dependabot-common 0.113.1 → 0.113.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '06813fe132436fc186e5ce764e004977caffe6e78e3e3735ad4c1bcfd49e7105'
-  data.tar.gz: b8babbd7f13dac9e202e5742b0e3664de13c24859efbd34a7a1495db51dc71e5
+  metadata.gz: 3d98838d69b22779567c2db929a41d583e33001e3c8fbd8e7895d598a52c8a31
+  data.tar.gz: 91814e2d00dd486eb37bae7bff1bf738166ffd9560c52afd6b49769ae396bc24
 SHA512:
-  metadata.gz: '093760b857c60427f8f768c53aa404760d8f116991eb00ce6a2b11ed4b787482e417ec5bfe1b611337e6187d9d500c7825f5e32f75e90490cee4c79722a1e8c9'
-  data.tar.gz: a7fc31f8e16a75f8ece9f3c55ef09c699fe7199907a0d6d2efb66b3fd30af524e26841e651201d5814eaaa111b9c6f1531c13508ac3f873207a7c610a4c13b14
+  metadata.gz: 2e947e065a6a846a1ad7455546bba80fcc51b537d1d42d781c5ba84fced5cb69f8484ce260b7139cc31f9f04914ce9eb403b573d32ec0897b027d0d9dba60971
+  data.tar.gz: 28d378e61173d3773848c54b539d29d6a970e79d4279857bd52f7ebf25691676866980541b967d6fb8f24eba152b821ec55c92e06d48182cfe6505cf533a9bde

data/lib/dependabot/file_fetchers/base.rb

@@ -56,6 +56,8 @@ module Dependabot
       end
 
       def commit
+        return source.commit if source.commit
+
         branch = target_branch || default_branch_for_repo
 
         @commit ||= client_for_provider.fetch_commit(repo, branch)

data/lib/dependabot/pull_request_creator/commit_signer.rb

@@ -1,7 +1,6 @@
 # frozen_string_literal: true
 
 require "time"
-require "gpgme"
 require "tmpdir"
 require "dependabot/pull_request_creator"
 
@@ -21,6 +20,13 @@ module Dependabot
       end
 
       def signature
+        begin
+          require "gpgme"
+        rescue LoadError
+          raise LoadError, "Please add `gpgme` to your Gemfile or gemspec " \
+                           "enable commit signatures"
+        end
+
         email = author_details[:email]
 
         dir = Dir.mktmpdir

data/lib/dependabot/source.rb

@@ -36,8 +36,8 @@ module Dependabot
       (?:#{AZURE_SOURCE})
     /x.freeze
 
-    attr_accessor :provider, :repo, :directory, :branch, :hostname,
-                  :api_endpoint
+    attr_accessor :provider, :repo, :directory, :branch, :commit,
+                  :hostname, :api_endpoint
 
     def self.from_url(url_string)
       return unless url_string&.match?(SOURCE_REGEX)
@@ -52,8 +52,8 @@ module Dependabot
       )
     end
 
-    def initialize(provider:, repo:, directory: nil, branch: nil, hostname: nil,
-                   api_endpoint: nil)
+    def initialize(provider:, repo:, directory: nil, branch: nil, commit: nil,
+                   hostname: nil, api_endpoint: nil)
       if (hostname.nil? ^ api_endpoint.nil?) && (provider != "codecommit")
         msg = "Both hostname and api_endpoint must be specified if either "\
               "are. Alternatively, both may be left blank to use the "\
@@ -65,6 +65,7 @@ module Dependabot
       @repo = repo
       @directory = directory
       @branch = branch
+      @commit = commit
       @hostname = hostname || default_hostname(provider)
       @api_endpoint = api_endpoint || default_api_endpoint(provider)
     end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.113.1"
+  VERSION = "0.113.2"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.113.1
+  version: 0.113.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-09-17 00:00:00.000000000 Z
+date: 2019-09-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -106,20 +106,6 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '4.9'
-- !ruby/object:Gem::Dependency
-  name: gpgme
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '2.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: nokogiri
   requirement: !ruby/object:Gem::Requirement
@@ -224,6 +210,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '11.0'
+- !ruby/object:Gem::Dependency
+  name: gpgme
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement