dependabot-go_modules 0.95.25 → 0.95.26

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 59ec76e75b74a62b20d96ed119fd443443a3f1ac0740e3e27deb9c34694638da
-  data.tar.gz: 8d770eb582770df000d04fb3303581a7267c28b44b75d8a070f91b07307fb312
+  metadata.gz: d54e469ee31cc468868cfa5b743ac1d2b6df2ad6e2af37a603bf66661aff2b35
+  data.tar.gz: 9c9179464611bc65b40d0791ad587608b51ff53472e796ce4aa393389c9832f4
 SHA512:
-  metadata.gz: a361222fc3547f64e34fc7c68a25d9b11344c40f0f001ef612285e947508b97aa05c76a3386cbc80485423c974561b17b7c64d43849d9af942d3c7a4d5c91df5
-  data.tar.gz: 06c92db8c9a0a51a8154cc4d653948b72166fa8b79f408469bebe0a4c1839f8b6da41a635321998d821c797f2737049b5a366a41b843abe5b2100467725b76b1
+  metadata.gz: 984a513f7e6c7bf1fd5760c68d3503f8b8dd1625d4b95ea28227eb6b7e7a87f3dfbb15c64ddac5099f0722fb23f23901b717b782d68ec5749a80abc7ac5fc1a1
+  data.tar.gz: 9db5a2b3d466af33e4e6617f40519809c62137ea719eea615525dc29b4af1bc1afa018b724d3bf1b932ca1b5ed5e77faf7985d1062ee2c81918686f811a0e2b8

data/lib/dependabot/go_modules/file_parser.rb

@@ -88,6 +88,7 @@ module Dependabot
           end
       end
 
+      # rubocop:disable Metrics/AbcSize
       def handle_parser_error(path, stderr)
         case stderr
         when /go: .*: unknown revision/
@@ -99,11 +100,17 @@ module Dependabot
         when /go: errors parsing go.mod/
           msg = stderr.gsub(path.to_s, "").strip
           raise Dependabot::DependencyFileNotParseable.new(go_mod.path, msg)
+        when /go: finding .*/
+          msg = stderr.lines.grep(/go: finding/).first.strip
+          match = /go: finding (?<require>\S+)/.match(msg)
+          msg = "could not resolve dependency #{match[:require]}" if match
+          raise Dependabot::DependencyFileNotResolvable.new, msg
         else
           msg = stderr.gsub(path.to_s, "").strip
           raise Dependabot::DependencyFileNotParseable.new(go_mod.path, msg)
         end
       end
+      # rubocop:enable Metrics/AbcSize
 
       def rev_identifier?(dep)
         dep["Version"]&.match?(GIT_VERSION_REGEX)

data/lib/dependabot/go_modules/file_updater/go_mod_updater.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require "dependabot/shared_helpers"
+require "dependabot/errors"
 require "dependabot/go_modules/file_updater"
 require "dependabot/go_modules/native_helpers"
 
@@ -51,9 +52,10 @@ module Dependabot
                 File.write("go.sum", go_sum.content)
                 File.write("main.go", dummy_main_go)
 
-                `GO111MODULE=on go get -d`
-                unless $CHILD_STATUS.success?
-                  raise Dependabot::DependencyFileNotParseable, go_sum.path
+                command = "GO111MODULE=on go get -d"
+                _, stderr, status = Open3.capture3(command)
+                unless status.success?
+                  handle_subprocess_error(go_sum.path, stderr)
                 end
 
                 File.read("go.sum")
@@ -63,6 +65,19 @@ module Dependabot
 
         private
 
+        def handle_subprocess_error(path, stderr)
+          case stderr
+          when /go: finding .*/
+            msg = stderr.lines.grep(/go: finding/).first.strip
+            match = /go: finding (?<require>\S+)/.match(msg)
+            msg = "could not resolve dependency #{match[:require]}" if match
+            raise Dependabot::DependencyFileNotResolvable.new, msg
+          else
+            msg = stderr.gsub(path.to_s, "").strip
+            raise Dependabot::DependencyFileNotParseable.new(go_mod.path, msg)
+          end
+        end
+
         def dummy_main_go
           lines = ["package main", "import ("]
           dependencies.each do |dep|

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-go_modules
 version: !ruby/object:Gem::Version
-  version: 0.95.25
+  version: 0.95.26
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.25
+        version: 0.95.26
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.25
+        version: 0.95.26
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement