dependabot-github_actions 0.119.0.beta1 → 0.119.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c2be46452da46097a8810352cd46b15952739f0038f3ff82a89d3f9c5e4d950f
-  data.tar.gz: a9be0d14f6cafc5588cc09c7bc5b6a8090632451b6eb4e9ca483063f7e9dad79
+  metadata.gz: 63e1fe2ac289563c60c5a3851185c1dc0c6fd2d3c5c01253ee8b8150524582f2
+  data.tar.gz: 256f11cd1ede85cb019f7fab2aca68e840d72e1643a5264d7b1f4eac2f388af5
 SHA512:
-  metadata.gz: d28275007089e13f8b48f0fa24d9bed9bf448fb8cf328960f26ee2ff7002161873ca93c77ee99e08545ccf681ea0c0a585a7eed545dbbb12e77a27b2dcfffea7
-  data.tar.gz: 4c4610fa7d880bc5206f35b4cc2a39b31e1ca605088fa9e8b66a081d8c56213e70662dc042026dfca90095a1340c1d2e001cac0a164474dd4c7ba06aab3e59f5
+  metadata.gz: 8fd297b01bd96bd3a6f98f960c879fd6e8d979138f71f6d10ad3c91a1944da2b380dd293badab12de7b9d1f9c68240ba7e185f29bba0015a8808eee3e963f848
+  data.tar.gz: 469fe90d44adb8fae4d3f87ab7638f352ba4600e349e7965ee4a7b3593d63766e48c23e5fac812729bc11a7a7858de0ea4961927426e43ddd7d6d5b5b23ede66

data/lib/dependabot/github_actions/update_checker.rb

@@ -78,7 +78,6 @@ module Dependabot
         dependency.version
       end
 
-      # rubocop:disable Metrics/PerceivedComplexity
       def updated_source
         # TODO: Support Docker sources
         return dependency_source_details unless git_dependency?
@@ -90,19 +89,18 @@ module Dependabot
           return dependency_source_details.merge(ref: new_tag.fetch(:tag))
         end
 
-        # Update the git tag if updating a pinned commit
+        # Update the git commit if updating a pinned commit
         if git_commit_checker.pinned_ref_looks_like_commit_sha? &&
            (latest_tag = git_commit_checker.local_tag_for_latest_version) &&
-           git_commit_checker.branch_or_ref_in_release?(latest_tag[:version])
-          return dependency_source_details.merge(ref: latest_tag.fetch(:tag))
+           git_commit_checker.branch_or_ref_in_release?(latest_tag[:version]) &&
+           (latest_commit = latest_tag.fetch(:commit_sha)) != current_commit
+          return dependency_source_details.merge(ref: latest_commit)
         end
 
         # Otherwise return the original source
         dependency_source_details
       end
 
-      # rubocop:enable Metrics/PerceivedComplexity
-
       def dependency_source_details
         sources =
           dependency.requirements.map { |r| r.fetch(:source) }.uniq.compact

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.119.0.beta1
+  version: 0.119.4
 platform: ruby
 authors:
 - Dependabot
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-20 00:00:00.000000000 Z
+date: 2020-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.0.beta1
+        version: 0.119.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.0.beta1
+        version: 0.119.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 0.90.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.88.0
+        version: 0.90.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
@@ -155,7 +155,7 @@ homepage: https://github.com/dependabot/dependabot-core
 licenses:
 - Nonstandard
 metadata: {}
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -170,8 +170,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.1.4
-signing_key:
+rubygems_version: 3.1.2
+signing_key: 
 specification_version: 4
 summary: GitHub Actions support for dependabot-common
 test_files: []