dependabot-go_modules 0.122.0 → 0.124.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4668f28343a248c1d0e2ec3d61ffb59b79be51eb0df6ece487db719379935e3f
-  data.tar.gz: a5957a544166a39647cee725a66c85503887a8e141589adbfed2987a47d987b3
+  metadata.gz: b4d00b5ee9167f7e1e7634a005c57ab8c67ee6047e2a308ff002258cfebd2334
+  data.tar.gz: 5ce5546b8ee038eba45b1dc2af99d2f6c96c5b44f8229c31a253620d6e218c9a
 SHA512:
-  metadata.gz: ffe602aaff9f86aa15d94ebe13d5fd533e614eeb293819a6521403fc65cbff4158a0d4b1aa00aa1373e757ec47039f95d69b39e2d9ff386e9a42055e1e8283ef
-  data.tar.gz: 0b30b162084a264df70c145b1fecc99f9895e9c5594a08b2a90730dd8b1aa56c9bd535eeb6bc78430e140812dacca17a9e61017c1dfa76eebaf4ffef739b22d8
+  metadata.gz: 2ec67eddd8f22e7fb54cdc832a5a34b3e3f40db7cf6a5450133227fad8f7da4a180c867c88919d5e6ee959d95df5d65354450272d4e7e010b0a7cb30b6fd7fad
+  data.tar.gz: a1ed92b9bba733da70aaaba8d497e1fe175335c28f384bb55599ecf65ceab98f8edab4c833df80946fb8c0f4bc500b776a063820f589ab76335b59693ed57d5d

data/lib/dependabot/go_modules/file_updater.rb

@@ -13,22 +13,8 @@ module Dependabot
       def initialize(dependencies:, dependency_files:, repo_contents_path: nil,
                      credentials:, options: {})
         super
-        return unless repo_contents_path.nil?
 
-        # masquerade repo_contents_path for GoModUpdater during transition
-        tmp = Dir.mktmpdir
-        Dir.chdir(tmp) do
-          dependency_files.each do |file|
-            File.write(file.name, file.content)
-          end
-          `git config --global user.email "no-reply@github.com"`
-          `git config --global user.name "Dependabot"`
-          `git init .`
-          `git add .`
-          `git commit -m'fake repo_contents_path'`
-        end
-        @repo_contents_path = tmp
-        @repo_contents_stub = true
+        use_repo_contents_stub if repo_contents_path.nil?
       end
 
       def self.updated_files_regex
@@ -76,6 +62,21 @@ module Dependabot
         raise "No go.mod!"
       end
 
+      def use_repo_contents_stub
+        @repo_contents_stub = true
+        @repo_contents_path = Dir.mktmpdir
+        Dir.chdir(@repo_contents_path) do
+          dependency_files.each do |file|
+            File.write(file.name, file.content)
+          end
+          `git config --global user.email "no-reply@github.com"`
+          `git config --global user.name "Dependabot"`
+          `git init .`
+          `git add .`
+          `git commit -m'fake repo_contents_path'`
+        end
+      end
+
       def go_mod
         @go_mod ||= get_original_file("go.mod")
       end
@@ -111,12 +112,11 @@ module Dependabot
       end
 
       def tidy?
-        !@repo_contents_stub && options.fetch(:go_mod_tidy, false)
+        !@repo_contents_stub
       end
 
       def vendor?
-        File.exist?(File.join(vendor_dir, "modules.txt")) &&
-          options.fetch(:go_mod_vendor, false)
+        File.exist?(File.join(vendor_dir, "modules.txt"))
       end
     end
   end

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -14,9 +14,14 @@ module Dependabot
         ENVIRONMENT = { "GOPRIVATE" => "*" }.freeze
 
         RESOLVABILITY_ERROR_REGEXES = [
+          # (Private) module could not be fetched
           /go: .*: git fetch .*: exit status 128/.freeze,
+          # The checksum in go.sum does not match the dowloaded content
           /verifying .*: checksum mismatch/.freeze,
-          /build .*: cannot find module providing package/.freeze
+          # (Private) module could not be found
+          /cannot find module providing package/.freeze,
+          # Package in module was likely renamed or removed
+          /module .* found \(.*\), but does not contain package/m.freeze
         ].freeze
 
         MODULE_PATH_MISMATCH_REGEXES = [

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.122.0
+  version: 0.124.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-10-07 00:00:00.000000000 Z
+date: 2020-10-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.122.0
+        version: 0.124.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.122.0
+        version: 0.124.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.92.0
+        version: 0.93.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.92.0
+        version: 0.93.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement