dependabot-github_actions 0.179.0 → 0.180.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/github_actions/file_fetcher.rb +12 -5
  3. metadata +10 -10
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bd3c28b91949d3e25267de6039c83a2a4004e1acb5749106a039d4b8e62fec67
4
- data.tar.gz: a5d59dde44113dbf2c748ec73f36662716fea5edee6d4bc2a814a12a3e6cdb3e
3
+ metadata.gz: 47df0e6ab6b350f25020dffc64e7dbcdfdb4472f6cdfa8acafe6fca3bcadc3f4
4
+ data.tar.gz: 8ed75892e2b85d882b7643ebb7a822548b4a6473da31eb44059fa0754faa83d6
5
5
  SHA512:
6
- metadata.gz: 56db9489991e402ab87b1eceb09b6d95c415201d089a48dd363e9ab4b535f5a6f794a9a35a3da3b9c8fc16fd7de6baada3513d2381add8770d96e356b450fb71
7
- data.tar.gz: 38eac45c2a3da33a793f0507d392743bac9787f29f2dd96daba797ecc91cdd593464bb8b7364a34be62a85af3418c8fb170faa030d4cc6b0d1c9cd66038299fe
6
+ metadata.gz: 29c94b9ce62b6c1b658379cff715358bec133b766a8af51899c4a77b8a0dffaeab8a158b3ecf33aae7e0d544f2248ac6902fed53dbb3524aed25b8f8cbfcb397
7
+ data.tar.gz: 510200ec1cba74366b9ee9a7fa7e8c1d9a61e0d6fb9a7ed41161c5142a2524aff63ccee378afec1345f3413ee824ebe566fc5bc64f6a3595a4f040c97feacf1f
data/lib/dependabot/github_actions/file_fetcher.rb CHANGED
@@ -13,7 +13,7 @@ module Dependabot
13
13
  end
14
14
 
15
15
  def self.required_files_message
16
- "Repo must contain a .github/workflows directory with YAML files or an action.yml in the root"
16
+ "Repo must contain a .github/workflows directory with YAML files or an action.yml file"
17
17
  end
18
18
 
19
19
  private
@@ -28,7 +28,7 @@ module Dependabot
28
28
  if incorrectly_encoded_workflow_files.none?
29
29
  raise(
30
30
  Dependabot::DependencyFileNotFound,
31
- File.join(directory, ".github/workflows/<anything>.yml")
31
+ File.join(directory, "action.yml") + " or /.github/workflows/<anything>.yml"
32
32
  )
33
33
  else
34
34
  raise(
@@ -39,11 +39,18 @@ module Dependabot
39
39
  end
40
40
 
41
41
  def workflow_files
42
- @workflow_files ||=
42
+ return @workflow_files if defined? @workflow_files
43
+
44
+ @workflow_files = [fetch_file_if_present("action.yml"), fetch_file_if_present("action.yaml")].compact
45
+
46
+ # In the special case where the root directory is defined we also scan
47
+ # the .github/workflows/ folder.
48
+ return @workflow_files unless directory == "/"
49
+
50
+ @workflow_files +=
43
51
  repo_contents(dir: ".github/workflows", raise_errors: false).
44
52
  select { |f| f.type == "file" && f.name.match?(/\.ya?ml$/) }.
45
- map { |f| fetch_file_from_host(".github/workflows/#{f.name}") } \
46
- + [fetch_file_if_present("action.yml"), fetch_file_if_present("action.yaml")].compact
53
+ map { |f| fetch_file_from_host(".github/workflows/#{f.name}") }
47
54
  end
48
55
 
49
56
  def referenced_local_workflow_files
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.179.0
4
+ version: 0.180.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-03-16 00:00:00.000000000 Z
11
+ date: 2022-03-28 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.179.0
19
+ version: 0.180.2
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.179.0
26
+ version: 0.180.2
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
100
100
  requirements:
101
101
  - - "~>"
102
102
  - !ruby/object:Gem::Version
103
- version: 1.23.0
103
+ version: 1.26.0
104
104
  type: :development
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
108
  - - "~>"
109
109
  - !ruby/object:Gem::Version
110
- version: 1.23.0
110
+ version: 1.26.0
111
111
  - !ruby/object:Gem::Dependency
112
112
  name: simplecov
113
113
  requirement: !ruby/object:Gem::Requirement
@@ -156,14 +156,14 @@ dependencies:
156
156
  requirements:
157
157
  - - '='
158
158
  - !ruby/object:Gem::Version
159
- version: 6.0.0
159
+ version: 6.1.0
160
160
  type: :development
161
161
  prerelease: false
162
162
  version_requirements: !ruby/object:Gem::Requirement
163
163
  requirements:
164
164
  - - '='
165
165
  - !ruby/object:Gem::Version
166
- version: 6.0.0
166
+ version: 6.1.0
167
167
  - !ruby/object:Gem::Dependency
168
168
  name: webmock
169
169
  requirement: !ruby/object:Gem::Requirement
@@ -205,12 +205,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
205
205
  requirements:
206
206
  - - ">="
207
207
  - !ruby/object:Gem::Version
208
- version: 2.5.0
208
+ version: 2.7.0
209
209
  required_rubygems_version: !ruby/object:Gem::Requirement
210
210
  requirements:
211
211
  - - ">="
212
212
  - !ruby/object:Gem::Version
213
- version: 2.5.0
213
+ version: 2.7.0
214
214
  requirements: []
215
215
  rubygems_version: 3.2.32
216
216
  signing_key: