dependabot-hex 0.154.3 → 0.156.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8a2e81dfed70fa28e55f05451aef58495010efa2ed53a1bd0e7cc3f4ab457bb
-  data.tar.gz: 998387f3e35b00c5fa45353e4e9803dd6cc2ed4ab0bccb04337f61a051a3b314
+  metadata.gz: e784bfdd8a8c5d9496968954f291a7d9f39b225d63f80d25cbe68eea5011718b
+  data.tar.gz: c906a4710e454c2963d2e7fc614d9e11204e23d92a9c702b634769a7b8559278
 SHA512:
-  metadata.gz: e7c0db34899f676797d30e969b3e4dfd715cf012cca83e773d588833ca8da0a648cc21926948f463a59dfeee8ae67df503c4309ad6beb5ab6a8176e32e09cda0
-  data.tar.gz: 4da83bd733d32def1d87a06505be63e93f755aa04afdbd2fc8a8316cdc6991a2e3b5456388c893e87e331b24c470dfceda76607bdd9d71b26cfa031d67e20b3e
+  metadata.gz: dbb1f74020bae1c65138152b797ce14800d28ca5d72c6250cae6a998702f9eb1d7c3a466446ea8469b5e8d8c1301d8fb3ede7dd8fb5f7a91d5a800dd93cfebdb
+  data.tar.gz: 9f7e843c6c09a3bb6e898ff57ccdaa5876c282d2c45ea06f1eb3770675901dd10a10551557d250b2d14a223e9d4daf97624da04816c3533095eb79cc31f92e7b

data/lib/dependabot/hex/file_fetcher.rb

@@ -11,6 +11,7 @@ module Dependabot
       SUPPORTED_METHODS = %w(eval_file require_file).join("|").freeze
       SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/.
                      freeze
+      PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/.freeze
 
       def self.required_files_in?(filenames)
         filenames.include?("mix.exs")
@@ -44,16 +45,26 @@ module Dependabot
         nil
       end
 
-      def subapp_mixfiles
+      def umbrella_app_directories
         apps_path = mixfile.content.match(APPS_PATH_REGEX)&.
                     named_captures&.fetch("path")
         return [] unless apps_path
 
-        app_directories = repo_contents(dir: apps_path).
-                          select { |f| f.type == "dir" }.
-                          map { |f| File.join(apps_path, f.name) }
+        repo_contents(dir: apps_path).
+          select { |f| f.type == "dir" }.
+          map { |f| File.join(apps_path, f.name) }
+      end
+
+      def sub_project_directories
+        mixfile.content.scan(PATH_DEPS_REGEX).flatten
+      end
+
+      def subapp_mixfiles
+        subapp_directories = []
+        subapp_directories += umbrella_app_directories
+        subapp_directories += sub_project_directories
 
-        app_directories.map do |dir|
+        subapp_directories.map do |dir|
           fetch_file_from_host("#{dir}/mix.exs")
         rescue Dependabot::DependencyFileNotFound
           # If the folder doesn't have a mix.exs it *might* be because it's

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.154.3
+  version: 0.156.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-21 00:00:00.000000000 Z
+date: 2021-06-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.3
+        version: 0.156.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.3
+        version: 0.156.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement