dependabot-go_modules 0.140.0 → 0.141.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6db33dcc964951104dcb025091b48c2ca27518f9ad0125300fa16d0d36a4baf2
-  data.tar.gz: 7118702b2c64ae01c9fa538ba978ddf3eb5da949cebe75bb09033c40c5753141
+  metadata.gz: 782921c875740a8492be1ce417cb218691461cc24404857d894833ea4260dc42
+  data.tar.gz: '021648575d9e8fd2bb374b8738a47a83019b3f08822d1bd56d637ed024560081'
 SHA512:
-  metadata.gz: c28d4b398546de96125e8c776348078fcbfe64f7fbd61f03642101e9187f11ca0b0593c6104410ffb21642d9f48fb48e7feb5ee0124b686ff152972f388bd6e2
-  data.tar.gz: 57e67604d8acc83df2d5c1bf2200bd50ec9e8065075bb25964af1878946efae1052b6b8878599ebd8d1e18b84d159cf8eca840b7091a028da3846a07a762ffbb
+  metadata.gz: 5b7c0bf86c1962db3f725813e858c9fdaff19d15bb982f5cbce7dbb1cc450083f1c46dc6037611084ee3641e1ce3ac6d0bafc2fb1c8a7b11e6cf5e9d63204497
+  data.tar.gz: 3592cd36fe26aed53a9fa8a57365d3de186ad6ab53936713d15e1e0870983c87620a9f592d0e8ce199454cfa5ccbe23b404dc67764e1385a5e2ca25d23ed9099

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -15,12 +15,14 @@ module Dependabot
         ENVIRONMENT = { "GOPRIVATE" => "*" }.freeze
 
         RESOLVABILITY_ERROR_REGEXES = [
-          # The checksum in go.sum does not match the dowloaded content
+          # The checksum in go.sum does not match the downloaded content
           /verifying .*: checksum mismatch/.freeze,
           /go: .*: go.mod has post-v\d+ module path/
         ].freeze
 
         REPO_RESOLVABILITY_ERROR_REGEXES = [
+          /fatal: The remote end hung up unexpectedly/,
+          /repository '.+' not found/,
           # (Private) module could not be fetched
           /go: .*: git fetch .*: exit status 128/.freeze,
           # (Private) module could not be found
@@ -36,6 +38,7 @@ module Dependabot
         ].freeze
 
         MODULE_PATH_MISMATCH_REGEXES = [
+          /go get: \S+ updating to\n\s+\S+\sparsing\sgo.mod:\n\s+module declares its path as: \S+\n\s+but was required as: \S+/,
           /go: ([^@\s]+)(?:@[^\s]+)?: .* has non-.* module path "(.*)" at/,
           /go: ([^@\s]+)(?:@[^\s]+)?: .* unexpected module path "(.*)"/,
           /go: ([^@\s]+)(?:@[^\s]+)?: .* declares its path as: ([\S]*)/m
@@ -193,8 +196,7 @@ module Dependabot
         end
 
         def in_repo_path(&block)
-          SharedHelpers.
-            in_a_temporary_repo_directory(directory, repo_contents_path) do
+          SharedHelpers.in_a_temporary_repo_directory(directory, repo_contents_path) do
             SharedHelpers.with_git_configured(credentials: credentials) do
               block.call
             end
@@ -292,6 +294,10 @@ module Dependabot
             raise Dependabot::OutOfDisk.new, error_message
           end
 
+          if (matches = stderr.match(/Authentication failed for '(?<url>.+)'/))
+            raise Dependabot::PrivateSourceAuthenticationFailure, matches[:url]
+          end
+
           # We don't know what happened so we raise a generic error
           msg = stderr.lines.last(10).join.strip
           raise Dependabot::DependabotError, msg

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.140.0
+  version: 0.141.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-04-07 00:00:00.000000000 Z
+date: 2021-04-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.140.0
+        version: 0.141.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.140.0
+        version: 0.141.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement