dependabot-git_submodules 0.239.0 → 0.241.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4f4c39c9952365bacefc1db107283ee9eaf4acb3271fd3180b02965787221aab
-  data.tar.gz: 756bb13b71fa71ac82102e7491eb37aee7d45db21d5afa8353c38ea61f8ec69e
+  metadata.gz: caa0dc019018482cf1872515d40ddf2f64807a07acc8107f90a67a35fb443527
+  data.tar.gz: f96e0d74a48af442447900622bdf63e5b4453b692384c5bf43a2117e74d922f0
 SHA512:
-  metadata.gz: 173d8b571ef41e0b46b3b200e90d149d369710795c669d39b65504f307f47d1012bd71ea2e96eb76f99037afe8556e10ef22090e4008b626f98e8cf82b9ff4e4
-  data.tar.gz: 970066b49bb0f0dbdb64ad7f34cb78a920fa7aee762b6753b004657409ae692c6483c773119b6642ae94b466425dcbff081c20dbf914f70d77d853550cc4bf35
+  metadata.gz: 54352dd7538e5641f0c06d84029d7d7fed05850415972e09667d5f174001846060ada05dc9e6cf5e2f73e544e1fed4279d4ad60c6cde2dad97a7666cd764a360
+  data.tar.gz: 8275cbdce585ab1eb78a820e0db97f17e931cbf285db13e07e7ebd48e2a72f0c79ee5a06bcfc5d5de94f0f517c0c1711f832109eb3db7368f6a7932cebe85dce

data/lib/dependabot/git_submodules/file_parser.rb

@@ -44,8 +44,8 @@ module Dependabot
         # which we want to expand out into a full URL if present.
         return url unless url.start_with?("../", "./")
 
-        path = Pathname.new(File.join(source.repo, url))
-        "https://#{source.hostname}/#{path.cleanpath}"
+        path = Pathname.new(File.join(source&.repo, url))
+        "https://#{source&.hostname}/#{path.cleanpath}"
       end
 
       def submodule_sha(path)

data/lib/dependabot/git_submodules/metadata_finder.rb

@@ -10,8 +10,8 @@ module Dependabot
       private
 
       def look_up_source
-        url = dependency.requirements.first.fetch(:source)[:url] ||
-              dependency.requirements.first.fetch(:source).fetch("url")
+        url = dependency.requirements.first&.fetch(:source)&.fetch(:url) ||
+              dependency.requirements.first&.fetch(:source)&.fetch("url")
 
         Source.from_url(url)
       end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-git_submodules
 version: !ruby/object:Gem::Version
-  version: 0.239.0
+  version: 0.241.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-28 00:00:00.000000000 Z
+date: 2024-01-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.239.0
+        version: 0.241.0
 - !ruby/object:Gem::Dependency
   name: parseconfig
   requirement: !ruby/object:Gem::Requirement
@@ -226,6 +226,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Git_Submodules provides support for bumping git submodules
   via Dependabot. If you want support for multiple package managers, you probably
   want the meta-gem dependabot-omnibus.
@@ -247,7 +261,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.241.0
 post_install_message: 
 rdoc_options: []
 require_paths: