dependabot-github_actions 0.146.0 → 0.146.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4b11317e1dad2358be56e6ef6a39a34b21203bb4892d8ede27b76bc1b9e26d2e
-  data.tar.gz: f5d866295306e58ea08f5f3be97fc3e1686d55f805fec4bb9e6335641f92b079
+  metadata.gz: f18094461826b65eab69b655ca90e8cc7e143d3d2ac9cf15f2256bf0a6d47a29
+  data.tar.gz: 6bad99dfc7ffcb8a06eace7894fda46a7ceb4ab94980e2a8b656f5a281bcd324
 SHA512:
-  metadata.gz: f468a43a7257f606736445fb21fc4a61869a6e0bd190940d09e9bee28bc631af8683aae0ad1c474764b23fe2394985f51bcc6067a0fe15d4bcd12de41b14b7bf
-  data.tar.gz: 8190e538cda08496ceeda4a6a23e0f66274df683ff38b68318577f2d0622397877f3852d77cb9281f8fcec21d8da1d303fd13ddcf0fecfed796f39346203688d
+  metadata.gz: f1d187ecbeafaa181f64b90d2371c6f16fe308910bb129a708087021b3cf9ba58ea9f4622608421a3ea163e16d5ef8ce56b8edef913512d936240380d9cd28bf
+  data.tar.gz: 1f6a313a85b15056d563f0edfb08aedf6bcc9c507dccf2ebdd9bf18aba64c279983f3bd7121e7f86941cb53a7de0dc6b8ef11534da2630eb128fb059cbb8314a

data/lib/dependabot/github_actions/update_checker.rb

@@ -63,11 +63,13 @@ module Dependabot
 
         # If the dependency is pinned to a tag that looks like a version then
         # we want to update that tag.
-
         if git_commit_checker.pinned_ref_looks_like_version? &&
            git_commit_checker.local_tag_for_latest_version
           latest_tag = git_commit_checker.local_tag_for_latest_version
-          return latest_tag.fetch(:version)
+          latest_version = latest_tag.fetch(:version)
+          return version_class.new(dependency.version) if shortened_semver_eq?(dependency.version, latest_version.to_s)
+
+          return latest_version
         end
 
         # If the dependency is pinned to a commit SHA and the latest
@@ -140,6 +142,16 @@ module Dependabot
           raise_on_ignored: raise_on_ignored
         )
       end
+
+      def shortened_semver_eq?(base, other)
+        return false unless base
+
+        base_split = base.split(".")
+        other_split = other.split(".")
+        return false unless base_split.length <= other_split.length
+
+        other_split[0..base_split.length - 1] == base_split
+      end
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.146.0
+  version: 0.146.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-11 00:00:00.000000000 Z
+date: 2021-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.146.0
+        version: 0.146.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.146.0
+        version: 0.146.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement