dependabot-core 0.83.0 → 0.83.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7f044cd502dc9fe5b01f50fe101f1867479ed62c87d47ca51b0d918b053565ca
-  data.tar.gz: 2acdd09615374e63bba5d47d09af775a76337bd4f8e273c8795c713b391167ce
+  metadata.gz: 2650fb172ee98b05006a4ed21a800434d04f15357bd3a522b8a1a2c371ad3a45
+  data.tar.gz: '019415b7c529d4f07af5095dd23b1669ee59423f7fc95fb0e1c77fc0cecd4287'
 SHA512:
-  metadata.gz: b587060d2ab20f7a81af26c040c8ad3663429830c2b98d60873d5a58a5105bf5224eeea7298bd9eb8611100d2d23eb09950ab0aa5f4604ee3148f18f9233b82e
-  data.tar.gz: 53d2d65b7e83c9921f049bb64210e95a10fd0a9a750c45affb4e415be62520b83d0e34ed9d1006e0a8e61e0e26ff3eb9d69c62cdd0c47c9f9aad054e4e0eb7d3
+  metadata.gz: 67bc78b206f9c0225024fa0cd2c6bff53aa49a9938106a1b953223d9633643e0d9c4575e465bc8e60c54b93377e9b5db21c5187f2654916163172ea67572b4e1
+  data.tar.gz: '088375a9f620abfb22f80666fad29c3917f59e6038da3f26a7638ac2e5d44b64178a660a6b1b5f46094c4fd166a5545843f1d344d42247e0a9ffe12a31f62329'

data/CHANGELOG.md

@@ -1,3 +1,9 @@
+## v0.83.1, 13 December 2018
+
+- Retry GitHub errors when labeling a PR
+- JS: Handle relative resolved paths in shrinkwrap.json
+- Go: Better file parsing (prefer revision to version for git dependencies)
+
 ## v0.83.0, 13 December 2018
 
 - Elm: Rename elm-package to elm everywhere

data/lib/dependabot/file_parsers/go/dep.rb

@@ -41,7 +41,7 @@ module Dependabot
 
               dependency_set << Dependency.new(
                 name: details.fetch("name"),
-                version: nil,
+                version: version_from_declaration(details),
                 package_manager: "dep",
                 requirements: [{
                   requirement: requirement_from_declaration(details),
@@ -107,6 +107,19 @@ module Dependabot
           end
         end
 
+        def version_from_declaration(declaration)
+          lockfile_details =
+            parsed_file(lockfile).fetch("projects", []).
+            find { |details| details["name"] == declaration.fetch("name") }
+
+          if source_from_declaration(declaration).fetch(:type) == "git"
+            lockfile_details["revision"] ||
+              version_from_lockfile(lockfile_details)
+          else
+            version_from_lockfile(lockfile_details)
+          end
+        end
+
         def appears_in_lockfile?(dependency_name)
           parsed_file(lockfile).fetch("projects", []).
             any? { |details| details["name"] == dependency_name }

data/lib/dependabot/file_parsers/java_script/npm_and_yarn.rb

@@ -237,6 +237,7 @@ module Dependabot
                          fetch("resolved", nil)
 
           return unless resolved_url
+          return unless resolved_url.start_with?("http")
           return if CENTRAL_REGISTRIES.any? { |u| resolved_url.start_with?(u) }
           return if resolved_url.include?("github")
 

data/lib/dependabot/pull_request_creator/labeler.rb

@@ -62,6 +62,12 @@ module Dependabot
           pull_request_number,
           labels_for_pr
         )
+      rescue Octokit::UnprocessableEntity
+        retrying ||= false
+        raise if retrying
+
+        retrying = true
+        retry
       end
 
       private

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.83.0"
+  VERSION = "0.83.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-core
 version: !ruby/object:Gem::Version
-  version: 0.83.0
+  version: 0.83.1
 platform: ruby
 authors:
 - Dependabot