dependabot-github_actions 0.129.0 → 0.129.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 88a8c6294253f3c146e393565e4c8a905b971c785c075db11b83ae437e1e152a
-  data.tar.gz: 9008bee39bcc64a1128c30225a4ad6d08e315d5a9b2b9a8b14732559cd0f95a6
+  metadata.gz: c943a0dfe764ea5f9e50ab443bed0b8ec86953f6d06fb38f143f3f90261de692
+  data.tar.gz: 3a638da91dd55c9a82b49e65187fd0f5ef62e5369e1190f9ee23e1ccf377616c
 SHA512:
-  metadata.gz: 536709200ed9325088f0e43199bfbdffbcfac74773dded60fd2c50260acd11feb7a4df5284f2cf1dc9e297ddaa5bb9752a594eb056fe7ec1e0851be4ff5703d7
-  data.tar.gz: a89e8858c1e9e4c9963fce7b148cef6d1d93e26a2aab4fc48104b7450a0df18bc4bb96ffcb38b6f291d78259c2a2f706a7fdbeccbfc0403f3bab8ed78786dd01
+  metadata.gz: 466d5be98b72b36afd393ff35f63f07f699a25b4f04898bb1fbe1954b7c434214beccca9c03f0d13462b3546c2d3d33fd9655d1bce5d59c9853531e4cc0488ff
+  data.tar.gz: c686675077aa923c13e533808f04cd589186e4910a70e9c9e40ea81a9810be596cfa9cc9956b338b8fd6d47cfd08fc3b075414a901e311fdb42fa05fd5d8b9fc

data/lib/dependabot/github_actions/update_checker.rb

@@ -23,10 +23,21 @@ module Dependabot
         dependency.version
       end
 
-      def updated_requirements
-        return dependency.requirements if updated_source == dependency_source_details
+      def updated_requirements # rubocop:disable Metrics/PerceivedComplexity
+        previous = dependency_source_details
+        updated = updated_source
+        return dependency.requirements if updated == previous
+
+        # Maintain a short git hash only if it matches the latest
+        if previous[:type] == "git" &&
+           previous[:url] == updated[:url] &&
+           updated[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           previous[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           updated[:ref]&.start_with?(previous[:ref])
+          return dependency.requirements
+        end
 
-        dependency.requirements.map { |req| req.merge(source: updated_source) }
+        dependency.requirements.map { |req| req.merge(source: updated) }
       end
 
       private

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.129.0
+  version: 0.129.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-15 00:00:00.000000000 Z
+date: 2021-01-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.0
+        version: 0.129.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.0
+        version: 0.129.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.7.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.7.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
 - !ruby/object:Gem::Dependency
   name: simplecov-console
   requirement: !ruby/object:Gem::Requirement