dependabot-github_actions 0.118.1 → 0.118.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: eeb27ca6c554639839b07bcf110384635a6e23851c90abfd0bbd4d616c93f658
-  data.tar.gz: 227afa7c558a0f3616d6245864ea87f27347e9ec3101c2ff3d6d2b501103e6bb
+  metadata.gz: 3ec82f8c6b589fb4d9db92167b96a43b33608de4a07653aafa4a23d3e5c8b8b2
+  data.tar.gz: da205be418f85937c7dd8d05f0167511db9d1a3ec1f31fb51cadbec7051f844e
 SHA512:
-  metadata.gz: f5d49b62265df556ccee1cd0ef1255caa7f71482af63c8283726efa8ef113784b93e6727894bc551a6db917dbc0e4507c64a307f1bc9c46c8d117be16a8d08b6
-  data.tar.gz: b79f439525489d1d10673abec22a749176c793e454e124e53c97ea2d823d64990767e4be3d63b20227b6ab9524c97f20b77b9eaa1674d30b2e0cdcc2358cf1ba
+  metadata.gz: 5ee0ff4e9678363044207e630a6866b1243746b23fb5ea0d5a0de0769531840b4efbd4369a360d6afda33b33f954435787bc879688d72335c6ceb0970ea7366a
+  data.tar.gz: 7bbe833d39bcd1e3709b449fe25e49f3ca42436d05d7b00e1cbbabdd2af07b0dd15622b1cb360231ee08ea73c2ac13be8ca9451347a802dd3bedebbb9b7a603a

data/lib/dependabot/github_actions/file_parser.rb

@@ -6,6 +6,7 @@ require "dependabot/dependency"
 require "dependabot/file_parsers"
 require "dependabot/file_parsers/base"
 require "dependabot/errors"
+require "dependabot/github_actions/version"
 
 # For docs, see
 # https://help.github.com/en/articles/configuring-a-workflow#referencing-actions-in-your-workflow

data/lib/dependabot/github_actions/file_updater.rb

@@ -64,10 +64,12 @@ module Dependabot
             old_declaration.
             gsub(/@.*+/, "@#{new_req.fetch(:source).fetch(:ref)}")
 
+          # Replace the old declaration that's preceded by a non-word character
+          # and followed by a whitespace character (comments) or EOL
           updated_content =
             updated_content.
             gsub(
-              /(?<=\W)#{Regexp.escape(old_declaration)}(?=\W)/,
+              /(?<=\W)#{Regexp.escape(old_declaration)}(?=\s|$)/,
               new_declaration
             )
         end

data/lib/dependabot/github_actions/requirement.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "dependabot/utils"
+require "dependabot/github_actions/version"
 
 module Dependabot
   module GithubActions

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.118.1
+  version: 0.118.6
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-04 00:00:00.000000000 Z
+date: 2020-06-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.1
+        version: 0.118.6
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.1
+        version: 0.118.6
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -114,28 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.83.0
+        version: 0.85.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: '5.0'
+        version: 6.0.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement