Fix parser for libraries

[kachick]

Fixes #223

I have faced same issue.

In my case, most PRs have missing information except "github-actions" ecosystem.
Missing versions makes "outputs.update-type: null". It makes unexpected behavior of auto-merge.

fetch-metadata/README.md

Line 134 in a7c13a8

if: ${{contains(steps.dependabot-metadata.outputs.dependency-names, 'rails') && steps.dependabot-metadata.outputs.update-type == 'version-update:semver-patch'}}

Filled: kachick/ruby-ulid#195 => https://github.com/kachick/ruby-ulid/runs/6909618923?check_suite_focus=true#step:2:18
Missing: kachick/ruby-ulid#199 => https://github.com/kachick/ruby-ulid/runs/7083025063?check_suite_focus=true#step:2:18

They have different PR title.

Following code sounds apply different commit message and title for library and applications.

https://github.com/dependabot/dependabot-core/blob/7444344c03b86112b4801eec92b0909e05dbfe33/common/lib/dependabot/pull_request_creator/message_builder.rb#L71-L110
https://github.com/dependabot/dependabot-core/blob/7444344c03b86112b4801eec92b0909e05dbfe33/common/lib/dependabot/pull_request_creator/message_builder.rb#L126-L130
https://github.com/dependabot/dependabot-core/blob/7444344c03b86112b4801eec92b0909e05dbfe33/common/lib/dependabot/pull_request_creator/message_builder.rb#L181-L216

However current parser targets only for application messages, it looks a cause to me.

[kachick]

Compared results

Before

  outputs.dependency-names: test-unit
  outputs.dependency-type: direct:development
  outputs.update-type: null
  outputs.directory: /
  outputs.package-ecosystem: bundler
  outputs.target-branch: main
  outputs.previous-version: 
  outputs.new-version: 
  outputs.compatibility-score: 0
  outputs.alert-state: 
  outputs.ghsa-id: 
  outputs.cvss: 0

---

After this PR

  outputs.dependency-names: test-unit
  outputs.dependency-type: direct:development
  outputs.update-type: version-update:semver-patch
  outputs.directory: /
  outputs.package-ecosystem: bundler
  outputs.target-branch: main
  outputs.previous-version: 3.5.3
  outputs.new-version: 3.5.5
  
  outputs.compatibility-score: 0
  outputs.alert-state: 
  outputs.ghsa-id: 
  outputs.cvss: 0

[Nishnha]

Hi @kachick thanks for opening this PR!

I think this is off to a good start and I started the CI run 😄

---

The indentation on this multiline string is a bit weird here

fetch-metadata/src/main.test.ts

Lines 136 to 148 in cf0e979

	const mockCommitMessage = `Update rubocop requirement from ~> 1.30.1 to ~> 1.31.0
	Updates the requirements on [rubocop](https://github.com/rubocop/rubocop) to permit the latest version.
	- [Release notes](https://github.com/rubocop/rubocop/releases)
	- [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md)
	- [Commits](rubocop/rubocop@v1.30.1...v1.31.0)
	---
	updated-dependencies:
	- dependency-name: rubocop
	dependency-type: direct:development
	...
	Signed-off-by: dependabot[bot] <support@github.com>`

Maybe we can treat each line as a separate string and join with + like in

fetch-metadata/src/main.test.ts

Lines 66 to 79 in cf0e979

	const mockCommitMessage =
	'Bumps [coffee-rails](https://github.com/rails/coffee-rails) from 4.0.1 to 4.2.2.\n' +
	'- [Release notes](https://github.com/rails/coffee-rails/releases)\n' +
	'- [Changelog](https://github.com/rails/coffee-rails/blob/master/CHANGELOG.md)\n' +
	'- [Commits](rails/coffee-rails@v4.0.1...v4.2.2)\n' +
	'\n' +
	'---\n' +
	'updated-dependencies:\n' +
	'- dependency-name: coffee-rails\n' +
	' dependency-type: direct:production\n' +
	' update-type: version-update:semver-minor\n' +
	'...\n' +
	'\n' +
	'Signed-off-by: dependabot[bot] <support@github.com>'

What do you think?

[kachick]

@Nishnha

Thanks for your reviewing! I have updated this PR as 0a3f183. To keep same coding style with existing test cases.

[Nishnha]

This looks great! Thank you for being so patient

[Nishnha]

Released in https://github.com/dependabot/fetch-metadata/releases/tag/v1.3.6

[kachick]

Thank you!