dependabot-composer 0.235.0 → 0.237.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (9) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/v1/composer.lock +87 -87
  3. data/helpers/v2/composer.lock +61 -61
  4. data/lib/dependabot/composer/file_fetcher.rb +7 -2
  5. data/lib/dependabot/composer/file_updater/lockfile_updater.rb +2 -11
  6. data/lib/dependabot/composer/helpers.rb +27 -0
  7. data/lib/dependabot/composer/update_checker/version_resolver.rb +3 -17
  8. data/lib/dependabot/composer.rb +1 -1
  9. metadata +21 -7
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f5ec7730a6a8f567eb516bc166545190e8d764ea4b9f79d8916097924ff7a375
4
- data.tar.gz: 9522f3edac34379bd7753241fc8b3d8aecf686843139da1542928f07836da0f2
3
+ metadata.gz: ddfe319f7ede977e2944d242cf5a8ec6dbf2d9fbcaa821d021a0a65cf9cb8536
4
+ data.tar.gz: 586283822ff58812d97923656eb4b99a87bcfc0330b1d9b94b77f45e478fbf04
5
5
  SHA512:
6
- metadata.gz: aaceba7140038fa1d777de4ca950c18051103420dd45f4660ad0c336254aa08a21847057be268950bc9a7e920b31517f0e1c09446bda814f2ebc4eb7b24c5d81
7
- data.tar.gz: b2625816c062ab7611c19324fc33a8a581d53ca7a429844d4a86302b70f8c303eed9632a44b712e6aea3265f6c56dcc37e75cd1146d6f55fecf513d3eb40445a
6
+ metadata.gz: 2cc37797a11172e366e852a74b8e9fdca38af9c0a6732825c01bee8931c837a56f5fedbcf39311acceb34e55147f3629d2c1a57a60d00a24303b8b1520c91a81
7
+ data.tar.gz: cbbac949807ab44924c051d223819ff7673ed898edb650289bc5e00b36039ff79216b5a40999449f11d7409a4ae2b6231bd131c5323200c9b62327bd60610b78
data/helpers/v1/composer.lock CHANGED
@@ -8,16 +8,16 @@
8
8
  "packages": [
9
9
  {
10
10
  "name": "composer/ca-bundle",
11
- "version": "1.3.3",
11
+ "version": "1.3.7",
12
12
  "source": {
13
13
  "type": "git",
14
14
  "url": "https://github.com/composer/ca-bundle.git",
15
- "reference": "30897edbfb15e784fe55587b4f73ceefd3c4d98c"
15
+ "reference": "76e46335014860eec1aa5a724799a00a2e47cc85"
16
16
  },
17
17
  "dist": {
18
18
  "type": "zip",
19
- "url": "https://api.github.com/repos/composer/ca-bundle/zipball/30897edbfb15e784fe55587b4f73ceefd3c4d98c",
20
- "reference": "30897edbfb15e784fe55587b4f73ceefd3c4d98c",
19
+ "url": "https://api.github.com/repos/composer/ca-bundle/zipball/76e46335014860eec1aa5a724799a00a2e47cc85",
20
+ "reference": "76e46335014860eec1aa5a724799a00a2e47cc85",
21
21
  "shasum": ""
22
22
  },
23
23
  "require": {
@@ -75,20 +75,20 @@
75
75
  "type": "tidelift"
76
76
  }
77
77
  ],
78
- "time": "2022-07-20T07:14:26+00:00"
78
+ "time": "2023-08-30T09:31:38+00:00"
79
79
  },
80
80
  {
81
81
  "name": "composer/composer",
82
- "version": "1.10.26",
82
+ "version": "1.10.27",
83
83
  "source": {
84
84
  "type": "git",
85
85
  "url": "https://github.com/composer/composer.git",
86
- "reference": "3e196135eacf9e519a6b00986bc6fe6aff977997"
86
+ "reference": "f8f49191eec76f039b466aa1f161406fe43aff50"
87
87
  },
88
88
  "dist": {
89
89
  "type": "zip",
90
- "url": "https://api.github.com/repos/composer/composer/zipball/3e196135eacf9e519a6b00986bc6fe6aff977997",
91
- "reference": "3e196135eacf9e519a6b00986bc6fe6aff977997",
90
+ "url": "https://api.github.com/repos/composer/composer/zipball/f8f49191eec76f039b466aa1f161406fe43aff50",
91
+ "reference": "f8f49191eec76f039b466aa1f161406fe43aff50",
92
92
  "shasum": ""
93
93
  },
94
94
  "require": {
@@ -169,7 +169,7 @@
169
169
  "type": "tidelift"
170
170
  }
171
171
  ],
172
- "time": "2022-04-13T14:39:56+00:00"
172
+ "time": "2023-09-29T08:50:23+00:00"
173
173
  },
174
174
  {
175
175
  "name": "composer/semver",
@@ -382,16 +382,16 @@
382
382
  },
383
383
  {
384
384
  "name": "justinrainbow/json-schema",
385
- "version": "5.2.12",
385
+ "version": "v5.2.13",
386
386
  "source": {
387
387
  "type": "git",
388
388
  "url": "https://github.com/justinrainbow/json-schema.git",
389
- "reference": "ad87d5a5ca981228e0e205c2bc7dfb8e24559b60"
389
+ "reference": "fbbe7e5d79f618997bc3332a6f49246036c45793"
390
390
  },
391
391
  "dist": {
392
392
  "type": "zip",
393
- "url": "https://api.github.com/repos/justinrainbow/json-schema/zipball/ad87d5a5ca981228e0e205c2bc7dfb8e24559b60",
394
- "reference": "ad87d5a5ca981228e0e205c2bc7dfb8e24559b60",
393
+ "url": "https://api.github.com/repos/justinrainbow/json-schema/zipball/fbbe7e5d79f618997bc3332a6f49246036c45793",
394
+ "reference": "fbbe7e5d79f618997bc3332a6f49246036c45793",
395
395
  "shasum": ""
396
396
  },
397
397
  "require": {
@@ -444,7 +444,7 @@
444
444
  "json",
445
445
  "schema"
446
446
  ],
447
- "time": "2022-04-13T08:02:27+00:00"
447
+ "time": "2023-09-26T02:20:38+00:00"
448
448
  },
449
449
  {
450
450
  "name": "psr/container",
@@ -539,16 +539,16 @@
539
539
  },
540
540
  {
541
541
  "name": "seld/jsonlint",
542
- "version": "1.9.0",
542
+ "version": "1.10.0",
543
543
  "source": {
544
544
  "type": "git",
545
545
  "url": "https://github.com/Seldaek/jsonlint.git",
546
- "reference": "4211420d25eba80712bff236a98960ef68b866b7"
546
+ "reference": "594fd6462aad8ecee0b45ca5045acea4776667f1"
547
547
  },
548
548
  "dist": {
549
549
  "type": "zip",
550
- "url": "https://api.github.com/repos/Seldaek/jsonlint/zipball/4211420d25eba80712bff236a98960ef68b866b7",
551
- "reference": "4211420d25eba80712bff236a98960ef68b866b7",
550
+ "url": "https://api.github.com/repos/Seldaek/jsonlint/zipball/594fd6462aad8ecee0b45ca5045acea4776667f1",
551
+ "reference": "594fd6462aad8ecee0b45ca5045acea4776667f1",
552
552
  "shasum": ""
553
553
  },
554
554
  "require": {
@@ -595,7 +595,7 @@
595
595
  "type": "tidelift"
596
596
  }
597
597
  ],
598
- "time": "2022-04-01T13:37:23+00:00"
598
+ "time": "2023-05-11T13:16:46+00:00"
599
599
  },
600
600
  {
601
601
  "name": "seld/phar-utils",
@@ -643,16 +643,16 @@
643
643
  },
644
644
  {
645
645
  "name": "symfony/console",
646
- "version": "v5.4.12",
646
+ "version": "v5.4.28",
647
647
  "source": {
648
648
  "type": "git",
649
649
  "url": "https://github.com/symfony/console.git",
650
- "reference": "c072aa8f724c3af64e2c7a96b796a4863d24dba1"
650
+ "reference": "f4f71842f24c2023b91237c72a365306f3c58827"
651
651
  },
652
652
  "dist": {
653
653
  "type": "zip",
654
- "url": "https://api.github.com/repos/symfony/console/zipball/c072aa8f724c3af64e2c7a96b796a4863d24dba1",
655
- "reference": "c072aa8f724c3af64e2c7a96b796a4863d24dba1",
654
+ "url": "https://api.github.com/repos/symfony/console/zipball/f4f71842f24c2023b91237c72a365306f3c58827",
655
+ "reference": "f4f71842f24c2023b91237c72a365306f3c58827",
656
656
  "shasum": ""
657
657
  },
658
658
  "require": {
@@ -717,7 +717,7 @@
717
717
  "homepage": "https://symfony.com",
718
718
  "keywords": [
719
719
  "cli",
720
- "command line",
720
+ "command-line",
721
721
  "console",
722
722
  "terminal"
723
723
  ],
@@ -735,7 +735,7 @@
735
735
  "type": "tidelift"
736
736
  }
737
737
  ],
738
- "time": "2022-08-17T13:18:05+00:00"
738
+ "time": "2023-08-07T06:12:30+00:00"
739
739
  },
740
740
  {
741
741
  "name": "symfony/deprecation-contracts",
@@ -803,16 +803,16 @@
803
803
  },
804
804
  {
805
805
  "name": "symfony/filesystem",
806
- "version": "v5.4.12",
806
+ "version": "v5.4.25",
807
807
  "source": {
808
808
  "type": "git",
809
809
  "url": "https://github.com/symfony/filesystem.git",
810
- "reference": "2d67c1f9a1937406a9be3171b4b22250c0a11447"
810
+ "reference": "0ce3a62c9579a53358d3a7eb6b3dfb79789a6364"
811
811
  },
812
812
  "dist": {
813
813
  "type": "zip",
814
- "url": "https://api.github.com/repos/symfony/filesystem/zipball/2d67c1f9a1937406a9be3171b4b22250c0a11447",
815
- "reference": "2d67c1f9a1937406a9be3171b4b22250c0a11447",
814
+ "url": "https://api.github.com/repos/symfony/filesystem/zipball/0ce3a62c9579a53358d3a7eb6b3dfb79789a6364",
815
+ "reference": "0ce3a62c9579a53358d3a7eb6b3dfb79789a6364",
816
816
  "shasum": ""
817
817
  },
818
818
  "require": {
@@ -860,20 +860,20 @@
860
860
  "type": "tidelift"
861
861
  }
862
862
  ],
863
- "time": "2022-08-02T13:48:16+00:00"
863
+ "time": "2023-05-31T13:04:02+00:00"
864
864
  },
865
865
  {
866
866
  "name": "symfony/finder",
867
- "version": "v5.4.11",
867
+ "version": "v5.4.27",
868
868
  "source": {
869
869
  "type": "git",
870
870
  "url": "https://github.com/symfony/finder.git",
871
- "reference": "7872a66f57caffa2916a584db1aa7f12adc76f8c"
871
+ "reference": "ff4bce3c33451e7ec778070e45bd23f74214cd5d"
872
872
  },
873
873
  "dist": {
874
874
  "type": "zip",
875
- "url": "https://api.github.com/repos/symfony/finder/zipball/7872a66f57caffa2916a584db1aa7f12adc76f8c",
876
- "reference": "7872a66f57caffa2916a584db1aa7f12adc76f8c",
875
+ "url": "https://api.github.com/repos/symfony/finder/zipball/ff4bce3c33451e7ec778070e45bd23f74214cd5d",
876
+ "reference": "ff4bce3c33451e7ec778070e45bd23f74214cd5d",
877
877
  "shasum": ""
878
878
  },
879
879
  "require": {
@@ -920,20 +920,20 @@
920
920
  "type": "tidelift"
921
921
  }
922
922
  ],
923
- "time": "2022-07-29T07:37:50+00:00"
923
+ "time": "2023-07-31T08:02:31+00:00"
924
924
  },
925
925
  {
926
926
  "name": "symfony/polyfill-ctype",
927
- "version": "v1.26.0",
927
+ "version": "v1.28.0",
928
928
  "source": {
929
929
  "type": "git",
930
930
  "url": "https://github.com/symfony/polyfill-ctype.git",
931
- "reference": "6fd1b9a79f6e3cf65f9e679b23af304cd9e010d4"
931
+ "reference": "ea208ce43cbb04af6867b4fdddb1bdbf84cc28cb"
932
932
  },
933
933
  "dist": {
934
934
  "type": "zip",
935
- "url": "https://api.github.com/repos/symfony/polyfill-ctype/zipball/6fd1b9a79f6e3cf65f9e679b23af304cd9e010d4",
936
- "reference": "6fd1b9a79f6e3cf65f9e679b23af304cd9e010d4",
935
+ "url": "https://api.github.com/repos/symfony/polyfill-ctype/zipball/ea208ce43cbb04af6867b4fdddb1bdbf84cc28cb",
936
+ "reference": "ea208ce43cbb04af6867b4fdddb1bdbf84cc28cb",
937
937
  "shasum": ""
938
938
  },
939
939
  "require": {
@@ -948,7 +948,7 @@
948
948
  "type": "library",
949
949
  "extra": {
950
950
  "branch-alias": {
951
- "dev-main": "1.26-dev"
951
+ "dev-main": "1.28-dev"
952
952
  },
953
953
  "thanks": {
954
954
  "name": "symfony/polyfill",
@@ -999,20 +999,20 @@
999
999
  "type": "tidelift"
1000
1000
  }
1001
1001
  ],
1002
- "time": "2022-05-24T11:49:31+00:00"
1002
+ "time": "2023-01-26T09:26:14+00:00"
1003
1003
  },
1004
1004
  {
1005
1005
  "name": "symfony/polyfill-intl-grapheme",
1006
- "version": "v1.26.0",
1006
+ "version": "v1.28.0",
1007
1007
  "source": {
1008
1008
  "type": "git",
1009
1009
  "url": "https://github.com/symfony/polyfill-intl-grapheme.git",
1010
- "reference": "433d05519ce6990bf3530fba6957499d327395c2"
1010
+ "reference": "875e90aeea2777b6f135677f618529449334a612"
1011
1011
  },
1012
1012
  "dist": {
1013
1013
  "type": "zip",
1014
- "url": "https://api.github.com/repos/symfony/polyfill-intl-grapheme/zipball/433d05519ce6990bf3530fba6957499d327395c2",
1015
- "reference": "433d05519ce6990bf3530fba6957499d327395c2",
1014
+ "url": "https://api.github.com/repos/symfony/polyfill-intl-grapheme/zipball/875e90aeea2777b6f135677f618529449334a612",
1015
+ "reference": "875e90aeea2777b6f135677f618529449334a612",
1016
1016
  "shasum": ""
1017
1017
  },
1018
1018
  "require": {
@@ -1024,7 +1024,7 @@
1024
1024
  "type": "library",
1025
1025
  "extra": {
1026
1026
  "branch-alias": {
1027
- "dev-main": "1.26-dev"
1027
+ "dev-main": "1.28-dev"
1028
1028
  },
1029
1029
  "thanks": {
1030
1030
  "name": "symfony/polyfill",
@@ -1077,20 +1077,20 @@
1077
1077
  "type": "tidelift"
1078
1078
  }
1079
1079
  ],
1080
- "time": "2022-05-24T11:49:31+00:00"
1080
+ "time": "2023-01-26T09:26:14+00:00"
1081
1081
  },
1082
1082
  {
1083
1083
  "name": "symfony/polyfill-intl-normalizer",
1084
- "version": "v1.26.0",
1084
+ "version": "v1.28.0",
1085
1085
  "source": {
1086
1086
  "type": "git",
1087
1087
  "url": "https://github.com/symfony/polyfill-intl-normalizer.git",
1088
- "reference": "219aa369ceff116e673852dce47c3a41794c14bd"
1088
+ "reference": "8c4ad05dd0120b6a53c1ca374dca2ad0a1c4ed92"
1089
1089
  },
1090
1090
  "dist": {
1091
1091
  "type": "zip",
1092
- "url": "https://api.github.com/repos/symfony/polyfill-intl-normalizer/zipball/219aa369ceff116e673852dce47c3a41794c14bd",
1093
- "reference": "219aa369ceff116e673852dce47c3a41794c14bd",
1092
+ "url": "https://api.github.com/repos/symfony/polyfill-intl-normalizer/zipball/8c4ad05dd0120b6a53c1ca374dca2ad0a1c4ed92",
1093
+ "reference": "8c4ad05dd0120b6a53c1ca374dca2ad0a1c4ed92",
1094
1094
  "shasum": ""
1095
1095
  },
1096
1096
  "require": {
@@ -1102,7 +1102,7 @@
1102
1102
  "type": "library",
1103
1103
  "extra": {
1104
1104
  "branch-alias": {
1105
- "dev-main": "1.26-dev"
1105
+ "dev-main": "1.28-dev"
1106
1106
  },
1107
1107
  "thanks": {
1108
1108
  "name": "symfony/polyfill",
@@ -1158,20 +1158,20 @@
1158
1158
  "type": "tidelift"
1159
1159
  }
1160
1160
  ],
1161
- "time": "2022-05-24T11:49:31+00:00"
1161
+ "time": "2023-01-26T09:26:14+00:00"
1162
1162
  },
1163
1163
  {
1164
1164
  "name": "symfony/polyfill-mbstring",
1165
- "version": "v1.26.0",
1165
+ "version": "v1.28.0",
1166
1166
  "source": {
1167
1167
  "type": "git",
1168
1168
  "url": "https://github.com/symfony/polyfill-mbstring.git",
1169
- "reference": "9344f9cb97f3b19424af1a21a3b0e75b0a7d8d7e"
1169
+ "reference": "42292d99c55abe617799667f454222c54c60e229"
1170
1170
  },
1171
1171
  "dist": {
1172
1172
  "type": "zip",
1173
- "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/9344f9cb97f3b19424af1a21a3b0e75b0a7d8d7e",
1174
- "reference": "9344f9cb97f3b19424af1a21a3b0e75b0a7d8d7e",
1173
+ "url": "https://api.github.com/repos/symfony/polyfill-mbstring/zipball/42292d99c55abe617799667f454222c54c60e229",
1174
+ "reference": "42292d99c55abe617799667f454222c54c60e229",
1175
1175
  "shasum": ""
1176
1176
  },
1177
1177
  "require": {
@@ -1186,7 +1186,7 @@
1186
1186
  "type": "library",
1187
1187
  "extra": {
1188
1188
  "branch-alias": {
1189
- "dev-main": "1.26-dev"
1189
+ "dev-main": "1.28-dev"
1190
1190
  },
1191
1191
  "thanks": {
1192
1192
  "name": "symfony/polyfill",
@@ -1238,20 +1238,20 @@
1238
1238
  "type": "tidelift"
1239
1239
  }
1240
1240
  ],
1241
- "time": "2022-05-24T11:49:31+00:00"
1241
+ "time": "2023-07-28T09:04:16+00:00"
1242
1242
  },
1243
1243
  {
1244
1244
  "name": "symfony/polyfill-php73",
1245
- "version": "v1.26.0",
1245
+ "version": "v1.28.0",
1246
1246
  "source": {
1247
1247
  "type": "git",
1248
1248
  "url": "https://github.com/symfony/polyfill-php73.git",
1249
- "reference": "e440d35fa0286f77fb45b79a03fedbeda9307e85"
1249
+ "reference": "fe2f306d1d9d346a7fee353d0d5012e401e984b5"
1250
1250
  },
1251
1251
  "dist": {
1252
1252
  "type": "zip",
1253
- "url": "https://api.github.com/repos/symfony/polyfill-php73/zipball/e440d35fa0286f77fb45b79a03fedbeda9307e85",
1254
- "reference": "e440d35fa0286f77fb45b79a03fedbeda9307e85",
1253
+ "url": "https://api.github.com/repos/symfony/polyfill-php73/zipball/fe2f306d1d9d346a7fee353d0d5012e401e984b5",
1254
+ "reference": "fe2f306d1d9d346a7fee353d0d5012e401e984b5",
1255
1255
  "shasum": ""
1256
1256
  },
1257
1257
  "require": {
@@ -1260,7 +1260,7 @@
1260
1260
  "type": "library",
1261
1261
  "extra": {
1262
1262
  "branch-alias": {
1263
- "dev-main": "1.26-dev"
1263
+ "dev-main": "1.28-dev"
1264
1264
  },
1265
1265
  "thanks": {
1266
1266
  "name": "symfony/polyfill",
@@ -1314,20 +1314,20 @@
1314
1314
  "type": "tidelift"
1315
1315
  }
1316
1316
  ],
1317
- "time": "2022-05-24T11:49:31+00:00"
1317
+ "time": "2023-01-26T09:26:14+00:00"
1318
1318
  },
1319
1319
  {
1320
1320
  "name": "symfony/polyfill-php80",
1321
- "version": "v1.26.0",
1321
+ "version": "v1.28.0",
1322
1322
  "source": {
1323
1323
  "type": "git",
1324
1324
  "url": "https://github.com/symfony/polyfill-php80.git",
1325
- "reference": "cfa0ae98841b9e461207c13ab093d76b0fa7bace"
1325
+ "reference": "6caa57379c4aec19c0a12a38b59b26487dcfe4b5"
1326
1326
  },
1327
1327
  "dist": {
1328
1328
  "type": "zip",
1329
- "url": "https://api.github.com/repos/symfony/polyfill-php80/zipball/cfa0ae98841b9e461207c13ab093d76b0fa7bace",
1330
- "reference": "cfa0ae98841b9e461207c13ab093d76b0fa7bace",
1329
+ "url": "https://api.github.com/repos/symfony/polyfill-php80/zipball/6caa57379c4aec19c0a12a38b59b26487dcfe4b5",
1330
+ "reference": "6caa57379c4aec19c0a12a38b59b26487dcfe4b5",
1331
1331
  "shasum": ""
1332
1332
  },
1333
1333
  "require": {
@@ -1336,7 +1336,7 @@
1336
1336
  "type": "library",
1337
1337
  "extra": {
1338
1338
  "branch-alias": {
1339
- "dev-main": "1.26-dev"
1339
+ "dev-main": "1.28-dev"
1340
1340
  },
1341
1341
  "thanks": {
1342
1342
  "name": "symfony/polyfill",
@@ -1394,20 +1394,20 @@
1394
1394
  "type": "tidelift"
1395
1395
  }
1396
1396
  ],
1397
- "time": "2022-05-10T07:21:04+00:00"
1397
+ "time": "2023-01-26T09:26:14+00:00"
1398
1398
  },
1399
1399
  {
1400
1400
  "name": "symfony/process",
1401
- "version": "v5.4.11",
1401
+ "version": "v5.4.28",
1402
1402
  "source": {
1403
1403
  "type": "git",
1404
1404
  "url": "https://github.com/symfony/process.git",
1405
- "reference": "6e75fe6874cbc7e4773d049616ab450eff537bf1"
1405
+ "reference": "45261e1fccad1b5447a8d7a8e67aa7b4a9798b7b"
1406
1406
  },
1407
1407
  "dist": {
1408
1408
  "type": "zip",
1409
- "url": "https://api.github.com/repos/symfony/process/zipball/6e75fe6874cbc7e4773d049616ab450eff537bf1",
1410
- "reference": "6e75fe6874cbc7e4773d049616ab450eff537bf1",
1409
+ "url": "https://api.github.com/repos/symfony/process/zipball/45261e1fccad1b5447a8d7a8e67aa7b4a9798b7b",
1410
+ "reference": "45261e1fccad1b5447a8d7a8e67aa7b4a9798b7b",
1411
1411
  "shasum": ""
1412
1412
  },
1413
1413
  "require": {
@@ -1453,7 +1453,7 @@
1453
1453
  "type": "tidelift"
1454
1454
  }
1455
1455
  ],
1456
- "time": "2022-06-27T16:58:25+00:00"
1456
+ "time": "2023-08-07T10:36:04+00:00"
1457
1457
  },
1458
1458
  {
1459
1459
  "name": "symfony/service-contracts",
@@ -1537,16 +1537,16 @@
1537
1537
  },
1538
1538
  {
1539
1539
  "name": "symfony/string",
1540
- "version": "v5.4.12",
1540
+ "version": "v5.4.29",
1541
1541
  "source": {
1542
1542
  "type": "git",
1543
1543
  "url": "https://github.com/symfony/string.git",
1544
- "reference": "2fc515e512d721bf31ea76bd02fe23ada4640058"
1544
+ "reference": "e41bdc93def20eaf3bfc1537c4e0a2b0680a152d"
1545
1545
  },
1546
1546
  "dist": {
1547
1547
  "type": "zip",
1548
- "url": "https://api.github.com/repos/symfony/string/zipball/2fc515e512d721bf31ea76bd02fe23ada4640058",
1549
- "reference": "2fc515e512d721bf31ea76bd02fe23ada4640058",
1548
+ "url": "https://api.github.com/repos/symfony/string/zipball/e41bdc93def20eaf3bfc1537c4e0a2b0680a152d",
1549
+ "reference": "e41bdc93def20eaf3bfc1537c4e0a2b0680a152d",
1550
1550
  "shasum": ""
1551
1551
  },
1552
1552
  "require": {
@@ -1616,7 +1616,7 @@
1616
1616
  "type": "tidelift"
1617
1617
  }
1618
1618
  ],
1619
- "time": "2022-08-12T17:03:11+00:00"
1619
+ "time": "2023-09-13T11:47:41+00:00"
1620
1620
  }
1621
1621
  ],
1622
1622
  "packages-dev": [
@@ -1920,16 +1920,16 @@
1920
1920
  },
1921
1921
  {
1922
1922
  "name": "phpstan/phpstan",
1923
- "version": "1.10.38",
1923
+ "version": "1.10.39",
1924
1924
  "source": {
1925
1925
  "type": "git",
1926
1926
  "url": "https://github.com/phpstan/phpstan.git",
1927
- "reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691"
1927
+ "reference": "d9dedb0413f678b4d03cbc2279a48f91592c97c4"
1928
1928
  },
1929
1929
  "dist": {
1930
1930
  "type": "zip",
1931
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/5302bb402c57f00fb3c2c015bac86e0827e4b691",
1932
- "reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691",
1931
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/d9dedb0413f678b4d03cbc2279a48f91592c97c4",
1932
+ "reference": "d9dedb0413f678b4d03cbc2279a48f91592c97c4",
1933
1933
  "shasum": ""
1934
1934
  },
1935
1935
  "require": {
@@ -1971,7 +1971,7 @@
1971
1971
  "type": "tidelift"
1972
1972
  }
1973
1973
  ],
1974
- "time": "2023-10-06T14:19:14+00:00"
1974
+ "time": "2023-10-17T15:46:26+00:00"
1975
1975
  },
1976
1976
  {
1977
1977
  "name": "psr/cache",
data/helpers/v2/composer.lock CHANGED
@@ -8,16 +8,16 @@
8
8
  "packages": [
9
9
  {
10
10
  "name": "composer/ca-bundle",
11
- "version": "1.3.6",
11
+ "version": "1.3.7",
12
12
  "source": {
13
13
  "type": "git",
14
14
  "url": "https://github.com/composer/ca-bundle.git",
15
- "reference": "90d087e988ff194065333d16bc5cf649872d9cdb"
15
+ "reference": "76e46335014860eec1aa5a724799a00a2e47cc85"
16
16
  },
17
17
  "dist": {
18
18
  "type": "zip",
19
- "url": "https://api.github.com/repos/composer/ca-bundle/zipball/90d087e988ff194065333d16bc5cf649872d9cdb",
20
- "reference": "90d087e988ff194065333d16bc5cf649872d9cdb",
19
+ "url": "https://api.github.com/repos/composer/ca-bundle/zipball/76e46335014860eec1aa5a724799a00a2e47cc85",
20
+ "reference": "76e46335014860eec1aa5a724799a00a2e47cc85",
21
21
  "shasum": ""
22
22
  },
23
23
  "require": {
@@ -64,7 +64,7 @@
64
64
  "support": {
65
65
  "irc": "irc://irc.freenode.org/composer",
66
66
  "issues": "https://github.com/composer/ca-bundle/issues",
67
- "source": "https://github.com/composer/ca-bundle/tree/1.3.6"
67
+ "source": "https://github.com/composer/ca-bundle/tree/1.3.7"
68
68
  },
69
69
  "funding": [
70
70
  {
@@ -80,7 +80,7 @@
80
80
  "type": "tidelift"
81
81
  }
82
82
  ],
83
- "time": "2023-06-06T12:02:59+00:00"
83
+ "time": "2023-08-30T09:31:38+00:00"
84
84
  },
85
85
  {
86
86
  "name": "composer/class-map-generator",
@@ -157,16 +157,16 @@
157
157
  },
158
158
  {
159
159
  "name": "composer/composer",
160
- "version": "2.5.8",
160
+ "version": "2.6.5",
161
161
  "source": {
162
162
  "type": "git",
163
163
  "url": "https://github.com/composer/composer.git",
164
- "reference": "4c516146167d1392c8b9b269bb7c24115d262164"
164
+ "reference": "4b0fe89db9e65b1e64df633a992e70a7a215ab33"
165
165
  },
166
166
  "dist": {
167
167
  "type": "zip",
168
- "url": "https://api.github.com/repos/composer/composer/zipball/4c516146167d1392c8b9b269bb7c24115d262164",
169
- "reference": "4c516146167d1392c8b9b269bb7c24115d262164",
168
+ "url": "https://api.github.com/repos/composer/composer/zipball/4b0fe89db9e65b1e64df633a992e70a7a215ab33",
169
+ "reference": "4b0fe89db9e65b1e64df633a992e70a7a215ab33",
170
170
  "shasum": ""
171
171
  },
172
172
  "require": {
@@ -174,23 +174,23 @@
174
174
  "composer/class-map-generator": "^1.0",
175
175
  "composer/metadata-minifier": "^1.0",
176
176
  "composer/pcre": "^2.1 || ^3.1",
177
- "composer/semver": "^3.0",
177
+ "composer/semver": "^3.2.5",
178
178
  "composer/spdx-licenses": "^1.5.7",
179
179
  "composer/xdebug-handler": "^2.0.2 || ^3.0.3",
180
180
  "justinrainbow/json-schema": "^5.2.11",
181
181
  "php": "^7.2.5 || ^8.0",
182
182
  "psr/log": "^1.0 || ^2.0 || ^3.0",
183
- "react/promise": "^2.8",
183
+ "react/promise": "^2.8 || ^3",
184
184
  "seld/jsonlint": "^1.4",
185
185
  "seld/phar-utils": "^1.2",
186
186
  "seld/signal-handler": "^2.0",
187
- "symfony/console": "^5.4.11 || ^6.0.11",
188
- "symfony/filesystem": "^5.4 || ^6.0",
189
- "symfony/finder": "^5.4 || ^6.0",
187
+ "symfony/console": "^5.4.11 || ^6.0.11 || ^7",
188
+ "symfony/filesystem": "^5.4 || ^6.0 || ^7",
189
+ "symfony/finder": "^5.4 || ^6.0 || ^7",
190
190
  "symfony/polyfill-php73": "^1.24",
191
191
  "symfony/polyfill-php80": "^1.24",
192
192
  "symfony/polyfill-php81": "^1.24",
193
- "symfony/process": "^5.4 || ^6.0"
193
+ "symfony/process": "^5.4 || ^6.0 || ^7"
194
194
  },
195
195
  "require-dev": {
196
196
  "phpstan/phpstan": "^1.9.3",
@@ -198,7 +198,7 @@
198
198
  "phpstan/phpstan-phpunit": "^1.0",
199
199
  "phpstan/phpstan-strict-rules": "^1",
200
200
  "phpstan/phpstan-symfony": "^1.2.10",
201
- "symfony/phpunit-bridge": "^6.0"
201
+ "symfony/phpunit-bridge": "^6.0 || ^7"
202
202
  },
203
203
  "suggest": {
204
204
  "ext-openssl": "Enabling the openssl extension allows you to access https URLs for repositories and packages",
@@ -211,7 +211,7 @@
211
211
  "type": "library",
212
212
  "extra": {
213
213
  "branch-alias": {
214
- "dev-main": "2.5-dev"
214
+ "dev-main": "2.6-dev"
215
215
  },
216
216
  "phpstan": {
217
217
  "includes": [
@@ -221,7 +221,7 @@
221
221
  },
222
222
  "autoload": {
223
223
  "psr-4": {
224
- "Composer\\": "src/Composer"
224
+ "Composer\\": "src/Composer/"
225
225
  }
226
226
  },
227
227
  "notification-url": "https://packagist.org/downloads/",
@@ -250,7 +250,8 @@
250
250
  "support": {
251
251
  "irc": "ircs://irc.libera.chat:6697/composer",
252
252
  "issues": "https://github.com/composer/composer/issues",
253
- "source": "https://github.com/composer/composer/tree/2.5.8"
253
+ "security": "https://github.com/composer/composer/security/policy",
254
+ "source": "https://github.com/composer/composer/tree/2.6.5"
254
255
  },
255
256
  "funding": [
256
257
  {
@@ -266,7 +267,7 @@
266
267
  "type": "tidelift"
267
268
  }
268
269
  ],
269
- "time": "2023-06-09T15:13:21+00:00"
270
+ "time": "2023-10-06T08:11:52+00:00"
270
271
  },
271
272
  {
272
273
  "name": "composer/metadata-minifier",
@@ -339,16 +340,16 @@
339
340
  },
340
341
  {
341
342
  "name": "composer/pcre",
342
- "version": "3.1.0",
343
+ "version": "3.1.1",
343
344
  "source": {
344
345
  "type": "git",
345
346
  "url": "https://github.com/composer/pcre.git",
346
- "reference": "4bff79ddd77851fe3cdd11616ed3f92841ba5bd2"
347
+ "reference": "00104306927c7a0919b4ced2aaa6782c1e61a3c9"
347
348
  },
348
349
  "dist": {
349
350
  "type": "zip",
350
- "url": "https://api.github.com/repos/composer/pcre/zipball/4bff79ddd77851fe3cdd11616ed3f92841ba5bd2",
351
- "reference": "4bff79ddd77851fe3cdd11616ed3f92841ba5bd2",
351
+ "url": "https://api.github.com/repos/composer/pcre/zipball/00104306927c7a0919b4ced2aaa6782c1e61a3c9",
352
+ "reference": "00104306927c7a0919b4ced2aaa6782c1e61a3c9",
352
353
  "shasum": ""
353
354
  },
354
355
  "require": {
@@ -390,7 +391,7 @@
390
391
  ],
391
392
  "support": {
392
393
  "issues": "https://github.com/composer/pcre/issues",
393
- "source": "https://github.com/composer/pcre/tree/3.1.0"
394
+ "source": "https://github.com/composer/pcre/tree/3.1.1"
394
395
  },
395
396
  "funding": [
396
397
  {
@@ -406,7 +407,7 @@
406
407
  "type": "tidelift"
407
408
  }
408
409
  ],
409
- "time": "2022-11-17T09:50:14+00:00"
410
+ "time": "2023-10-11T07:11:09+00:00"
410
411
  },
