dependabot-common 0.265.0 → 0.267.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4715cad47e5311ab6deb63b425cb37b8e9ad44266d20154ada92f5eebeb1072a
-  data.tar.gz: 4194a3c0d440f8d320cfad7789f2e0237871236e0d39da5dc8b8705608c6176f
+  metadata.gz: 512f039f72af66c98e5211d2c8869364c65ea38055bbb88ac61ef32570d1d067
+  data.tar.gz: aedbac1ae18409d6ff6879aef2ee3ed0deb1fef070ee4ddb1c9ab36e54493755
 SHA512:
-  metadata.gz: d86205634fc7375b9b652137782d4686c4763c278456ce52cd5af6d2778aa19540e4be8fa0203770234264e8e6af15105fffc428d4c5b160b94d6b1719b50a4f
-  data.tar.gz: f3db0f9d9fd293ae3904812b81ec15f400a6b16973e4327f6c23556b27ce35bc767821693a4c6f105ed49b2d316546c906d586f9955e55ffcf8301b20720967e
+  metadata.gz: 88e88e819902db601884ab7d513c2cb67012d1c3fdc24537046b8772acff9a571869343877a152401d8583d05fa13f79bb04ba85573a2babaae43b2943a748d7
+  data.tar.gz: 2d420644f8c92e1586df0b15a217c46fd24fad89ddfed99e31213063cc40f59de01eec1bdbe52830d8238e6adeabe65d807c074f697129302df318086aeeed6f

data/lib/dependabot/clients/bitbucket.rb

@@ -142,7 +142,7 @@ module Dependabot
         next_page_url = base_url + pr_path
         pull_requests = paginate({ "next" => next_page_url })
 
-        pull_requests unless source_branch && target_branch
+        pull_requests unless source_branch && target_branch # rubocop:disable Lint/Void
 
         pull_requests.select do |pr|
           if source_branch.nil?

data/lib/dependabot/errors.rb

@@ -159,6 +159,8 @@ module Dependabot
     end
   end
 
+  # rubocop:disable Lint/RedundantCopDisableDirective
+  # rubocop:disable Metrics/CyclomaticComplexity
   sig { params(error: StandardError).returns(T.nilable(T::Hash[Symbol, T.untyped])) }
   def self.updater_error_details(error)
     case error
@@ -211,7 +213,8 @@ module Dependabot
       {
         "error-type": "missing_environment_variable",
         "error-detail": {
-          "environment-variable": error.environment_variable
+          "environment-variable": error.environment_variable,
+          "error-message": error.message
         }
       }
     when Dependabot::GoModulePathMismatch
@@ -223,6 +226,11 @@ module Dependabot
           "go-mod": error.go_mod
         }
       }
+    when
+      IncompatibleCPU,
+      NetworkUnsafeHTTP
+      error.detail
+
     when Dependabot::NotImplemented
       {
         "error-type": "not_implemented",
@@ -230,6 +238,11 @@ module Dependabot
           message: error.message
         }
       }
+    when Dependabot::InvalidGitAuthToken
+      {
+        "error-type": "git_token_auth_error",
+        "error-detail": { message: error.message }
+      }
     when *Octokit::RATE_LIMITED_ERRORS
       # If we get a rate-limited error we let dependabot-api handle the
       # retry by re-enqueing the update job after the reset
@@ -242,6 +255,8 @@ module Dependabot
     end
   end
   # rubocop:enable Metrics/MethodLength
+  # rubocop:enable Metrics/CyclomaticComplexity
+  # rubocop:enable Lint/RedundantCopDisableDirective
 
   class DependabotError < StandardError
     extend T::Sig
@@ -294,12 +309,38 @@ module Dependabot
     end
   end
 
+  class TypedDependabotError < Dependabot::DependabotError
+    extend T::Sig
+
+    sig { returns(String) }
+    attr_reader :error_type
+
+    sig { params(error_type: String, message: T.any(T.nilable(String), MatchData)).void }
+    def initialize(error_type, message = nil)
+      @error_type = T.let(error_type, String)
+
+      super(message || error_type)
+    end
+
+    sig { params(hash: T.nilable(T::Hash[Symbol, T.untyped])).returns(T::Hash[Symbol, T.untyped]) }
+    def detail(hash = nil)
+      {
+        "error-type": error_type,
+        "error-detail": hash || {
+          message: message
+        }
+      }
+    end
+  end
+
   class OutOfDisk < DependabotError; end
 
   class OutOfMemory < DependabotError; end
 
   class NotImplemented < DependabotError; end
 
+  class InvalidGitAuthToken < DependabotError; end
+
   #####################
   # Repo level errors #
   #####################
@@ -510,10 +551,15 @@ module Dependabot
     sig { returns(String) }
     attr_reader :environment_variable
 
-    sig { params(environment_variable: String).void }
-    def initialize(environment_variable)
+    sig { returns(String) }
+    attr_reader :message
+
+    sig { params(environment_variable: String, message: String).void }
+    def initialize(environment_variable, message = "")
       @environment_variable = environment_variable
-      super("Missing environment variable #{@environment_variable}")
+      @message = message
+
+      super("Missing environment variable #{@environment_variable}. #{@message}")
     end
   end
 
@@ -531,6 +577,20 @@ module Dependabot
     end
   end
 
+  class InvalidGitAuthToken < DependabotError
+    extend T::Sig
+
+    sig { returns(String) }
+    attr_reader :source
+
+    sig { params(source: String).void }
+    def initialize(source)
+      @source = T.let(sanitize_source(source), String)
+      msg = "Missing or invalid authentication token while accessing github package : #{@source}"
+      super(msg)
+    end
+  end
+
   # Useful for JS file updaters, where the registry API sometimes returns
   # different results to the actual update process
   class InconsistentRegistryResponse < DependabotError; end
@@ -617,4 +677,18 @@ module Dependabot
 
   # Raised by FileParser if processing may execute external code in the update context
   class UnexpectedExternalCode < DependabotError; end
+
+  class IncompatibleCPU < TypedDependabotError
+    sig { params(message: T.any(T.nilable(String), MatchData)).void }
+    def initialize(message = nil)
+      super("incompatible_cpu", message)
+    end
+  end
+
+  class NetworkUnsafeHTTP < TypedDependabotError
+    sig { params(message: T.any(T.nilable(String), MatchData)).void }
+    def initialize(message = nil)
+      super("network_unsafe_http", message)
+    end
+  end
 end

data/lib/dependabot/git_metadata_fetcher.rb

@@ -198,6 +198,7 @@ module Dependabot
 
     sig { params(uri: String).returns(String) }
     def service_pack_uri(uri)
+      uri = uri_sanitize(uri)
       service_pack_uri = uri_with_auth(uri)
       service_pack_uri = service_pack_uri.gsub(%r{/$}, "")
       service_pack_uri += ".git" unless service_pack_uri.end_with?(".git") || skip_git_suffix(uri)
@@ -216,6 +217,7 @@ module Dependabot
       # (GitHub, GitLab, BitBucket) work with or without the suffix.
       # That change has other ramifications, so it'd be better if Azure started supporting ".git"
       # like all the other providers.
+      uri = uri_sanitize(uri)
       uri = SharedHelpers.scp_to_standard(uri)
       uri = URI(uri)
       hostname = uri.hostname.to_s
@@ -242,6 +244,12 @@ module Dependabot
       uri.to_s
     end
 
+    sig { params(uri: String).returns(String) }
+    def uri_sanitize(uri)
+      uri = uri.strip
+      uri.to_s
+    end
+
     sig { params(line: String).returns(String) }
     def sha_for_update_pack_line(line)
       T.must(line.split.first).chars.last(40).join

data/lib/dependabot/workspace/git.rb

@@ -19,7 +19,7 @@ module Dependabot
 
       sig { params(path: T.any(Pathname, String)).void }
       def initialize(path)
-        super(path)
+        super
         @initial_head_sha = T.let(head_sha, String)
         configure_git
       end

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.265.0"
+  VERSION = "0.267.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.265.0
+  version: 0.267.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-07-11 00:00:00.000000000 Z
+date: 2024-07-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -382,14 +382,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.63.2
+        version: 1.65.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.63.2
+        version: 1.65.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -597,7 +597,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.265.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.267.0
 post_install_message: 
 rdoc_options: []
 require_paths: