dependabot-composer 0.111.17 → 0.111.18

data/helpers/vendor/composer/composer/src/Composer/Util/Git.php

@@ -1,374 +0,0 @@
-<?php
-
-/*
- * This file is part of Composer.
- *
- * (c) Nils Adermann <naderman@naderman.de>
- *     Jordi Boggiano <j.boggiano@seld.be>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
-
-namespace Composer\Util;
-
-use Composer\Config;
-use Composer\IO\IOInterface;
-
-/**
- * @author Jordi Boggiano <j.boggiano@seld.be>
- */
-class Git
-{
-    private static $version;
-
-    /** @var IOInterface */
-    protected $io;
-    /** @var Config */
-    protected $config;
-    /** @var ProcessExecutor */
-    protected $process;
-    /** @var Filesystem */
-    protected $filesystem;
-
-    public function __construct(IOInterface $io, Config $config, ProcessExecutor $process, Filesystem $fs)
-    {
-        $this->io = $io;
-        $this->config = $config;
-        $this->process = $process;
-        $this->filesystem = $fs;
-    }
-
-    public function runCommand($commandCallable, $url, $cwd, $initialClone = false)
-    {
-        // Ensure we are allowed to use this URL by config
-        $this->config->prohibitUrlByConfig($url, $this->io);
-
-        if ($initialClone) {
-            $origCwd = $cwd;
-            $cwd = null;
-        }
-
-        if (preg_match('{^ssh://[^@]+@[^:]+:[^0-9]+}', $url)) {
-            throw new \InvalidArgumentException('The source URL ' . $url . ' is invalid, ssh URLs should have a port number after ":".' . "\n" . 'Use ssh://git@example.com:22/path or just git@example.com:path if you do not want to provide a password or custom port.');
-        }
-
-        if (!$initialClone) {
-            // capture username/password from URL if there is one
-            $this->process->execute('git remote -v', $output, $cwd);
-            if (preg_match('{^(?:composer|origin)\s+https?://(.+):(.+)@([^/]+)}im', $output, $match)) {
-                $this->io->setAuthentication($match[3], rawurldecode($match[1]), rawurldecode($match[2]));
-            }
-        }
-
-        $protocols = $this->config->get('github-protocols');
-        if (!is_array($protocols)) {
-            throw new \RuntimeException('Config value "github-protocols" must be an array, got ' . gettype($protocols));
-        }
-        // public github, autoswitch protocols
-        if (preg_match('{^(?:https?|git)://' . self::getGitHubDomainsRegex($this->config) . '/(.*)}', $url, $match)) {
-            $messages = array();
-            foreach ($protocols as $protocol) {
-                if ('ssh' === $protocol) {
-                    $protoUrl = "git@" . $match[1] . ":" . $match[2];
-                } else {
-                    $protoUrl = $protocol . "://" . $match[1] . "/" . $match[2];
-                }
-
-                if (0 === $this->process->execute(call_user_func($commandCallable, $protoUrl), $ignoredOutput, $cwd)) {
-                    return;
-                }
-                $messages[] = '- ' . $protoUrl . "\n" . preg_replace('#^#m', '  ', $this->process->getErrorOutput());
-                if ($initialClone) {
-                    $this->filesystem->removeDirectory($origCwd);
-                }
-            }
-
-            // failed to checkout, first check git accessibility
-            $this->throwException('Failed to clone ' . $url . ' via ' . implode(', ', $protocols) . ' protocols, aborting.' . "\n\n" . implode("\n", $messages), $url);
-        }
-
-        // if we have a private github url and the ssh protocol is disabled then we skip it and directly fallback to https
-        $bypassSshForGitHub = preg_match('{^git@' . self::getGitHubDomainsRegex($this->config) . ':(.+?)\.git$}i', $url) && !in_array('ssh', $protocols, true);
-
-        $command = call_user_func($commandCallable, $url);
-
-        $auth = null;
-        if ($bypassSshForGitHub || 0 !== $this->process->execute($command, $ignoredOutput, $cwd)) {
-            // private github repository without git access, try https with auth
-            if (preg_match('{^git@' . self::getGitHubDomainsRegex($this->config) . ':(.+?)\.git$}i', $url, $match)) {
-                if (!$this->io->hasAuthentication($match[1])) {
-                    $gitHubUtil = new GitHub($this->io, $this->config, $this->process);
-                    $message = 'Cloning failed using an ssh key for authentication, enter your GitHub credentials to access private repos';
-
-                    if (!$gitHubUtil->authorizeOAuth($match[1]) && $this->io->isInteractive()) {
-                        $gitHubUtil->authorizeOAuthInteractively($match[1], $message);
-                    }
-                }
-
-                if ($this->io->hasAuthentication($match[1])) {
-                    $auth = $this->io->getAuthentication($match[1]);
-                    $authUrl = 'https://' . rawurlencode($auth['username']) . ':' . rawurlencode($auth['password']) . '@' . $match[1] . '/' . $match[2] . '.git';
-                    $command = call_user_func($commandCallable, $authUrl);
-                    if (0 === $this->process->execute($command, $ignoredOutput, $cwd)) {
-                        return;
-                    }
-                }
-            } elseif (preg_match('{^https://(bitbucket\.org)/(.*)(\.git)?$}U', $url, $match)) { //bitbucket oauth
-                $bitbucketUtil = new Bitbucket($this->io, $this->config, $this->process);
-
-                if (!$this->io->hasAuthentication($match[1])) {
-                    $message = 'Enter your Bitbucket credentials to access private repos';
-
-                    if (!$bitbucketUtil->authorizeOAuth($match[1]) && $this->io->isInteractive()) {
-                        $bitbucketUtil->authorizeOAuthInteractively($match[1], $message);
-                        $accessToken = $bitbucketUtil->getToken();
-                        $this->io->setAuthentication($match[1], 'x-token-auth', $accessToken);
-                    }
-                } else { //We're authenticating with a locally stored consumer.
-                    $auth = $this->io->getAuthentication($match[1]);
-
-                    //We already have an access_token from a previous request.
-                    if ($auth['username'] !== 'x-token-auth') {
-                        $accessToken = $bitbucketUtil->requestToken($match[1], $auth['username'], $auth['password']);
-                        if (! empty($accessToken)) {
-                            $this->io->setAuthentication($match[1], 'x-token-auth', $accessToken);
-                        }
-                    }
-                }
-
-                if ($this->io->hasAuthentication($match[1])) {
-                    $auth = $this->io->getAuthentication($match[1]);
-                    $authUrl = 'https://' . rawurlencode($auth['username']) . ':' . rawurlencode($auth['password']) . '@' . $match[1] . '/' . $match[2] . '.git';
-
-                    $command = call_user_func($commandCallable, $authUrl);
-                    if (0 === $this->process->execute($command, $ignoredOutput, $cwd)) {
-                        return;
-                    }
-                } else { // Falling back to ssh
-                    $sshUrl = 'git@bitbucket.org:' . $match[2] . '.git';
-                    $this->io->writeError('    No bitbucket authentication configured. Falling back to ssh.');
-                    $command = call_user_func($commandCallable, $sshUrl);
-                    if (0 === $this->process->execute($command, $ignoredOutput, $cwd)) {
-                        return;
-                    }
-                }
-            } elseif (preg_match('{^(https?)://' . self::getGitLabDomainsRegex($this->config) . '/(.*)}', $url, $match)) {
-                if (!$this->io->hasAuthentication($match[2])) {
-                    $gitLabUtil = new GitLab($this->io, $this->config, $this->process);
-                    $message = 'Cloning failed, enter your GitLab credentials to access private repos';
-
-                    if (!$gitLabUtil->authorizeOAuth($match[2]) && $this->io->isInteractive()) {
-                        $gitLabUtil->authorizeOAuthInteractively($match[1], $match[2], $message);
-                    }
-                }
-
-                if ($this->io->hasAuthentication($match[2])) {
-                    $auth = $this->io->getAuthentication($match[2]);
-                    if($auth['password'] === 'private-token' || $auth['password'] === 'oauth2') {
-                        $authUrl = $match[1] . '://' . rawurlencode($auth['password']) . ':' . rawurlencode($auth['username']) . '@' . $match[2] . '/' . $match[3]; // swap username and password
-                    } else {
-                        $authUrl = $match[1] . '://' . rawurlencode($auth['username']) . ':' . rawurlencode($auth['password']) . '@' . $match[2] . '/' . $match[3];
-                    }
-                    $command = call_user_func($commandCallable, $authUrl);
-                    if (0 === $this->process->execute($command, $ignoredOutput, $cwd)) {
-                        return;
-                    }
-                }
-            } elseif ($this->isAuthenticationFailure($url, $match)) { // private non-github repo that failed to authenticate
-                if (strpos($match[2], '@')) {
-                    list($authParts, $match[2]) = explode('@', $match[2], 2);
-                }
-
-                $storeAuth = false;
-                if ($this->io->hasAuthentication($match[2])) {
-                    $auth = $this->io->getAuthentication($match[2]);
-                } elseif ($this->io->isInteractive()) {
-                    $defaultUsername = null;
-                    if (isset($authParts) && $authParts) {
-                        if (false !== strpos($authParts, ':')) {
-                            list($defaultUsername, ) = explode(':', $authParts, 2);
-                        } else {
-                            $defaultUsername = $authParts;
-                        }
-                    }
-
-                    $this->io->writeError('    Authentication required (<info>' . parse_url($url, PHP_URL_HOST) . '</info>):');
-                    $auth = array(
-                        'username' => $this->io->ask('      Username: ', $defaultUsername),
-                        'password' => $this->io->askAndHideAnswer('      Password: '),
-                    );
-                    $storeAuth = $this->config->get('store-auths');
-                }
-
-                if ($auth) {
-                    $authUrl = $match[1] . rawurlencode($auth['username']) . ':' . rawurlencode($auth['password']) . '@' . $match[2] . $match[3];
-
-                    $command = call_user_func($commandCallable, $authUrl);
-                    if (0 === $this->process->execute($command, $ignoredOutput, $cwd)) {
-                        $this->io->setAuthentication($match[2], $auth['username'], $auth['password']);
-                        $authHelper = new AuthHelper($this->io, $this->config);
-                        $authHelper->storeAuth($match[2], $storeAuth);
-
-                        return;
-                    }
-                }
-            }
-
-            if ($initialClone) {
-                $this->filesystem->removeDirectory($origCwd);
-            }
-            $this->throwException('Failed to execute ' . $command . "\n\n" . $this->process->getErrorOutput(), $url);
-        }
-    }
-
-    public function syncMirror($url, $dir)
-    {
-        // update the repo if it is a valid git repository
-        if (is_dir($dir) && 0 === $this->process->execute('git rev-parse --git-dir', $output, $dir) && trim($output) === '.') {
-            try {
-                $commandCallable = function ($url) {
-                    return sprintf('git remote set-url origin %s && git remote update --prune origin', ProcessExecutor::escape($url));
-                };
-                $this->runCommand($commandCallable, $url, $dir);
-            } catch (\Exception $e) {
-                return false;
-            }
-
-            return true;
-        }
-
-        // clean up directory and do a fresh clone into it
-        $this->filesystem->removeDirectory($dir);
-
-        $commandCallable = function ($url) use ($dir) {
-            return sprintf('git clone --mirror %s %s', ProcessExecutor::escape($url), ProcessExecutor::escape($dir));
-        };
-
-        $this->runCommand($commandCallable, $url, $dir, true);
-
-        return true;
-    }
-
-    public function fetchRefOrSyncMirror($url, $dir, $ref)
-    {
-        if (is_dir($dir) && 0 === $this->process->execute('git rev-parse --git-dir', $output, $dir) && trim($output) === '.') {
-            $escapedRef = ProcessExecutor::escape($ref.'^{commit}');
-            $exitCode = $this->process->execute(sprintf('git rev-parse --quiet --verify %s', $escapedRef), $output, $dir);
-            if ($exitCode === 0) {
-                return true;
-            }
-        }
-
-        $this->syncMirror($url, $dir);
-
-        return false;
-    }
-
-    private function isAuthenticationFailure($url, &$match)
-    {
-        if (!preg_match('{^(https?://)([^/]+)(.*)$}i', $url, $match)) {
-            return false;
-        }
-
-        $authFailures = array(
-            'fatal: Authentication failed',
-            'remote error: Invalid username or password.',
-            'error: 401 Unauthorized',
-            'fatal: unable to access',
-            'fatal: could not read Username',
-        );
-
-        $errorOutput = $this->process->getErrorOutput();
-        foreach ($authFailures as $authFailure) {
-            if (strpos($errorOutput, $authFailure) !== false) {
-                return true;
-            }
-        }
-
-        return false;
-    }
-
-    public static function cleanEnv()
-    {
-        if (PHP_VERSION_ID < 50400 && ini_get('safe_mode') && false === strpos(ini_get('safe_mode_allowed_env_vars'), 'GIT_ASKPASS')) {
-            throw new \RuntimeException('safe_mode is enabled and safe_mode_allowed_env_vars does not contain GIT_ASKPASS, can not set env var. You can disable safe_mode with "-dsafe_mode=0" when running composer');
-        }
-
-        // added in git 1.7.1, prevents prompting the user for username/password
-        if (getenv('GIT_ASKPASS') !== 'echo') {
-            putenv('GIT_ASKPASS=echo');
-            unset($_SERVER['GIT_ASKPASS']);
-        }
-
-        // clean up rogue git env vars in case this is running in a git hook
-        if (getenv('GIT_DIR')) {
-            putenv('GIT_DIR');
-            unset($_SERVER['GIT_DIR']);
-        }
-        if (getenv('GIT_WORK_TREE')) {
-            putenv('GIT_WORK_TREE');
-            unset($_SERVER['GIT_WORK_TREE']);
-        }
-
-        // Run processes with predictable LANGUAGE
-        if (getenv('LANGUAGE') !== 'C') {
-            putenv('LANGUAGE=C');
-        }
-
-        // clean up env for OSX, see https://github.com/composer/composer/issues/2146#issuecomment-35478940
-        putenv("DYLD_LIBRARY_PATH");
-        unset($_SERVER['DYLD_LIBRARY_PATH']);
-    }
-
-    public static function getGitHubDomainsRegex(Config $config)
-    {
-        return '(' . implode('|', array_map('preg_quote', $config->get('github-domains'))) . ')';
-    }
-
-    public static function getGitLabDomainsRegex(Config $config)
-    {
-        return '(' . implode('|', array_map('preg_quote', $config->get('gitlab-domains'))) . ')';
-    }
-
-    public static function sanitizeUrl($message)
-    {
-        return preg_replace_callback('{://(?P<user>[^@]+?):(?P<password>.+?)@}', function ($m) {
-            if (preg_match('{^[a-f0-9]{12,}$}', $m[1])) {
-                return '://***:***@';
-            }
-
-            return '://' . $m[1] . ':***@';
-        }, $message);
-    }
-
-    private function throwException($message, $url)
-    {
-        // git might delete a directory when it fails and php will not know
-        clearstatcache();
-
-        if (0 !== $this->process->execute('git --version', $ignoredOutput)) {
-            throw new \RuntimeException(self::sanitizeUrl('Failed to clone ' . $url . ', git was not found, check that it is installed and in your PATH env.' . "\n\n" . $this->process->getErrorOutput()));
-        }
-
-        throw new \RuntimeException(self::sanitizeUrl($message));
-    }
-
-    /**
-     * Retrieves the current git version.
-     *
-     * @return string|null The git version number.
-     */
-    public function getVersion()
-    {
-        if (isset(self::$version)) {
-            return self::$version;
-        }
-        if (0 !== $this->process->execute('git --version', $output)) {
-            return;
-        }
-        if (preg_match('/^git version (\d+(?:\.\d+)+)/m', $output, $matches)) {
-            return self::$version = $matches[1];
-        }
-    }
-}

data/helpers/vendor/composer/composer/src/Composer/Util/GitHub.php

@@ -1,180 +0,0 @@
-<?php
-
-/*
- * This file is part of Composer.
- *
- * (c) Nils Adermann <naderman@naderman.de>
- *     Jordi Boggiano <j.boggiano@seld.be>
- *
- * For the full copyright and license information, please view the LICENSE
- * file that was distributed with this source code.
- */
-
-namespace Composer\Util;
-
-use Composer\Factory;
-use Composer\IO\IOInterface;
-use Composer\Config;
-use Composer\Downloader\TransportException;
-
-/**
- * @author Jordi Boggiano <j.boggiano@seld.be>
- */
-class GitHub
-{
-    protected $io;
-    protected $config;
-    protected $process;
-    protected $remoteFilesystem;
-
-    /**
-     * Constructor.