411
412
  {
412
413
  "name": "composer/semver",
@@ -637,16 +638,16 @@
637
638
  },
638
639
  {
639
640
  "name": "justinrainbow/json-schema",
640
- "version": "5.2.12",
641
+ "version": "v5.2.13",
641
642
  "source": {
642
643
  "type": "git",
643
644
  "url": "https://github.com/justinrainbow/json-schema.git",
644
- "reference": "ad87d5a5ca981228e0e205c2bc7dfb8e24559b60"
645
+ "reference": "fbbe7e5d79f618997bc3332a6f49246036c45793"
645
646
  },
646
647
  "dist": {
647
648
  "type": "zip",
648
- "url": "https://api.github.com/repos/justinrainbow/json-schema/zipball/ad87d5a5ca981228e0e205c2bc7dfb8e24559b60",
649
- "reference": "ad87d5a5ca981228e0e205c2bc7dfb8e24559b60",
649
+ "url": "https://api.github.com/repos/justinrainbow/json-schema/zipball/fbbe7e5d79f618997bc3332a6f49246036c45793",
650
+ "reference": "fbbe7e5d79f618997bc3332a6f49246036c45793",
650
651
  "shasum": ""
651
652
  },
652
653
  "require": {
@@ -701,9 +702,9 @@
701
702
  ],
702
703
  "support": {
703
704
  "issues": "https://github.com/justinrainbow/json-schema/issues",
704
- "source": "https://github.com/justinrainbow/json-schema/tree/5.2.12"
705
+ "source": "https://github.com/justinrainbow/json-schema/tree/v5.2.13"
705
706
  },
706
- "time": "2022-04-13T08:02:27+00:00"
707
+ "time": "2023-09-26T02:20:38+00:00"
707
708
  },
708
709
  {
709
710
  "name": "psr/container",
@@ -805,23 +806,24 @@
805
806
  },
806
807
  {
807
808
  "name": "react/promise",
808
- "version": "v2.10.0",
809
+ "version": "v3.0.0",
809
810
  "source": {
810
811
  "type": "git",
811
812
  "url": "https://github.com/reactphp/promise.git",
812
- "reference": "f913fb8cceba1e6644b7b90c4bfb678ed8a3ef38"
813
+ "reference": "c86753c76fd3be465d93b308f18d189f01a22be4"
813
814
  },
814
815
  "dist": {
815
816
  "type": "zip",
816
- "url": "https://api.github.com/repos/reactphp/promise/zipball/f913fb8cceba1e6644b7b90c4bfb678ed8a3ef38",
817
- "reference": "f913fb8cceba1e6644b7b90c4bfb678ed8a3ef38",
817
+ "url": "https://api.github.com/repos/reactphp/promise/zipball/c86753c76fd3be465d93b308f18d189f01a22be4",
818
+ "reference": "c86753c76fd3be465d93b308f18d189f01a22be4",
818
819
  "shasum": ""
819
820
  },
820
821
  "require": {
821
- "php": ">=5.4.0"
822
+ "php": ">=7.1.0"
822
823
  },
823
824
  "require-dev": {
824
- "phpunit/phpunit": "^9.5 || ^5.7 || ^4.8.36"
825
+ "phpstan/phpstan": "1.10.20 || 1.4.10",
826
+ "phpunit/phpunit": "^9.5 || ^7.5"
825
827
  },
826
828
  "type": "library",
827
829
  "autoload": {
@@ -865,7 +867,7 @@
865
867
  ],
866
868
  "support": {
867
869
  "issues": "https://github.com/reactphp/promise/issues",
868
- "source": "https://github.com/reactphp/promise/tree/v2.10.0"
870
+ "source": "https://github.com/reactphp/promise/tree/v3.0.0"
869
871
  },
870
872
  "funding": [
871
873
  {
@@ -873,7 +875,7 @@
873
875
  "type": "open_collective"
874
876
  }
875
877
  ],
876
- "time": "2023-05-02T15:15:43+00:00"
878
+ "time": "2023-07-11T16:12:49+00:00"
877
879
  },
878
880
  {
879
881
  "name": "seld/jsonlint",
@@ -989,16 +991,16 @@
989
991
  },
990
992
  {
991
993
  "name": "seld/signal-handler",
992
- "version": "2.0.1",
994
+ "version": "2.0.2",
993
995
  "source": {
994
996
  "type": "git",
995
997
  "url": "https://github.com/Seldaek/signal-handler.git",
996
- "reference": "f69d119511dc0360440cdbdaa71829c149b7be75"
998
+ "reference": "04a6112e883ad76c0ada8e4a9f7520bbfdb6bb98"
997
999
  },
998
1000
  "dist": {
999
1001
  "type": "zip",
1000
- "url": "https://api.github.com/repos/Seldaek/signal-handler/zipball/f69d119511dc0360440cdbdaa71829c149b7be75",
1001
- "reference": "f69d119511dc0360440cdbdaa71829c149b7be75",
1002
+ "url": "https://api.github.com/repos/Seldaek/signal-handler/zipball/04a6112e883ad76c0ada8e4a9f7520bbfdb6bb98",
1003
+ "reference": "04a6112e883ad76c0ada8e4a9f7520bbfdb6bb98",
1002
1004
  "shasum": ""
1003
1005
  },
1004
1006
  "require": {
@@ -1044,9 +1046,9 @@
1044
1046
  ],
1045
1047
  "support": {
1046
1048
  "issues": "https://github.com/Seldaek/signal-handler/issues",
1047
- "source": "https://github.com/Seldaek/signal-handler/tree/2.0.1"
1049
+ "source": "https://github.com/Seldaek/signal-handler/tree/2.0.2"
1048
1050
  },
1049
- "time": "2022-07-20T18:31:45+00:00"
1051
+ "time": "2023-09-03T09:24:00+00:00"
1050
1052
  },
1051
1053
  {
1052
1054
  "name": "symfony/console",
@@ -2147,16 +2149,16 @@
2147
2149
  "packages-dev": [
2148
2150
  {
2149
2151
  "name": "friendsofphp/php-cs-fixer",
2150
- "version": "v3.34.1",
2152
+ "version": "v3.37.1",
2151
2153
  "source": {
2152
2154
  "type": "git",
2153
2155
  "url": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer.git",
2154
- "reference": "98bf1b1068b4ceddbbc2a2b70b67a5e380add9e3"
2156
+ "reference": "c3fe76976081ab871aa654e872da588077e19679"
2155
2157
  },
2156
2158
  "dist": {
2157
2159
  "type": "zip",
2158
- "url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/98bf1b1068b4ceddbbc2a2b70b67a5e380add9e3",
2159
- "reference": "98bf1b1068b4ceddbbc2a2b70b67a5e380add9e3",
2160
+ "url": "https://api.github.com/repos/PHP-CS-Fixer/PHP-CS-Fixer/zipball/c3fe76976081ab871aa654e872da588077e19679",
2161
+ "reference": "c3fe76976081ab871aa654e872da588077e19679",
2160
2162
  "shasum": ""
2161
2163
  },
2162
2164
  "require": {
@@ -2189,8 +2191,6 @@
2189
2191
  "phpspec/prophecy": "^1.16",
2190
2192
  "phpspec/prophecy-phpunit": "^2.0",
2191
2193
  "phpunit/phpunit": "^9.5",
2192
- "phpunitgoodpractices/polyfill": "^1.6",
2193
- "phpunitgoodpractices/traits": "^1.9.2",
2194
2194
  "symfony/phpunit-bridge": "^6.2.3",
2195
2195
  "symfony/yaml": "^5.4 || ^6.0"
2196
2196
  },
@@ -2230,7 +2230,7 @@
2230
2230
  ],
2231
2231
  "support": {
2232
2232
  "issues": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/issues",
2233
- "source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.34.1"
2233
+ "source": "https://github.com/PHP-CS-Fixer/PHP-CS-Fixer/tree/v3.37.1"
2234
2234
  },
2235
2235
  "funding": [
2236
2236
  {
@@ -2238,20 +2238,20 @@
2238
2238
  "type": "github"
2239
2239
  }
2240
2240
  ],
2241
- "time": "2023-10-03T23:51:05+00:00"
2241
+ "time": "2023-10-29T20:51:23+00:00"
2242
2242
  },
2243
2243
  {
2244
2244
  "name": "phpstan/phpstan",
2245
- "version": "1.10.38",
2245
+ "version": "1.10.41",
2246
2246
  "source": {
2247
2247
  "type": "git",
2248
2248
  "url": "https://github.com/phpstan/phpstan.git",
2249
- "reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691"
2249
+ "reference": "c6174523c2a69231df55bdc65b61655e72876d76"
2250
2250
  },
2251
2251
  "dist": {
2252
2252
  "type": "zip",
2253
- "url": "https://api.github.com/repos/phpstan/phpstan/zipball/5302bb402c57f00fb3c2c015bac86e0827e4b691",
2254
- "reference": "5302bb402c57f00fb3c2c015bac86e0827e4b691",
2253
+ "url": "https://api.github.com/repos/phpstan/phpstan/zipball/c6174523c2a69231df55bdc65b61655e72876d76",
2254
+ "reference": "c6174523c2a69231df55bdc65b61655e72876d76",
2255
2255
  "shasum": ""
2256
2256
  },
2257
2257
  "require": {
@@ -2300,7 +2300,7 @@
2300
2300
  "type": "tidelift"
2301
2301
  }
2302
2302
  ],
2303
- "time": "2023-10-06T14:19:14+00:00"
2303
+ "time": "2023-11-05T12:57:57+00:00"
2304
2304
  },
2305
2305
  {
2306
2306
  "name": "psr/event-dispatcher",
@@ -2724,5 +2724,5 @@
2724
2724
  "ext-json": "*"
2725
2725
  },
2726
2726
  "platform-dev": [],
2727
- "plugin-api-version": "2.3.0"
2727
+ "plugin-api-version": "2.6.0"
2728
2728
  }
data/lib/dependabot/composer/file_fetcher.rb CHANGED
@@ -2,12 +2,16 @@
2
2
  # frozen_string_literal: true
3
3
 
4
4
  require "json"
5
+ require "sorbet-runtime"
5
6
  require "dependabot/file_fetchers"
6
7
  require "dependabot/file_fetchers/base"
7
8
 
8
9
  module Dependabot
9
10
  module Composer
10
11
  class FileFetcher < Dependabot::FileFetchers::Base
12
+ extend T::Sig
13
+ extend T::Helpers
14
+
11
15
  require_relative "file_fetcher/path_dependency_builder"
12
16
  require_relative "helpers"
13
17
 
@@ -27,8 +31,7 @@ module Dependabot
27
31
  }
28
32
  end
29
33
 
30
- private
31
-
34
+ sig { override.returns(T::Array[DependencyFile]) }
32
35
  def fetch_files
33
36
  fetched_files = []
34
37
  fetched_files << composer_json
@@ -38,6 +41,8 @@ module Dependabot
38
41
  fetched_files
39
42
  end
40
43
 
44
+ private
45
+
41
46
  def composer_json
42
47
  @composer_json ||= fetch_file_from_host("composer.json")
43
48
  end
data/lib/dependabot/composer/file_updater/lockfile_updater.rb CHANGED
@@ -171,17 +171,8 @@ module Dependabot
171
171
  raise PrivateSourceAuthenticationFailure, "nova.laravel.com"
172
172
  end
173
173
 
174
- if error.message.match?(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR)
175
- dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE_WITH_MIRROR)
176
- .named_captures.fetch("url")
177
- raise Dependabot::GitDependenciesNotReachable, dependency_url
178
- end
179
-
180
- if error.message.match?(UpdateChecker::VersionResolver::FAILED_GIT_CLONE)
181
- dependency_url = error.message.match(UpdateChecker::VersionResolver::FAILED_GIT_CLONE)
182
- .named_captures.fetch("url")
183
- raise Dependabot::GitDependenciesNotReachable, dependency_url
184
- end
174
+ dependency_url = Helpers.dependency_url_from_git_clone_error(error.message)
175
+ raise Dependabot::GitDependenciesNotReachable, dependency_url if dependency_url
185
176
 
186
177
  # NOTE: This matches an error message from composer plugins used to install ACF PRO
187
178
  # https://github.com/PhilippBaschke/acf-pro-installer/blob/772cec99c6ef8bc67ba6768419014cc60d141b27/src/ACFProInstaller/Exceptions/MissingKeyException.php#L14
data/lib/dependabot/composer/helpers.rb CHANGED
@@ -14,6 +14,9 @@ module Dependabot
14
14
  |composer-(?:plugin|runtime)-api)$
15
15
  /x
16
16
 
17
+ FAILED_GIT_CLONE_WITH_MIRROR = /^Failed to execute git clone --(mirror|checkout)[^']*'(?<url>[^']*?)'/
18
+ FAILED_GIT_CLONE = /^Failed to clone (?<url>.*?)/
19
+
17
20
  def self.composer_version(composer_json, parsed_lockfile = nil)
18
21
  if parsed_lockfile && parsed_lockfile["plugin-api-version"]
19
22
  version = Composer::Version.new(parsed_lockfile["plugin-api-version"])
@@ -26,6 +29,20 @@ module Dependabot
26
29
  "2"
27
30
  end
28
31
 
32
+ def self.dependency_url_from_git_clone_error(message)
33
+ if message.match?(FAILED_GIT_CLONE_WITH_MIRROR)
34
+ dependency_url = message.match(FAILED_GIT_CLONE_WITH_MIRROR).named_captures.fetch("url")
35
+ raise "Could not parse dependency_url from git clone error: #{message}" if dependency_url.empty?
36
+
37
+ clean_dependency_url(dependency_url)
38
+ elsif message.match?(FAILED_GIT_CLONE)
39
+ dependency_url = message.match(FAILED_GIT_CLONE).named_captures.fetch("url")
40
+ raise "Could not parse dependency_url from git clone error: #{message}" if dependency_url.empty?
41
+
42
+ clean_dependency_url(dependency_url)
43
+ end
44
+ end
45
+
29
46
  def self.invalid_v2_requirement?(composer_json)
30
47
  return false unless composer_json.key?("require")
31
48
 
@@ -34,6 +51,16 @@ module Dependabot
34
51
  end
35
52
  end
36
53
  private_class_method :invalid_v2_requirement?
54
+
55
+ def self.clean_dependency_url(dependency_url)
56
+ return dependency_url unless URI::DEFAULT_PARSER.regexp[:ABS_URI].match?(dependency_url)
57
+
58
+ url = URI.parse(dependency_url)
59
+ url.user = nil
60
+ url.password = nil
61
+ url.to_s
62
+ end
63
+ private_class_method :clean_dependency_url
37
64
  end
38
65
  end
39
66
  end
data/lib/dependabot/composer/update_checker/version_resolver.rb CHANGED
@@ -40,8 +40,6 @@ module Dependabot
40
40
  VERSION_REGEX = /[0-9]+(?:\.[A-Za-z0-9\-_]+)*/
41
41
  SOURCE_TIMED_OUT_REGEX =
42
42
  /The "(?<url>[^"]+packages\.json)".*timed out/
43
- FAILED_GIT_CLONE_WITH_MIRROR = /Failed to execute git clone --(mirror|checkout)[^']*'(?<url>.*?)'/
44
- FAILED_GIT_CLONE = /Failed to clone (?<url>.*?)/
45
43
 
46
44
  def initialize(credentials:, dependency:, dependency_files:,
47
45
  requirements_to_unlock:, latest_allowable_version:)
@@ -247,12 +245,9 @@ module Dependabot
247
245
  raise PrivateSourceAuthenticationFailure, "nova.laravel.com"
248
246
  end
249
247
 
250
- if error.message.match?(FAILED_GIT_CLONE_WITH_MIRROR)
251
- dependency_url = error.message.match(FAILED_GIT_CLONE_WITH_MIRROR).named_captures.fetch("url")
252
- raise Dependabot::GitDependenciesNotReachable, clean_dependency_url(dependency_url)
253
- elsif error.message.match?(FAILED_GIT_CLONE)
254
- dependency_url = error.message.match(FAILED_GIT_CLONE).named_captures.fetch("url")
255
- raise Dependabot::GitDependenciesNotReachable, clean_dependency_url(dependency_url)
248
+ dependency_url = Helpers.dependency_url_from_git_clone_error(error.message)
249
+ if dependency_url
250
+ raise Dependabot::GitDependenciesNotReachable, dependency_url
256
251
  elsif unresolvable_error?(error)
257
252
  raise Dependabot::DependencyFileNotResolvable, error.message
258
253
  elsif error.message.match?(MISSING_EXPLICIT_PLATFORM_REQ_REGEX)
@@ -458,15 +453,6 @@ module Dependabot
458
453
  platform
459
454
  end
460
455
 
461
- def clean_dependency_url(dependency_url)
462
- return dependency_url unless URI::DEFAULT_PARSER.regexp[:ABS_URI].match?(dependency_url)
463
-
464
- url = URI.parse(dependency_url)
465
- url.user = nil
466
- url.password = nil
467
- url.to_s
468
- end
469
-
470
456
  def parsed_composer_file
471
457
  @parsed_composer_file ||= JSON.parse(composer_file.content)
472
458
  end
data/lib/dependabot/composer.rb CHANGED
@@ -1,4 +1,4 @@
1
- # typed: true
1
+ # typed: strict
2
2
  # frozen_string_literal: true
3
3
 
4
4
  # These all need to be required so the various classes can be registered in a
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-composer
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.235.0
4
+ version: 0.237.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-10-19 00:00:00.000000000 Z
11
+ date: 2023-11-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.235.0
19
+ version: 0.237.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.235.0
26
+ version: 0.237.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -94,20 +94,34 @@ dependencies:
94
94
  - - "~>"
95
95
  - !ruby/object:Gem::Version
96
96
  version: '1.3'
97
+ - !ruby/object:Gem::Dependency
98
+ name: rspec-sorbet
99
+ requirement: !ruby/object:Gem::Requirement
100
+ requirements:
101
+ - - "~>"
102
+ - !ruby/object:Gem::Version
103
+ version: 1.9.2
104
+ type: :development
105
+ prerelease: false
106
+ version_requirements: !ruby/object:Gem::Requirement
107
+ requirements:
108
+ - - "~>"
109
+ - !ruby/object:Gem::Version
110
+ version: 1.9.2
97
111
  - !ruby/object:Gem::Dependency
98
112
  name: rubocop
99
113
  requirement: !ruby/object:Gem::Requirement
100
114
  requirements:
101
115
  - - "~>"
102
116
  - !ruby/object:Gem::Version
103
- version: 1.56.0
117
+ version: 1.57.2
104
118
  type: :development
105
119
  prerelease: false
106
120
  version_requirements: !ruby/object:Gem::Requirement
107
121
  requirements:
108
122
  - - "~>"
109
123
  - !ruby/object:Gem::Version
110
- version: 1.56.0
124
+ version: 1.57.2
111
125
  - !ruby/object:Gem::Dependency
112
126
  name: rubocop-performance
113
127
  requirement: !ruby/object:Gem::Requirement
@@ -244,7 +258,7 @@ licenses:
244
258
  - Nonstandard
245
259
  metadata:
246
260
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
247
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.235.0
261
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.237.0
248
262
  post_install_message:
249
263
  rdoc_options: []
250
264
  require_paths: