dependabot-github_actions 0.292.0 → 0.294.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ec9317297cf1d6f91689b4dbfd495361463c4da20b5e1cdfb8b1bec345fb6fdc
-  data.tar.gz: 108569a3859425a5c8120fa66f9f04f1a93d24f4d394ba6b36d19e5431e02071
+  metadata.gz: cec35cdf5a8faad77b6c415da1255f1ae09635ff49fae927fe2f1834a5573582
+  data.tar.gz: a1a7c3ce1178c19e837046ae304088acb964e9e8736718ded3b5d5e230263d55
 SHA512:
-  metadata.gz: 5fbf5b457cf937c2b4856b6a2993c229b10218d541d288f31e4c80c36a84e75a3505b229057484dbd5e19fad22c7a4a99a9c3e9aa72e643e54abbc39cdb668aa
-  data.tar.gz: f2618bb10546af53d065eb2364fd0de958fdf98537b9de8d163d6191fd5c4ad3fa8714bb0688bc481a7aa977b6361ab05c01564323bb03e2280e0fe5eb23dc44
+  metadata.gz: ce2e027364f40f080ac1589417405138e7cd9b189adee423c741cf3e12517ecf65b7e2262bb32ebb8baed70cdff6b6c054ffce8a148194e40af3fd43477cc5d0
+  data.tar.gz: eff2847fee5fda3e6d599df65bb2ab94e5d2887074a9e11c0f9b1ee3c86746a86943c6b9d17651cc7670c23b3f17396ac86dd508896abf737099683deb228747

data/lib/dependabot/github_actions/file_parser.rb

@@ -30,12 +30,6 @@ module Dependabot
           dependency_set += workfile_file_dependencies(file)
         end
 
-        dependencies_without_version = dependency_set.dependencies.select { |dep| dep.version.nil? }
-        unless dependencies_without_version.empty?
-          raise UnresolvableVersionError,
-                dependencies_without_version.map(&:name)
-        end
-
         dependency_set.dependencies
       end
 
@@ -117,9 +111,10 @@ module Dependabot
       sig { params(file: Dependabot::DependencyFile, string: String, hostname: String).returns(Dependabot::Dependency) }
       def github_dependency(file, string, hostname)
         details = T.must(string.match(GITHUB_REPO_REFERENCE)).named_captures
-        name = "#{details.fetch(OWNER_KEY)}/#{details.fetch(REPO_KEY)}"
+        repo_name = "#{details.fetch(OWNER_KEY)}/#{details.fetch(REPO_KEY)}"
         ref = details.fetch(REF_KEY)
         version = version_class.new(ref).to_s if version_class.correct?(ref)
+        name = version_class.path_based?(ref) ? string : repo_name
         Dependency.new(
           name: name,
           version: version,
@@ -128,7 +123,7 @@ module Dependabot
             groups: [],
             source: {
               type: "git",
-              url: "https://#{hostname}/#{name}".downcase,
+              url: "https://#{hostname}/#{repo_name}".downcase,
               ref: ref,
               branch: nil
             },

data/lib/dependabot/github_actions/version.rb

@@ -24,9 +24,14 @@ module Dependabot
 
       sig { params(version: VersionParameter).returns(VersionParameter) }
       def self.remove_leading_v(version)
-        return version unless version.to_s.match?(/\Av([0-9])/)
+        return version unless version.to_s.match?(%r{\A(?:.*/)?v?([0-9])})
 
-        version.to_s.delete_prefix("v")
+        version.to_s.sub(%r{\A(?:.*/)?v?}, "")
+      end
+
+      sig { params(version: VersionParameter).returns(T::Boolean) }
+      def self.path_based?(version)
+        version.to_s.match?(%r{\A.+/v?([0-9])})
       end
 
       sig { override.params(version: VersionParameter).returns(T::Boolean) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.292.0
+  version: 0.294.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-09 00:00:00.000000000 Z
+date: 2025-01-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.292.0
+        version: 0.294.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.292.0
+        version: 0.294.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -257,7 +257,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.292.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.294.0
 post_install_message:
 rdoc_options: []
 require_paths: