dependabot-composer 0.170.2 → 0.171.3

data/lib/dependabot/composer/native_helpers.rb

@@ -8,7 +8,7 @@ module Dependabot
       end
 
       def self.composer_helpers_dir
-        File.join(native_helpers_root, "composer/helpers")
+        File.join(native_helpers_root, "composer")
       end
 
       def self.native_helpers_root

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -250,10 +250,10 @@ module Dependabot
 
           if error.message.match?(FAILED_GIT_CLONE_WITH_MIRROR)
             dependency_url = error.message.match(FAILED_GIT_CLONE_WITH_MIRROR).named_captures.fetch("url")
-            raise Dependabot::GitDependenciesNotReachable, dependency_url
+            raise Dependabot::GitDependenciesNotReachable, clean_dependency_url(dependency_url)
           elsif error.message.match?(FAILED_GIT_CLONE)
             dependency_url = error.message.match(FAILED_GIT_CLONE).named_captures.fetch("url")
-            raise Dependabot::GitDependenciesNotReachable, dependency_url
+            raise Dependabot::GitDependenciesNotReachable, clean_dependency_url(dependency_url)
           elsif unresolvable_error?(error)
             raise Dependabot::DependencyFileNotResolvable, sanitized_message
           elsif error.message.match?(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
@@ -463,6 +463,15 @@ module Dependabot
           platform
         end
 
+        def clean_dependency_url(dependency_url)
+          return dependency_url unless URI::DEFAULT_PARSER.regexp[:ABS_URI].match?(dependency_url)
+
+          url = URI.parse(dependency_url)
+          url.user = nil
+          url.password = nil
+          url.to_s
+        end
+
         def parsed_composer_file
           @parsed_composer_file ||= JSON.parse(composer_file.content)
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.170.2
+  version: 0.171.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-01-11 00:00:00.000000000 Z
+date: 2022-01-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.170.2
+        version: 0.171.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.170.2
+        version: 0.171.3
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement