dependabot-github_actions 0.220.0 → 0.221.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/github_actions/file_parser.rb +1 -1
  3. data/lib/dependabot/github_actions/update_checker.rb +2 -4
  4. metadata +7 -35
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: df917d9168ed343ac21c9b9b92e0a37da757e9102345e60cda9ff0dad8c9dabf
4
- data.tar.gz: 674d4c6a9dfc115ddaab44de5d5b0f534ad9dfbe92bc916d563ff544b33abe0e
3
+ metadata.gz: 9091ca7af1c9573f646c9317ef6de3635b2b4d2869fcfb5d5b0bde8acbc6f863
4
+ data.tar.gz: 02667a48359525f460ff802b5e6671a4fa46668a979b8667a6a9f4cd5a489d3e
5
5
  SHA512:
6
- metadata.gz: 92bab0dbcb03a67752e2446462b8e890ec577cf530b70b3718baecd7c7fb7855575c0475043199fbd18fe55e4e783de139342a81237ed3b6e460615650e1ea80
7
- data.tar.gz: e0d73e50c66b64fe01815ae1f660a313f17d91d4c57b28be5f6d5310c7b70e6af1897ba52f48e3de170917cfe0c64ab281ef0c2c5db12407dfa46c6fa5e2da6d
6
+ metadata.gz: 950450cadee025285005665d200981c3c9ec597e9003e99774c4458c90ca1e837f0ee423822c015ccb471e75941cf0d79a16d82f846fb2729fc8ae44b586f601
7
+ data.tar.gz: c72718a5e3a660d696aabc5de4bc1be495a32db21f6177293a7f5c92e70897b01f4e6528511e944c304178b086e9e89081755c94ff7909ca2af8f02c75fd21fa
data/lib/dependabot/github_actions/file_parser.rb CHANGED
@@ -96,7 +96,7 @@ module Dependabot
96
96
  groups: [],
97
97
  source: {
98
98
  type: "git",
99
- url: "https://#{hostname}/#{name}",
99
+ url: "https://#{hostname}/#{name}".downcase,
100
100
  ref: ref,
101
101
  branch: nil
102
102
  },
data/lib/dependabot/github_actions/update_checker.rb CHANGED
@@ -182,15 +182,13 @@ module Dependabot
182
182
 
183
183
  # Return the git tag if updating a pinned version
184
184
  if git_commit_checker.pinned_ref_looks_like_version? &&
185
- (new_tag = latest_version_tag) &&
186
- new_tag.fetch(:commit_sha) != current_commit
185
+ (new_tag = latest_version_tag)
187
186
  return new_tag.fetch(:tag)
188
187
  end
189
188
 
190
189
  # Return the pinned git commit if one is available
191
190
  if git_commit_checker.pinned_ref_looks_like_commit_sha? &&
192
- (new_commit_sha = latest_commit_sha) &&
193
- new_commit_sha != current_commit
191
+ (new_commit_sha = latest_commit_sha)
194
192
  return new_commit_sha
195
193
  end
196
194
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.220.0
4
+ version: 0.221.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-06-12 00:00:00.000000000 Z
11
+ date: 2023-07-13 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.220.0
19
+ version: 0.221.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.220.0
26
+ version: 0.221.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - "~>"
32
32
  - !ruby/object:Gem::Version
33
- version: 1.7.1
33
+ version: 1.8.0
34
34
  type: :development
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - "~>"
39
39
  - !ruby/object:Gem::Version
40
- version: 1.7.1
40
+ version: 1.8.0
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: gpgme
43
43
  requirement: !ruby/object:Gem::Requirement
@@ -136,34 +136,6 @@ dependencies:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
138
  version: 1.17.1
139
- - !ruby/object:Gem::Dependency
140
- name: simplecov
141
- requirement: !ruby/object:Gem::Requirement
142
- requirements:
143
- - - "~>"
144
- - !ruby/object:Gem::Version
145
- version: 0.22.0
146
- type: :development
147
- prerelease: false
148
- version_requirements: !ruby/object:Gem::Requirement
149
- requirements:
150
- - - "~>"
151
- - !ruby/object:Gem::Version
152
- version: 0.22.0
153
- - !ruby/object:Gem::Dependency
154
- name: simplecov-console
155
- requirement: !ruby/object:Gem::Requirement
156
- requirements:
157
- - - "~>"
158
- - !ruby/object:Gem::Version
159
- version: 0.9.1
160
- type: :development
161
- prerelease: false
162
- version_requirements: !ruby/object:Gem::Requirement
163
- requirements:
164
- - - "~>"
165
- - !ruby/object:Gem::Version
166
- version: 0.9.1
167
139
  - !ruby/object:Gem::Dependency
168
140
  name: stackprof
169
141
  requirement: !ruby/object:Gem::Requirement
@@ -227,7 +199,7 @@ licenses:
227
199
  - Nonstandard
228
200
  metadata:
229
201
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
230
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.220.0
202
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.221.0
231
203
  post_install_message:
232
204
  rdoc_options: []
233
205
  require_paths: