dependabot-github_actions 0.259.0 → 0.260.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 33e42bc05eea41aae44d2dd3f64bea2484b59e1bc6cca210a172c40275398fe0
4
- data.tar.gz: eab354ac501c252f43d0ee7658627e52f3e5e9b9016d0662d6ec400fa982cfda
3
+ metadata.gz: b7c8ce65e1f4c2dfc2f1b26f25ab786e5f3f84df82cd6fef1c277b6de1a9bd9f
4
+ data.tar.gz: 916ddad5deb57a3d3f4c75c84cfbcbe76a97b84920a3f9562461ba9bf34469e7
5
5
  SHA512:
6
- metadata.gz: 01ea0fc3fce038c14165dd1cee65f811f2caea930a9c0ef816a9c0b91ea2a5bb8ccb346fe814ce6a816f5540949225c7c9f7baa2cc8194c7052f23c9a2065d94
7
- data.tar.gz: ae666743843ef50fb63b6802a6d835cd6f777d120a7a5861d0710f68f5883929b04758281109ee0046e049cc129cfefd2c24661b9d25be1039259198f50d2a9a
6
+ metadata.gz: 586077085e627e5268c8bfb91df777ea73e41683a9615c6b4c42a328b76c9073cf4c2da8ecb9a79f890662cb72030dc95c8c77c3831024a543e030f20abf66d5
7
+ data.tar.gz: 2eac244dfdb790786c408911274049705166f935f86884b0b8292df96e8083fe294b79257752aa5e63778c71f076c2b2fb163ed12811d4065f0f6f5a74e1fc14
@@ -78,7 +78,7 @@ module Dependabot
78
78
  old_declaration
79
79
  .gsub(/@.*+/, "@#{new_ref}")
80
80
 
81
- # Replace the old declaration that's preceded by a non-word character
81
+ # Replace the old declaration that's preceded by a non-word character (unless it's a hyphen)
82
82
  # and followed by a whitespace character (comments) or EOL.
83
83
  # If the declaration is followed by a comment that lists the version associated
84
84
  # with the SHA source ref, then update the comment to the human-readable new version.
@@ -88,7 +88,7 @@ module Dependabot
88
88
  updated_content =
89
89
  updated_content
90
90
  .gsub(
91
- /(?<=\W|"|')#{Regexp.escape(old_declaration)}["']?(?<comment>\s+#.*)?(?=\s|$)/
91
+ /(?<=[^a-zA-Z_-]|"|')#{Regexp.escape(old_declaration)}["']?(?<comment>\s+#.*)?(?=\s|$)/
92
92
  ) do |match|
93
93
  comment = Regexp.last_match(:comment)
94
94
  match.gsub!(old_declaration, new_declaration)
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-github_actions
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.259.0
4
+ version: 0.260.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-05-30 00:00:00.000000000 Z
11
+ date: 2024-06-06 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.259.0
19
+ version: 0.260.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.259.0
26
+ version: 0.260.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -255,7 +255,7 @@ licenses:
255
255
  - MIT
256
256
  metadata:
257
257
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
258
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.259.0
258
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.260.0
259
259
  post_install_message:
260
260
  rdoc_options: []
261
261
  require_paths: