dependabot-cargo 0.278.0 → 0.280.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7139df27d0d816d049f9b634ea6bb07dd9d218115d516bd1fd246656a896a9c7
-  data.tar.gz: 830646109c386121beeb7f3882a071f881d077ccd96bfed48041f68425951094
+  metadata.gz: d4fdfd6dd91f79a57fc97cc455e468e1a2302c815ef4ab6b6d0eea5cd7e2b017
+  data.tar.gz: 6ef55c25d4ad9505af7d6d50dc09c58b7fe589d9518f85007ecd9882912f4588
 SHA512:
-  metadata.gz: ae95d1ec74da990eca665f5c35e122534439ebad8cc3be419462f167c3f9d2c90838ae2078f490f8082a6834f50e45f98f815c2cb3c592d299f573c285ee50b2
-  data.tar.gz: d12dbd6f6702fc8ec5154f811fbd93336ecc2bf01f58b08705df70ee3436b67a631a148be810fe8f06cc27059b6942c8ed8a8fb65ece777a2b0d5d8e121c12cd
+  metadata.gz: 2d8400d75449aeca27bbb472ffd63528a69d743849d795c14d0c878bf718b98cd77750880065b4e70b34523094a79bc04f7f08c69844441700be92715792ef7a
+  data.tar.gz: 0dd3a891b71f08afcea0b608b0fd0e06464b5a49261917b3f8d502271be8934298c7bb60fb3eb71bd8f7db5cb06fa75410a7852722c887136b2d57256d7caa45

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -20,6 +20,12 @@ module Dependabot
         REF_NOT_FOUND_REGEX = /#{UNABLE_TO_UPDATE}.*(#{REVSPEC_PATTERN}|#{OBJECT_PATTERN})/m
         GIT_REF_NOT_FOUND_REGEX = /Updating git repository `(?<url>[^`]*)`.*fatal: couldn't find remote ref/m
 
+        # Note that as of Rust 1.80, git error message handling in the `cargo update` command changed.
+        # This change causes the NOT_OUR_REF error to appear *before* the UNABLE_TO_UPDATE error.
+        # Issue filed in Cargo project: https://github.com/rust-lang/cargo/issues/14621
+        NOT_OUR_REF = /fatal: remote error: upload-pack: not our ref/
+        NOT_OUR_REF_REGEX = /#{NOT_OUR_REF}.*#{UNABLE_TO_UPDATE}/m
+
         def initialize(dependency:, credentials:,
                        original_dependency_files:, prepared_dependency_files:)
           @dependency = dependency
@@ -223,7 +229,7 @@ module Dependabot
             raise Dependabot::GitDependenciesNotReachable, urls
           end
 
-          [BRANCH_NOT_FOUND_REGEX, REF_NOT_FOUND_REGEX, GIT_REF_NOT_FOUND_REGEX].each do |regex|
+          [BRANCH_NOT_FOUND_REGEX, REF_NOT_FOUND_REGEX, GIT_REF_NOT_FOUND_REGEX, NOT_OUR_REF_REGEX].each do |regex|
             next unless error.message.match?(regex)
 
             dependency_url = error.message.match(regex).named_captures.fetch("url").split(/[#?]/).first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.278.0
+  version: 0.280.0
 platform: ruby
 authors:
 - Dependabot
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-09-26 00:00:00.000000000 Z
+date: 2024-10-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.278.0
+        version: 0.280.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.278.0
+        version: 0.280.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -156,14 +156,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -263,8 +263,8 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.278.0
-post_install_message: 
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.280.0
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -280,7 +280,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 3.1.0
 requirements: []
 rubygems_version: 3.5.9
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Provides Dependabot support for Rust (Cargo)
 test_files: []