dependabot-github_actions 0.293.0 → 0.294.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 97a39fd214b18afb927295d590e8ea8e3270015da3998b80a85106ae9cc203c2
-  data.tar.gz: 8b63e4e18e5f3c4695b70c8a8e4a1c7083e4d8bfabe1ac14d78b736150a71935
+  metadata.gz: cec35cdf5a8faad77b6c415da1255f1ae09635ff49fae927fe2f1834a5573582
+  data.tar.gz: a1a7c3ce1178c19e837046ae304088acb964e9e8736718ded3b5d5e230263d55
 SHA512:
-  metadata.gz: 7c926a9ef211db6152426254d7926536d6cb3116b48089bab873a1e0a99bcd509f05c5daf46ea6005334c8c3f0470a6650c9323568ea2a12dd7f150bb26ade7c
-  data.tar.gz: e9ba4aaede0323e01bc3abc8792bb5b1327981a44ea91650b9d69ac87166260177b1b6ab1452f9e103bf6125860ae6074bc2dc830d0827ae36494d9fc29a9252
+  metadata.gz: ce2e027364f40f080ac1589417405138e7cd9b189adee423c741cf3e12517ecf65b7e2262bb32ebb8baed70cdff6b6c054ffce8a148194e40af3fd43477cc5d0
+  data.tar.gz: eff2847fee5fda3e6d599df65bb2ab94e5d2887074a9e11c0f9b1ee3c86746a86943c6b9d17651cc7670c23b3f17396ac86dd508896abf737099683deb228747

data/lib/dependabot/github_actions/file_parser.rb

@@ -111,9 +111,10 @@ module Dependabot
       sig { params(file: Dependabot::DependencyFile, string: String, hostname: String).returns(Dependabot::Dependency) }
       def github_dependency(file, string, hostname)
         details = T.must(string.match(GITHUB_REPO_REFERENCE)).named_captures
-        name = "#{details.fetch(OWNER_KEY)}/#{details.fetch(REPO_KEY)}"
+        repo_name = "#{details.fetch(OWNER_KEY)}/#{details.fetch(REPO_KEY)}"
         ref = details.fetch(REF_KEY)
         version = version_class.new(ref).to_s if version_class.correct?(ref)
+        name = version_class.path_based?(ref) ? string : repo_name
         Dependency.new(
           name: name,
           version: version,
@@ -122,7 +123,7 @@ module Dependabot
             groups: [],
             source: {
               type: "git",
-              url: "https://#{hostname}/#{name}".downcase,
+              url: "https://#{hostname}/#{repo_name}".downcase,
               ref: ref,
               branch: nil
             },

data/lib/dependabot/github_actions/version.rb

@@ -24,9 +24,14 @@ module Dependabot
 
       sig { params(version: VersionParameter).returns(VersionParameter) }
       def self.remove_leading_v(version)
-        return version unless version.to_s.match?(/\Av([0-9])/)
+        return version unless version.to_s.match?(%r{\A(?:.*/)?v?([0-9])})
 
-        version.to_s.delete_prefix("v")
+        version.to_s.sub(%r{\A(?:.*/)?v?}, "")
+      end
+
+      sig { params(version: VersionParameter).returns(T::Boolean) }
+      def self.path_based?(version)
+        version.to_s.match?(%r{\A.+/v?([0-9])})
       end
 
       sig { override.params(version: VersionParameter).returns(T::Boolean) }

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-github_actions
 version: !ruby/object:Gem::Version
-  version: 0.293.0
+  version: 0.294.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-16 00:00:00.000000000 Z
+date: 2025-01-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.293.0
+        version: 0.294.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.293.0
+        version: 0.294.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -257,7 +257,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.293.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.294.0
 post_install_message:
 rdoc_options: []
 require_paths: