dependabot-gradle 0.143.3 → 0.145.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/gradle/file_parser.rb +1 -1
  3. data/lib/dependabot/gradle/file_parser/repositories_finder.rb +1 -1
  4. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4db986dd87653799a9a5f1c1f8372453578b67b283d06b09341ecf8bebe7c78f
4
- data.tar.gz: 0fb15316e6f42d7007894a678c5b5c3db0324a947c8d7c7d620e2bb22ee72c1b
3
+ metadata.gz: 2fdf550c26e88079ced4b6cb8f4ac8fddcbb3c4b6abe22448d1d7003433ed952
4
+ data.tar.gz: 3fa9aa02de141036abae790faccec5976d2974d1ba0f982bc6ec65df8aa9827d
5
5
  SHA512:
6
- metadata.gz: 4e20eff2d8c390f9b7b0f7153547d36c4af0846e8e65b25461ca1231ba61e4a8fc8f4f517dffdcf439ef5b16a4035f17c567751d70ed1db9caadc4bc8bf0e272
7
- data.tar.gz: 930688a600b197c138c3603de1ecaaf312877f3237faf246bd3742161b2a4cc63da06e5b1a332a0de9f7c21c36e8cf9e26c562c3f4f81a4eaa347aebf5c496fc
6
+ metadata.gz: 85d8a470933b55d29648a2ebb457f26a27d7a2a8a8421fbd38863384e1ea1ca775e7356cfeeabfa02e75a300c093a5a67fb5e97176a737a4e3daba29608976cd
7
+ data.tar.gz: 1c3302c8a8c6b84a0ff351b2f81fda8b921e1efaea9a82459055c1952d5fd1d219ede110f07c9a8c6c8aebe1f772981bba4c3e459d8e3b491fb664fa9ba35b0d
data/lib/dependabot/gradle/file_parser.rb CHANGED
@@ -211,7 +211,7 @@ module Dependabot
211
211
  end
212
212
 
213
213
  def source_from(group, name, version)
214
- return nil unless group&.start_with?("com.github")
214
+ return nil unless group&.start_with?("com.github") && version.match?(/\A[0-9a-f]{40}\Z/)
215
215
 
216
216
  account = group.sub("com.github.", "")
217
217
 
data/lib/dependabot/gradle/file_parser/repositories_finder.rb CHANGED
@@ -16,7 +16,7 @@ module Dependabot
16
16
  REPOSITORIES_BLOCK_START = /(?:^|\s)repositories\s*\{/.freeze
17
17
 
18
18
  GROOVY_MAVEN_REPO_REGEX =
19
- /maven\s*\{[^\}]*\surl[\s\(]=?\s*['"](?<url>[^'"]+)['"]/.freeze
19
+ /maven\s*\{[^\}]*\surl[\s\(]=?[^'"]*['"](?<url>[^'"]+)['"]/.freeze
20
20
 
21
21
  KOTLIN_MAVEN_REPO_REGEX =
22
22
  /maven\((url\s?\=\s?)?["](?<url>[^"]+)["]\)/.freeze
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-gradle
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.143.3
4
+ version: 0.145.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-04-23 00:00:00.000000000 Z
11
+ date: 2021-05-05 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.143.3
19
+ version: 0.145.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.143.3
26
+ version: 0.145.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: dependabot-maven
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 0.143.3
33
+ version: 0.145.0
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: 0.143.3
40
+ version: 0.145.0
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: byebug
43
43
  requirement: !ruby/object:Gem::Requirement