Merge pull request #5186 from dependabot/document-why-escaping-necessary

Document why the link needs to be unescaped

nuget/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -232,6 +232,9 @@ def fetch_paginated_v2_nuget_listings(url_details, results = {})
 
           if (link_href = fetch_v2_next_link_href(response.body))
             url_details = url_details.dup
+            # Some Nuget repositories, such as JFrog's Artifactory, URL encode the "next" href
+            # link in the paged results. If the href is not URL decoded, the paging parameters
+            # are ignored and the first page is always returned.
             url_details[:versions_url] = CGI.unescape(link_href)
             fetch_paginated_v2_nuget_listings(url_details, results)
           end