dependabot-common 0.156.6 → 0.156.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 02ce33c72dc474e777e3501d8595d859ffd3682992a83972815b655720b05c2e
-  data.tar.gz: 5e142e57878d0d754027055758c8dd48739817572dd53491e14dafbecad491ab
+  metadata.gz: '01582f4e6af1cd2526988f23545637527bc5bfaf8860bc4c5fd964c71a1da905'
+  data.tar.gz: 9a2b2d63bb77138f8ef1cd278403c605bdc559b64fceca90ef3a4cce7ef293a6
 SHA512:
-  metadata.gz: dd44be8282356dcfaaaa76603730b2cc7a6e5c17ba87be886c015ad30629d86fea8ab29fd0cf5e3889f1f5fd37940656c66c2d3b832f8dd8f17fbafd75b4b1c4
-  data.tar.gz: bc44087b4f239e53bd327f356f0942fd0c114e4e5027c351a34f8ed3583142faac22d917688297d384bc1fac79e1869582c076b6c569e278287f123ea1617ef6
+  metadata.gz: 96dcdabb126fe52488da7faa1de7121b092a88bcc06fd30694adeca5d8bb6ccdea9f594f013b42aad916c1c74e6337f40273ceb3923b748bcfb0635a38ff16b6
+  data.tar.gz: 7154b80c394c70d49930d49c34a03ddfa34e0c1c76d8e9048644836ceca055b6bc64fecd1edeffbf71504e1eb6ed02778d34eef66d5818c7e3657829ba67c23e

data/lib/dependabot/file_fetchers/base.rb

@@ -157,11 +157,12 @@ module Dependabot
         path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
-        @repo_contents[dir] ||= _fetch_repo_contents(
-          path,
-          raise_errors: raise_errors,
-          fetch_submodules: fetch_submodules
-        )
+        @repo_contents[dir] ||= if repo_contents_path
+                                  _cloned_repo_contents(path)
+                                else
+                                  _fetch_repo_contents(path, raise_errors: raise_errors,
+                                                             fetch_submodules: fetch_submodules)
+                                end
       end
 
       #################################################
@@ -225,6 +226,22 @@ module Dependabot
         github_response.map { |f| _build_github_file_struct(f) }
       end
 
+      def _cloned_repo_contents(relative_path)
+        repo_path = File.join(clone_repo_contents, relative_path)
+        return [] unless Dir.exist?(repo_path)
+
+        Dir.entries(repo_path).map do |name|
+          next if [".", ".."].include?(name)
+
+          OpenStruct.new(
+            name: name,
+            path: Pathname.new(File.join(relative_path, name)).cleanpath.to_path,
+            type: Dir.exist?(File.join(repo_path, name)) ? "dir" : "file",
+            size: 0 # NOTE: added for parity with github contents API
+          )
+        end.compact
+      end
+
       def update_linked_paths(repo, path, commit, github_response)
         case github_response.type
         when "submodule"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.156.6"
+  VERSION = "0.156.7"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.156.6
+  version: 0.156.7
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-07-13 00:00:00.000000000 Z
+date: 2021-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers