dependabot-github_actions 0.225.0 → 0.226.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: c0b821338b78c16513769c792aa618353ba0a5f739be2b6441b1313d0ac9c5ea
4
- data.tar.gz: 48da09867f0fbd1332c8575e7162a9612584191fac7aa96ece4493fac0e89284
3
+ metadata.gz: cf5794d84ecb14a6bf9bd78ff82f11f381065e87e4365dff0bd746db79020cef
4
+ data.tar.gz: a5623132134c53ee80eda160da920ce5383602e0cac19a14bf0c6afe707cdff9
5
5
  SHA512:
6
- metadata.gz: 983e431b61857f67777c495648392bd5c2fdbe24836efb802bee27cb00f77804019d55b2f0014f6ee2874600ed556eef20c703c128d3a72a944165823490cf07
7
- data.tar.gz: 5d01f1ea3049e4f37857f2bf8c8a28b684f466dfa50b87e844921ccb75e96495b52690c4a80db183f396f7410d8ad070371badb863fcdf106203e3438a9d6b9f
6
+ metadata.gz: 62a239c82d8bce95c13608fd33c1004da9744dc4c891037cc35aeff62b3eebe5f90e320e16d6102e1ce22118a95ce915b1da585a59d6ad847572d4349e0cb16b
7
+ data.tar.gz: 7bda07df798e302d212ea326d54a66d36ae19c65a062e8cf08f58c72d7fbb311b3b9df2b32c0057926ebf2876ca89441241964759945f2f85e4f99938d22555e
@@ -48,7 +48,11 @@ module Dependabot
48
48
  next unless string.match?(GITHUB_REPO_REFERENCE)
49
49
 
50
50
  dep = build_github_dependency(file, string)
51
- git_checker = Dependabot::GitCommitChecker.new(dependency: dep, credentials: credentials)
51
+ git_checker = Dependabot::GitCommitChecker.new(
52
+ dependency: dep,
53
+ credentials: credentials,
54
+ consider_version_branches_pinned: true
55
+ )
52
56
  next unless git_checker.pinned?
53
57
 
54
58
  # If dep does not have an assigned (semver) version, look for a commit that references a semver tag
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.225.0
4
+ version: 0.226.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-07-31 00:00:00.000000000 Z
11
+ date: 2023-08-11 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.225.0
19
+ version: 0.226.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.225.0
26
+ version: 0.226.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
128
128
  requirements:
129
129
  - - "~>"
130
130
  - !ruby/object:Gem::Version
131
- version: 1.17.1
131
+ version: 1.18.0
132
132
  type: :development
133
133
  prerelease: false
134
134
  version_requirements: !ruby/object:Gem::Requirement
135
135
  requirements:
136
136
  - - "~>"
137
137
  - !ruby/object:Gem::Version
138
- version: 1.17.1
138
+ version: 1.18.0
139
139
  - !ruby/object:Gem::Dependency
140
140
  name: stackprof
141
141
  requirement: !ruby/object:Gem::Requirement
@@ -199,7 +199,7 @@ licenses:
199
199
  - Nonstandard
200
200
  metadata:
201
201
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
202
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.225.0
202
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.226.0
203
203
  post_install_message:
204
204
  rdoc_options: []
205
205
  require_paths: