dependabot-nuget 0.182.0 → 0.182.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a920467ace961b168648f0eaf5454df96a264894eae8ac303d5a5b54ac71b5a5
-  data.tar.gz: d144ca8b6b2b891c758069ef02f91f9220a80ad532f8764cb78b8bd0764b1195
+  metadata.gz: 255e827afa959c6d7673a2efbc59e369c886361c3b644a9ff1149b11ed4c20ac
+  data.tar.gz: 15b25868953e7edbf35f2af3db662953138c214f849970d33e1ab33e5348c248
 SHA512:
-  metadata.gz: 4c3aa954e32b96781fbc00340d9f7d3480084361a7265dd6b74ab65c5206aadaaa544c0a24ba89b7e93778de1d87d7f88a158b40cbc65140334400b7a4a0e726
-  data.tar.gz: 0cdddde6131043a33c23c4c9f3367b2e517685ddc9d2efb2296f5c470498adca8d547ef5700be4f6d6da0d60f82c762f360672863b8ff88df8a717e8af8dc087
+  metadata.gz: 6c03b888f76f44ca746fd252e4f2f07929d5543eadd18bb4ecb616fa1916bbe31022d5634014e39033d06e8bbb70f083500cbc21741dddc7dd09ff11978ea4b8
+  data.tar.gz: dd01deba2ce250bdd304df385e938656217fc272826afc880e78756b215e58b20e8d9dc66aadb77dd76632c052a78d20b7f585a77ee5b7470bf4e98672641974

data/lib/dependabot/nuget/metadata_finder.rb

@@ -12,62 +12,7 @@ module Dependabot
       def look_up_source
         return Source.from_url(dependency_source_url) if dependency_source_url
 
-        src_repo = look_up_source_in_nuspec(dependency_nuspec_file)
-        return src_repo if src_repo
-
-        # Fallback to getting source from the search result's projectUrl or licenseUrl.
-        # GitHub Packages doesn't support getting the `.nuspec`, switch to getting
-        # that instead once it is supported.
-        src_repo_from_project
-      end
-
-      def src_repo_from_project
-        source = dependency.requirements.find { |r| r&.fetch(:source) }&.fetch(:source)
-        return unless source
-
-        # Query the service index e.g. https://nuget.pkg.github.com/ORG/index.json
-        response = Excon.get(
-          source.fetch(:url),
-          idempotent: true,
-          **SharedHelpers.excon_defaults(headers: auth_header)
-        )
-        return unless response.status == 200
-
-        # Extract the query url e.g. https://nuget.pkg.github.com/ORG/query
-        search_base = extract_search_url(response.body)
-        return unless search_base
-
-        response = Excon.get(
-          search_base + "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0",
-          idempotent: true,
-          **SharedHelpers.excon_defaults(headers: auth_header)
-        )
-        return unless response.status == 200
-
-        # Find a projectUrl or licenseUrl that look like a source URL
-        extract_source_repo(response.body)
-      end
-
-      def extract_search_url(body)
-        JSON.parse(body).
-          fetch("resources", []).
-          find { |r| r.fetch("@type") == "SearchQueryService" }&.
-          fetch("@id")
-      end
-
-      def extract_source_repo(body)
-        JSON.parse(body).fetch("data", []).each do |search_result|
-          next unless search_result["id"].downcase == dependency.name.downcase
-
-          if search_result.fetch("projectUrl")
-            source = Source.from_url(search_result.fetch("projectUrl"))
-            return source unless source.repo.nil?
-          end
-          if search_result.fetch("licenseUrl")
-            source = Source.from_url(search_result.fetch("licenseUrl"))
-            return source unless source.repo.nil?
-          end
-        end
+        look_up_source_in_nuspec(dependency_nuspec_file)
       end
 
       def look_up_source_in_nuspec(nuspec)

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.182.0
+  version: 0.182.3
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-20 00:00:00.000000000 Z
+date: 2022-04-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.182.0
+        version: 0.182.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.182.0
+        version: 0.182.3
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement