dependabot-github_actions 0.230.0 → 0.232.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/lib/dependabot/github_actions/file_fetcher.rb +6 -5
- data/lib/dependabot/github_actions/file_parser.rb +4 -2
- data/lib/dependabot/github_actions/file_updater.rb +9 -8
- data/lib/dependabot/github_actions/metadata_finder.rb +3 -2
- data/lib/dependabot/github_actions/requirement.rb +1 -0
- data/lib/dependabot/github_actions/update_checker.rb +5 -4
- data/lib/dependabot/github_actions/version.rb +3 -2
- data/lib/dependabot/github_actions.rb +5 -4
- metadata +19 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 0524731a606dc14446bebfe44e80046692fe9fd2d483f94eaeb59122c8bc576d
|
4
|
+
data.tar.gz: fd8726293069d378227023a47489ec16126824ae8ead8be198c2d1cd00871f36
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1a2898be502554fbdcbd4a3fc234a0de19d398388f8f3099092552ab037937717343a5df6cae9cf5a99c366dcad4b837132ab80f7e3cb2d83bb6dc9ae4800109
|
7
|
+
data.tar.gz: bb25ac90622ca1a53c85b4315b52bed3d9a52b477c4559271c137bb360b4f42db4a12403e595597c08b27f86df69b07fbac3b00249596eb8507fa7832e0a709e
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: true
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/file_fetchers"
|
@@ -60,9 +61,9 @@ module Dependabot
|
|
60
61
|
end
|
61
62
|
|
62
63
|
@workflow_files +=
|
63
|
-
repo_contents(dir: workflows_dir, raise_errors: false)
|
64
|
-
select { |f| f.type == "file" && f.name.match?(/\.ya?ml$/) }
|
65
|
-
map { |f| fetch_file_from_host("#{workflows_dir}/#{f.name}") }
|
64
|
+
repo_contents(dir: workflows_dir, raise_errors: false)
|
65
|
+
.select { |f| f.type == "file" && f.name.match?(/\.ya?ml$/) }
|
66
|
+
.map { |f| fetch_file_from_host("#{workflows_dir}/#{f.name}") }
|
66
67
|
end
|
67
68
|
|
68
69
|
def correctly_encoded_workflow_files
|
@@ -76,5 +77,5 @@ module Dependabot
|
|
76
77
|
end
|
77
78
|
end
|
78
79
|
|
79
|
-
Dependabot::FileFetchers
|
80
|
-
register("github_actions", Dependabot::GithubActions::FileFetcher)
|
80
|
+
Dependabot::FileFetchers
|
81
|
+
.register("github_actions", Dependabot::GithubActions::FileFetcher)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: false
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "yaml"
|
@@ -45,6 +46,7 @@ module Dependabot
|
|
45
46
|
|
46
47
|
uses_strings.each do |string|
|
47
48
|
# TODO: Support Docker references and path references
|
49
|
+
next if string.start_with?(".", "docker://")
|
48
50
|
next unless string.match?(GITHUB_REPO_REFERENCE)
|
49
51
|
|
50
52
|
dep = build_github_dependency(file, string)
|
@@ -152,5 +154,5 @@ module Dependabot
|
|
152
154
|
end
|
153
155
|
end
|
154
156
|
|
155
|
-
Dependabot::FileParsers
|
156
|
-
register("github_actions", Dependabot::GithubActions::FileParser)
|
157
|
+
Dependabot::FileParsers
|
158
|
+
.register("github_actions", Dependabot::GithubActions::FileParser)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: true
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/file_updaters"
|
@@ -46,8 +47,8 @@ module Dependabot
|
|
46
47
|
|
47
48
|
def updated_workflow_file_content(file)
|
48
49
|
updated_requirement_pairs =
|
49
|
-
dependency.requirements.zip(dependency.previous_requirements)
|
50
|
-
|
50
|
+
dependency.requirements.zip(dependency.previous_requirements)
|
51
|
+
.reject do |new_req, old_req|
|
51
52
|
next true if new_req[:file] != file.name
|
52
53
|
|
53
54
|
new_req[:source] == old_req[:source]
|
@@ -61,8 +62,8 @@ module Dependabot
|
|
61
62
|
|
62
63
|
old_declaration = old_req.fetch(:metadata).fetch(:declaration_string)
|
63
64
|
new_declaration =
|
64
|
-
old_declaration
|
65
|
-
gsub(/@.*+/, "@#{new_req.fetch(:source).fetch(:ref)}")
|
65
|
+
old_declaration
|
66
|
+
.gsub(/@.*+/, "@#{new_req.fetch(:source).fetch(:ref)}")
|
66
67
|
|
67
68
|
# Replace the old declaration that's preceded by a non-word character
|
68
69
|
# and followed by a whitespace character (comments) or EOL.
|
@@ -72,8 +73,8 @@ module Dependabot
|
|
72
73
|
# we skip updating the comment in case it's a custom note, todo, warning etc of some kind.
|
73
74
|
# See the related unit tests for examples.
|
74
75
|
updated_content =
|
75
|
-
updated_content
|
76
|
-
gsub(
|
76
|
+
updated_content
|
77
|
+
.gsub(
|
77
78
|
/(?<=\W|"|')#{Regexp.escape(old_declaration)}(?<comment>\s+#.*)?(?=\s|"|'|$)/
|
78
79
|
) do |match|
|
79
80
|
comment = Regexp.last_match(:comment)
|
@@ -104,5 +105,5 @@ module Dependabot
|
|
104
105
|
end
|
105
106
|
end
|
106
107
|
|
107
|
-
Dependabot::FileUpdaters
|
108
|
-
register("github_actions", Dependabot::GithubActions::FileUpdater)
|
108
|
+
Dependabot::FileUpdaters
|
109
|
+
.register("github_actions", Dependabot::GithubActions::FileUpdater)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: true
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/metadata_finders"
|
@@ -23,5 +24,5 @@ module Dependabot
|
|
23
24
|
end
|
24
25
|
end
|
25
26
|
|
26
|
-
Dependabot::MetadataFinders
|
27
|
-
register("github_actions", Dependabot::GithubActions::MetadataFinder)
|
27
|
+
Dependabot::MetadataFinders
|
28
|
+
.register("github_actions", Dependabot::GithubActions::MetadataFinder)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: true
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/update_checkers"
|
@@ -167,8 +168,8 @@ module Dependabot
|
|
167
168
|
def filter_lower_tags(tags_array)
|
168
169
|
return tags_array unless current_version
|
169
170
|
|
170
|
-
tags_array
|
171
|
-
select { |tag| tag.fetch(:version) > current_version }
|
171
|
+
tags_array
|
172
|
+
.select { |tag| tag.fetch(:version) > current_version }
|
172
173
|
end
|
173
174
|
|
174
175
|
def updated_ref
|
@@ -256,5 +257,5 @@ module Dependabot
|
|
256
257
|
end
|
257
258
|
end
|
258
259
|
|
259
|
-
Dependabot::UpdateCheckers
|
260
|
-
register("github_actions", Dependabot::GithubActions::UpdateChecker)
|
260
|
+
Dependabot::UpdateCheckers
|
261
|
+
.register("github_actions", Dependabot::GithubActions::UpdateChecker)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: true
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
require "dependabot/version"
|
@@ -25,5 +26,5 @@ module Dependabot
|
|
25
26
|
end
|
26
27
|
end
|
27
28
|
|
28
|
-
Dependabot::Utils
|
29
|
-
register_version_class("github_actions", Dependabot::GithubActions::Version)
|
29
|
+
Dependabot::Utils
|
30
|
+
.register_version_class("github_actions", Dependabot::GithubActions::Version)
|
@@ -1,3 +1,4 @@
|
|
1
|
+
# typed: true
|
1
2
|
# frozen_string_literal: true
|
2
3
|
|
3
4
|
# These all need to be required so the various classes can be registered in a
|
@@ -11,8 +12,8 @@ require "dependabot/github_actions/requirement"
|
|
11
12
|
require "dependabot/github_actions/version"
|
12
13
|
|
13
14
|
require "dependabot/pull_request_creator/labeler"
|
14
|
-
Dependabot::PullRequestCreator::Labeler
|
15
|
-
register_label_details(
|
15
|
+
Dependabot::PullRequestCreator::Labeler
|
16
|
+
.register_label_details(
|
16
17
|
"github_actions",
|
17
18
|
name: "github_actions",
|
18
19
|
description: "Pull requests that update GitHub Actions code",
|
@@ -20,5 +21,5 @@ Dependabot::PullRequestCreator::Labeler.
|
|
20
21
|
)
|
21
22
|
|
22
23
|
require "dependabot/dependency"
|
23
|
-
Dependabot::Dependency
|
24
|
-
register_production_check("github_actions", ->(_) { true })
|
24
|
+
Dependabot::Dependency
|
25
|
+
.register_production_check("github_actions", ->(_) { true })
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: dependabot-github_actions
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.
|
4
|
+
version: 0.232.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Dependabot
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2023-09-
|
11
|
+
date: 2023-09-14 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: dependabot-common
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 0.
|
19
|
+
version: 0.232.0
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 0.
|
26
|
+
version: 0.232.0
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: debug
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -136,6 +136,20 @@ dependencies:
|
|
136
136
|
- - "~>"
|
137
137
|
- !ruby/object:Gem::Version
|
138
138
|
version: 1.19.0
|
139
|
+
- !ruby/object:Gem::Dependency
|
140
|
+
name: rubocop-sorbet
|
141
|
+
requirement: !ruby/object:Gem::Requirement
|
142
|
+
requirements:
|
143
|
+
- - "~>"
|
144
|
+
- !ruby/object:Gem::Version
|
145
|
+
version: 0.7.3
|
146
|
+
type: :development
|
147
|
+
prerelease: false
|
148
|
+
version_requirements: !ruby/object:Gem::Requirement
|
149
|
+
requirements:
|
150
|
+
- - "~>"
|
151
|
+
- !ruby/object:Gem::Version
|
152
|
+
version: 0.7.3
|
139
153
|
- !ruby/object:Gem::Dependency
|
140
154
|
name: stackprof
|
141
155
|
requirement: !ruby/object:Gem::Requirement
|
@@ -199,7 +213,7 @@ licenses:
|
|
199
213
|
- Nonstandard
|
200
214
|
metadata:
|
201
215
|
bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
|
202
|
-
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.
|
216
|
+
changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.232.0
|
203
217
|
post_install_message:
|
204
218
|
rdoc_options: []
|
205
219
|
require_paths:
|