dependabot-github_actions 0.128.2 → 0.129.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 177309e9239b3e4e056717044588d10ec910c6324da3ed39cb99ecb86c539887
-  data.tar.gz: 5470c81e3b5f9267d5882dcad2cfeffe95b98fd80abba342c5c811d157a6298f
+  metadata.gz: 4086e605685c760b9b3a5f74777497387bbec2730911d00a16bfd25e5dc96bd8
+  data.tar.gz: 6ac936dc526f950eff20a23002373865dc6423ea81996e5a6e265b93309a5fd9
 SHA512:
-  metadata.gz: 77ad2a79654d402e4ca2b1a2f311f9245b92429fede708b11e37cf4b5778182971e2871c94023166720e9bf67c2d7f1b6e9945a926e2eaf6ccc05c05d566ff37
-  data.tar.gz: 80fe5465c2e4d571cc0fc52384366583655b964ac5e7c71ce73433c14ecb7a0f5776043a74787eef823bc85afe3a0c72c3131f77fdfee852493ea4712b7aa517
+  metadata.gz: fd2d30628514e4e1d64a05e4d2eaab21288c331fa5baeb816c0ba2339438f96d4a1038d60789ccaed420ed1348c33ed688d779db6ba3952ae3660adc89e7be7c
+  data.tar.gz: 0ed4fc1e340aee0911335946e431ee5012b1e9cb82b6bb07c16e3958988355ab3c1ab23a8b992bf885095e890736757e3237293ab6b57aa9cbbee37f9010134a

data/lib/dependabot/github_actions/update_checker.rb

@@ -23,10 +23,21 @@ module Dependabot
         dependency.version
       end
 
-      def updated_requirements
-        return dependency.requirements if updated_source == dependency_source_details
+      def updated_requirements # rubocop:disable Metrics/PerceivedComplexity
+        previous = dependency_source_details
+        updated = updated_source
+        return dependency.requirements if updated == previous
+
+        # Maintain a short git hash only if it matches the latest
+        if previous[:type] == "git" &&
+           previous[:url] == updated[:url] &&
+           updated[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           previous[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           updated[:ref]&.start_with?(previous[:ref])
+          return dependency.requirements
+        end
 
-        dependency.requirements.map { |req| req.merge(source: updated_source) }
+        dependency.requirements.map { |req| req.merge(source: updated) }
       end
 
       private

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.128.2
+  version: 0.129.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-14 00:00:00.000000000 Z
+date: 2021-01-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.128.2
+        version: 0.129.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.128.2
+        version: 0.129.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.7.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.7.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
 - !ruby/object:Gem::Dependency
   name: simplecov-console
   requirement: !ruby/object:Gem::Requirement