dependabot-go_modules 0.293.0 → 0.295.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2b55d08bdb68cde72a94e977ca92b348710e12f9ba9f3c2320bfe717ce77bcdb
-  data.tar.gz: 9f5d859a17a611704587d52dc7be538155f6e8f72ea916773fc81622e2186424
+  metadata.gz: 0402ca3421b5b0c5b8fa4e55f5abbb60212308707a2aa7150bebc5fe32a5a6d9
+  data.tar.gz: ceedaaaad0f5fc209d631653cae59f93a9ffbd45ef9d5cdfc72efe478d967630
 SHA512:
-  metadata.gz: 0c3e9b41fa3e9198942d067cd5962f8a77b0ab7398e6c9f811c705b13c45aab0f6b960cf1da855ebbcfe9c651be2e299229c3d972ccb32eb612fa0c724e9c252
-  data.tar.gz: f0713d1b6f7a70b7e21cfa9a21e5fa96c4eee456b9bf7c27d542fc40f6a65af94365178d02743ce9ee956ed42b5f61a88562f2bf11e65f0a762e6421af79a16c
+  metadata.gz: de519026d214114588f8eb2eaa19e83f2088415fe19c972c582fc70cb33b2dd6aad5621919ffc7665aca926762527bbaefeb688ebeaf8c7197a537bda2f786cc
+  data.tar.gz: dc46878cfbfe6153b7b5300a71d49e1e15d07b3e0ad470628efebe8efb5c09046fa09d863c07af77a0b1593123da5f2408173da084081644ea35bfb11e3d28be

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -66,6 +66,12 @@ module Dependabot
           /Out of diskspace/
         ].freeze, T::Array[Regexp])
 
+        GO_LANG = "Go"
+
+        AMBIGUOUS_ERROR_MESSAGE = /ambiguous import: found package (?<package>.*) in multiple modules/
+
+        GO_VERSION_MISMATCH = /requires go (?<current_ver>.*) .*running go (?<req_ver>.*);/
+
         GO_MOD_VERSION = /^go 1\.\d+(\.\d+)?$/
 
         sig do
@@ -292,6 +298,8 @@ module Dependabot
           write_go_mod(body)
         end
 
+        # rubocop:disable Metrics/AbcSize
+        # rubocop:disable Metrics/PerceivedComplexity
         sig { params(stderr: String).returns(T.noreturn) }
         def handle_subprocess_error(stderr) # rubocop:disable Metrics/AbcSize
           stderr = stderr.gsub(Dir.getwd, "")
@@ -323,10 +331,21 @@ module Dependabot
             raise Dependabot::OutOfDisk.new, error_message
           end
 
+          if (matches = stderr.match(AMBIGUOUS_ERROR_MESSAGE))
+            raise Dependabot::DependencyFileNotResolvable, matches[:package]
+          end
+
+          if (matches = stderr.match(GO_VERSION_MISMATCH))
+            raise Dependabot::ToolVersionNotSupported.new(GO_LANG, T.must(matches[:current_ver]),
+                                                          T.must(matches[:req_ver]))
+          end
+
           # We don't know what happened so we raise a generic error
           msg = stderr.lines.last(10).join.strip
           raise Dependabot::DependabotError, msg
         end
+        # rubocop:enable Metrics/AbcSize
+        # rubocop:enable Metrics/PerceivedComplexity
 
         sig { params(message: String, regex: Regexp).returns(String) }
         def filter_error_message(message:, regex:)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.293.0
+  version: 0.295.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-16 00:00:00.000000000 Z
+date: 2025-01-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.293.0
+        version: 0.295.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.293.0
+        version: 0.295.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -270,7 +270,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.293.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.295.0
 post_install_message:
 rdoc_options: []
 require_paths: