dependabot-common 0.156.3 → 0.156.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d15c8c3d9f28a831fd074d1974072f4630fb9c70b19514d6b9638c0c441c8288
-  data.tar.gz: a158febf4f80b0f07f17eeffc4b182d6854a5df0ac787cad6ee49eeca721e3b4
+  metadata.gz: '01582f4e6af1cd2526988f23545637527bc5bfaf8860bc4c5fd964c71a1da905'
+  data.tar.gz: 9a2b2d63bb77138f8ef1cd278403c605bdc559b64fceca90ef3a4cce7ef293a6
 SHA512:
-  metadata.gz: ef463d8902edbb6c5258ec903f954d9b513606be3af6e218c251de5f5fdaf08b2b0d34ffc1e3b7c9d067f1cb51a95caf1be8e750575b1c06d39299058852d47a
-  data.tar.gz: b1ea8502442cb9d636494ae3d9ff5aeb37c9fa5087f95c0edec04efaa8ce61d49e14d0c4363b2e06b6f3d6759e1d1b7e47e60d4e3d551b626231e60cd6712f1b
+  metadata.gz: 96dcdabb126fe52488da7faa1de7121b092a88bcc06fd30694adeca5d8bb6ccdea9f594f013b42aad916c1c74e6337f40273ceb3923b748bcfb0635a38ff16b6
+  data.tar.gz: 7154b80c394c70d49930d49c34a03ddfa34e0c1c76d8e9048644836ceca055b6bc64fecd1edeffbf71504e1eb6ed02778d34eef66d5818c7e3657829ba67c23e

data/lib/dependabot/clients/azure.rb

@@ -14,6 +14,10 @@ module Dependabot
 
       class BadGateway < StandardError; end
 
+      class Unauthorized < StandardError; end
+
+      class Forbidden < StandardError; end
+
       RETRYABLE_ERRORS = [InternalServerError, BadGateway, ServiceNotAvailable].freeze
 
       MAX_PR_DESCRIPTION_LENGTH = 3999
@@ -228,6 +232,8 @@ module Dependabot
           raise ServiceNotAvailable if response.status == 503
         end
 
+        raise Unauthorized if response.status == 401
+        raise Forbidden if response.status == 403
         raise NotFound if response.status == 404
 
         response
@@ -257,6 +263,8 @@ module Dependabot
           raise ServiceNotAvailable if response.status == 503
         end
 
+        raise Unauthorized if response.status == 401
+        raise Forbidden if response.status == 403
         raise NotFound if response.status == 404
 
         response

data/lib/dependabot/file_fetchers/base.rb

@@ -157,11 +157,12 @@ module Dependabot
         path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
-        @repo_contents[dir] ||= _fetch_repo_contents(
-          path,
-          raise_errors: raise_errors,
-          fetch_submodules: fetch_submodules
-        )
+        @repo_contents[dir] ||= if repo_contents_path
+                                  _cloned_repo_contents(path)
+                                else
+                                  _fetch_repo_contents(path, raise_errors: raise_errors,
+                                                             fetch_submodules: fetch_submodules)
+                                end
       end
 
       #################################################
@@ -225,6 +226,22 @@ module Dependabot
         github_response.map { |f| _build_github_file_struct(f) }
       end
 
+      def _cloned_repo_contents(relative_path)
+        repo_path = File.join(clone_repo_contents, relative_path)
+        return [] unless Dir.exist?(repo_path)
+
+        Dir.entries(repo_path).map do |name|
+          next if [".", ".."].include?(name)
+
+          OpenStruct.new(
+            name: name,
+            path: Pathname.new(File.join(relative_path, name)).cleanpath.to_path,
+            type: Dir.exist?(File.join(repo_path, name)) ? "dir" : "file",
+            size: 0 # NOTE: added for parity with github contents API
+          )
+        end.compact
+      end
+
       def update_linked_paths(repo, path, commit, github_response)
         case github_response.type
         when "submodule"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.156.3"
+  VERSION = "0.156.7"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.156.3
+  version: 0.156.7
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-29 00:00:00.000000000 Z
+date: 2021-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -298,14 +298,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.17.0
+        version: 1.18.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.17.0
+        version: 1.18.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers