dependabot-github_actions 0.225.0 → 0.227.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: c0b821338b78c16513769c792aa618353ba0a5f739be2b6441b1313d0ac9c5ea
4
- data.tar.gz: 48da09867f0fbd1332c8575e7162a9612584191fac7aa96ece4493fac0e89284
3
+ metadata.gz: b26817784e855f6753a501040f4517bd8f2fa4fce401e1bf3acdbf3fe6e0760e
4
+ data.tar.gz: 8550dd286c53dc288f57db482bbe697d5745c51a2148c3546c9adf0ec354cc8f
5
5
  SHA512:
6
- metadata.gz: 983e431b61857f67777c495648392bd5c2fdbe24836efb802bee27cb00f77804019d55b2f0014f6ee2874600ed556eef20c703c128d3a72a944165823490cf07
7
- data.tar.gz: 5d01f1ea3049e4f37857f2bf8c8a28b684f466dfa50b87e844921ccb75e96495b52690c4a80db183f396f7410d8ad070371badb863fcdf106203e3438a9d6b9f
6
+ metadata.gz: 865ecf7d9713cde99e94b6f378d19fa21937b867aa8d07367c5e95b95fb5cb63c2117a5aadec295b49ef1e7c2401f1ed2b87eff1fdf0628c9887a74cab148ff1
7
+ data.tar.gz: 2937d0b5f5a656a325232768a06ec799bfc95ad4910b57a65489e6269e3262c6f7ab7a24e217e6a90da0516b124afc2bdb190f005d949e41259bb807116195c7
@@ -48,7 +48,11 @@ module Dependabot
48
48
  next unless string.match?(GITHUB_REPO_REFERENCE)
49
49
 
50
50
  dep = build_github_dependency(file, string)
51
- git_checker = Dependabot::GitCommitChecker.new(dependency: dep, credentials: credentials)
51
+ git_checker = Dependabot::GitCommitChecker.new(
52
+ dependency: dep,
53
+ credentials: credentials,
54
+ consider_version_branches_pinned: true
55
+ )
52
56
  next unless git_checker.pinned?
53
57
 
54
58
  # If dep does not have an assigned (semver) version, look for a commit that references a semver tag
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.225.0
4
+ version: 0.227.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-07-31 00:00:00.000000000 Z
11
+ date: 2023-08-18 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.225.0
19
+ version: 0.227.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.225.0
26
+ version: 0.227.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
128
128
  requirements:
129
129
  - - "~>"
130
130
  - !ruby/object:Gem::Version
131
- version: 1.17.1
131
+ version: 1.19.0
132
132
  type: :development
133
133
  prerelease: false
134
134
  version_requirements: !ruby/object:Gem::Requirement
135
135
  requirements:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
- version: 1.17.1
138
+ version: 1.19.0
139
139
  - !ruby/object:Gem::Dependency
140
140
  name: stackprof
141
141
  requirement: !ruby/object:Gem::Requirement
@@ -199,7 +199,7 @@ licenses:
199
199
  - Nonstandard
200
200
  metadata:
201
201
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
202
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.225.0
202
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.227.0
203
203
  post_install_message:
204
204
  rdoc_options: []
205
205
  require_paths: