dependabot-nuget 0.143.6 → 0.145.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c0e5ec4cec1379429e7a6db7c0364e52fd33640595e47d1eb42e6557f43e04ac
-  data.tar.gz: 79f68529b74f78cdb1e8b93d8a6c5ac2a5f477597330f0c2eb6891286a9c444e
+  metadata.gz: d297cc796e1b02a94defd551f6c35505b7b6041e221ea517f9d9d3764bdd54f5
+  data.tar.gz: 15f046f5501cb286e3fc1c757752f17b40f845f0a11f15a618638cf50a6e1a40
 SHA512:
-  metadata.gz: 74aa7abb42652871a25c1f8b37e6dbb0c1397dad31860f6f100542e3f154aae9f14c8ffe70c2575a30a3c16e0f1783b2f89ecaba38a5ae0ad4c8f3ad9cf0174e
-  data.tar.gz: 912a2bc9b192096826eca109e605987d5c24a4fca728406e28e91b402465ddb53070885efb2282a0fdcf967668163ff111de1a9121469c3d97b428dc56aa236b
+  metadata.gz: 6b2b5a8fe28a8db21c4aee70faa3287c1d17f686c91a5ff3d5f4018177d9a1de1c7f016bad3d88abf46c633e9699a66fdbc01772089eb93a3709ff90a5b8a225
+  data.tar.gz: d6748cea5c22d00a7bf2eb4215c8b0b5be6e5aee357c01d138f2ed337ca4b0881e9c8bd3ab069fbc4714fd340b0e1c94b6578d0b558acc57dfcfda3346437f4a

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -210,14 +210,8 @@ module Dependabot
           @v2_nuget_listings ||=
             dependency_urls.
             select { |details| details.fetch(:repository_type) == "v2" }.
-            map do |url_details|
-              response = Excon.get(
-                url_details[:versions_url],
-                idempotent: true,
-                **SharedHelpers.excon_defaults(
-                  excon_options.merge(headers: url_details[:auth_header])
-                )
-              )
+            flat_map { |url_details| fetch_paginated_v2_nuget_listings(url_details) }.
+            map do |url_details, response|
               next unless response.status == 200
 
               {
@@ -227,6 +221,39 @@ module Dependabot
             end.compact
         end
 
+        def fetch_paginated_v2_nuget_listings(url_details, results = {})
+          response = Excon.get(
+            url_details[:versions_url],
+            idempotent: true,
+            **SharedHelpers.excon_defaults(excon_options.merge(headers: url_details[:auth_header]))
+          )
+
+          # NOTE: Short circuit if we get a circular next link
+          return results.to_a if results.key?(url_details)
+
+          results[url_details] = response
+
+          if (link_href = fetch_v2_next_link_href(response.body))
+            url_details = url_details.dup
+            url_details[:versions_url] = link_href
+            fetch_paginated_v2_nuget_listings(url_details, results)
+          end
+
+          results.to_a
+        end
+
+        def fetch_v2_next_link_href(xml_body)
+          doc = Nokogiri::XML(xml_body)
+          doc.remove_namespaces!
+          link_node = doc.xpath("/feed/link").find do |node|
+            rel = node.attribute("rel").value.strip
+            rel == "next"
+          end
+          link_node.attribute("href").value.strip if link_node
+        rescue Nokogiri::XML::XPath::SyntaxError
+          nil
+        end
+
         def versions_for_v3_repository(repository_details)
           # If we have a search URL that returns results we use it
           # (since it will exclude unlisted versions)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.143.6
+  version: 0.145.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-04-30 00:00:00.000000000 Z
+date: 2021-05-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.143.6
+        version: 0.145.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.143.6
+        version: 0.145.3
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement