dependabot-common 0.164.0 → 0.166.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 15d09c789245d49223db4df88b82fa3376f9ca598b926ce44e9c10018d0442c1
-  data.tar.gz: 9e6ed02b46b8cbe7b574a515abf1179b136d0501b657620d187914f9f29b7e7a
+  metadata.gz: 61f19fa2ef3292f2a0cf46f25675deee06beacb629351e06dfe3178d2187c51e
+  data.tar.gz: ec099d3cf6b2839d0095cb13937366d1276488d96d73fdab0e461d52fa74e441
 SHA512:
-  metadata.gz: 0a47e494cd76b7569d4fba0212f188f2b401fd087f70cc44b94f39ad16650edcacf90440200e6d16f0978c84d832d97eb24d892d8f74a38607b875b932f8eb1c
-  data.tar.gz: 89cac44d3a3febd767e78146deba6758b821c0d61bded08856c098117f2388a052e6063a879282a75f4346727517374ed936af5b78975ea7ab68ffbd1d4c3eed
+  metadata.gz: c7e0cc953074f0428ca59ec66ba1b34eb2b7f82cd5b009d3865730e8d422bc57673d6d353c23cf69f5323080b855368c1c01db9459cd214fca11e462a173495e
+  data.tar.gz: 37a8babd52a43df9bcc2d9c65371677f42c81ae57b8e17f17253084687a157721e97ad6279fbe4b379baf56975bcd9c3b75cbca06bc06a46ffd844480ae1bdd5

data/lib/dependabot/shared_helpers.rb

@@ -40,10 +40,14 @@ module Dependabot
 
     def self.in_a_temporary_directory(directory = "/")
       Dir.mkdir(Utils::BUMP_TMP_DIR_PATH) unless Dir.exist?(Utils::BUMP_TMP_DIR_PATH)
-      Dir.mktmpdir(Utils::BUMP_TMP_FILE_PREFIX, Utils::BUMP_TMP_DIR_PATH) do |dir|
-        path = Pathname.new(File.join(dir, directory)).expand_path
+      tmp_dir = Dir.mktmpdir(Utils::BUMP_TMP_FILE_PREFIX, Utils::BUMP_TMP_DIR_PATH)
+
+      begin
+        path = Pathname.new(File.join(tmp_dir, directory)).expand_path
         FileUtils.mkpath(path)
         Dir.chdir(path) { yield(path) }
+      ensure
+        FileUtils.rm_rf(tmp_dir)
       end
     end
 

data/lib/dependabot/source.rb

@@ -9,6 +9,15 @@ module Dependabot
       (?:(?:/tree|/blob)/(?<branch>[^/]+)/(?<directory>.*)[\#|/])?
     }x.freeze
 
+    GITHUB_ENTERPRISE_SOURCE = %r{
+      (?<protocol>(http://|https://|git://|ssh://))*
+      (?<username>[^@]+@)*
+      (?<host>[^/]+)
+      [/:]
+      (?<repo>[\w.-]+/(?:(?!\.git|\.\s)[\w.-])+)
+      (?:(?:/tree|/blob)/(?<branch>[^/]+)/(?<directory>.*)[\#|/])?
+    }x.freeze
+
     GITLAB_SOURCE = %r{
       (?<provider>gitlab)
       (?:\.com)[/:]
@@ -36,11 +45,13 @@ module Dependabot
       (?:#{AZURE_SOURCE})
     /x.freeze
 
+    IGNORED_PROVIDER_HOSTS = %w(gitbox.apache.org svn.apache.org fuchsia.googlesource.com).freeze
+
     attr_accessor :provider, :repo, :directory, :branch, :commit,
                   :hostname, :api_endpoint
 
     def self.from_url(url_string)
-      return unless url_string&.match?(SOURCE_REGEX)
+      return github_enterprise_from_url(url_string) unless url_string&.match?(SOURCE_REGEX)
 
       captures = url_string.match(SOURCE_REGEX).named_captures
 
@@ -52,6 +63,36 @@ module Dependabot
       )
     end
 
+    def self.github_enterprise_from_url(url_string)
+      captures = url_string&.match(GITHUB_ENTERPRISE_SOURCE)&.named_captures
+      return unless captures
+      return if IGNORED_PROVIDER_HOSTS.include?(captures.fetch("host"))
+
+      base_url = "https://#{captures.fetch('host')}"
+
+      return unless github_enterprise?(base_url)
+
+      new(
+        provider: "github",
+        repo: captures.fetch("repo"),
+        directory: captures.fetch("directory"),
+        branch: captures.fetch("branch"),
+        hostname: captures.fetch("host"),
+        api_endpoint: File.join(base_url, "api", "v3")
+      )
+    end
+
+    def self.github_enterprise?(base_url)
+      resp = Excon.get(File.join(base_url, "status"))
+      resp.status == 200 &&
+        # Alternatively: resp.headers["Server"] == "GitHub.com", but this
+        # currently doesn't work with development environments
+        resp.headers["X-GitHub-Request-Id"] &&
+        !resp.headers["X-GitHub-Request-Id"].empty?
+    rescue Excon::Error
+      false
+    end
+
     def initialize(provider:, repo:, directory: nil, branch: nil, commit: nil,
                    hostname: nil, api_endpoint: nil)
       if (hostname.nil? ^ api_endpoint.nil?) && (provider != "codecommit")

data/lib/dependabot/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.164.0"
+  VERSION = "0.166.1"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.164.0
+  version: 0.166.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-10-27 00:00:00.000000000 Z
+date: 2021-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport