dependabot-core 0.76.1 → 0.76.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: da87e111d41e998eabe1f19be1c883a4c33406d4e969647ac6129717a4aaf4b7
-  data.tar.gz: 526256c06b9e58545a3c85dcb00328d7851102f3f9b5ffa95358907c84345444
+  metadata.gz: 8f923473bb58d4d87d8581f75e7045c2364b5adba9fd934a142f205a50a697da
+  data.tar.gz: 20849eedf7e3216e535e9bc2e5a694cf4b7798c6b0d771b355816d6fec80f8ad
 SHA512:
-  metadata.gz: a24727880002e0a0583f8c12fe399c4df45ad5b437a648ce3942200184eee3038e0816d26fdfe8d1702140ed75528973c02fe5cd661e3d6c56a31705b8269da8
-  data.tar.gz: 79a973c1b6dbd3af64c00c91be560ab29dda4606be037e3d00306b6a7c1f6e170419d6d8241a5e0df13a70f91e823bb17bd411142dd174187c3da2e07b914503
+  metadata.gz: af66c4bf0d1009a712a542be6d2eb2e908973938185f0c94f3696f9e4d181b4422c18f761bedb7e8512cffdb9c81ce7ab9f512f1e12ea215556229177ccab915
+  data.tar.gz: 32c926998f00f6899a19d6df07f90419768aa1cb111d55ff0a5c1e50f1fefc65abd354676f6a5e0fbc6e9b35991fec33b42631ce032388252764e4d021a791e8

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## v0.76.2, 6 December 2018
+
+- Better detection of dependabot commit when updating a PR
+
 ## v0.76.1, 5 December 2018
 
 - JS: Don't check for yanked packages if using a private registry

data/lib/dependabot/pull_request_updater/github.rb

@@ -132,9 +132,23 @@ module Dependabot
       end
 
       def commit_message
-        github_client_for_source.
-          git_commit(source.repo, pull_request.head.sha).
-          message
+        @commit_message ||=
+          if pull_request.commits == 1
+            github_client_for_source.
+              git_commit(source.repo, pull_request.head.sha).
+              message
+          else
+            author_name = author_details&.fetch(:name, nil) || "dependabot[bot]"
+            commits =
+              github_client_for_source.
+              pull_request_commits(source.repo, pull_request_number)
+
+            commit =
+              commits.find { |c| c.commit.author.name == author_name } ||
+              commits.first
+
+            commit.commit.message
+          end
       end
 
       def commit_signature(tree, author_details_with_date)

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.76.1"
+  VERSION = "0.76.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-core
 version: !ruby/object:Gem::Version
-  version: 0.76.1
+  version: 0.76.2
 platform: ruby
 authors:
 - Dependabot
@@ -50,14 +50,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: 1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.4'
+        version: 1.4.1
 - !ruby/object:Gem::Dependency
   name: excon
   requirement: !ruby/object:Gem::Requirement
@@ -194,44 +194,44 @@ dependencies:
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '12'
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '12'
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: 3.8.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.8'
+        version: 3.8.0
 - !ruby/object:Gem::Dependency
   name: rspec-its
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.2'
+        version: 1.2.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.2'
+        version: 1.2.0
 - !ruby/object:Gem::Dependency
   name: rspec_junit_formatter
   requirement: !ruby/object:Gem::Requirement
@@ -252,42 +252,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.61'
+        version: 0.61.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.61'
+        version: 0.61.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.0'
+        version: 4.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.0'
+        version: 4.0.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.4'
+        version: 3.4.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '3.4'
+        version: 3.4.0
 description: Automated dependency management for Ruby, JavaScript, Python, PHP, Elixir,
   Rust, Java, .NET, Elm and Go
 email: support@dependabot.com
@@ -614,9 +614,9 @@ files:
 - lib/dependabot/version.rb
 - lib/python_requirement_parser.rb
 - lib/python_versions.rb
-homepage: https://github.com/dependabot/dependabot-core
+homepage: https://github.com/hmarr/dependabot-core
 licenses:
-- Nonstandard
+- License Zero Prosperity Public License
 metadata: {}
 post_install_message: 
 rdoc_options: []