dependabot-github_actions 0.129.2 → 0.130.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3d276f732c7242e535d82502c398daa462b028c54dd9f4b536e68359e786a7a4
-  data.tar.gz: 420747b176ef47441199579926cd5cd505920fc457441b72212093977fb4bb0c
+  metadata.gz: 0315e0c4f3514e1f13c8ac0610e744ce8eba5b5455a525c2be57c220969164bc
+  data.tar.gz: e38539924eea81e587c56c643e38e3fc8801734ff01919bf8f8b3d235ad5e4ed
 SHA512:
-  metadata.gz: 0051c1d5651e65977039b748572e092eac6cf901c64a8282de07a2b6d5869f786aecc67addca106c45e699b4c470a9af6ef1567f2069bcb27560329b2605d506
-  data.tar.gz: 92825188447dfd3d94e0c0b06eb80721339f09d8f6eb51d42d523ae1b8348e448f6ef99bbd60b78868316998d25880eb068b3d5033a8182ab4e5c1508ae38e30
+  metadata.gz: aaaaaa3b68d9a6ba6dd8c4498bb4c98cb7537824f47da1e75ad81077671c8e139c7f0be7a5802ce3967e17b75dd39d97e0921fa2dd90b65199cfd7461956dab3
+  data.tar.gz: 37c80eae0426b7729f2c3c44e91e4109a23028dee26ee39b66aefd866d12a02fc07f13df2cb7158755142e83a743420a31684750061171e1e9a18641685b8dd8

data/lib/dependabot/github_actions/update_checker.rb

@@ -23,10 +23,21 @@ module Dependabot
         dependency.version
       end
 
-      def updated_requirements
-        return dependency.requirements if updated_source == dependency_source_details
+      def updated_requirements # rubocop:disable Metrics/PerceivedComplexity
+        previous = dependency_source_details
+        updated = updated_source
+        return dependency.requirements if updated == previous
+
+        # Maintain a short git hash only if it matches the latest
+        if previous[:type] == "git" &&
+           previous[:url] == updated[:url] &&
+           updated[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           previous[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           updated[:ref]&.start_with?(previous[:ref])
+          return dependency.requirements
+        end
 
-        dependency.requirements.map { |req| req.merge(source: updated_source) }
+        dependency.requirements.map { |req| req.merge(source: updated) }
       end
 
       private

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.129.2
+  version: 0.130.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-04 00:00:00.000000000 Z
+date: 2021-01-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.2
+        version: 0.130.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.2
+        version: 0.130.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.0
+        version: 1.8.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.7.0
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -198,7 +198,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.1.4
+rubygems_version: 3.2.3
 signing_key: 
 specification_version: 4
 summary: GitHub Actions support for dependabot-common