dependabot-composer 0.305.0 → 0.308.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a9f190bfc3526c27b1479f3f3b1f50a5fdb3b7f17a3907483820b7faab37498f
-  data.tar.gz: c26f0572e781c0318bbad84e8c1cb0d7a0807fff008f0b9a01a8b7e34042f4ea
+  metadata.gz: e8cf83dff0ec628783dcf7ec7c9213b172c4b73b95f29f22c74360766e06fedb
+  data.tar.gz: a5a7275d8226e18617c650554e1f3260ff6c5d311de4de575725471a1e85fa5e
 SHA512:
-  metadata.gz: 7a47b7f76f7ba77afb3ee230369342e36e4a385af6e687f7d7c40dbd4b3b982b7718ab3b64560e03da979f9189c774f21bfc0dbfa861ddc463bb42f2a0b0ee7f
-  data.tar.gz: 6903f13326de6df71bab27da8cdf1f77832a4aa328e4c7b2ba45d00fb03b735aaa4394dce42984dec62f3cc7ac92837434a9d3c0b306200b1bfdbb6ff705169c
+  metadata.gz: 82504108facc90a27aa88fc5274634b75095c9ad21f2aaae9996ad166c0021d64df43bffa8468eba5a8d6f96dd5bab7ecf5e26086edc660d6c4e8cc6dfd5bbe0
+  data.tar.gz: 791e9ef944a5c1352246ae1663309cda79d62cd04a7da42f39601a092abaf91ee4c635c64b14dcb429655f104d97d11400ec150a50da1117989648fc2cdd295c

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -37,8 +37,9 @@ module Dependabot
             (?<=require\s)php(?:\-[^\s\/]+)?\s.*?\s(?=->) # composer v2
           }x
         VERSION_REGEX = /[0-9]+(?:\.[A-Za-z0-9\-_]+)*/
-        SOURCE_TIMED_OUT_REGEX =
-          /The "(?<url>[^"]+packages\.json)".*timed out/
+
+        # Example Timeout error from Composer 2.7.7: "curl error 28 while downloading https://example.com:81/packages.json: Failed to connect to example.com port 81 after 9853 ms: Connection timed out" # rubocop:disable Layout/LineLength
+        SOURCE_TIMED_OUT_REGEX = %r{curl error 28 while downloading (?<url>https?://.+/packages\.json): }
 
         def initialize(credentials:, dependency:, dependency_files:,
                        requirements_to_unlock:, latest_allowable_version:)
@@ -263,8 +264,16 @@ module Dependabot
           # league/csv 9.21.0 requires php ^8.1.2 -> your php version 8.1
           if error.message.include?("your php version")
             tool_name = "PHP"
-            detected_version = error.message.match(/your php version \((.*?)\s*;/)[1]
-            supported_versions = error.message.match(/requires php\s(.*?)\s->/)[1]
+            # Match for the detected PHP version
+            detected_version_match =
+              error.message.match(/your php version \((\d+\.\d+\.\d+)\)/) ||
+              error.message.match(/your php version \((.*?)\s*;/)
+            detected_version = detected_version_match ? detected_version_match[1] : nil
+
+            # Match for the supported PHP versions
+            supported_versions_match = error.message.match(/requires php\s(.*?)\s->/)
+            supported_versions = supported_versions_match ? supported_versions_match[1] : nil
+
             raise ToolVersionNotSupported.new(tool_name, detected_version, supported_versions)
           end
 

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.305.0
+  version: 0.308.0
 platform: ruby
 authors:
 - Dependabot
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-04-06 00:00:00.000000000 Z
+date: 2025-04-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.305.0
+        version: 0.308.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.305.0
+        version: 0.308.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -280,8 +279,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.305.0
-post_install_message:
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.308.0
 rdoc_options: []
 require_paths:
 - lib
@@ -296,8 +294,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 3.1.0
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.3
 specification_version: 4
 summary: Provides Dependabot support for PHP (composer)
 test_files: []