dependabot-github_actions 0.179.0 → 0.180.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bd3c28b91949d3e25267de6039c83a2a4004e1acb5749106a039d4b8e62fec67
-  data.tar.gz: a5d59dde44113dbf2c748ec73f36662716fea5edee6d4bc2a814a12a3e6cdb3e
+  metadata.gz: 47df0e6ab6b350f25020dffc64e7dbcdfdb4472f6cdfa8acafe6fca3bcadc3f4
+  data.tar.gz: 8ed75892e2b85d882b7643ebb7a822548b4a6473da31eb44059fa0754faa83d6
 SHA512:
-  metadata.gz: 56db9489991e402ab87b1eceb09b6d95c415201d089a48dd363e9ab4b535f5a6f794a9a35a3da3b9c8fc16fd7de6baada3513d2381add8770d96e356b450fb71
-  data.tar.gz: 38eac45c2a3da33a793f0507d392743bac9787f29f2dd96daba797ecc91cdd593464bb8b7364a34be62a85af3418c8fb170faa030d4cc6b0d1c9cd66038299fe
+  metadata.gz: 29c94b9ce62b6c1b658379cff715358bec133b766a8af51899c4a77b8a0dffaeab8a158b3ecf33aae7e0d544f2248ac6902fed53dbb3524aed25b8f8cbfcb397
+  data.tar.gz: 510200ec1cba74366b9ee9a7fa7e8c1d9a61e0d6fb9a7ed41161c5142a2524aff63ccee378afec1345f3413ee824ebe566fc5bc64f6a3595a4f040c97feacf1f

data/lib/dependabot/github_actions/file_fetcher.rb

@@ -13,7 +13,7 @@ module Dependabot
       end
 
       def self.required_files_message
-        "Repo must contain a .github/workflows directory with YAML files or an action.yml in the root"
+        "Repo must contain a .github/workflows directory with YAML files or an action.yml file"
       end
 
       private
@@ -28,7 +28,7 @@ module Dependabot
         if incorrectly_encoded_workflow_files.none?
           raise(
             Dependabot::DependencyFileNotFound,
-            File.join(directory, ".github/workflows/<anything>.yml")
+            File.join(directory, "action.yml") + " or /.github/workflows/<anything>.yml"
           )
         else
           raise(
@@ -39,11 +39,18 @@ module Dependabot
       end
 
       def workflow_files
-        @workflow_files ||=
+        return @workflow_files if defined? @workflow_files
+
+        @workflow_files = [fetch_file_if_present("action.yml"), fetch_file_if_present("action.yaml")].compact
+
+        # In the special case where the root directory is defined we also scan
+        # the .github/workflows/ folder.
+        return @workflow_files unless directory == "/"
+
+        @workflow_files +=
           repo_contents(dir: ".github/workflows", raise_errors: false).
           select { |f| f.type == "file" && f.name.match?(/\.ya?ml$/) }.
-          map { |f| fetch_file_from_host(".github/workflows/#{f.name}") } \
-          + [fetch_file_if_present("action.yml"), fetch_file_if_present("action.yaml")].compact
+          map { |f| fetch_file_from_host(".github/workflows/#{f.name}") }
       end
 
       def referenced_local_workflow_files

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.179.0
+  version: 0.180.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-03-16 00:00:00.000000000 Z
+date: 2022-03-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.179.0
+        version: 0.180.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.179.0
+        version: 0.180.2
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.23.0
+        version: 1.26.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.23.0
+        version: 1.26.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -156,14 +156,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.0
+        version: 6.1.0
 - !ruby/object:Gem::Dependency
   name: webmock
   requirement: !ruby/object:Gem::Requirement
@@ -205,12 +205,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.5.0
+      version: 2.7.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.5.0
+      version: 2.7.0
 requirements: []
 rubygems_version: 3.2.32
 signing_key: