dependabot-gradle 0.143.2 → 0.144.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/gradle/file_parser.rb +1 -1
  3. data/lib/dependabot/gradle/file_parser/repositories_finder.rb +1 -1
  4. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d818e2e431ea573f1fe8c1fc3555a6f89212b3c4c685a8ae550850818ba74ab3
4
- data.tar.gz: 5475806af86224ec05355ae5c4584244a438b80b6fac4281b963bbb1f74bcaa4
3
+ metadata.gz: 299e1acaee3549937a732cf6c749f8d5e64f38e446aa506865f8783ec20569ab
4
+ data.tar.gz: e576c943bcfd4c3ca4034723a29215121f1e4b47c994bca85476b63b8afb60c2
5
5
  SHA512:
6
- metadata.gz: 7ddbfbea18a055cc1638b174c56456115c9759af3f8ca7f9d2f6a373d33aad0323f4d6895f9f49d6ea81f4f5407c5cb4d34c81b491b3e5e92137db867d07c4d6
7
- data.tar.gz: 57a4f779efbd553a1656f432458e4216882748a3db9e79c30dfca66d9c0bc19d646287645f7ad7f850790956b1a0afd5c69efc52313adb10f0bfb1bfefc70320
6
+ metadata.gz: 4a385569ff9ef760d8d8cded6e7744c39133ff9c552adddc11db2e087d48be2d7af4b6df764a54bee2b05c66220eab6aa25eaa5b872acc87a78f037d5da4896a
7
+ data.tar.gz: 585da9ad62f6301b0b0d25ca681104238dcaee2320a63f076004130a5b50e67a15269b4d21c564004c154d12f91eee31e82e80569a724694adccbeb3e47e1c50
data/lib/dependabot/gradle/file_parser.rb CHANGED
@@ -211,7 +211,7 @@ module Dependabot
211
211
  end
212
212
 
213
213
  def source_from(group, name, version)
214
- return nil unless group&.start_with?("com.github")
214
+ return nil unless group&.start_with?("com.github") && version.match?(/\A[0-9a-f]{40}\Z/)
215
215
 
216
216
  account = group.sub("com.github.", "")
217
217
 
data/lib/dependabot/gradle/file_parser/repositories_finder.rb CHANGED
@@ -16,7 +16,7 @@ module Dependabot
16
16
  REPOSITORIES_BLOCK_START = /(?:^|\s)repositories\s*\{/.freeze
17
17
 
18
18
  GROOVY_MAVEN_REPO_REGEX =
19
- /maven\s*\{[^\}]*\surl[\s\(]=?\s*['"](?<url>[^'"]+)['"]/.freeze
19
+ /maven\s*\{[^\}]*\surl[\s\(]=?[^'"]*['"](?<url>[^'"]+)['"]/.freeze
20
20
 
21
21
  KOTLIN_MAVEN_REPO_REGEX =
22
22
  /maven\((url\s?\=\s?)?["](?<url>[^"]+)["]\)/.freeze
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-gradle
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.143.2
4
+ version: 0.144.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-04-23 00:00:00.000000000 Z
11
+ date: 2021-05-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.143.2
19
+ version: 0.144.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.143.2
26
+ version: 0.144.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: dependabot-maven
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 0.143.2
33
+ version: 0.144.0
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: 0.143.2
40
+ version: 0.144.0
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: byebug
43
43
  requirement: !ruby/object:Gem::Requirement