dependabot-github_actions 0.207.0 → 0.210.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/github_actions/update_checker.rb +9 -12
  3. metadata +20 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 38dd71c8134f05bdb435e0bd6901ae01ae0fb77dc3bc5e759e1d3b9be30bc295
4
- data.tar.gz: a839a8b8237fa9bdea1cffd322733689d4a07d05eeea9cf5f6883fc78aa1d613
3
+ metadata.gz: aee237aefd8437d8dbaf2400674d002be698672a5a9bda3cb6d891ff40fb9be0
4
+ data.tar.gz: 59871637736586bf45e466a55b8a99b6c083c223d6834854802c562e334971e1
5
5
  SHA512:
6
- metadata.gz: f67763c90799fee346cbffaba0372429f1a8a09fcd8c276260b41d9a2219795d060161fad97278b34d6670ff86f735b58524fdbcac6ba48ff910c1857707f998
7
- data.tar.gz: d7407cd8a93309090328a6f274b3e4fe7bdd5464dd30f4616bcbf7f27eea8969584ee90f9bc096f81bfd6dd63861fdba7cd882c03c1e82c4e464b35cb5666f1b
6
+ metadata.gz: 310a4832e3b7e023d26d303efa8b8d43ccd994167db0c815b267fb473438e0e89fdf05236b1ecd6cf75644d65a0514a62ec03494e15b666d3ff76ba7f3303fbb
7
+ data.tar.gz: 38a721a02023a60cce967d450fb90e81268a51eca7bb292b22d509020aa8aa7b7471f33344efc2914c29201d3d60e6761e495062a8bbf33af9a11e6213a27ddf
data/lib/dependabot/github_actions/update_checker.rb CHANGED
@@ -70,13 +70,10 @@ module Dependabot
70
70
  return latest_version
71
71
  end
72
72
 
73
- # If the dependency is pinned to a commit SHA and the latest
74
- # version-like tag includes that commit then we want to update to that
75
- # version-like tag. We return a version (not a commit SHA) so that we
76
- # get nice behaviour in PullRequestCreator::MessageBuilder
77
- if git_commit_checker.pinned_ref_looks_like_commit_sha? &&
78
- (latest_tag = git_commit_checker.local_tag_for_latest_version) &&
79
- git_commit_checker.branch_or_ref_in_release?(latest_tag[:version])
73
+ # If the dependency is pinned to a commit SHA, we return a *version* so
74
+ # that we get nice behaviour in PullRequestCreator::MessageBuilder
75
+ if git_commit_checker.pinned_ref_looks_like_commit_sha?
76
+ latest_tag = git_commit_checker.local_tag_for_latest_version
80
77
  return latest_tag.fetch(:version)
81
78
  end
82
79
 
@@ -122,12 +119,12 @@ module Dependabot
122
119
  return dependency_source_details.merge(ref: new_tag.fetch(:tag))
123
120
  end
124
121
 
125
- # Update the git commit if updating a pinned commit
122
+ latest_tag = git_commit_checker.local_tag_for_latest_version
123
+
124
+ # Update the pinned git commit if one is available
126
125
  if git_commit_checker.pinned_ref_looks_like_commit_sha? &&
127
- (latest_tag = git_commit_checker.local_tag_for_latest_version) &&
128
- git_commit_checker.branch_or_ref_in_release?(latest_tag[:version]) &&
129
- (latest_commit = latest_tag.fetch(:commit_sha)) != current_commit
130
- return dependency_source_details.merge(ref: latest_commit)
126
+ latest_tag.fetch(:commit_sha) != current_commit
127
+ return dependency_source_details.merge(ref: latest_tag.fetch(:commit_sha))
131
128
  end
132
129
 
133
130
  # Otherwise return the original source
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.207.0
4
+ version: 0.210.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2022-08-11 00:00:00.000000000 Z
11
+ date: 2022-08-23 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.207.0
19
+ version: 0.210.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.207.0
26
+ version: 0.210.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debase
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -80,6 +80,20 @@ dependencies:
80
80
  - - "~>"
81
81
  - !ruby/object:Gem::Version
82
82
  version: '2.0'
83
+ - !ruby/object:Gem::Dependency
84
+ name: parallel_tests
85
+ requirement: !ruby/object:Gem::Requirement
86
+ requirements:
87
+ - - "~>"
88
+ - !ruby/object:Gem::Version
89
+ version: 3.11.1
90
+ type: :development
91
+ prerelease: false
92
+ version_requirements: !ruby/object:Gem::Requirement
93
+ requirements:
94
+ - - "~>"
95
+ - !ruby/object:Gem::Version
96
+ version: 3.11.1
83
97
  - !ruby/object:Gem::Dependency
84
98
  name: rake
85
99
  requirement: !ruby/object:Gem::Requirement
@@ -128,14 +142,14 @@ dependencies:
128
142
  requirements:
129
143
  - - "~>"
130
144
  - !ruby/object:Gem::Version
131
- version: 1.33.0
145
+ version: 1.35.1
132
146
  type: :development
133
147
  prerelease: false
134
148
  version_requirements: !ruby/object:Gem::Requirement
135
149
  requirements:
136
150
  - - "~>"
137
151
  - !ruby/object:Gem::Version
138
- version: 1.33.0
152
+ version: 1.35.1
139
153
  - !ruby/object:Gem::Dependency
140
154
  name: ruby-debug-ide
141
155
  requirement: !ruby/object:Gem::Requirement