dependabot-composer 0.205.0 → 0.205.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c1b1b3e427f36b8247b7ed8c209dcedabfb475a3fb80664c6849e6580d4c4821
-  data.tar.gz: 1964bad6d52445c6e247125b98d56b5051e421f901f95d8d36976c6073371534
+  metadata.gz: 3b6048d264d8d8bc4e96466dac9e5411c34cf5da507400f673303cb778594e42
+  data.tar.gz: 03b0795055483a25beee34fac7620524be5798d089615b54f51b6d888efb7577
 SHA512:
-  metadata.gz: 05ca99c367afe7f3fef90284a2396d1e1bd83084e01f31d45a8cec5cb783ccdbc101233050616c5e73271d68cf95131ad495e84be287401a40a1c785183ccedd
-  data.tar.gz: fe9801e2b1a47add893a335cfdf6af447c6698d26ee09170abd6cb56e524eafde8fb520958a2585e44133b4035508f7591e2c39f89abb6c26c6c0dd79644c359
+  metadata.gz: 9cc2fc68199781a5eae0b9deff558be7a8fe8587b4a438400de9cf43ab399795dd0efb5c12410df55fbe7b57133bb1192af8b339dfc25513201580004ceab991
+  data.tar.gz: adb8cb814f2d128d2906ea58052d67a2e0e9356cad6d6342d8b55955802ee53bfd3be47d0eea009bf5fb182eb38085c0b7e4df3df5f6abe67c2899b240953666

data/lib/dependabot/composer/file_fetcher.rb

@@ -103,9 +103,25 @@ module Dependabot
       end
 
       def expand_path(path)
-        repo_contents(dir: path.gsub(/\*$/, "")).
-          select { |file| file.type == "dir" }.
-          map { |f| path.gsub(/\*$/, f.name) }
+        wildcard_depth = 0
+        path = path.gsub(/\*$/, "")
+        while path.end_with?("*/")
+          path = path.gsub(%r{\*/$}, "")
+          wildcard_depth += 1
+        end
+        directories = repo_contents(dir: path).
+                      select { |file| file.type == "dir" }.
+                      map { |f| File.join(path, f.name) }
+
+        while wildcard_depth.positive?
+          directories.each do |dir|
+            directories += repo_contents(dir: dir).
+                           select { |file| file.type == "dir" }.
+                           map { |f| File.join(dir, f.name) }
+          end
+          wildcard_depth -= 1
+        end
+        directories
       rescue Octokit::NotFound, Gitlab::Error::NotFound
         lockfile_path_dependency_paths.
           select { |p| p.to_s.start_with?(path.gsub(/\*$/, "")) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.205.0
+  version: 0.205.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-04 00:00:00.000000000 Z
+date: 2022-08-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.0
+        version: 0.205.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.0
+        version: 0.205.1
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -285,7 +285,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.0
 requirements: []
-rubygems_version: 3.3.7
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: PHP (Composer) support for dependabot