dependabot-composer 0.148.7 → 0.148.8

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a613fdb3aa21af55cf74e933adfb52a18efa61bd35e7a3fff5929b08b93231da
-  data.tar.gz: 641d9ac50c19b3be20ad01e76d586c54fadc300d5db70348173b8d192903bfe0
+  metadata.gz: 63a0158c54de172fab190eed3de3b2184b4370d8c71468dd801ba991a5598c96
+  data.tar.gz: 8c94e36b34e49d3d31c7777d8b324c0ca4646d02a043ce0e7b054806feb4fd93
 SHA512:
-  metadata.gz: ea6d74ff4dfd0a6c7f477447b35b0d7063f5e4dc9912907ece62a9236601f5ae837b2aa599b0fdaf11c0d6eb04b46948413dcf334a07f89a5ef83f006d9ac656
-  data.tar.gz: 2d39a98f5b398cd6ee7d77a4cf4fa7386ca03e32cb132d604402d4decb897c026e21ec0d9a18cd72e9cec0b426d7a36b38241f9538b66172bc2b0864eec69a02
+  metadata.gz: f9546dfb7a5c8bcc0aa64f787c46d652da4781bd73f605cdf82d5771d710e3255ceb0dbef19926b240a3bc4070a9bf3ed93570c75c3166d7e0ef0993db3003e9
+  data.tar.gz: 96d24dc6d13a96852621b5ebd86ed7be7c4f83a7ecae52ed9f775f15232d64f64dd281e442c5087fdc69acacab99e1abb176a62d85d238ce441b40eda55fd75a

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -37,6 +37,8 @@ module Dependabot
         VERSION_REGEX = /[0-9]+(?:\.[A-Za-z0-9\-_]+)*/.freeze
         SOURCE_TIMED_OUT_REGEX =
           /The "(?<url>[^"]+packages\.json)".*timed out/.freeze
+        FAILED_GIT_CLONE_WITH_MIRROR = /Failed to execute git clone --mirror[^']*'(?<url>.*?)'/.freeze
+        FAILED_GIT_CLONE = /Failed to clone (?<url>.*?) via/.freeze
 
         def initialize(credentials:, dependency:, dependency_files:,
                        requirements_to_unlock:, latest_allowable_version:)
@@ -244,15 +246,11 @@ module Dependabot
             raise PrivateSourceAuthenticationFailure, "nova.laravel.com"
           end
 
-          if error.message.start_with?("Failed to execute git clone")
-            dependency_url =
-              error.message.match(/--mirror '(?<url>.*?)'/).
-              named_captures.fetch("url")
+          if error.message.match?(FAILED_GIT_CLONE_WITH_MIRROR)
+            dependency_url = error.message.match(FAILED_GIT_CLONE_WITH_MIRROR).named_captures.fetch("url")
             raise Dependabot::GitDependenciesNotReachable, dependency_url
-          elsif error.message.start_with?("Failed to clone")
-            dependency_url =
-              error.message.match(/Failed to clone (?<url>.*?) via/).
-              named_captures.fetch("url")
+          elsif error.message.match?(FAILED_GIT_CLONE)
+            dependency_url = error.message.match(FAILED_GIT_CLONE).named_captures.fetch("url")
             raise Dependabot::GitDependenciesNotReachable, dependency_url
           elsif unresolvable_error?(error)
             raise Dependabot::DependencyFileNotResolvable, sanitized_message
@@ -304,13 +302,10 @@ module Dependabot
             nil
           elsif error.message.include?("URL required authentication") ||
                 error.message.include?("403 Forbidden")
-            source =
-              error.message.match(%r{https?://(?<source>[^/]+)/}).
-              named_captures.fetch("source")
+            source = error.message.match(%r{https?://(?<source>[^/]+)/}).named_captures.fetch("source")
             raise Dependabot::PrivateSourceAuthenticationFailure, source
           elsif error.message.match?(SOURCE_TIMED_OUT_REGEX)
-            url = error.message.match(SOURCE_TIMED_OUT_REGEX).
-                  named_captures.fetch("url")
+            url = error.message.match(SOURCE_TIMED_OUT_REGEX).named_captures.fetch("url")
             raise if url.include?("packagist.org")
 
             source = url.gsub(%r{/packages.json$}, "")

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.148.7
+  version: 0.148.8
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.148.7
+        version: 0.148.8
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.148.7
+        version: 0.148.8
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement