dependabot-pre_commit 0.364.0 → 0.366.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/lib/dependabot/pre_commit/file_parser.rb +1 -1
  3. data/lib/dependabot/pre_commit/file_updater.rb +1 -1
  4. data/lib/dependabot/pre_commit.rb +20 -1
  5. metadata +14 -14
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d1bd3f81f06b4e86d4139cf07b731129092edf1f86f4febc799cefb7d67fd03e
4
- data.tar.gz: 1fa2859dd9dafc4b09ab7718de4b59d2cff583c5991c5439644b40fb2c4a88c8
3
+ metadata.gz: a9b2578041472484fa112814b8457d63037ac1615abae5882e6b45f3952f51d8
4
+ data.tar.gz: c9252570487e0871f0df298b70d96e736e1c9b317b4eeb7dfb58f0216d1865c4
5
5
  SHA512:
6
- metadata.gz: e3c7c74f6e6565ca5ecf32734d4a9d7af200e8acaabec1856abb839815b5d26360375c915104a7b4c484abf0333e68685029ad5b793ab43da0179893f5088507
7
- data.tar.gz: e1f3f69285a2cf37e1072ae5216693f51d764c48ef2de33dda2d669943900e41f085e4ec6a8529f761a11fedb58a2c82867a2ef9ab67fdb2b80c47942931203e
6
+ metadata.gz: 3d26686818d0cdd7b7057e6c02dfdf0315ad50953f20b9fbc41ddb49dcfcb0aa903564683111faae5d8ac58be741d2df51ce46714389020ecfad4e8a00b021f3
7
+ data.tar.gz: ed66d3a7c1e0e4a78d29a8ef09485321b5a3f980e8d56634d2c3c9cf44def0e2bddb73971f49e04827c886fcb2673152462a4ac9c4d04a4e0a40e0cb751875a9
data/lib/dependabot/pre_commit/file_parser.rb CHANGED
@@ -246,7 +246,7 @@ module Dependabot
246
246
  current_repo = T.let(nil, T.nilable(String))
247
247
 
248
248
  T.must(file.content).each_line do |line|
249
- repo_match = line.match(/^\s*-\s*repo:\s*(\S+)/)
249
+ repo_match = line.match(/^\s*-\s*repo:\s*["']?([^"'\s]+)["']?/)
250
250
  current_repo = repo_match[1] if repo_match
251
251
 
252
252
  next unless current_repo == repo_url
data/lib/dependabot/pre_commit/file_updater.rb CHANGED
@@ -158,7 +158,7 @@ module Dependabot
158
158
  current_repo = T.let(nil, T.nilable(String))
159
159
 
160
160
  updated_lines = content.lines.map do |line|
161
- repo_match = line.match(/^\s*-\s*repo:\s*(\S+)/)
161
+ repo_match = line.match(/^\s*-\s*repo:\s*["']?([^"'\s]+)["']?/)
162
162
  current_repo = repo_match[1] if repo_match
163
163
 
164
164
  if current_repo == repo_url &&
data/lib/dependabot/pre_commit.rb CHANGED
@@ -1,4 +1,4 @@
1
- # typed: strong
1
+ # typed: strict
2
2
  # frozen_string_literal: true
3
3
 
4
4
  # These all need to be required so the various classes can be registered in a
@@ -11,6 +11,7 @@ require "dependabot/pre_commit/metadata_finder"
11
11
  require "dependabot/pre_commit/version"
12
12
  require "dependabot/pre_commit/requirement"
13
13
  require "dependabot/pre_commit/helpers"
14
+ require "dependabot/pre_commit/comment_version_helper"
14
15
 
15
16
  require "dependabot/pull_request_creator/labeler"
16
17
  Dependabot::PullRequestCreator::Labeler
@@ -18,3 +19,21 @@ Dependabot::PullRequestCreator::Labeler
18
19
 
19
20
  require "dependabot/dependency"
20
21
  Dependabot::Dependency.register_production_check("pre_commit", ->(_) { true })
22
+
23
+ # Register a humanized previous version builder for pre_commit that extracts
24
+ # the version from the comment when using frozen SHA format (e.g., rev: <sha> # v2.2.1)
25
+ Dependabot::Dependency.register_humanized_previous_version_builder(
26
+ "pre_commit",
27
+ lambda { |dep|
28
+ previous_reqs = dep.previous_requirements
29
+ return nil unless previous_reqs
30
+
31
+ comment = previous_reqs
32
+ .filter_map { |r| r.dig(:metadata, :comment) }
33
+ .first
34
+ return nil unless comment
35
+
36
+ match = comment.match(Dependabot::PreCommit::CommentVersionHelper::COMMENT_VERSION_PATTERN)
37
+ match&.[](0)
38
+ }
39
+ )
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-pre_commit
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.364.0
4
+ version: 0.366.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,84 +15,84 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.364.0
18
+ version: 0.366.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.364.0
25
+ version: 0.366.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: dependabot-cargo
28
28
  requirement: !ruby/object:Gem::Requirement
29
29
  requirements:
30
30
  - - '='
31
31
  - !ruby/object:Gem::Version
32
- version: 0.364.0
32
+ version: 0.366.0
33
33
  type: :runtime
34
34
  prerelease: false
35
35
  version_requirements: !ruby/object:Gem::Requirement
36
36
  requirements:
37
37
  - - '='
38
38
  - !ruby/object:Gem::Version
39
- version: 0.364.0
39
+ version: 0.366.0
40
40
  - !ruby/object:Gem::Dependency
41
41
  name: dependabot-common
42
42
  requirement: !ruby/object:Gem::Requirement
43
43
  requirements:
44
44
  - - '='
45
45
  - !ruby/object:Gem::Version
46
- version: 0.364.0
46
+ version: 0.366.0
47
47
  type: :runtime
48
48
  prerelease: false
49
49
  version_requirements: !ruby/object:Gem::Requirement
50
50
  requirements:
51
51
  - - '='
52
52
  - !ruby/object:Gem::Version
53
- version: 0.364.0
53
+ version: 0.366.0
54
54
  - !ruby/object:Gem::Dependency
55
55
  name: dependabot-go_modules
56
56
  requirement: !ruby/object:Gem::Requirement
57
57
  requirements:
58
58
  - - '='
59
59
  - !ruby/object:Gem::Version
60
- version: 0.364.0
60
+ version: 0.366.0
61
61
  type: :runtime
62
62
  prerelease: false
63
63
  version_requirements: !ruby/object:Gem::Requirement
64
64
  requirements:
65
65
  - - '='
66
66
  - !ruby/object:Gem::Version
67
- version: 0.364.0
67
+ version: 0.366.0
68
68
  - !ruby/object:Gem::Dependency
69
69
  name: dependabot-npm_and_yarn
70
70
  requirement: !ruby/object:Gem::Requirement
71
71
  requirements:
72
72
  - - '='
73
73
  - !ruby/object:Gem::Version
74
- version: 0.364.0
74
+ version: 0.366.0
75
75
  type: :runtime
76
76
  prerelease: false
77
77
  version_requirements: !ruby/object:Gem::Requirement
78
78
  requirements:
79
79
  - - '='
80
80
  - !ruby/object:Gem::Version
81
- version: 0.364.0
81
+ version: 0.366.0
82
82
  - !ruby/object:Gem::Dependency
83
83
  name: dependabot-python
84
84
  requirement: !ruby/object:Gem::Requirement
85
85
  requirements:
86
86
  - - '='
87
87
  - !ruby/object:Gem::Version
88
- version: 0.364.0
88
+ version: 0.366.0
89
89
  type: :runtime
90
90
  prerelease: false
91
91
  version_requirements: !ruby/object:Gem::Requirement
92
92
  requirements:
93
93
  - - '='
94
94
  - !ruby/object:Gem::Version
95
- version: 0.364.0
95
+ version: 0.366.0
96
96
  - !ruby/object:Gem::Dependency
97
97
  name: debug
98
98
  requirement: !ruby/object:Gem::Requirement
@@ -338,7 +338,7 @@ licenses:
338
338
  - MIT
339
339
  metadata:
340
340
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
341
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.364.0
341
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.366.0
342
342
  rdoc_options: []
343
343
  require_paths:
344
344
  - lib