dependabot-hex 0.154.4 → 0.156.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 99fb43da22845f90e8b1a9451286cedd71caaf290a94b829f5b7180bdc414c76
-  data.tar.gz: c7752daa9bd559de0d2ba5b00025e77b0f7f22105efafb30903555913b417633
+  metadata.gz: 7bba4c21b016073c1d3eee4c506cf00c327968adedd265d55e7dcd364e63eda3
+  data.tar.gz: 6eee992b74a8514b61cf1e2495082769bf6371d836971f411ca65a7a335dc041
 SHA512:
-  metadata.gz: 66db902b4a58a2451dba790331d7765661ff27393ea8ce7971c0657ca6da472d7629c6f55f599c4f754d899635c18d50371902c6c448ebc635a5afc0723f526a
-  data.tar.gz: e9a69a1e1c8901e4dbdc9363e044adb99f2c87f800c5ff3d65a88dfb94bac8ca4e7c339c1246fc532e71f3b2f54c771d929ac344b252133cdaa608d58cec21ce
+  metadata.gz: 316951f1f654c096652fa85334e66884a2569a460aba7ed083aeef71becfb267cea0a33f5489ea60c1fadc630c201eeda752da67d3ddbfd6e9bbe8668ab2f7e4
+  data.tar.gz: e31d980946b50a1728d0cf03c74bb71d204bb81481da6e1b835f3d8647a073bd89e2457099482c319c4b9d900bddb843277b85bf08be4205bc0c22a455152cf1

data/lib/dependabot/hex/file_fetcher.rb

@@ -11,6 +11,7 @@ module Dependabot
       SUPPORTED_METHODS = %w(eval_file require_file).join("|").freeze
       SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/.
                      freeze
+      PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/.freeze
 
       def self.required_files_in?(filenames)
         filenames.include?("mix.exs")
@@ -44,16 +45,26 @@ module Dependabot
         nil
       end
 
-      def subapp_mixfiles
+      def umbrella_app_directories
         apps_path = mixfile.content.match(APPS_PATH_REGEX)&.
                     named_captures&.fetch("path")
         return [] unless apps_path
 
-        app_directories = repo_contents(dir: apps_path).
-                          select { |f| f.type == "dir" }.
-                          map { |f| File.join(apps_path, f.name) }
+        repo_contents(dir: apps_path).
+          select { |f| f.type == "dir" }.
+          map { |f| File.join(apps_path, f.name) }
+      end
+
+      def sub_project_directories
+        mixfile.content.scan(PATH_DEPS_REGEX).flatten
+      end
+
+      def subapp_mixfiles
+        subapp_directories = []
+        subapp_directories += umbrella_app_directories
+        subapp_directories += sub_project_directories
 
-        app_directories.map do |dir|
+        subapp_directories.map do |dir|
           fetch_file_from_host("#{dir}/mix.exs")
         rescue Dependabot::DependencyFileNotFound
           # If the folder doesn't have a mix.exs it *might* be because it's

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.154.4
+  version: 0.156.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-22 00:00:00.000000000 Z
+date: 2021-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.4
+        version: 0.156.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.4
+        version: 0.156.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement