dependabot-hex 0.154.5 → 0.156.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c92fe6a23ca815487849c14a72baa858fb83c45bf76dcdf448eb8dff77fa5b8b
-  data.tar.gz: eb23d8e10752e9ea389e8c74dac116f681a653ebbec68d6add4e49735b1a7c9e
+  metadata.gz: 779849e7c77e260f62c0da0faf4a2341ed98ebe6266972e2bbf9cf39550a6133
+  data.tar.gz: de9428c2fd568b98c8a57cddf6512f3b892c51b14df2d58479cb7bc41c308216
 SHA512:
-  metadata.gz: 2f0ba514a39535e57943cd374918c4574633a50561dd787e9664e82e830d5740653fa653ba9d8ae2a6464128025f1da520aa427ee9e234a8a6f1153d58433b5f
-  data.tar.gz: 0133f09c9b5c3a6d09d7caa9b25f2fcba9fedc3657c4753dba594ddd69ccc217782ad3cc3faa1366e5e8dd8af4ccae98b47bc04f9570be1ac772d95d5c38ee24
+  metadata.gz: 8fdc35c0b2dcaa4479d3bdd7ab98dbdc878fd58b1620c2c2020ff080cd029bb0e3f81778af32af9655fb458421a0ceabdd8c202b8ac79ad4743e36fbbc2a954c
+  data.tar.gz: c5ec999e4ad6166eaad93502f64ce0860e300e0944fe10f2cd066c013fcc8e51a03cb02db4a9ea27fc4f8b16e3be3e3d4ca74b42bdeecddd90059c7b860498aa

data/lib/dependabot/hex/file_fetcher.rb

@@ -11,6 +11,7 @@ module Dependabot
       SUPPORTED_METHODS = %w(eval_file require_file).join("|").freeze
       SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/.
                      freeze
+      PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/.freeze
 
       def self.required_files_in?(filenames)
         filenames.include?("mix.exs")
@@ -44,16 +45,26 @@ module Dependabot
         nil
       end
 
-      def subapp_mixfiles
+      def umbrella_app_directories
         apps_path = mixfile.content.match(APPS_PATH_REGEX)&.
                     named_captures&.fetch("path")
         return [] unless apps_path
 
-        app_directories = repo_contents(dir: apps_path).
-                          select { |f| f.type == "dir" }.
-                          map { |f| File.join(apps_path, f.name) }
+        repo_contents(dir: apps_path).
+          select { |f| f.type == "dir" }.
+          map { |f| File.join(apps_path, f.name) }
+      end
+
+      def sub_project_directories
+        mixfile.content.scan(PATH_DEPS_REGEX).flatten
+      end
+
+      def subapp_mixfiles
+        subapp_directories = []
+        subapp_directories += umbrella_app_directories
+        subapp_directories += sub_project_directories
 
-        app_directories.map do |dir|
+        subapp_directories.map do |dir|
           fetch_file_from_host("#{dir}/mix.exs")
         rescue Dependabot::DependencyFileNotFound
           # If the folder doesn't have a mix.exs it *might* be because it's

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.154.5
+  version: 0.156.2
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-22 00:00:00.000000000 Z
+date: 2021-06-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.5
+        version: 0.156.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.154.5
+        version: 0.156.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.17.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement