dependabot-helm 0.303.0 → 0.304.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 53be03f1fcf2d32d85e040547378b00c860458ae23f782cba4fd437de7defa44
-  data.tar.gz: 3d55823e45e4fa2e31b80603e0613f1929b0f2512cd34bc39a49a88c8a8aa647
+  metadata.gz: 18b41f9a6d864c0db1f75d411cbd698e7685345b45739ca8b836dd0fcb298f9d
+  data.tar.gz: 4b47f765485a6789301ed5bf49ad69e9299b3db1e9701a68ed2d8b85655b7db6
 SHA512:
-  metadata.gz: fd62305c3145cf79ee84cc653d50a8ad1cf0f77855c80c4dce6932e92c20835447d6b99c63453bc3fb1fa23ecdad0960ab363ac414cba6a4e2a159e5fc0c8888
-  data.tar.gz: 57c31fc74e516b7eeade03b18959bc902f546ccd39b22263a6dc0bf7b5c76e63a0d414be88bf41364d850f07ef5f76bea01a475561cd2dcd16584f4a2514edd8
+  metadata.gz: 7e4f82c1f38579186498a0cf8a0de6613bd2336d36f7da1463156992e9232cd504e9b87ea7c1adaec323404fcb3ccca2e4a7588f7736597e34b6d3e6c8b8bda0
+  data.tar.gz: 96c2484a65b2fbc8008d1649791258a9327e1af177c702c4d25d85a02b6874605a970d643eaa1e6bcb3d509ac05dbbb0859447ec2836a440930586005151d45c

data/lib/dependabot/helm/helpers.rb

@@ -22,13 +22,13 @@ module Dependabot
         ).strip
       end
 
-      sig { params(repo_name: String, repo_url: String).returns(String) }
-      def self.add_repo(repo_name, repo_url)
-        Dependabot.logger.info("Adding Helm repository: #{repo_name} (#{repo_url})")
+      sig { params(repo_name: String, repository_url: String).returns(String) }
+      def self.add_repo(repo_name, repository_url)
+        Dependabot.logger.info("Adding Helm repository: #{repo_name} (#{repository_url})")
 
         Dependabot::SharedHelpers.run_shell_command(
-          "helm repo add #{repo_name} #{repo_url}",
-          fingerprint: "helm repo add <repo_name> <repo_url>"
+          "helm repo add #{repo_name} #{repository_url}",
+          fingerprint: "helm repo add <repo_name> <repository_url>"
         )
       end
 
@@ -51,6 +51,21 @@ module Dependabot
           fingerprint: "helm dependency update"
         )
       end
+
+      sig { params(username: String, password: String, repository_url: String).returns(String) }
+      def self.registry_login(username, password, repository_url)
+        Dependabot.logger.info("Logging into Helm registry \"#{repository_url}\"")
+
+        Dependabot::SharedHelpers.run_shell_command(
+          "helm registry login --username #{username} --password #{password} #{repository_url}",
+          fingerprint: "helm registry login --username <username> --password <password> <repository_url>"
+        )
+      rescue StandardError => e
+        Dependabot.logger.error(
+          "Failed to authenticate for #{repository_url}: #{e.message}"
+        )
+        raise
+      end
     end
   end
 end

data/lib/dependabot/helm/update_checker.rb

@@ -151,6 +151,7 @@ module Dependabot
         Dependabot.logger.info("Fetching releases for Helm chart: #{chart_name}")
 
         if repo_name && repo_url
+          authenticate_registry_source(repo_url)
           begin
             Helpers.add_repo(repo_name, repo_url)
             Helpers.update_repo
@@ -175,6 +176,19 @@ module Dependabot
         end
       end
 
+      sig { params(repo_url: T.nilable(String)).returns(T.nilable(String)) }
+      def authenticate_registry_source(repo_url)
+        return unless repo_url
+
+        repo_creds = Shared::Utils::CredentialsFinder.new(@credentials, private_repository_type: "helm_repository")
+                                                     .credentials_for_registry(repo_url)
+        return unless repo_creds
+
+        Helpers.registry_login(T.must(repo_creds["username"]), T.must(repo_creds["password"]), repo_url)
+      rescue StandardError
+        raise PrivateSourceAuthenticationFailure, repo_url
+      end
+
       sig { returns(T.nilable(Gem::Version)) }
       def fetch_latest_chart_version
         chart_name = dependency.name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-helm
 version: !ruby/object:Gem::Version
-  version: 0.303.0
+  version: 0.304.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-27 00:00:00.000000000 Z
+date: 2025-04-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.303.0
+        version: 0.304.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.303.0
+        version: 0.304.0
 - !ruby/object:Gem::Dependency
   name: dependabot-docker
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.303.0
+        version: 0.304.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.303.0
+        version: 0.304.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -271,7 +271,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.303.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.304.0
 post_install_message:
 rdoc_options: []
 require_paths: