dependabot-go_modules 0.129.0 → 0.129.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1b85341f744de7a3df80e785bddeb07e8356a8f4a9d60461d592bb1038e6f8ed
-  data.tar.gz: 0430eb2b07f7bbdfd5a58b0144b8aac17209c359f4bf4107536368b927ee1128
+  metadata.gz: 66a84b6b47ca0b0c2123cbb74dc9289edf5a3456e47e243b9f5f7e3e811a6e83
+  data.tar.gz: c818cafc810e2d768e1048c30b9c28b06b2f74d0c15fe4fecb38ccc3341b4746
 SHA512:
-  metadata.gz: da3e0794ee122a1eda48eef2aca56721eae2fe6964a5c0f1049dfbf1a4e9ce2d63dbc649b48444dda8b3daaa9819b19542a2ae20ac78bc38f33852bd22d280f7
-  data.tar.gz: 840450af19add96a61236a32cbff73d28de94a371b2112ec5ea1161f1ac965c0eb9fd05729e1b0dfdfafc702adde55b48aab6e6bdefb9f55f423c5e9ca7dda74
+  metadata.gz: 6fafe82fab2b405593f8a7c8a431ff71804189922a9f7d3d920ee6b4295417294e904c4b123fb4f3cdea32e8044ad69f5a130e342418f36d0e819e934be1980b
+  data.tar.gz: 1456d1903e1b9b1b832de978aad3f2ba579d9dc30ef5179f97ef3d9f62963c01e8586967729e44e1da015166fa7e96ba4496d76309311ff79d3414d8b42726fc

data/lib/dependabot/go_modules/file_parser.rb

@@ -159,8 +159,8 @@ module Dependabot
 
       GITHUB_REPO_REGEX = %r{github.com/[^@]*}.freeze
       def handle_github_unknown_revision(line)
-        repo_path = line.scan(GITHUB_REPO_REGEX).first
-        return unless repo_path
+        mod_path = line.scan(GITHUB_REPO_REGEX).first
+        return unless mod_path
 
         # Query for _any_ version of this module, to know if it doesn't exist (or is private)
         # or we were just given a bad revision by this manifest
@@ -169,9 +169,15 @@ module Dependabot
             File.write("go.mod", "module dummy\n")
 
             env = { "GOPRIVATE" => "*" }
-            _, _, status = Open3.capture3(env, SharedHelpers.escape_command("go get #{repo_path}"))
+            _, _, status = Open3.capture3(env, SharedHelpers.escape_command("go get #{mod_path}"))
             raise Dependabot::DependencyFileNotResolvable, line if status.success?
 
+            mod_split = mod_path.split("/")
+            repo_path = if mod_split.size > 3
+                          mod_split[0..2].join("/")
+                        else
+                          mod_path
+                        end
             raise Dependabot::GitDependenciesNotReachable, [repo_path]
           end
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.129.0
+  version: 0.129.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-15 00:00:00.000000000 Z
+date: 2020-12-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.0
+        version: 0.129.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.129.0
+        version: 0.129.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement