dependabot-common 0.95.43 → 0.95.44

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c9b9df68e6b44b2b805609022dc774e3b7e1f39a72be7974f51df5ca93e4667e
-  data.tar.gz: 857417730a87081a6ac2b54acabed7ee450a30417ab2f1d4e71e8e6e1a25229e
+  metadata.gz: 1aee385b103e33f29ad43b22111d9ba6aaf949b34f8429a25b99cb9fb2956021
+  data.tar.gz: 787e1d372f22b91d1814b713154224e1254f44abce97522769a42deaf9e3477f
 SHA512:
-  metadata.gz: 2800c904728480e33517b19fdfbbc8947e95902e594c30cab1fdb8dd0d7119058564c5f8cc07928d8f6032381d8fd62244a016a342f6f21a8bf9dc3522d85543
-  data.tar.gz: b8fbc23f47792dfb85c21a4b38beb73234e0a722f66702f13e572090d73f049655187bf763cde72c546f845c4df2eb287340cac1a0f6eed012a4f96c58ecf917
+  metadata.gz: d86c89cebd4f41a60abfbc146df274e9a182754aee85d9315b2a3142b67d80b6f74d732305c022ce58f33a14bfddb61111b0a016bfabb6713037572d673e4222
+  data.tar.gz: '08cdde24882b3556cb36e87ede0972329287bc57ece2b8965bb4a4f197a89e83ee7f9045142cfe7b6863fb913cf6d4861cfe51b5dc19b7e45f197aab4325827e'

data/lib/dependabot/metadata_finders/base/commits_finder.rb

@@ -196,9 +196,11 @@ module Dependabot
                 github_client.commits(repo, sha: previous_tag, path: path).
                 map(&:sha)
 
+              # Note: We reverse this so it's consistent with the array we get
+              # from `github_client.compare(...)`
               github_client.
                 commits(repo, sha: new_tag, path: path).
-                reject { |c| previous_commit_shas.include?(c.sha) }
+                reject { |c| previous_commit_shas.include?(c.sha) }.reverse
             else
               github_client.compare(source.repo, previous_tag, new_tag).commits
             end

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.95.43"
+  VERSION = "0.95.44"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.95.43
+  version: 0.95.44
 platform: ruby
 authors:
 - Dependabot