dependabot-github_actions 0.129.2 → 0.129.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3d276f732c7242e535d82502c398daa462b028c54dd9f4b536e68359e786a7a4
-  data.tar.gz: 420747b176ef47441199579926cd5cd505920fc457441b72212093977fb4bb0c
+  metadata.gz: 5262b17bab20eeb7b62f2f9c4af07075931a2e6bfd4850079531149fe7744251
+  data.tar.gz: bc6f01d734870b766b4e6d3b924f2728422ac90408baf6276d0808a3e72c6432
 SHA512:
-  metadata.gz: 0051c1d5651e65977039b748572e092eac6cf901c64a8282de07a2b6d5869f786aecc67addca106c45e699b4c470a9af6ef1567f2069bcb27560329b2605d506
-  data.tar.gz: 92825188447dfd3d94e0c0b06eb80721339f09d8f6eb51d42d523ae1b8348e448f6ef99bbd60b78868316998d25880eb068b3d5033a8182ab4e5c1508ae38e30
+  metadata.gz: 5f0e252a671c33258d6d06c419f9043627e76f3427c4db173ffb4aaf01a7a23113557ce0472cbac150e404175959a0435a19493327b390b5ee78d1ce4d960b90
+  data.tar.gz: 4272c09b83ee811f3279177c1d33f9bff5fd338da05e8ce07a53da884b6594ab21fd5469fb67307b1b0aad128ca39ecef4618492e9505557ff07b891db4835ea

data/lib/dependabot/github_actions/update_checker.rb

@@ -23,10 +23,21 @@ module Dependabot
         dependency.version
       end
 
-      def updated_requirements
-        return dependency.requirements if updated_source == dependency_source_details
+      def updated_requirements # rubocop:disable Metrics/PerceivedComplexity
+        previous = dependency_source_details
+        updated = updated_source
+        return dependency.requirements if updated == previous
+
+        # Maintain a short git hash only if it matches the latest
+        if previous[:type] == "git" &&
+           previous[:url] == updated[:url] &&
+           updated[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           previous[:ref]&.match?(/^[0-9a-f]{6,40}$/) &&
+           updated[:ref]&.start_with?(previous[:ref])
+          return dependency.requirements
+        end
 
-        dependency.requirements.map { |req| req.merge(source: updated_source) }
+        dependency.requirements.map { |req| req.merge(source: updated) }
       end
 
       private

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.129.2
+  version: 0.129.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-01-04 00:00:00.000000000 Z
+date: 2021-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.2
+        version: 0.129.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.2
+        version: 0.129.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement