dependabot-common 0.274.0 → 0.276.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b66339af7fa82be186be4ee8d99c24b172a12a4f2233da1bebe2817f154066bf
-  data.tar.gz: eeec78de4dda472c4a53845919ff52a047569cbc57591fd413be347ccce48d0c
+  metadata.gz: 89849af83417a9d65db16d6ee145ae83689c7539b3fd0e6ed5c688ebab74e1a9
+  data.tar.gz: 6464f65d42856b6957799879104fddbe55b197aa82b77ad1757ab06f67115d72
 SHA512:
-  metadata.gz: 785f6759f110b6fe1ddbe90140f11a5232765af5d89e61d375cb6c65bbfa5638d465da7881cea0c500a11a01ea91771466fab3e27a38023d88132455df3b85a7
-  data.tar.gz: 85c60d21f9a03997bf4b18dd8048c05934a6a01e755bce68e3adbea553662d62d16c24610103731c9d6e145030dcf67730f3961c9aefce9a893ae3da782c6d4b
+  metadata.gz: ee084c1b0647008d5512aa34af26c5431b1ab6215c427212f4519590755b86a6c5f9954e423a3d8b250e5ac2d1d8fc2b8af0b9b640394173b9df078cf0ae0b1f
+  data.tar.gz: 253e0d9f8f48e047a4b132b2ae746a2709ee3caa108399e80f2ad01a8468b4c03a0ce70158dda288e725eb7d2f331d36285990c66b03f6aaf0a5f525929c6e0d

data/lib/dependabot/errors.rb

@@ -245,6 +245,12 @@ module Dependabot
         "error-type": "illformed_requirement",
         "error-detail": { message: error.message }
       }
+    when RegistryError
+      {
+        "error-type": "registry_error",
+        "error-detail": { status: error.status,
+                          msg: error.message }
+      }
     when
       IncompatibleCPU,
       NetworkUnsafeHTTP
@@ -612,6 +618,19 @@ module Dependabot
     end
   end
 
+  class RegistryError < DependabotError
+    extend T::Sig
+
+    sig { returns(Integer) }
+    attr_reader :status
+
+    sig { params(status: Integer, msg: String).void }
+    def initialize(status, msg)
+      @status = status
+      super(msg)
+    end
+  end
+
   # Useful for JS file updaters, where the registry API sometimes returns
   # different results to the actual update process
   class InconsistentRegistryResponse < DependabotError; end

data/lib/dependabot/notices.rb

@@ -94,22 +94,6 @@ module Dependabot
       "Please upgrade to one of the following versions: #{versions_string}#{later_description}."
     end
 
-    # Generates a support notice for the given package manager.
-    # @param package_manager [PackageManagerBase] The package manager object.
-    # @return [Notice, nil] The generated notice or nil if no notice is applicable.
-    sig do
-      params(
-        package_manager: PackageManagerBase
-      ).returns(T.nilable(Notice))
-    end
-    def self.generate_support_notice(package_manager)
-      deprecation_notice = generate_pm_deprecation_notice(package_manager)
-
-      return deprecation_notice if deprecation_notice
-
-      generate_pm_unsupported_notice(package_manager)
-    end
-
     # Generates a deprecation notice for the given package manager.
     # @param package_manager [PackageManagerBase] The package manager object.
     # @return [Notice, nil] The generated deprecation notice or nil if the package manager is not deprecated.
@@ -144,40 +128,6 @@ module Dependabot
       )
     end
 
-    # Generates an unsupported notice for the given package manager.
-    # @param package_manager [PackageManagerBase] The package manager object.
-    # @return [Notice, nil] The generated unsupported notice or nil if the package manager is not unsupported.
-    sig do
-      params(
-        package_manager: PackageManagerBase
-      ).returns(T.nilable(Notice))
-    end
-    def self.generate_pm_unsupported_notice(package_manager)
-      return nil unless package_manager.unsupported?
-
-      mode = NoticeMode::ERROR
-      supported_versions_description = generate_supported_versions_description(
-        package_manager.supported_versions,
-        package_manager.support_later_versions?
-      )
-      notice_type = "#{package_manager.name}_unsupported_error"
-      title = "Package manager unsupported notice"
-      description = "Dependabot no longer supports `#{package_manager.name} v#{package_manager.version}`!"
-
-      ## Add the supported versions to the description
-      description += "\n\n#{supported_versions_description}\n" unless supported_versions_description.empty?
-
-      Notice.new(
-        mode: mode,
-        type: notice_type,
-        package_manager_name: package_manager.name,
-        title: title,
-        description: description,
-        show_in_pr: true,
-        show_alert: true
-      )
-    end
-
     sig { params(notice: Notice).returns(T.nilable(String)) }
     def self.markdown_from_description(notice)
       description = notice.description
@@ -190,6 +140,7 @@ module Dependabot
         line = line.strip
         markdown += "> #{line}\n"
       end
+      markdown += ">\n\n"
       markdown
     end
 

data/lib/dependabot/package_manager.rb

@@ -55,6 +55,9 @@ module Dependabot
     #   package_manager.deprecated? #=> true
     sig { returns(T::Boolean) }
     def deprecated?
+      # If the version is unsupported, the unsupported error is getting raised separately.
+      return false if unsupported?
+
       deprecated_versions.include?(version)
     end
 
@@ -64,12 +67,23 @@ module Dependabot
     #   package_manager.unsupported? #=> false
     sig { returns(T::Boolean) }
     def unsupported?
-      return true if unsupported_versions.include?(version)
+      false
+    end
 
-      supported_versions = self.supported_versions
-      return version < supported_versions.first if supported_versions.any?
+    # Raises an error if the current package manager version is unsupported.
+    # If the version is unsupported, it raises a ToolVersionNotSupported error.
+    sig { void }
+    def raise_if_unsupported!
+      return unless unsupported?
 
-      false
+      # Example: v2.*, v3.*
+      supported_versions_message = supported_versions.map { |v| "v#{v}.*" }.join(", ")
+
+      raise ToolVersionNotSupported.new(
+        name,
+        version.to_s,
+        supported_versions_message
+      )
     end
 
     # Indicates if the package manager supports later versions beyond those listed in supported_versions.

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.274.0"
+  VERSION = "0.276.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.274.0
+  version: 0.276.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-05 00:00:00.000000000 Z
+date: 2024-09-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -600,7 +600,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.274.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.276.0
 post_install_message: 
 rdoc_options: []
 require_paths: