dependabot-github_actions 0.118.16 → 0.119.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e27ddc4c71d17cad7600cc57c49110d2227d2317609d1290a934311f8f1df7ce
-  data.tar.gz: 37c9948a1852adda9091f2adf61fcf60fed848df85297a44884dd8090c7ddc03
+  metadata.gz: d0ee846ed300ae5a5424b07b00fb7bce7e8294b7af9c1c48034e3e63261f6a66
+  data.tar.gz: 1d874ac3f7026bff97dd5ef889e747fd79e7f0767db98396681ef34eb1ad8bd3
 SHA512:
-  metadata.gz: 904e9cf3099e89657d65f52e93ad0b87964c538b7fa1fe8da0b8849bff46e6e33823c51254ba017303b0b6f22b2e0b9546d3ce7e855dcfb02fb85437a19c285b
-  data.tar.gz: db963570531772fcf6294e156be3d66b6934328f9d4ddd3351ee89cd57e7cf609a981279ac00dabb60a015908cf93c190fa2e1ab2817c004088ff63460b9b9f4
+  metadata.gz: 995e4bdb9c7b29539c8c28839f7cdbc7c7ccf9e7a7409be359ea51e7de02a8e2c6f18e51c07b9affcd3e1ec39e86787190d3c1862947899d2dd3914b5e23584a
+  data.tar.gz: 0cb0b0bd46f8640f857abfc72be5d8eee0499af989953ded4607f1fb927e4eaecc9739a70195887102e1c8de13913e2264130bb205e6d33642fd4c0c034f89a7

data/lib/dependabot/github_actions/update_checker.rb

@@ -90,11 +90,12 @@ module Dependabot
           return dependency_source_details.merge(ref: new_tag.fetch(:tag))
         end
 
-        # Update the git tag if updating a pinned commit
+        # Update the git commit if updating a pinned commit
         if git_commit_checker.pinned_ref_looks_like_commit_sha? &&
            (latest_tag = git_commit_checker.local_tag_for_latest_version) &&
-           git_commit_checker.branch_or_ref_in_release?(latest_tag[:version])
-          return dependency_source_details.merge(ref: latest_tag.fetch(:tag))
+           git_commit_checker.branch_or_ref_in_release?(latest_tag[:version]) &&
+           (latest_commit = latest_tag.fetch(:commit_sha)) != current_commit
+          return dependency_source_details.merge(ref: latest_commit)
         end
 
         # Otherwise return the original source

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.118.16
+  version: 0.119.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-20 00:00:00.000000000 Z
+date: 2020-09-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.16
+        version: 0.119.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.16
+        version: 0.119.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement