dependabot-common 0.133.3 → 0.133.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 621b8f1d1446707310d05dc4604ffd165647c854a798769238eb0fb559f5dfb7
-  data.tar.gz: 1c51b9ad36e7505bf32bb602204496724066dba3faf31fb670b7455c21343654
+  metadata.gz: a3d5d721fc17d18d1d740404ae3ac0aacef9c28409fdf192b0e3c47269aa2e5f
+  data.tar.gz: 294156f77b61a3ec2a6665a07d76d1b8216e7ac179191ae5b83f49718c1b4fd9
 SHA512:
-  metadata.gz: 645167b11e32b255b7adfccd5d4576a9ff75acc1831b4217fe2a576d7c986fa8420f969e2f625a37c149f9558244ec856f360c8cc778754248d7ec1c97c5aa2c
-  data.tar.gz: 8ae340d2829359872470e09661e3e238b244b829c6bc374b58796addf0770c61bd3d2b5f98fb05731d6cba639f84204cda980d0c7d845dd8f4f3455e01b39ab7
+  metadata.gz: 7ac09f29ecd290398e38429b5564ff2612fdbab03f5ef45f1080797990fea477bf5a936df19fe5e80bff26c27d8c1da138041507c2cc86d84c2f33160fb4aee7
+  data.tar.gz: 59898124d1514cfd0a1c7e9bbb5e62831e1fef955c7aec0a9894048910f1da78d16868297dc72775a2516c66b155912070cfc7ba36af25127e131f7f3245b0c7

data/lib/dependabot/clients/azure.rb

@@ -48,6 +48,8 @@ module Dependabot
           "/_apis/git/repositories/" + source.unscoped_repo +
           "/stats/branches?name=" + branch)
 
+        raise NotFound if response.status == 400
+
         JSON.parse(response.body).fetch("commit").fetch("commitId")
       end
 

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -119,7 +119,7 @@ module Dependabot
 
         def build_mention_link_text_nodes(text)
           code_node = CommonMarker::Node.new(:code)
-          code_node.string_content = text
+          code_node.string_content = insert_zero_width_space_in_mention(text)
           [code_node]
         end
 
@@ -127,11 +127,19 @@ module Dependabot
           link_node = CommonMarker::Node.new(:link)
           code_node = CommonMarker::Node.new(:code)
           link_node.url = url
-          code_node.string_content = text
+          code_node.string_content = insert_zero_width_space_in_mention(text)
           link_node.append_child(code_node)
           link_node
         end
 
+        # NOTE: Add a zero-width space between the @ and the username to prevent
+        # email replies on dependabot pull requests triggering notifications to
+        # users who've been mentioned in changelogs etc. PR email replies parse
+        # the content of the pull request body in plain text.
+        def insert_zero_width_space_in_mention(mention)
+          mention.sub("@", "@\u200B").encode("utf-8")
+        end
+
         def parent_node_link?(node)
           node.type == :link || node.parent && parent_node_link?(node.parent)
         end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.133.3"
+  VERSION = "0.133.4"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.133.3
+  version: 0.133.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-16 00:00:00.000000000 Z
+date: 2021-02-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -284,14 +284,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.9.0
+        version: 1.10.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.9.0
+        version: 1.10.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement