dependabot-hex 0.341.0 → 0.342.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 26fd528a5782f60b67d73eecc466196a6c6abc749f969545c5f686dfd505946a
-  data.tar.gz: 7a53bcc54f57811d399d6e8ddce0b28359273313e8097df67b4d5b5e3c851b7e
+  metadata.gz: 22c79361ed4a6957b9d985f33eeb0533d3d1296cdbccc6ca37141d81eb4bf213
+  data.tar.gz: d6d4dddb042ff49198bbe98df1bff9a8620d0650c4baeb29d94a9ecdef8d0568
 SHA512:
-  metadata.gz: 2065ce210b862231ae83db110fe1d16206ecb1e4c74cd00a196674a658e0ec4668df2578f8a24c1172f7b3a7bb62e864d21c59b3e79d7d4242c2b7344e7aee0d
-  data.tar.gz: 81f9494145e6001ea77f94932f0afba72d9091766b47dbf38ece200a0dbbf02e75f3798bc1449f59117798a1600ad323aa3e544b8cfbd50c38b83968606b1b55
+  metadata.gz: 513210c3a1d6aae22e95a8b6be17065d2a83703d58782a6a237c56f3b358a7263611631d7dd98a24cb95b489c7cd23ba0a2cd30e56e155867b6c98256b842732
+  data.tar.gz: 4a87780429437c833cd9e1322e022ea954ed41258f2cbb4067a31ccfcfdcf475789fa8ba854f7909c73f06f867af858559b6660faedf9a974906bb1ee74558c8

data/lib/dependabot/hex/file_updater/lockfile_updater.rb

@@ -50,6 +50,8 @@ module Dependabot
             end
 
           post_process_lockfile(@updated_lockfile_content)
+        rescue SharedHelpers::HelperSubprocessFailed => e
+          handle_hex_errors(e)
         end
 
         private
@@ -79,6 +81,26 @@ module Dependabot
           content.sub(/\A%\{\n  "/, "%{\"").sub("},\n}", "}}")
         end
 
+        sig { params(error: SharedHelpers::HelperSubprocessFailed).returns(T.noreturn) }
+        def handle_hex_errors(error)
+          match = error.message.match(/No authenticated organization found for (?<repo>[a-z_]+)\./)
+          match ||= error.message.match(/Public key fingerprint mismatch for repo "(?<repo>[a-z_]+)"/)
+          match ||= error.message.match(/Missing credentials for "(?<repo>[a-z_]+)"/)
+          match ||= error.message.match(/Downloading public key for repo "(?<repo>[a-z_]+)"/)
+          match ||= error.message.match(/Failed to fetch record for (?<repo>[a-z_]+)(?::(?<org>[a-z_]+))?/)
+
+          if match
+            name = match.names.include?("org") && match[:org] ? match[:org] : match[:repo]
+            raise Dependabot::PrivateSourceAuthenticationFailure, name
+          end
+
+          if error.message.include?("JSON") || error.message.include?("parse")
+            raise Dependabot::DependencyFileNotResolvable, "Failed to parse response from Hex helper: #{error.message}"
+          end
+
+          raise Dependabot::DependencyFileNotResolvable, "Failed to update lockfile: #{error.message}"
+        end
+
         sig { void }
         def write_temporary_dependency_files
           mixfiles.each do |file|

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-hex
 version: !ruby/object:Gem::Version
-  version: 0.341.0
+  version: 0.342.1
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.341.0
+        version: 0.342.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.341.0
+        version: 0.342.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.341.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.342.1
 rdoc_options: []
 require_paths:
 - lib