dependabot-maven 0.196.2 → 0.197.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d1b693911929ed2f55b3ee70da9d40e1705121b6e996fc7ed7001143b6cf50b
-  data.tar.gz: d3c071a7cc9abe799abc33ae0820686a6c3acdfdfb0e77f2cbfd9a79e541097c
+  metadata.gz: d95fd1b7f6d8f9faa63e1714c9a4f020278487286120ab7ec71691dec548c606
+  data.tar.gz: 6ad860384f9e1644a70c392cc0a9cd02bb9a4a51d2be4061d4a788cc0d26b097
 SHA512:
-  metadata.gz: a9b88bd4b11b5b6bd32bd8ec5414d8484f0ace8d4927146128a6dcaff1211ea12cebe8d58ddb161e257f7f677f5f511ed570e497e40048ade89054916cffa3e1
-  data.tar.gz: b86732e246d75e5fbb21d9a7c45ca9c78853f50a381c3734b303a6ab3745a5604adb32fb08581051488702128d5fdf6881c0d368f12e50184e1b02e9d8004ac9
+  metadata.gz: 89a786559c9522377cad398849b7dec0e03c7bbcf28c2da35a89ff2297ff32ce30a93b19565dbe3be6f38a4b6dfc74eb752e65a47934ebea9e5581ce39d9e8a2
+  data.tar.gz: 2bfa937a4b4b76e8a322df8caa564c5f2db592e1876e35afbbd146c7641f125780441569ef74f1a992231be3edf9eb340ffd8bc1c940d4d08851cc2d52144ee4

data/lib/dependabot/maven/file_parser/property_value_finder.rb

@@ -4,6 +4,7 @@ require "nokogiri"
 
 require "dependabot/dependency_file"
 require "dependabot/maven/file_parser"
+require "dependabot/registry_client"
 
 # For documentation, see:
 # - http://maven.apache.org/guides/introduction/introduction-to-the-pom.html
@@ -127,7 +128,7 @@ module Dependabot
             url = remote_pom_url(group_id, artifact_id, version, base_url)
 
             @maven_responses ||= {}
-            @maven_responses[url] ||= RegistryClient.get(url: url)
+            @maven_responses[url] ||= Dependabot::RegistryClient.get(url: url)
             next unless @maven_responses[url].status == 200
             next unless pom?(@maven_responses[url].body)
 

data/lib/dependabot/maven/file_parser/repositories_finder.rb

@@ -4,6 +4,7 @@ require "nokogiri"
 
 require "dependabot/dependency_file"
 require "dependabot/maven/file_parser"
+require "dependabot/registry_client"
 require "dependabot/errors"
 
 # For documentation, see:
@@ -109,7 +110,7 @@ module Dependabot
             url = remote_pom_url(group_id, artifact_id, version, base_url)
 
             @maven_responses ||= {}
-            @maven_responses[url] ||= RegistryClient.get(
+            @maven_responses[url] ||= Dependabot::RegistryClient.get(
               url: url,
               # We attempt to find dependencies in private repos before failing over to the CENTRAL_REPO_URL,
               # but this can burn a lot of a job's time against slow servers due to our `read_timeout` being 20 seconds.

data/lib/dependabot/maven/metadata_finder.rb

@@ -7,6 +7,7 @@ require "dependabot/file_fetchers/base"
 require "dependabot/maven/file_parser"
 require "dependabot/maven/file_parser/repositories_finder"
 require "dependabot/maven/utils/auth_headers_finder"
+require "dependabot/registry_client"
 
 module Dependabot
   module Maven
@@ -104,7 +105,7 @@ module Dependabot
       def dependency_pom_file
         return @dependency_pom_file unless @dependency_pom_file.nil?
 
-        response = RegistryClient.get(
+        response = Dependabot::RegistryClient.get(
           url: "#{maven_repo_dependency_url}/#{dependency.version}/#{dependency_artifact_id}-#{dependency.version}.pom",
           headers: auth_headers
         )
@@ -134,7 +135,7 @@ module Dependabot
               "#{version}/"\
               "#{artifact_id}-#{version}.pom"
 
-        response = RegistryClient.get(
+        response = Dependabot::RegistryClient.get(
           url: substitute_properties_in_source_url(url, pom),
           headers: auth_headers
         )

data/lib/dependabot/maven/update_checker/version_finder.rb

@@ -7,6 +7,7 @@ require "dependabot/maven/update_checker"
 require "dependabot/maven/version"
 require "dependabot/maven/requirement"
 require "dependabot/maven/utils/auth_headers_finder"
+require "dependabot/registry_client"
 
 module Dependabot
   module Maven
@@ -138,7 +139,7 @@ module Dependabot
           @released_check[version] =
             repositories.any? do |repository_details|
               url = repository_details.fetch("url")
-              response = RegistryClient.head(
+              response = Dependabot::RegistryClient.head(
                 url: dependency_files_url(url, version),
                 headers: repository_details.fetch("auth_headers")
               )
@@ -160,7 +161,7 @@ module Dependabot
         end
 
         def fetch_dependency_metadata(repository_details)
-          response = RegistryClient.get(
+          response = Dependabot::RegistryClient.get(
             url: dependency_metadata_url(repository_details.fetch("url")),
             headers: repository_details.fetch("auth_headers")
           )

data/lib/dependabot/maven.rb

@@ -9,7 +9,6 @@ require "dependabot/maven/file_updater"
 require "dependabot/maven/metadata_finder"
 require "dependabot/maven/requirement"
 require "dependabot/maven/version"
-require "dependabot/maven/registry_client"
 
 require "dependabot/pull_request_creator/labeler"
 Dependabot::PullRequestCreator::Labeler.

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-maven
 version: !ruby/object:Gem::Version
-  version: 0.196.2
+  version: 0.197.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-29 00:00:00.000000000 Z
+date: 2022-07-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.196.2
+        version: 0.197.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.196.2
+        version: 0.197.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.30.1
+        version: 1.31.2
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.30.1
+        version: 1.31.2
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement
@@ -236,7 +236,6 @@ files:
 - lib/dependabot/maven/file_updater/declaration_finder.rb
 - lib/dependabot/maven/file_updater/property_value_updater.rb
 - lib/dependabot/maven/metadata_finder.rb
-- lib/dependabot/maven/registry_client.rb
 - lib/dependabot/maven/requirement.rb
 - lib/dependabot/maven/update_checker.rb
 - lib/dependabot/maven/update_checker/property_updater.rb

data/lib/dependabot/maven/registry_client.rb

@@ -1,57 +0,0 @@
-# frozen_string_literal: true
-
-require "dependabot/shared_helpers"
-
-# This class provides a thin wrapper around our normal usage of Excon as a simple HTTP client in order to
-# provide some minor caching functionality.
-#
-# This is not used to support full response caching currently, we just use it to ensure we detect unreachable
-# hosts and fast-fail on any subsequent requests to them to avoid excessive use of retries and connect- or
-# read-timeouts as Maven jobs tend to be sensitive to exceeding our overall 45 minute timeout.
-module Dependabot
-  module Maven
-    class RegistryClient
-      @cached_errors = {}
-
-      def self.get(url:, headers: {}, options: {})
-        raise cached_error_for(url) if cached_error_for(url)
-
-        Excon.get(
-          url,
-          idempotent: true,
-          **SharedHelpers.excon_defaults({ headers: headers }.merge(options))
-        )
-      rescue Excon::Error::Timeout => e
-        cache_error(url, e)
-        raise e
-      end
-
-      def self.head(url:, headers: {}, options: {})
-        raise cached_error_for(url) if cached_error_for(url)
-
-        Excon.head(
-          url,
-          idempotent: true,
-          **SharedHelpers.excon_defaults({ headers: headers }.merge(options))
-        )
-      rescue Excon::Error::Timeout => e
-        cache_error(url, e)
-        raise e
-      end
-
-      def self.clear_cache!
-        @cached_errors = {}
-      end
-
-      private_class_method def self.cache_error(url, error)
-        host = URI(url).host
-        @cached_errors[host] = error
-      end
-
-      private_class_method def self.cached_error_for(url)
-        host = URI(url).host
-        @cached_errors.fetch(host, nil)
-      end
-    end
-  end
-end