dependabot-github_actions 0.345.0 → 0.346.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b0436520f2ba29bd4474f5d9b678b4bcaff2a927198ab588115591b3b29320f2
4
- data.tar.gz: d512f912541fec199493a768282cdd90cac781dffa71aa33565125c7d85a27c4
3
+ metadata.gz: 75289960526a47f7403ac9b15e86cb8e331077e0528095c501344e2ef119a830
4
+ data.tar.gz: 2008aadf7bc2cef609cb5f652d7911e458b828205e88377dc639b3acc0be2c0d
5
5
  SHA512:
6
- metadata.gz: e999624c478e196d97f2764fbeb8953758777f3d28c3e55a225716cabf2319b66352cb8a958eb741f793df80bbd328d0a1794b2743c08d093579069e63f61923
7
- data.tar.gz: 18a84b309bf88f34718f3e60176bef4c211529c66f5dc8fcc78fecb8186d180c2671b071acb80e4be086650541060a6f5301466f5de7f43db453c1e2bd313587
6
+ metadata.gz: 0433eb9b877d7c176a1ab75e5306b7d28d298f97d3b3abc1a2999ab69c9e3cd4ce62c2e0c6c83a040d46bf18b4e5f41862f1e82f42450b4fbe6f79f33abc0ab0
7
+ data.tar.gz: c7cf0e89b2320a5d287ace61dd792c63e0dc90f0799ce04144d9db728f4bad0838778106a180de7cbf7350bbf49046419b96224b384d9b6cecb34aa24e84de97
@@ -35,6 +35,7 @@ module Dependabot
35
35
 
36
36
  OWNER_KEY = T.let("owner", String)
37
37
  REPO_KEY = T.let("repo", String)
38
+ PATH_KEY = T.let("path", String)
38
39
  REF_KEY = T.let("ref", String)
39
40
  USES_KEY = T.let("uses", String)
40
41
  STEPS_KEY = T.let("steps", String)
@@ -112,9 +112,19 @@ module Dependabot
112
112
  def github_dependency(file, string, hostname)
113
113
  details = T.must(string.match(GITHUB_REPO_REFERENCE)).named_captures
114
114
  repo_name = "#{details.fetch(OWNER_KEY)}/#{details.fetch(REPO_KEY)}"
115
+ path = details[PATH_KEY]
115
116
  ref = details.fetch(REF_KEY)
116
117
  version = version_class.new(ref).to_s if version_class.correct?(ref)
117
- name = version_class.path_based?(ref) ? string : repo_name
118
+
119
+ # For reusable workflows (.github/workflows/*.yml), use the repository name + workflow path
120
+ # to distinguish between different workflow files in the same repository
121
+ name = if path&.match?(%r{/\.github/workflows/.*\.ya?ml$})
122
+ "#{repo_name}#{path}"
123
+ elsif version_class.path_based?(ref)
124
+ string
125
+ else
126
+ repo_name
127
+ end
118
128
  Dependency.new(
119
129
  name: name,
120
130
  version: version,
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.345.0
4
+ version: 0.346.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.345.0
18
+ version: 0.346.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.345.0
25
+ version: 0.346.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
259
259
  - MIT
260
260
  metadata:
261
261
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
262
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.345.0
262
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.346.0
263
263
  rdoc_options: []
264
264
  require_paths:
265
265
  - lib