dependabot-common 0.349.0 → 0.350.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fb3951f9fad81d40a6feeee975ecedbef2032bfdab19f3d9813c6ea1a44df37c
-  data.tar.gz: 47d5909881a4ff68f1ddc1964f468beee8024783c39a548b2ab24e356d8e3265
+  metadata.gz: e3e7d8b7801d11a969b187ac545af8c704d7883830afd5d8670463ff7c936df3
+  data.tar.gz: 23e68319bd675a9347b35ffedc107823f71c8de6054e18ecf2a91a4a1d3ce2e5
 SHA512:
-  metadata.gz: e513a887485738625d9233d2db264449e4765ac8ff985344bfd21dc1c94e8a585a22e12075f4aa43392dbdd16b5e08328889daa8b606e2af5b4c68a0541f013e
-  data.tar.gz: 5a8cd4f9727aacb10b0df076e5841bbf101896d7c30701cb4171b8ec687ed5012bcbfd18514c4f8e6862912cad76a2dc77c9d11cddd18bda4212fc014ca85f65
+  metadata.gz: ecbec2eb7cbe4a37495a619f814e76401a49dadcc6abde2d412a5d2e8f1347361d957d44f3020a6ca73a2035850c241e345581674256393a3f2bed506fb643e9
+  data.tar.gz: db8dbaf3c46e4286aed04a7c1d39ba66b192696b4547beb875a35dae9cfa01ae4371c020d5a4128160daa57d147f2227c6a034cb1dedf3a12942dd4dd8ed7895

data/lib/dependabot/metadata_finders/base/changelog_finder.rb

@@ -180,7 +180,7 @@ module Dependabot
         sig { params(files: T::Array[T.untyped]).returns(T.untyped) }
         def select_best_changelog(files)
           CHANGELOG_NAMES.each do |name|
-            candidates = files.select { |f| f.name =~ /#{name}/i }
+            candidates = files.select { |f| f.name =~ /\A#{name}/i }
             file = candidates.first if candidates.one?
             file ||=
               candidates.find do |f|

data/lib/dependabot/package/package_latest_version_finder.rb

@@ -158,6 +158,26 @@ module Dependabot
         if releases.count > filtered.count
           Dependabot.logger.info("Filtered out #{releases.count - filtered.count} versions due to cooldown")
         end
+
+        # If all releases were filtered out due to cooldown and we have a current version, use it as fallback
+        if filtered.empty? && !releases.empty? && dependency.version
+          current_version_str = dependency.version
+
+          Dependabot.logger.info(
+            "All versions filtered by cooldown for #{dependency.name}, " \
+            "falling back to current version #{current_version_str}"
+          )
+
+          # Create a PackageRelease for the current version
+          current_version = version_class.new(current_version_str)
+          current_release = Dependabot::Package::PackageRelease.new(
+            version: current_version,
+            released_at: nil,
+            tag: nil
+          )
+          return [current_release]
+        end
+
         filtered
       end
 

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.349.0"
+  VERSION = "0.350.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.349.0
+  version: 0.350.0
 platform: ruby
 authors:
 - Dependabot
@@ -629,7 +629,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.349.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.350.0
 rdoc_options: []
 require_paths:
 - lib