dependabot-cargo 0.279.0 → 0.280.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0871338b76428223cb98db714e184c15f4be9e2ee1cc2531a4b8e214459dea6a'
-  data.tar.gz: a4840387735a066650131dbc216be3d2e81252ac3507bf83768190a3d8d12ef7
+  metadata.gz: d4fdfd6dd91f79a57fc97cc455e468e1a2302c815ef4ab6b6d0eea5cd7e2b017
+  data.tar.gz: 6ef55c25d4ad9505af7d6d50dc09c58b7fe589d9518f85007ecd9882912f4588
 SHA512:
-  metadata.gz: c49729555adaefc767a1260cc5853e398ab46f5adef2cb85bff6625520cd13f00daa0505427ef8381b64111989263ebe8a0f87ab06f512580de30876dbc40b6a
-  data.tar.gz: e8f00f80d174e66ea91c39f5ef4ae01beb98c07da9ac489399e6e8accf040914d14da4b2c428bbd79f3bbc079a619ba4be17159be93968fbb0279af0d1e06653
+  metadata.gz: 2d8400d75449aeca27bbb472ffd63528a69d743849d795c14d0c878bf718b98cd77750880065b4e70b34523094a79bc04f7f08c69844441700be92715792ef7a
+  data.tar.gz: 0dd3a891b71f08afcea0b608b0fd0e06464b5a49261917b3f8d502271be8934298c7bb60fb3eb71bd8f7db5cb06fa75410a7852722c887136b2d57256d7caa45

data/lib/dependabot/cargo/update_checker/version_resolver.rb

@@ -20,6 +20,12 @@ module Dependabot
         REF_NOT_FOUND_REGEX = /#{UNABLE_TO_UPDATE}.*(#{REVSPEC_PATTERN}|#{OBJECT_PATTERN})/m
         GIT_REF_NOT_FOUND_REGEX = /Updating git repository `(?<url>[^`]*)`.*fatal: couldn't find remote ref/m
 
+        # Note that as of Rust 1.80, git error message handling in the `cargo update` command changed.
+        # This change causes the NOT_OUR_REF error to appear *before* the UNABLE_TO_UPDATE error.
+        # Issue filed in Cargo project: https://github.com/rust-lang/cargo/issues/14621
+        NOT_OUR_REF = /fatal: remote error: upload-pack: not our ref/
+        NOT_OUR_REF_REGEX = /#{NOT_OUR_REF}.*#{UNABLE_TO_UPDATE}/m
+
         def initialize(dependency:, credentials:,
                        original_dependency_files:, prepared_dependency_files:)
           @dependency = dependency
@@ -223,7 +229,7 @@ module Dependabot
             raise Dependabot::GitDependenciesNotReachable, urls
           end
 
-          [BRANCH_NOT_FOUND_REGEX, REF_NOT_FOUND_REGEX, GIT_REF_NOT_FOUND_REGEX].each do |regex|
+          [BRANCH_NOT_FOUND_REGEX, REF_NOT_FOUND_REGEX, GIT_REF_NOT_FOUND_REGEX, NOT_OUR_REF_REGEX].each do |regex|
             next unless error.message.match?(regex)
 
             dependency_url = error.message.match(regex).named_captures.fetch("url").split(/[#?]/).first

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-cargo
 version: !ruby/object:Gem::Version
-  version: 0.279.0
+  version: 0.280.0
 platform: ruby
 authors:
 - Dependabot
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-03 00:00:00.000000000 Z
+date: 2024-10-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.279.0
+        version: 0.280.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.279.0
+        version: 0.280.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -156,14 +156,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -263,8 +263,8 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.279.0
-post_install_message: 
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.280.0
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -280,7 +280,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 3.1.0
 requirements: []
 rubygems_version: 3.5.9
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Provides Dependabot support for Rust (Cargo)
 test_files: []