dependabot-common 0.98.42 → 0.98.43

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03f4f32d3cc711c1fa8bb7941c1c9fe72cfd642c507a786f69e23583e89b1de0
-  data.tar.gz: 8979bf8319fc18128e267126dfa642abbe2755f2d0c188b2fad217adce4d61ee
+  metadata.gz: 22887ffbf044ddfbcb0ce034b3388690e32a197bed5de1242a41028f57604582
+  data.tar.gz: 62a46e53168ce9e06fc577110f88b3bf82fbca70095b506c49eec09606c3a484
 SHA512:
-  metadata.gz: 4e0e8d9622c45424384a720b813d39ca1a889365c0787bedaef7439deb27f3741db7fc5f097fdd6a5f7e9389126cfef8c5f53cef0256675db039cd371a6ac9fb
-  data.tar.gz: 7fa2856f07697019a301ff2f1597373e9c076e29b30cad089b554992dfa2d66cb2cc59eff6572f8ad5e763b5f7584ac21b901b52bd90a20ab7800602bb4d38d8
+  metadata.gz: cd3aee9c6b7dc849896cd132feacb2ccfecaf8736e01ba09329eaf890d658b008608d89c599605f1d73495e7e49ade0d64511a6bc9a9f10722691367775ad5ca
+  data.tar.gz: c822607dc2afa37c468d2ad0c42cb8e898250603185b4333541ad4d53fd876f21e4d4c39797e4b6e5fc8bd253f204a3b54280d81c6a498bd2838bbe68e948417

data/lib/dependabot/metadata_finders/base/release_finder.rb

@@ -113,9 +113,12 @@ module Dependabot
           releases.reject do |release|
             cleaned_tag = release.tag_name.gsub(/^[^0-9]*/, "")
             cleaned_name = release.name&.gsub(/^[^0-9]*/, "")
+            dot_count = [cleaned_tag, cleaned_name].compact.reject(&:empty?).
+                        map { |nm| nm.chars.count(".") }.max
 
             tag_version = [cleaned_tag, cleaned_name].compact.reject(&:empty?).
                           select { |nm| version_class.correct?(nm) }.
+                          select { |nm| nm.chars.count(".") == dot_count }.
                           map { |nm| version_class.new(nm) }.max
 
             next conservative unless tag_version
@@ -132,9 +135,12 @@ module Dependabot
           releases.reject do |release|
             cleaned_tag = release.tag_name.gsub(/^[^0-9]*/, "")
             cleaned_name = release.name&.gsub(/^[^0-9]*/, "")
+            dot_count = [cleaned_tag, cleaned_name].compact.reject(&:empty?).
+                        map { |nm| nm.chars.count(".") }.max
 
             tag_version = [cleaned_tag, cleaned_name].compact.reject(&:empty?).
                           select { |nm| version_class.correct?(nm) }.
+                          select { |nm| nm.chars.count(".") == dot_count }.
                           map { |nm| version_class.new(nm) }.min
 
             next conservative unless tag_version

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.98.42"
+  VERSION = "0.98.43"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.98.42
+  version: 0.98.43
 platform: ruby
 authors:
 - Dependabot