dependabot-nix 0.375.0 → 0.376.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: fe9c75a30d41c44bb089dd18e28434137aaf7fce44c245ce8c264fffca4b4e58
4
- data.tar.gz: 61b4d00c58b904848439a8d9e323bc3707518783e9319d6ea6843a0fac738b54
3
+ metadata.gz: cd06eaf55b0789a9f1fbe354487d3336cd3ae9b52bfebe8486413cae00f9ee7a
4
+ data.tar.gz: 32a6f23e600e8cf05e8b3ffdb45cd38c1b1e70f321ac6f7f091a9538aeaefa1e
5
5
  SHA512:
6
- metadata.gz: 8e0054563b1d303456fdf277cc3b0e39fb86c2d8dde54f3dadc9719007686718cd91c18654836f946a47e69f13af28a65300b55620242f3dffb7d85c9d85fb4c
7
- data.tar.gz: aef6100cb0225988b52c87dfdccaae3d507231af2b44518e96fbb3ddcc78899a7fb604ff21dcb23ba19331f7402284fb9847506171e1b28c9294979361538774
6
+ metadata.gz: 980d8f82f1edd408e56df5828b283d28f6dc79dd69e90e305d4ac875b91779f7b2016d8c5bbc75eaebc43eabc071c98a972c3e68a66a998bba0bf02b47fcbd8f
7
+ data.tar.gz: 2dec50bb88f0c0fb44b6059ea2d40489bf15962a5b2c4f583541bec6f16877adc9fd0e32c02b9c883735775314071e42953cffd81bd2a64a70ee89055e42dbc7
@@ -14,6 +14,10 @@ module Dependabot
14
14
  class FileUpdater < Dependabot::FileUpdaters::Base
15
15
  extend T::Sig
16
16
 
17
+ # Nix's CLI restricts flake input attribute path elements to this regex.
18
+ # see `flakeIdRegex` in nix/src/libflake/include/nix/flake/flakeref.hh
19
+ FLAKE_ID_REGEX = /\A[a-zA-Z][a-zA-Z0-9_-]*\z/
20
+
17
21
  sig { override.returns(T::Array[Dependabot::DependencyFile]) }
18
22
  def updated_dependency_files
19
23
  updated_files = []
@@ -54,6 +58,14 @@ module Dependabot
54
58
 
55
59
  sig { params(updated_nix_content: T.nilable(String)).returns(String) }
56
60
  def update_flake_lock(updated_nix_content)
61
+ unless dependency.name.match?(FLAKE_ID_REGEX)
62
+ raise Dependabot::DependencyFileNotResolvable,
63
+ "Cannot update flake input '#{dependency.name}': Nix requires input names to start " \
64
+ "with a letter and contain only letters, digits, underscores, or hyphens " \
65
+ "(pattern: [a-zA-Z][a-zA-Z0-9_-]*). " \
66
+ "Rename the input in flake.nix to update it via Dependabot."
67
+ end
68
+
57
69
  SharedHelpers.in_a_temporary_repo_directory(
58
70
  flake_lock.directory,
59
71
  repo_contents_path
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-nix
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.375.0
4
+ version: 0.376.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.375.0
18
+ version: 0.376.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.375.0
25
+ version: 0.376.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -259,7 +259,7 @@ licenses:
259
259
  - MIT
260
260
  metadata:
261
261
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
262
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.375.0
262
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.376.0
263
263
  rdoc_options: []
264
264
  require_paths:
265
265
  - lib