dependabot-composer 0.203.0 → 0.205.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f32d7c3e8545edb7d376c2c884149f90ab499f1485643cb513bd2ca9e85e5d7b
-  data.tar.gz: 9f99a1189f8afae1dfbcdbbc18e7bca361a71e81968675f95e2c041f6af74f45
+  metadata.gz: 3b6048d264d8d8bc4e96466dac9e5411c34cf5da507400f673303cb778594e42
+  data.tar.gz: 03b0795055483a25beee34fac7620524be5798d089615b54f51b6d888efb7577
 SHA512:
-  metadata.gz: ba624be89d82afc8a349c478b3d6f029837c8e4506556752ad3d92e103989a6b94ae2914b5582ba4f8227718cf0b592c2146c45fa8488416e4b1c6707907fb95
-  data.tar.gz: 62d5e8cce6503a6b366541c6dbf559d9c4486cb212aa9eebd250b9e03205542f3b5ee04c9cfda566dc3121d0a10e34746e73116f9357a2db7c410918371b517e
+  metadata.gz: 9cc2fc68199781a5eae0b9deff558be7a8fe8587b4a438400de9cf43ab399795dd0efb5c12410df55fbe7b57133bb1192af8b339dfc25513201580004ceab991
+  data.tar.gz: adb8cb814f2d128d2906ea58052d67a2e0e9356cad6d6342d8b55955802ee53bfd3be47d0eea009bf5fb182eb38085c0b7e4df3df5f6abe67c2899b240953666

data/lib/dependabot/composer/file_fetcher.rb

@@ -103,9 +103,25 @@ module Dependabot
       end
 
       def expand_path(path)
-        repo_contents(dir: path.gsub(/\*$/, "")).
-          select { |file| file.type == "dir" }.
-          map { |f| path.gsub(/\*$/, f.name) }
+        wildcard_depth = 0
+        path = path.gsub(/\*$/, "")
+        while path.end_with?("*/")
+          path = path.gsub(%r{\*/$}, "")
+          wildcard_depth += 1
+        end
+        directories = repo_contents(dir: path).
+                      select { |file| file.type == "dir" }.
+                      map { |f| File.join(path, f.name) }
+
+        while wildcard_depth.positive?
+          directories.each do |dir|
+            directories += repo_contents(dir: dir).
+                           select { |file| file.type == "dir" }.
+                           map { |f| File.join(dir, f.name) }
+          end
+          wildcard_depth -= 1
+        end
+        directories
       rescue Octokit::NotFound, Gitlab::Error::NotFound
         lockfile_path_dependency_paths.
           select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.203.0
+  version: 0.205.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-03 00:00:00.000000000 Z
+date: 2022-08-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.203.0
+        version: 0.205.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.203.0
+        version: 0.205.1
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -285,7 +285,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.0
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: PHP (Composer) support for dependabot