dependabot-github_actions 0.129.1 → 0.130.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8a9d030dd5c44ae57d4b89c72f7a947e3ea380ccb1d9242792fd778869a8104f
-  data.tar.gz: 269efb4a56ca6bb92f303508d01c754efb659c10d7f17865909f2846477e5b65
+  metadata.gz: fe2071288a7cea149a3d918f6e68b09c8787c6be5ae97e2f2368fca043ffe921
+  data.tar.gz: 5c7d79c41fc4c95c1a73680285b64f9177ad167b716d7ff5fe5d9010b889724e
 SHA512:
-  metadata.gz: 96ba0d33fd7d3773e355b61cf7a268bc350f21c06ac3708f22bb0ec2bfd8c763f5546179783a95f9679412e0a2cd8fec3cb6afcfd27d4153572a62478e2184e7
-  data.tar.gz: 3f47a4d76b108e459c34575b7493f740cbed6cb119a482b7f49755b0b51debf1c776db26736e5556eaf66ae9b51278bd14bd0b220eafa78ee13f1ad5076f883b
+  metadata.gz: 468d2819be139f96959fd1fa1b477a6dbe0cf067bdd4e7d0697000d363870164dbacd95d5282259cea98eddd947413f27ea6ee77ec24eee4a10c079597d414fb
+  data.tar.gz: e9fe72513fdd2157aac8a17052f8c31689226c726d75bf1b7c60f500261a992338fd43c48636ccb556b3f4516020e0b00cb80e9b847d147e9ce876e687c813fe

data/lib/dependabot/github_actions/update_checker.rb

@@ -23,10 +23,21 @@ module Dependabot
         dependency.version
       end
 
-      def updated_requirements
-        return dependency.requirements if updated_source == dependency_source_details
+      def updated_requirements # rubocop:disable Metrics/PerceivedComplexity
+        previous = dependency_source_details
+        updated = updated_source
+        return dependency.requirements if updated == previous
+
+        # Maintain a short git hash only if it matches the latest
+        if previous[:type] == "git" &&
+           previous[:url] == updated[:url] &&
+           updated[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           previous[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           updated[:ref]&.start_with?(previous[:ref])
+          return dependency.requirements
+        end
 
-        dependency.requirements.map { |req| req.merge(source: updated_source) }
+        dependency.requirements.map { |req| req.merge(source: updated) }
       end
 
       private

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.129.1
+  version: 0.130.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-21 00:00:00.000000000 Z
+date: 2021-01-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.1
+        version: 0.130.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.1
+        version: 0.130.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,28 +100,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.8.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.6.0
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.20.0
+        version: 0.21.0
 - !ruby/object:Gem::Dependency
   name: simplecov-console
   requirement: !ruby/object:Gem::Requirement