dependabot-common 0.261.1 → 0.263.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 415959ea14773d81bb155264358ab19c52c5dcb8aa8f0c88693a21d7b6088b6a
-  data.tar.gz: 4ca304de008ac1431d05adf3ef3157fb15a82677361c077d588401ec664029fa
+  metadata.gz: 22016be70b3847889c81eabf845be31526245c9236559a27b5109d47018d7235
+  data.tar.gz: 13cd4ef806fe2f7e9d3957a053a221282098c1246802b1973900b0679a13911d
 SHA512:
-  metadata.gz: e22ca6fd2de98b9c278aa3705722369d50534a8d1cd3d17a3fb745f623ed4b2ec1056b23f77fd87b2dbd026810027b8e384af6d2c21e001c11daac298e387a89
-  data.tar.gz: 965983f2f7a1598fbdd010c5f9a56f6d82fa4f13a929a9e9e209092b09b94dbcd4de99d5da29723b46454bd6112643861c26a9fce679f731bd6c0e1e75bd337e
+  metadata.gz: bf3a197a93951f0296ea1258ee4a8a941732a2cc4a72fb319a31fc9561fa2e661c4079bbc8f3771c7a8d1d774ef38912fbc2c2abf23cad7565929eda505a77b4
+  data.tar.gz: 0d8b54e3ff114cc8a3bb58eb8843d781befcf111df3261ac814aa77b262ccda2131aedfe46acd3e556a86e220c90457b3475598d2431bbaf581f954d21e83ddc

data/lib/dependabot/errors.rb

@@ -191,6 +191,11 @@ module Dependabot
         "error-type": "private_source_authentication_failure",
         "error-detail": { source: error.source }
       }
+    when Dependabot::DependencyNotFound
+      {
+        "error-type": "dependency_not_found",
+        "error-detail": { source: error.source }
+      }
     when Dependabot::PrivateSourceTimedOut
       {
         "error-type": "private_source_timed_out",
@@ -511,6 +516,20 @@ module Dependabot
     end
   end
 
+  class DependencyNotFound < DependabotError
+    extend T::Sig
+
+    sig { returns(String) }
+    attr_reader :source
+
+    sig { params(source: T.nilable(String)).void }
+    def initialize(source)
+      @source = T.let(sanitize_source(T.must(source)), String)
+      msg = "The following dependency could not be found : #{@source}"
+      super(msg)
+    end
+  end
+
   # Useful for JS file updaters, where the registry API sometimes returns
   # different results to the actual update process
   class InconsistentRegistryResponse < DependabotError; end

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -25,6 +25,10 @@ module Dependabot
         TEAM_MENTION_REGEX = %r{(?<![A-Za-z0-9`~])@(?<org>#{GITHUB_USERNAME})/(?<team>#{GITHUB_USERNAME})/?}
         # End of string
         EOS_REGEX = /\z/
+
+        # regex to match markdown headers or links
+        MARKDOWN_REGEX = /\[(.+?)\]\(([^)]+)\)|\[(.+?)\]|\A#+\s+([^\s].*)/
+
         COMMONMARKER_OPTIONS = T.let(
           %i(GITHUB_PRE_LANG FULL_INFO_STRING).freeze,
           T::Array[Symbol]
@@ -53,10 +57,16 @@ module Dependabot
           sanitize_links(doc)
           sanitize_nwo_text(doc)
 
+          render_options = if text.match?(MARKDOWN_REGEX)
+                             COMMONMARKER_OPTIONS
+                           else
+                             COMMONMARKER_OPTIONS + [:HARDBREAKS]
+                           end
+
           mode = unsafe ? :UNSAFE : :DEFAULT
-          return doc.to_commonmark([mode] + COMMONMARKER_OPTIONS) unless format_html
+          return doc.to_commonmark([mode] + render_options) unless format_html
 
-          doc.to_html(([mode] + COMMONMARKER_OPTIONS), COMMONMARKER_EXTENSIONS)
+          doc.to_html(([mode] + render_options), COMMONMARKER_EXTENSIONS)
         end
 
         private

data/lib/dependabot/requirements_update_strategy.rb

@@ -9,5 +9,12 @@ module Dependabot
       LockfileOnly = new("lockfile_only")
       WidenRanges = new("widen_ranges")
     end
+
+    extend T::Sig
+
+    sig { returns(T::Boolean) }
+    def lockfile_only?
+      self == LockfileOnly
+    end
   end
 end

data/lib/dependabot/shared_helpers.rb

@@ -258,13 +258,16 @@ module Dependabot
       FileUtils.mkdir_p(Utils::BUMP_TMP_DIR_PATH)
 
       previous_config = ENV.fetch("GIT_CONFIG_GLOBAL", nil)
+      previous_terminal_prompt = ENV.fetch("GIT_TERMINAL_PROMPT", nil)
 
       begin
         ENV["GIT_CONFIG_GLOBAL"] = GIT_CONFIG_GLOBAL_PATH
+        ENV["GIT_TERMINAL_PROMPT"] = "false"
         configure_git_to_use_https_with_credentials(credentials, safe_directories)
         yield
       ensure
         ENV["GIT_CONFIG_GLOBAL"] = previous_config
+        ENV["GIT_TERMINAL_PROMPT"] = previous_terminal_prompt
       end
     rescue Errno::ENOSPC => e
       raise Dependabot::OutOfDisk, e.message

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.261.1"
+  VERSION = "0.263.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.261.1
+  version: 0.263.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-17 00:00:00.000000000 Z
+date: 2024-06-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -597,7 +597,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.261.1
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.263.0
 post_install_message: 
 rdoc_options: []
 require_paths: