dependabot-common 0.275.0 → 0.277.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce6f7ca34b993b278be5b0302be3d148289caf89a392531fede5ae9c0166b46d
-  data.tar.gz: 909a6d70c5f2cdce67ae49af86909e9f8b658bb74c8159c15fdb653b3ce93291
+  metadata.gz: a7543d885e4a35814953d8212da1438d0e343d0cf5d7aef83f7f2f02451a5ea3
+  data.tar.gz: b71e329381f97b309e9ca8b68c2b60bbf780e8c9a317558eb1f96e3ae3cae75f
 SHA512:
-  metadata.gz: 2a8e74f0f9e68a69c8ada97c70e6d1c8167c97f942d0e14fe8675de0282db883473ccedcfdef660b31fd643c8a2f58e1f78424dac6e5530f7770bc33af03fd4b
-  data.tar.gz: b9234254056f7e3db331b6654a95e2c4c73c41226bdff835a6dbfdf4f0327a6143441945c76d2f2a435a13f8677f5293bce41fe0a2952ec9a93136c0ac368ff4
+  metadata.gz: ac4cff3f2fcbcf43df1f6490f3cfa32c4d0f43f98b3409903b3f22ad3f12de3ccea86d4a2f2405daffcf17ed39539c6bfc15b1293a53542907229d1f3f939d4a
+  data.tar.gz: 3858ee8214c5afe7b065822afb4d0ce8bf0b9584ae882842efaa2a91ec5c59a8aa6869a9886f4cbbebad4a3c748b680acf45b62388dbbea286e62de6db2c6234

data/lib/dependabot/errors.rb

@@ -245,6 +245,12 @@ module Dependabot
         "error-type": "illformed_requirement",
         "error-detail": { message: error.message }
       }
+    when RegistryError
+      {
+        "error-type": "registry_error",
+        "error-detail": { status: error.status,
+                          msg: error.message }
+      }
     when
       IncompatibleCPU,
       NetworkUnsafeHTTP
@@ -612,6 +618,19 @@ module Dependabot
     end
   end
 
+  class RegistryError < DependabotError
+    extend T::Sig
+
+    sig { returns(Integer) }
+    attr_reader :status
+
+    sig { params(status: Integer, msg: String).void }
+    def initialize(status, msg)
+      @status = status
+      super(msg)
+    end
+  end
+
   # Useful for JS file updaters, where the registry API sometimes returns
   # different results to the actual update process
   class InconsistentRegistryResponse < DependabotError; end

data/lib/dependabot/notices.rb

@@ -94,22 +94,6 @@ module Dependabot
       "Please upgrade to one of the following versions: #{versions_string}#{later_description}."
     end
 
-    # Generates a support notice for the given package manager.
-    # @param package_manager [PackageManagerBase] The package manager object.
-    # @return [Notice, nil] The generated notice or nil if no notice is applicable.
-    sig do
-      params(
-        package_manager: PackageManagerBase
-      ).returns(T.nilable(Notice))
-    end
-    def self.generate_support_notice(package_manager)
-      deprecation_notice = generate_pm_deprecation_notice(package_manager)
-
-      return deprecation_notice if deprecation_notice
-
-      generate_pm_unsupported_notice(package_manager)
-    end
-
     # Generates a deprecation notice for the given package manager.
     # @param package_manager [PackageManagerBase] The package manager object.
     # @return [Notice, nil] The generated deprecation notice or nil if the package manager is not deprecated.
@@ -144,40 +128,6 @@ module Dependabot
       )
     end
 
-    # Generates an unsupported notice for the given package manager.
-    # @param package_manager [PackageManagerBase] The package manager object.
-    # @return [Notice, nil] The generated unsupported notice or nil if the package manager is not unsupported.
-    sig do
-      params(
-        package_manager: PackageManagerBase
-      ).returns(T.nilable(Notice))
-    end
-    def self.generate_pm_unsupported_notice(package_manager)
-      return nil unless package_manager.unsupported?
-
-      mode = NoticeMode::ERROR
-      supported_versions_description = generate_supported_versions_description(
-        package_manager.supported_versions,
-        package_manager.support_later_versions?
-      )
-      notice_type = "#{package_manager.name}_unsupported_error"
-      title = "Package manager unsupported notice"
-      description = "Dependabot no longer supports `#{package_manager.name} v#{package_manager.version}`!"
-
-      ## Add the supported versions to the description
-      description += "\n\n#{supported_versions_description}\n" unless supported_versions_description.empty?
-
-      Notice.new(
-        mode: mode,
-        type: notice_type,
-        package_manager_name: package_manager.name,
-        title: title,
-        description: description,
-        show_in_pr: true,
-        show_alert: true
-      )
-    end
-
     sig { params(notice: Notice).returns(T.nilable(String)) }
     def self.markdown_from_description(notice)
       description = notice.description

data/lib/dependabot/package_manager.rb

@@ -55,6 +55,9 @@ module Dependabot
     #   package_manager.deprecated? #=> true
     sig { returns(T::Boolean) }
     def deprecated?
+      # If the version is unsupported, the unsupported error is getting raised separately.
+      return false if unsupported?
+
       deprecated_versions.include?(version)
     end
 
@@ -64,12 +67,23 @@ module Dependabot
     #   package_manager.unsupported? #=> false
     sig { returns(T::Boolean) }
     def unsupported?
-      return true if unsupported_versions.include?(version)
+      false
+    end
 
-      supported_versions = self.supported_versions
-      return version < supported_versions.first if supported_versions.any?
+    # Raises an error if the current package manager version is unsupported.
+    # If the version is unsupported, it raises a ToolVersionNotSupported error.
+    sig { void }
+    def raise_if_unsupported!
+      return unless unsupported?
 
-      false
+      # Example: v2.*, v3.*
+      supported_versions_message = supported_versions.map { |v| "v#{v}.*" }.join(", ")
+
+      raise ToolVersionNotSupported.new(
+        name,
+        version.to_s,
+        supported_versions_message
+      )
     end
 
     # Indicates if the package manager supports later versions beyond those listed in supported_versions.

data/lib/dependabot.rb

@@ -2,5 +2,5 @@
 # frozen_string_literal: true
 
 module Dependabot
-  VERSION = "0.275.0"
+  VERSION = "0.277.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-common
 version: !ruby/object:Gem::Version
-  version: 0.275.0
+  version: 0.277.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-09-12 00:00:00.000000000 Z
+date: 2024-09-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-codecommit
@@ -140,14 +140,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.19.0
+        version: 5.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.19.0
+        version: 5.0.0
 - !ruby/object:Gem::Dependency
   name: json
   requirement: !ruby/object:Gem::Requirement
@@ -185,7 +185,7 @@ dependencies:
         version: '4.6'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '8.0'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -195,7 +195,7 @@ dependencies:
         version: '4.6'
     - - "<"
       - !ruby/object:Gem::Version
-        version: '7.0'
+        version: '8.0'
 - !ruby/object:Gem::Dependency
   name: opentelemetry-sdk
   requirement: !ruby/object:Gem::Requirement
@@ -600,7 +600,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.275.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.277.0
 post_install_message: 
 rdoc_options: []
 require_paths: