i, "") ==
+        tag.gsub(VERSION_REGEX, "").gsub(/v$/i, "")
     end
 
     def listing_source_url

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.112.4"
+  VERSION = "0.112.5"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.112.4
+  version: 0.112.5
 platform: ruby
 authors:
 - Dependabot