-     *
-     * @param IOInterface      $io               The IO instance
-     * @param Config           $config           The composer configuration
-     * @param ProcessExecutor  $process          Process instance, injectable for mocking
-     * @param RemoteFilesystem $remoteFilesystem Remote Filesystem, injectable for mocking
-     */
-    public function __construct(IOInterface $io, Config $config, ProcessExecutor $process = null, RemoteFilesystem $remoteFilesystem = null)
-    {
-        $this->io = $io;
-        $this->config = $config;
-        $this->process = $process ?: new ProcessExecutor($io);
-        $this->remoteFilesystem = $remoteFilesystem ?: Factory::createRemoteFilesystem($this->io, $config);
-    }
-
-    /**
-     * Attempts to authorize a GitHub domain via OAuth
-     *
-     * @param  string $originUrl The host this GitHub instance is located at
-     * @return bool   true on success
-     */
-    public function authorizeOAuth($originUrl)
-    {
-        if (!in_array($originUrl, $this->config->get('github-domains'))) {
-            return false;
-        }
-
-        // if available use token from git config
-        if (0 === $this->process->execute('git config github.accesstoken', $output)) {
-            $this->io->setAuthentication($originUrl, trim($output), 'x-oauth-basic');
-
-            return true;
-        }
-
-        return false;
-    }
-
-    /**
-     * Authorizes a GitHub domain interactively via OAuth
-     *
-     * @param  string                        $originUrl The host this GitHub instance is located at
-     * @param  string                        $message   The reason this authorization is required
-     * @throws \RuntimeException
-     * @throws TransportException|\Exception
-     * @return bool                          true on success
-     */
-    public function authorizeOAuthInteractively($originUrl, $message = null)
-    {
-        if ($message) {
-            $this->io->writeError($message);
-        }
-
-        $note = 'Composer';
-        if ($this->config->get('github-expose-hostname') === true && 0 === $this->process->execute('hostname', $output)) {
-            $note .= ' on ' . trim($output);
-        }
-        $note .= ' ' . date('Y-m-d Hi');
-
-        $url = 'https://'.$originUrl.'/settings/tokens/new?scopes=repo&description=' . str_replace('%20', '+', rawurlencode($note));
-        $this->io->writeError(sprintf('Head to %s', $url));
-        $this->io->writeError(sprintf('to retrieve a token. It will be stored in "%s" for future use by Composer.', $this->config->getAuthConfigSource()->getName()));
-
-        $token = trim($this->io->askAndHideAnswer('Token (hidden): '));
-
-        if (!$token) {
-            $this->io->writeError('<warning>No token given, aborting.</warning>');
-            $this->io->writeError('You can also add it manually later by using "composer config --global --auth github-oauth.github.com <token>"');
-
-            return false;
-        }
-
-        $this->io->setAuthentication($originUrl, $token, 'x-oauth-basic');
-
-        try {
-            $apiUrl = ('github.com' === $originUrl) ? 'api.github.com/' : $originUrl . '/api/v3/';
-
-            $this->remoteFilesystem->getContents($originUrl, 'https://'. $apiUrl, false, array(
-                'retry-auth-failure' => false,
-            ));
-        } catch (TransportException $e) {
-            if (in_array($e->getCode(), array(403, 401))) {
-                $this->io->writeError('<error>Invalid token provided.</error>');
-                $this->io->writeError('You can also add it manually later by using "composer config --global --auth github-oauth.github.com <token>"');
-
-                return false;
-            }
-
-            throw $e;
-        }
-
-        // store value in user config
-        $this->config->getConfigSource()->removeConfigSetting('github-oauth.'.$originUrl);
-        $this->config->getAuthConfigSource()->addConfigSetting('github-oauth.'.$originUrl, $token);
-
-        $this->io->writeError('<info>Token stored successfully.</info>');
-
-        return true;
-    }
-
-    /**
-     * Extract ratelimit from response.
-     *
-     * @param array $headers Headers from Composer\Downloader\TransportException.
-     *
-     * @return array Associative array with the keys limit and reset.
-     */
-    public function getRateLimit(array $headers)
-    {
-        $rateLimit = array(
-            'limit' => '?',
-            'reset' => '?',
-        );
-
-        foreach ($headers as $header) {
-            $header = trim($header);
-            if (false === strpos($header, 'X-RateLimit-')) {
-                continue;
-            }
-            list($type, $value) = explode(':', $header, 2);
-            switch ($type) {
-                case 'X-RateLimit-Limit':
-                    $rateLimit['limit'] = (int) trim($value);
-                    break;
-                case 'X-RateLimit-Reset':
-                    $rateLimit['reset'] = date('Y-m-d H:i:s', (int) trim($value));
-                    break;
-            }
-        }
-
-        return $rateLimit;
-    }
-
-    /**
-     * Finds whether a request failed due to rate limiting
-     *
-     * @param array $headers Headers from Composer\Downloader\TransportException.
-     *
-     * @return bool
-     */
-    public function isRateLimited(array $headers)
-    {
-        foreach ($headers as $header) {
-            if (preg_match('{^X-RateLimit-Remaining: *0$}i', trim($header))) {
-                return true;
-            }
-        }
-
-        return false;
-    }
-}