dependabot-github_actions 0.128.1 → 0.129.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 96e4401b3563eaa8b9d25de5552b0d2134d6334bc0a705ed36876a2c0684a80d
-  data.tar.gz: fdfb35887b0c804dc801333d34dccf332a2ebee6a6973e50716d18c50a33212a
+  metadata.gz: 5262b17bab20eeb7b62f2f9c4af07075931a2e6bfd4850079531149fe7744251
+  data.tar.gz: bc6f01d734870b766b4e6d3b924f2728422ac90408baf6276d0808a3e72c6432
 SHA512:
-  metadata.gz: c5320a700a65411f40f0e09f09b9c6bd1a8b8f411f64853742f7f67e65354401d27be39b1f5d30984cfc711a5436d3464927a483fda6b40a332bd8a62211e893
-  data.tar.gz: c6b0bee5f39e26f19e68c495777b4a36aef5980e64eb2219a3fab14f5e721859ecbc41a0361c4e0905dbe95810407b181eac646299837a5415803a9b04f3151e
+  metadata.gz: 5f0e252a671c33258d6d06c419f9043627e76f3427c4db173ffb4aaf01a7a23113557ce0472cbac150e404175959a0435a19493327b390b5ee78d1ce4d960b90
+  data.tar.gz: 4272c09b83ee811f3279177c1d33f9bff5fd338da05e8ce07a53da884b6594ab21fd5469fb67307b1b0aad128ca39ecef4618492e9505557ff07b891db4835ea

data/lib/dependabot/github_actions/update_checker.rb

@@ -23,10 +23,21 @@ module Dependabot
         dependency.version
       end
 
-      def updated_requirements
-        return dependency.requirements if updated_source == dependency_source_details
+      def updated_requirements # rubocop:disable Metrics/PerceivedComplexity
+        previous = dependency_source_details
+        updated = updated_source
+        return dependency.requirements if updated == previous
+
+        # Maintain a short git hash only if it matches the latest
+        if previous[:type] == "git" &&
+           previous[:url] == updated[:url] &&
+           updated[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           previous[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           updated[:ref]&.start_with?(previous[:ref])
+          return dependency.requirements
+        end
 
-        dependency.requirements.map { |req| req.merge(source: updated_source) }
+        dependency.requirements.map { |req| req.merge(source: updated) }
       end
 
       private

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.128.1
+  version: 0.129.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-14 00:00:00.000000000 Z
+date: 2021-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.128.1
+        version: 0.129.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.128.1
+        version: 0.129.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.7.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.7.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
 - !ruby/object:Gem::Dependency
   name: simplecov-console
   requirement: !ruby/object:Gem::Requirement