dependabot-gradle 0.143.4 → 0.145.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/gradle/file_parser.rb +1 -1
  3. data/lib/dependabot/gradle/file_parser/repositories_finder.rb +1 -1
  4. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: fe82135e1b9a5f057f19535714251cbd5990df27d1a6a90707fa1a73dc24a2e0
4
- data.tar.gz: f2104c23e6638dc6eb24480bceefb9283e09c8a18420fdede81bfdcfdec1f655
3
+ metadata.gz: 2dc478f2f790666cfc4c6c5cad338735cc6165165383dac62d266465948e408a
4
+ data.tar.gz: 2dc993d239a46cadaaf530ca88d13cbf624bd08be70857fa6dba2fdfb3ca6f86
5
5
  SHA512:
6
- metadata.gz: 9d28379fdef18fd4422cf5a7e84b505a33e8e75987cd502751273b8c0bac17da51765fa7b2449c62a30e3ae366b0f88aecd9ff9828cf439c7d0c8c8778b15904
7
- data.tar.gz: 2c2687d3df7d0bd9bf576fd4c34c4b09b5fb4dcdf626e7c4efeadc2f4de1fc898a9d313d458c51b47eb6e89476b5e2b3705b048ef0d8f21d303e5f32d9fb648b
6
+ metadata.gz: 88bb61d5026abd0f57d7fd06f027be93d27fb280dd0a95ed09b8f6ed2211b9f470154986743a861bc55647ae5516ad8c515feec1e90b09a621daccfb1c123d5d
7
+ data.tar.gz: 2132e18505470518a911495bf706847f8bfaaa11fe094bf3ed4c1790b27d923406cfdc226a9ee320c23861e959924fbcc828d3132956dc72d800e649eb43f709
data/lib/dependabot/gradle/file_parser.rb CHANGED
@@ -211,7 +211,7 @@ module Dependabot
211
211
  end
212
212
 
213
213
  def source_from(group, name, version)
214
- return nil unless group&.start_with?("com.github")
214
+ return nil unless group&.start_with?("com.github") && version.match?(/\A[0-9a-f]{40}\Z/)
215
215
 
216
216
  account = group.sub("com.github.", "")
217
217
 
data/lib/dependabot/gradle/file_parser/repositories_finder.rb CHANGED
@@ -16,7 +16,7 @@ module Dependabot
16
16
  REPOSITORIES_BLOCK_START = /(?:^|\s)repositories\s*\{/.freeze
17
17
 
18
18
  GROOVY_MAVEN_REPO_REGEX =
19
- /maven\s*\{[^\}]*\surl[\s\(]=?\s*['"](?<url>[^'"]+)['"]/.freeze
19
+ /maven\s*\{[^\}]*\surl[\s\(]=?[^'"]*['"](?<url>[^'"]+)['"]/.freeze
20
20
 
21
21
  KOTLIN_MAVEN_REPO_REGEX =
22
22
  /maven\((url\s?\=\s?)?["](?<url>[^"]+)["]\)/.freeze
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-gradle
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.143.4
4
+ version: 0.145.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-04-26 00:00:00.000000000 Z
11
+ date: 2021-05-06 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.143.4
19
+ version: 0.145.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.143.4
26
+ version: 0.145.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: dependabot-maven
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 0.143.4
33
+ version: 0.145.1
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: 0.143.4
40
+ version: 0.145.1
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: byebug
43
43
  requirement: !ruby/object:Gem::Requirement