dependabot-common 0.262.0 → 0.264.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '08b81e6c1e571457e794fa62147845a9e154ff6ea8a9f0d7fbab11b2c9bbb476'
-  data.tar.gz: aeffcec5729d490fea8e7048c4b359befd8cd800ca97b9ac5a6a0751c7b47435
+  metadata.gz: 89c02cd9122ad1a2574c71155c83627af13e7975e520fe2edb0573959f719049
+  data.tar.gz: 042f09ae791ba2420b73d3076bc716e3354b56f210bd0d14d6b5aa01b1efb216
 SHA512:
-  metadata.gz: 1f7687bb71080b85780d5d0672de40730c590076da5511cc17295271258f80965645a6e468e5254e5eea1d0188f5c76be592c760d617b9688d8d3c321b5b2e40
-  data.tar.gz: 9dc8d8c488bb81d85a16db553d2acae1b6fba9fef1543a763aa6850fff23a94923118f773164a991a05b02f1a935fe61ca1e2c772397a090abbec5aef015473e
+  metadata.gz: 76061ba6700c3b8faa97e7699ab35890546fb5c06dd7f3113a067e76522e0bf7a3d2eecf180c7a3b94bc320cfeb51572265be90cf5df2be269e290141db0729c
+  data.tar.gz: 79cd186ce00c0bbea7586d1c582bffaf96b165004b289b1527cfdcac669fe8aee72c4549646cabebe4c3937f9402d675fe13b7e7ca97dbdb7907651e8489f522

data/lib/dependabot/errors.rb

@@ -17,6 +17,7 @@ module Dependabot
     DEPENDENCY_GROUPS = "job-dependency-groups"
     JOB_ID            = "job-id"
     PACKAGE_MANAGER   = "package-manager"
+    SECURITY_UPDATE   = "security-update"
   end
 
   # rubocop:disable Metrics/MethodLength
@@ -191,6 +192,11 @@ module Dependabot
         "error-type": "private_source_authentication_failure",
         "error-detail": { source: error.source }
       }
+    when Dependabot::DependencyNotFound
+      {
+        "error-type": "dependency_not_found",
+        "error-detail": { source: error.source }
+      }
     when Dependabot::PrivateSourceTimedOut
       {
         "error-type": "private_source_timed_out",
@@ -511,6 +517,20 @@ module Dependabot
     end
   end
 
+  class DependencyNotFound < DependabotError
+    extend T::Sig
+
+    sig { returns(String) }
+    attr_reader :source
+
+    sig { params(source: T.nilable(String)).void }
+    def initialize(source)
+      @source = T.let(sanitize_source(T.must(source)), String)
+      msg = "The following dependency could not be found : #{@source}"
+      super(msg)
+    end
+  end
+
   # Useful for JS file updaters, where the registry API sometimes returns
   # different results to the actual update process
   class InconsistentRegistryResponse < DependabotError; end

data/lib/dependabot/file_fetchers/base.rb

@@ -93,12 +93,13 @@ module Dependabot
       #
       # options supports custom feature enablement
       sig do
-        params(
-          source: Dependabot::Source,
-          credentials: T::Array[Dependabot::Credential],
-          repo_contents_path: T.nilable(String),
-          options: T::Hash[String, String]
-        )
+        overridable
+          .params(
+            source: Dependabot::Source,
+            credentials: T::Array[Dependabot::Credential],
+            repo_contents_path: T.nilable(String),
+            options: T::Hash[String, String]
+          )
           .void
       end
       def initialize(source:, credentials:, repo_contents_path: nil, options: {})

data/lib/dependabot/pull_request_creator/message_builder/link_and_mention_sanitizer.rb

@@ -25,6 +25,10 @@ module Dependabot
         TEAM_MENTION_REGEX = %r{(?<![A-Za-z0-9`~])@(?<org>#{GITHUB_USERNAME})/(?<team>#{GITHUB_USERNAME})/?}
         # End of string
         EOS_REGEX = /\z/
+
+        # regex to match markdown headers or links
+        MARKDOWN_REGEX = /\[(.+?)\]\(([^)]+)\)|\[(.+?)\]|\A#+\s+([^\s].*)/
+
         COMMONMARKER_OPTIONS = T.let(
           %i(GITHUB_PRE_LANG FULL_INFO_STRING).freeze,
           T::Array[Symbol]
@@ -53,10 +57,16 @@ module Dependabot
           sanitize_links(doc)
           sanitize_nwo_text(doc)
 
+          render_options = if text.match?(MARKDOWN_REGEX)
+                             COMMONMARKER_OPTIONS
+                           else
+                             COMMONMARKER_OPTIONS + [:HARDBREAKS]
+                           end
+
           mode = unsafe ? :UNSAFE : :DEFAULT
-          return doc.to_commonmark([mode] + COMMONMARKER_OPTIONS) unless format_html
+          return doc.to_commonmark([mode] + render_options) unless format_html
 
-          doc.to_html(([mode] + COMMONMARKER_OPTIONS), COMMONMARKER_EXTENSIONS)
+          doc.to_html(([mode] + render_options), COMMONMARKER_EXTENSIONS)
         end
 
         private

data/lib/dependabot/requirements_update_strategy.rb

@@ -9,5 +9,12 @@ module Dependabot
       LockfileOnly = new("lockfile_only")
       WidenRanges = new("widen_ranges")
     end
+
+    extend T::Sig
+
+    sig { returns(T::Boolean) }
+    def lockfile_only?
+      self == LockfileOnly
+    end
   end
 end

data/lib/dependabot/shared_helpers.rb

@@ -131,7 +131,7 @@ module Dependabot
       params(
         command: String,
         function: String,
-        args: T.any(T::Array[String], T::Hash[Symbol, String]),
+        args: T.any(T::Array[T.any(String, T::Array[T::Hash[String, T.untyped]])], T::Hash[Symbol, String]),
         env: T.nilable(T::Hash[String, String]),
         stderr_to_stdout: T::Boolean,
         allow_unsafe_shell_command: T::Boolean
@@ -258,13 +258,16 @@ module Dependabot
       FileUtils.mkdir_p(Utils::BUMP_TMP_DIR_PATH)
 
       previous_config = ENV.fetch("GIT_CONFIG_GLOBAL", nil)
+      previous_terminal_prompt = ENV.fetch("GIT_TERMINAL_PROMPT", nil)
 
       begin
         ENV["GIT_CONFIG_GLOBAL"] = GIT_CONFIG_GLOBAL_PATH
+        ENV["GIT_TERMINAL_PROMPT"] = "false"
         configure_git_to_use_https_with_credentials(credentials, safe_directories)
         yield
       ensure
         ENV["GIT_CONFIG_GLOBAL"] = previous_config
+        ENV["GIT_TERMINAL_PROMPT"] = previous_terminal_prompt
       end
     rescue Errno::ENOSPC => e
       raise Dependabot::OutOfDisk, e.message

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.262.0"
+  VERSION = "0.264.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.262.0
+  version: 0.264.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-06-20 00:00:00.000000000 Z
+date: 2024-07-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -597,7 +597,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.262.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.264.0
 post_install_message: 
 rdoc_options: []
 require_paths: