dependabot-github_actions 0.118.0 → 0.118.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c64cbfa1c72d624b0fded72a8599ec30bcecf8004e34deabbe216eb52257316b
-  data.tar.gz: ba9bc2c21548ef4ca30bf9e2f92ee6f72254d7c29ce99414eae13c72b6e1f592
+  metadata.gz: 6fb38cb75c90b767b4fb496c248e2cb7f968462a6f59505a123c16fca66d960b
+  data.tar.gz: fe0ded3c7461b0c605a3431b851d456ace1e0ed88eb2dc381c1124fe050e5425
 SHA512:
-  metadata.gz: 42255df59bed87f00796d68398e802f1f5a185ce7fe605bd8ad7a236f493e6c40841d23916d1b4480265aca791c739624f11c712985ee6f16efe20885402db4a
-  data.tar.gz: b7a399bf8e57bd3f01a2155771017aca599364bdbb575971a216a37d2e52357b680102bb6063285545fb1831f635a8b94489b2f774ab1fd1e5b8107f89db8bfa
+  metadata.gz: 54b62092b1e6867f344e338b2fc696ed849af8676de12f3d84361b73f10d2a4a51c69f68b377ee688e247b7dbbf8b82e34a3ceeef0173a4bc04a903dc44355c5
+  data.tar.gz: 7d4ddeb242ff5934e99a1fbbeb2aca85f695e0b2addef84621519e347e6e0c08b6a45420ef2470ac3a61ab8df5fe1f62cb5ef649f0e8b3618a2ee06f9ea297a1

data/lib/dependabot/github_actions/file_parser.rb

@@ -6,6 +6,7 @@ require "dependabot/dependency"
 require "dependabot/file_parsers"
 require "dependabot/file_parsers/base"
 require "dependabot/errors"
+require "dependabot/github_actions/version"
 
 # For docs, see
 # https://help.github.com/en/articles/configuring-a-workflow#referencing-actions-in-your-workflow

data/lib/dependabot/github_actions/file_updater.rb

@@ -64,10 +64,12 @@ module Dependabot
             old_declaration.
             gsub(/@.*+/, "@#{new_req.fetch(:source).fetch(:ref)}")
 
+          # Replace the old declaration that's preceded by a non-word character
+          # and followed by a whitespace character (comments) or EOL
           updated_content =
             updated_content.
             gsub(
-              /(?<=\W)#{Regexp.escape(old_declaration)}(?=\W)/,
+              /(?<=\W)#{Regexp.escape(old_declaration)}(?=\s|$)/,
               new_declaration
             )
         end

data/lib/dependabot/github_actions/requirement.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "dependabot/utils"
+require "dependabot/github_actions/version"
 
 module Dependabot
   module GithubActions

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.118.0
+  version: 0.118.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-05-29 00:00:00.000000000 Z
+date: 2020-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.0
+        version: 0.118.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.0
+        version: 0.118.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement