dependabot-composer 0.204.0 → 0.206.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 27f6d10a9602987eed7e74d596e4f84c29e9c09963f8e9bee75a6ef679980c17
-  data.tar.gz: a3e54fef82a4b424ccad9a4c1ab80828c85ed6f7165f118c4d60a6f33a5171a0
+  metadata.gz: 6b8fc79dd3ab08ec8adb5f08d9a0592eba0d74bb4439b7f4f25326dc7b8778c9
+  data.tar.gz: dc7acd16412fe8cad5f9dfa0994cb3fd23da086762edeec9befc20404351893b
 SHA512:
-  metadata.gz: f2d2f8ba231b4a7031c6b3db9ff6091c1190bdaa78727751c58f4422639bed187477687c4788ba30e092a8c2a716cfc75d7bec95edde110493c5a0f3817f2506
-  data.tar.gz: b0a0ecb9735474b40edc856cd6861c063a44675ecdefc64517586a30c789cb346cbdbe576d09a144db043d02a81cb3ed0f8f8215c5224477b39adb6f6411e043
+  metadata.gz: 9357d25186ded0bf2840b36458e03e373867c07b89e34ba0e22bdb1fc8cb4b0e2cb712f6ac73f251cf1f4dc188f17ccba24d6d8c30af31ac109892dad5a432d9
+  data.tar.gz: 2bea459bda496f585a10c5d006ca6d0889ff0120bf49b0285fbb167cf74f5b13ea14915a9c3897240cfe8f62466674bf80904b75e2b9923e40d6d4a518437d91

data/lib/dependabot/composer/file_fetcher.rb

@@ -103,9 +103,25 @@ module Dependabot
       end
 
       def expand_path(path)
-        repo_contents(dir: path.gsub(/\*$/, "")).
-          select { |file| file.type == "dir" }.
-          map { |f| path.gsub(/\*$/, f.name) }
+        wildcard_depth = 0
+        path = path.gsub(/\*$/, "")
+        while path.end_with?("*/")
+          path = path.gsub(%r{\*/$}, "")
+          wildcard_depth += 1
+        end
+        directories = repo_contents(dir: path).
+                      select { |file| file.type == "dir" }.
+                      map { |f| File.join(path, f.name) }
+
+        while wildcard_depth.positive?
+          directories.each do |dir|
+            directories += repo_contents(dir: dir).
+                           select { |file| file.type == "dir" }.
+                           map { |f| File.join(dir, f.name) }
+          end
+          wildcard_depth -= 1
+        end
+        directories
       rescue Octokit::NotFound, Gitlab::Error::NotFound
         lockfile_path_dependency_paths.
           select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.204.0
+  version: 0.206.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-03 00:00:00.000000000 Z
+date: 2022-08-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.204.0
+        version: 0.206.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.204.0
+        version: 0.206.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement
@@ -285,7 +285,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.0
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: PHP (Composer) support for dependabot