dependabot-composer 0.205.0 → 0.207.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c1b1b3e427f36b8247b7ed8c209dcedabfb475a3fb80664c6849e6580d4c4821
-  data.tar.gz: 1964bad6d52445c6e247125b98d56b5051e421f901f95d8d36976c6073371534
+  metadata.gz: 5c2d4d66c8217c2d037968f254b9562f753cfa56c1d9e0213419e6c8b88306a7
+  data.tar.gz: fd8e778816c49271018c6b35c907e8dc54bab4303f1e8681af1fe0a3af6414ca
 SHA512:
-  metadata.gz: 05ca99c367afe7f3fef90284a2396d1e1bd83084e01f31d45a8cec5cb783ccdbc101233050616c5e73271d68cf95131ad495e84be287401a40a1c785183ccedd
-  data.tar.gz: fe9801e2b1a47add893a335cfdf6af447c6698d26ee09170abd6cb56e524eafde8fb520958a2585e44133b4035508f7591e2c39f89abb6c26c6c0dd79644c359
+  metadata.gz: 7c26f48a91f197811196ae8bd9566f138dcceb790cd438bd7508c5c6f629d1b04ae27a9ee79d8d5f334e4b16e916a03834812f22bfe0fbfc0623404c8a3924c0
+  data.tar.gz: 5a83cf13d99abdd27c81e2561f835560ed736e7a19d26305fa8fcd267252114b0620d720dfbbce4deb1c7c4f59fa54cd920eae11f7f496a4b2b6ca0e71701bbb

data/lib/dependabot/composer/file_fetcher.rb

@@ -103,9 +103,25 @@ module Dependabot
       end
 
       def expand_path(path)
-        repo_contents(dir: path.gsub(/\*$/, "")).
-          select { |file| file.type == "dir" }.
-          map { |f| path.gsub(/\*$/, f.name) }
+        wildcard_depth = 0
+        path = path.gsub(/\*$/, "")
+        while path.end_with?("*/")
+          path = path.gsub(%r{\*/$}, "")
+          wildcard_depth += 1
+        end
+        directories = repo_contents(dir: path).
+                      select { |file| file.type == "dir" }.
+                      map { |f| File.join(path, f.name) }
+
+        while wildcard_depth.positive?
+          directories.each do |dir|
+            directories += repo_contents(dir: dir).
+                           select { |file| file.type == "dir" }.
+                           map { |f| File.join(dir, f.name) }
+          end
+          wildcard_depth -= 1
+        end
+        directories
       rescue Octokit::NotFound, Gitlab::Error::NotFound
         lockfile_path_dependency_paths.
           select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.205.0
+  version: 0.207.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-04 00:00:00.000000000 Z
+date: 2022-08-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.0
+        version: 0.207.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.0
+        version: 0.207.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement
@@ -285,7 +285,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.0
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: PHP (Composer) support for dependabot