dependabot-github_actions 0.118.15 → 0.119.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9eb9b06d2adce336191ec4a43926d8aa8440a6c82794ca692f76d43d74e16daf
-  data.tar.gz: 2dba679efd5b27e31ba689a3f651e68f6985db50214a3979b1d5d7794dcefcd3
+  metadata.gz: b1160866c0d2c5618fbac5b14efba319d73f3601233db3f6dd8411ba8b9af5e6
+  data.tar.gz: cdd0e767c72e9624244bdf9252aa7e9db36e6b789bc0b816632f8644a22cbfd3
 SHA512:
-  metadata.gz: 295e5111373046f0b5a1e33e194b34f4bbdeaab8d267f999e881341f01224f4d94660de32cf1b0a7aab5b29c7dbdce883c851b5368bebb9bfc9817ce8dde1f1e
-  data.tar.gz: cac48858b3f471181d6de4192a36e23cb812f5286b8bb2aefb86a9c0848bfda6a66ef85ac9ede757b8ee11e25f04fd354a5c76d58fcd61a009e26732f9846385
+  metadata.gz: e1f4f4c5271714b02fefa70409ccc6f7af244617ce7d5f6c5a4ebcef98a4d6f0e9175ca1adf4d30cfde09abb50bb6b257447f5791cdca0a6e371e1866ecf63e7
+  data.tar.gz: 6600a63d1087eae793bb2d158577ce6a499005ae5becac6812995972091b18a5b88218c82ce6d7da9c98b866b33716854024a921c3a921c4f78bf910895f7be8

data/lib/dependabot/github_actions/update_checker.rb

@@ -90,11 +90,12 @@ module Dependabot
           return dependency_source_details.merge(ref: new_tag.fetch(:tag))
         end
 
-        # Update the git tag if updating a pinned commit
+        # Update the git commit if updating a pinned commit
         if git_commit_checker.pinned_ref_looks_like_commit_sha? &&
            (latest_tag = git_commit_checker.local_tag_for_latest_version) &&
-           git_commit_checker.branch_or_ref_in_release?(latest_tag[:version])
-          return dependency_source_details.merge(ref: latest_tag.fetch(:tag))
+           git_commit_checker.branch_or_ref_in_release?(latest_tag[:version]) &&
+           (latest_commit = latest_tag.fetch(:commit_sha)) != current_commit
+          return dependency_source_details.merge(ref: latest_commit)
         end
 
         # Otherwise return the original source

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.118.15
+  version: 0.119.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-20 00:00:00.000000000 Z
+date: 2020-09-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.15
+        version: 0.119.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.15
+        version: 0.119.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement