dependabot-npm_and_yarn 0.271.0 → 0.272.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f4f98b20f2112f6db686800d5b7e601a30cb2b11bdf128015086f9f4131d4fd1
-  data.tar.gz: d148ba0aaff4f8d57a4905a618dea6aee59250a03757e0adc4f49d3f3cc76235
+  metadata.gz: 2b986a02c4b0f3aec877f1f3e5713415bf0f6dd7e2cbb347fb8c69c69934e369
+  data.tar.gz: 70a12ed63b81ce69ea93473df5792b26397a81015ab40fb9a57c77aa37ceea60
 SHA512:
-  metadata.gz: c55e404408f8ccb890dbc1fd3aba9035e92149ede65d296dc5a0b14bbd2c496ae9d418fb75a7ca39cd9bf7220c5c34b49c466f2686c0b5f0c038d4de56e71488
-  data.tar.gz: a52b4a47eae0cb7f5bb38dac5c9644ad59a45a74c55186e49c5691f194ba65145eec59bac04b37821355585e021237d9832f4eb0f280cce6f7df5be3f4a028fe
+  metadata.gz: 023a5ff98729ff3e7e53fb36e086cb957f3f1e545ca1345a69dc1ba4664580b2842af29b407fdbd39fa7c2fe3dc90f04928eb8954b27a3f4aef3ab6bfae0cb36
+  data.tar.gz: ce482960e083b8141181fd2a5c7c58159715f7360cf339b372fe230b8ade5148ad657568c25273d394e4549033f9db09cb82c9e16796e8147278bcc2b18d39fb

data/lib/dependabot/npm_and_yarn/file_updater.rb

@@ -30,26 +30,17 @@ module Dependabot
         end
       end
 
-      sig { override.params(allowlist_enabled: T::Boolean).returns(T::Array[Regexp]) }
-      def self.updated_files_regex(allowlist_enabled = false)
-        if allowlist_enabled
-          [
-            %r{^(?:.*\/)?package\.json$},
-            %r{^(?:.*\/)?package-lock\.json$},
-            %r{^(?:.*\/)?npm-shrinkwrap\.json$},
-            %r{^(?:.*\/)?yarn\.lock$},
-            %r{^(?:.*\/)?pnpm-lock\.yaml$}
-          ]
-        else
-          # Old regex. After 100% rollout of the allowlist, this will be removed.
-          [
-            /^package\.json$/,
-            /^package-lock\.json$/,
-            /^npm-shrinkwrap\.json$/,
-            /^yarn\.lock$/,
-            /^pnpm-lock\.yaml$/
-          ]
-        end
+      sig { override.returns(T::Array[Regexp]) }
+      def self.updated_files_regex
+        [
+          %r{^(?:.*/)?package\.json$},
+          %r{^(?:.*/)?package-lock\.json$},
+          %r{^(?:.*/)?npm-shrinkwrap\.json$},
+          %r{^(?:.*/)?yarn\.lock$},
+          %r{^(?:.*/)?pnpm-lock\.yaml$},
+          %r{^(?:.*/)?\.yarn/.*}, # Matches any file within the .yarn/ directory
+          %r{^(?:.*/)?\.pnp\.(?:js|cjs)$} # Matches .pnp.js or .pnp.cjs files
+        ]
       end
 
       sig { override.returns(T::Array[DependencyFile]) }

data/lib/dependabot/npm_and_yarn.rb

@@ -34,6 +34,7 @@ ErrorHandler = T.type_alias do
 end
 
 module Dependabot
+  # rubocop:disable Metrics/ModuleLength
   module NpmAndYarn
     NODE_VERSION_NOT_SATISFY_REGEX = /The current Node version (?<current_version>v?\d+\.\d+\.\d+) does not satisfy the required version (?<required_version>v?\d+\.\d+\.\d+)\./ # rubocop:disable Layout/LineLength
 
@@ -115,6 +116,29 @@ module Dependabot
 
     ENV_VAR_NOT_RESOLVABLE = /Failed to replace env in config: \$\{(?<var>.*)\}/
 
+    OUT_OF_DISKSPACE = / Out of diskspace/
+
+    # yarnrc.yml errors
+    YARNRC_PARSE_ERROR = /Parse error when loading (?<filename>.*?); /
+    YARNRC_ENV_NOT_FOUND = /Usage Error: Environment variable not found /
+    YARNRC_ENV_NOT_FOUND_REGEX = /Usage Error: Environment variable not found \((?<token>.*)\) in (?<filename>.*?) /
+    YARNRC_EAI_AGAIN = /getaddrinfo EAI_AGAIN/
+    YARNRC_ENOENT = /Internal Error: ENOENT/
+    YARNRC_ENOENT_REGEX = /Internal Error: ENOENT: no such file or directory, stat '(?<filename>.*?)'/
+
+    YN0001_FILE_NOT_RESOLVED_CODES = T.let({
+      FIND_PACKAGE_LOCATION: /YN0001: UsageError: Couldn't find the (?<pkg>.*) state file/,
+      NO_CANDIDATE_FOUND: /YN0001: Error: (?<pkg>.*): No candidates found/,
+      NO_SUPPORTED_RESOLVER: /YN0001:*.*Error: (?<pkg>.*) isn't supported by any available resolver/,
+      WORKSPACE_NOT_FOUND: /YN0001: Error: (?<pkg>.*): Workspace not found/,
+      ENOENT: /YN0001:*.*Thrown Error: (?<pkg>.*) ENOENT/,
+      MANIFEST_NOT_FOUND: /YN0001: Error: (?<pkg>.*): Manifest not found/
+    }.freeze, T::Hash[String, Regexp])
+
+    YN0001_AUTH_ERROR_CODES = T.let({
+      AUTH_ERROR: /YN0001:*.*Fatal Error: could not read Username for '(?<url>.*)': terminal prompts disabled/
+    }.freeze, T::Hash[String, Regexp])
+
     class Utils
       extend T::Sig
 
@@ -155,6 +179,18 @@ module Dependabot
       "YN0001" => {
         message: "Exception error",
         handler: lambda { |message, _error, _params|
+          YN0001_FILE_NOT_RESOLVED_CODES.each do |(_yn0001_key, yn0001_regex)|
+            if (msg = message.match(yn0001_regex))
+              return Dependabot::DependencyFileNotResolvable.new(msg)
+            end
+          end
+
+          YN0001_AUTH_ERROR_CODES.each do |(_yn0001_key, yn0001_regex)|
+            if (msg = message.match(yn0001_regex))
+              url = msg.named_captures.fetch(URL_CAPTURE)
+              return Dependabot::PrivateSourceAuthenticationFailure.new(url)
+            end
+          end
           Dependabot::DependabotError.new(message)
         }
       },
@@ -385,6 +421,62 @@ module Dependabot
         },
         in_usage: false,
         matchfn: nil
+      },
+      {
+        patterns: [OUT_OF_DISKSPACE],
+        handler: lambda { |message, _error, _params|
+          Dependabot::OutOfDisk.new(message)
+        },
+        in_usage: false,
+        matchfn: nil
+      },
+      {
+        patterns: [YARNRC_PARSE_ERROR],
+        handler: lambda { |message, _error, _params|
+          filename = message.match(YARNRC_PARSE_ERROR).named_captures["filename"]
+
+          msg = "Error while loading \"#{filename.split('/').last}\"."
+          Dependabot::DependencyFileNotResolvable.new(msg)
+        },
+        in_usage: false,
+        matchfn: nil
+      },
+      {
+        patterns: [YARNRC_ENV_NOT_FOUND],
+        handler: lambda { |message, _error, _params|
+          error_message = message.gsub(/[[:space:]]+/, " ").strip
+
+          filename = error_message.match(YARNRC_ENV_NOT_FOUND_REGEX)
+                                    .named_captures["filename"]
+
+          env_var = error_message.match(YARNRC_ENV_NOT_FOUND_REGEX)
+                                .named_captures["token"]
+
+          msg = "Environment variable \"#{env_var}\" not found in \"#{filename.split('/').last}\"."
+          Dependabot::MissingEnvironmentVariable.new(env_var, msg)
+        },
+        in_usage: false,
+        matchfn: nil
+      },
+      {
+        patterns: [YARNRC_EAI_AGAIN],
+        handler: lambda { |_message, _error, _params|
+          Dependabot::DependencyFileNotResolvable.new("Network error while resolving dependency.")
+        },
+        in_usage: false,
+        matchfn: nil
+      },
+      {
+        patterns: [YARNRC_ENOENT],
+        handler: lambda { |message, _error, _params|
+          error_message = message.gsub(/[[:space:]]+/, " ").strip
+          filename = error_message.match(YARNRC_ENOENT_REGEX).named_captures["filename"]
+
+          Dependabot::DependencyFileNotResolvable.new("Internal error while resolving dependency." \
+                                                      "File not found \"#{filename.split('/').last}\"")
+        },
+        in_usage: false,
+        matchfn: nil
       }
 
     ].freeze, T::Array[{
@@ -394,4 +486,5 @@ module Dependabot
       matchfn: T.nilable(T.proc.params(usage: String, message: String).returns(T::Boolean))
     }])
   end
+  # rubocop:enable Metrics/ModuleLength
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-npm_and_yarn
 version: !ruby/object:Gem::Version
-  version: 0.271.0
+  version: 0.272.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-08-15 00:00:00.000000000 Z
+date: 2024-08-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.271.0
+        version: 0.272.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.271.0
+        version: 0.272.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -345,7 +345,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.271.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.272.0
 post_install_message: 
 rdoc_options: []
 require_paths: