Merge pull request #6878 from dependabot/deivid-rodriguez/gradle-inco…

…rrect-pr

Don't consider references to catalogs in buildfiles

gradle/lib/dependabot/gradle/file_parser.rb

@@ -224,7 +224,7 @@ def plugin_dependencies(buildfile)
           blk.lines.each do |line|
             name_regex = /(id|kotlin)(\s+#{PLUGIN_ID_REGEX}|\(#{PLUGIN_ID_REGEX}\))/o
             name = line.match(name_regex)&.named_captures&.fetch("id")
-            version_regex = /version\s+['"]?(?<version>#{VSN_PART})['"]?/o
+            version_regex = /version\s+(?<version>['"]?#{VSN_PART}['"]?)/o
             version = format_plugin_version(line.match(version_regex)&.named_captures&.fetch("version"))
             next unless name && version
 
@@ -238,7 +238,7 @@ def plugin_dependencies(buildfile)
       end
 
       def format_plugin_version(version)
-        version&.match?(/^\w+$/) ? "$#{version}" : version
+        quoted?(version) ? unquote(version) : "$#{version}"
       end
 
       def extra_groups(line)
@@ -401,6 +401,14 @@ def original_file
           SUPPORTED_BUILD_FILE_NAMES.include?(f.name)
         end
       end
+
+      def quoted?(string)
+        string&.match?(/^['"].*['"]$/)
+      end
+
+      def unquote(string)
+        string[1..-2]
+      end
     end
   end
 end

gradle/spec/fixtures/buildfiles/root_build.gradle.kts

@@ -12,6 +12,8 @@ plugins {
 
     val helmVersion = "1.6.0"
     id("org.unbroken-dome.helm") version helmVersion apply false
+
+    id("not.yet.updatable") version libs.versions.notYetUpdatable apply false
 }
 
 buildscript {