dependabot-common 0.156.4 → 0.156.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e39eee9a89b619ae11edbb045c99a8a88f7e8a1a3e494a655e0a35aa6aa58644
-  data.tar.gz: d4c75ce73b32e2e03afb8164e09158373a1fb5fad84ed0ae56da66898eef8b25
+  metadata.gz: a228900d547d72f07db549728cf5d29e610ac89d623f41ffef4b69903a93692d
+  data.tar.gz: 5907cbcfe731accd8c0be129b894e96efd3f4d2ab0407e0d5accd380c46e73c9
 SHA512:
-  metadata.gz: '041844a828047dacf14e985628f69315038f823792581e7fd5f3cada10d5521f650139c099aef6c106042d20341b1959d7edad22f9e9d653f5d346e3e8f41b6c'
-  data.tar.gz: b404559550ecc79d654a6ebbcfc35cc9116ae775749bc34883d00217f782539ed4ef44f0eaf27dda28fe37ddeb21fe32ae7176caa4ea9a5fd04981970c9c7fa9
+  metadata.gz: 5e541559edf31b7567d2b3f84277ae1db8bad6c3675f12e1ba1286c285f6a679920f3f56e0128394aecb50f4a491cba3e754349235e59d0d02334a39b62adc2e
+  data.tar.gz: a31eda6e8d5d4fab9e7bf1c602532b1bf3f8b63935c18e1ded6432096884aaac249e6a478cad5ac83f79f69b95c8945511fc6c205162e811004fc6ce51ebba65

data/lib/dependabot/clients/azure.rb

@@ -14,6 +14,10 @@ module Dependabot
 
       class BadGateway < StandardError; end
 
+      class Unauthorized < StandardError; end
+
+      class Forbidden < StandardError; end
+
       RETRYABLE_ERRORS = [InternalServerError, BadGateway, ServiceNotAvailable].freeze
 
       MAX_PR_DESCRIPTION_LENGTH = 3999
@@ -228,6 +232,8 @@ module Dependabot
           raise ServiceNotAvailable if response.status == 503
         end
 
+        raise Unauthorized if response.status == 401
+        raise Forbidden if response.status == 403
         raise NotFound if response.status == 404
 
         response
@@ -257,6 +263,8 @@ module Dependabot
           raise ServiceNotAvailable if response.status == 503
         end
 
+        raise Unauthorized if response.status == 401
+        raise Forbidden if response.status == 403
         raise NotFound if response.status == 404
 
         response

data/lib/dependabot/file_fetchers/base.rb

@@ -157,11 +157,12 @@ module Dependabot
         path = Pathname.new(File.join(dir)).cleanpath.to_path.gsub(%r{^/*}, "")
 
         @repo_contents ||= {}
-        @repo_contents[dir] ||= _fetch_repo_contents(
-          path,
-          raise_errors: raise_errors,
-          fetch_submodules: fetch_submodules
-        )
+        @repo_contents[dir] ||= if repo_contents_path
+                                  _cloned_repo_contents(path)
+                                else
+                                  _fetch_repo_contents(path, raise_errors: raise_errors,
+                                                             fetch_submodules: fetch_submodules)
+                                end
       end
 
       #################################################
@@ -225,6 +226,31 @@ module Dependabot
         github_response.map { |f| _build_github_file_struct(f) }
       end
 
+      def _cloned_repo_contents(relative_path)
+        repo_path = File.join(clone_repo_contents, relative_path)
+        return [] unless Dir.exist?(repo_path)
+
+        Dir.entries(repo_path).map do |name|
+          next if [".", ".."].include?(name)
+
+          absolute_path = File.join(repo_path, name)
+          type = if File.symlink?(absolute_path)
+                   "symlink"
+                 elsif Dir.exist?(absolute_path)
+                   "dir"
+                 else
+                   "file"
+                 end
+
+          OpenStruct.new(
+            name: name,
+            path: Pathname.new(File.join(relative_path, name)).cleanpath.to_path,
+            type: type,
+            size: 0 # NOTE: added for parity with github contents API
+          )
+        end.compact
+      end
+
       def update_linked_paths(repo, path, commit, github_response)
         case github_response.type
         when "submodule"

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.156.4"
+  VERSION = "0.156.8"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.156.4
+  version: 0.156.8
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-30 00:00:00.000000000 Z
+date: 2021-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -469,7 +469,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.7.3
 requirements: []
-rubygems_version: 3.2.15
+rubygems_version: 3.2.22
 signing_key: 
 specification_version: 4
 summary: Shared code used between Dependabot package managers