dependabot-hex 0.155.1 → 0.156.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 860d8ecc42039e11415876da7ac934f8fbd4070732f1c17e293a3e7f8096f608
-  data.tar.gz: ba59af143206faa5d124b9bd1a2f54e666a34ff6e82864533846aa74aafd061f
+  metadata.gz: e784bfdd8a8c5d9496968954f291a7d9f39b225d63f80d25cbe68eea5011718b
+  data.tar.gz: c906a4710e454c2963d2e7fc614d9e11204e23d92a9c702b634769a7b8559278
 SHA512:
-  metadata.gz: 5de57ef895b4ff4d1b328e603a76b29b5bb415ffcb0e8340b07492695dde61db043ba05303e21c9921002897171e72a196e6b073d97189407fb822faeefb0518
-  data.tar.gz: 5c6dbb224fea9d727500f136e0ab922942c951bde2f06c99d3dd82a7cc6e112a271183847c857b8aaf43c064701768e9ff65ad26b22bac576bed53723d8718e1
+  metadata.gz: dbb1f74020bae1c65138152b797ce14800d28ca5d72c6250cae6a998702f9eb1d7c3a466446ea8469b5e8d8c1301d8fb3ede7dd8fb5f7a91d5a800dd93cfebdb
+  data.tar.gz: 9f7e843c6c09a3bb6e898ff57ccdaa5876c282d2c45ea06f1eb3770675901dd10a10551557d250b2d14a223e9d4daf97624da04816c3533095eb79cc31f92e7b

data/lib/dependabot/hex/file_fetcher.rb

@@ -11,6 +11,7 @@ module Dependabot
       SUPPORTED_METHODS = %w(eval_file require_file).join("|").freeze
       SUPPORT_FILE = /Code\.(?:#{SUPPORTED_METHODS})\(#{STRING_ARG}(?:\s*,\s*#{STRING_ARG})?\)/.
                      freeze
+      PATH_DEPS_REGEX = /{.*path: ?#{STRING_ARG}.*}/.freeze
 
       def self.required_files_in?(filenames)
         filenames.include?("mix.exs")
@@ -44,16 +45,26 @@ module Dependabot
         nil
       end
 
-      def subapp_mixfiles
+      def umbrella_app_directories
         apps_path = mixfile.content.match(APPS_PATH_REGEX)&.
                     named_captures&.fetch("path")
         return [] unless apps_path
 
-        app_directories = repo_contents(dir: apps_path).
-                          select { |f| f.type == "dir" }.
-                          map { |f| File.join(apps_path, f.name) }
+        repo_contents(dir: apps_path).
+          select { |f| f.type == "dir" }.
+          map { |f| File.join(apps_path, f.name) }
+      end
+
+      def sub_project_directories
+        mixfile.content.scan(PATH_DEPS_REGEX).flatten
+      end
+
+      def subapp_mixfiles
+        subapp_directories = []
+        subapp_directories += umbrella_app_directories
+        subapp_directories += sub_project_directories
 
-        app_directories.map do |dir|
+        subapp_directories.map do |dir|
           fetch_file_from_host("#{dir}/mix.exs")
         rescue Dependabot::DependencyFileNotFound
           # If the folder doesn't have a mix.exs it *might* be because it's

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.155.1
+  version: 0.156.0
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.1
+        version: 0.156.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.155.1
+        version: 0.156.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement