dependabot-nuget 0.182.1 → 0.182.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b69ad82b9c58ce4f5b68955704df82a6de6c1f4d167019a625f24200810ffb0e
-  data.tar.gz: e5e4592fa45d75fb810d7159bda0f58db62e78ff4cc7ab4cafceac3dee647e03
+  metadata.gz: ebef0362a29b58ce48a895b4fd9363fc7dd82a13f2eed16f46d8cae882707486
+  data.tar.gz: cd93a8901b11d2748d0a9a9884985e965d96a219a07fabd117f5f74e3006a36e
 SHA512:
-  metadata.gz: 802f1a24cf49c6cc45dd1efe87e34c90fd1edb18515cfa4a0d00a7d0344018ba27c95245fc6b68ce22a62f35a2fa0906d28a2e71526a906709a019955859969d
-  data.tar.gz: 07511777a4a9f98d9c4650a3011ae85cb0f3a0832ed12e648528df53efb53125df239b037e28db6019a32ed3942158bde6d1ffb66859ddea7a30d8a1f8d12fc3
+  metadata.gz: f840aa8865ddef6997f8bb2ebf8483dde665b9410d31f828e145e234ea7a31612cf79a4f6a2420b4afd0d59c0f80536ec421df757b663022254e62383c65e021
+  data.tar.gz: 93901f5678d96914b74c84a178741a3bccfa575cf161680cbb7a087b4526f165f57313b2739e5d4ebb0aad32f7604038d8562b978d963d36039f1343f26155fc

data/lib/dependabot/nuget/metadata_finder.rb

@@ -12,62 +12,7 @@ module Dependabot
       def look_up_source
         return Source.from_url(dependency_source_url) if dependency_source_url
 
-        src_repo = look_up_source_in_nuspec(dependency_nuspec_file)
-        return src_repo if src_repo
-
-        # Fallback to getting source from the search result's projectUrl or licenseUrl.
-        # GitHub Packages doesn't support getting the `.nuspec`, switch to getting
-        # that instead once it is supported.
-        src_repo_from_project
-      end
-
-      def src_repo_from_project
-        source = dependency.requirements.find { |r| r&.fetch(:source) }&.fetch(:source)
-        return unless source
-
-        # Query the service index e.g. https://nuget.pkg.github.com/ORG/index.json
-        response = Excon.get(
-          source.fetch(:url),
-          idempotent: true,
-          **SharedHelpers.excon_defaults(headers: auth_header)
-        )
-        return unless response.status == 200
-
-        # Extract the query url e.g. https://nuget.pkg.github.com/ORG/query
-        search_base = extract_search_url(response.body)
-        return unless search_base
-
-        response = Excon.get(
-          search_base + "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0",
-          idempotent: true,
-          **SharedHelpers.excon_defaults(headers: auth_header)
-        )
-        return unless response.status == 200
-
-        # Find a projectUrl or licenseUrl that look like a source URL
-        extract_source_repo(response.body)
-      end
-
-      def extract_search_url(body)
-        JSON.parse(body).
-          fetch("resources", []).
-          find { |r| r.fetch("@type") == "SearchQueryService" }&.
-          fetch("@id")
-      end
-
-      def extract_source_repo(body)
-        JSON.parse(body).fetch("data", []).each do |search_result|
-          next unless search_result["id"].downcase == dependency.name.downcase
-
-          if search_result.key?("projectUrl")
-            source = Source.from_url(search_result.fetch("projectUrl"))
-            return source unless source.repo.nil?
-          end
-          if search_result.key?("licenseUrl")
-            source = Source.from_url(search_result.fetch("licenseUrl"))
-            return source unless source.repo.nil?
-          end
-        end
+        look_up_source_in_nuspec(dependency_nuspec_file)
       end
 
       def look_up_source_in_nuspec(nuspec)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.182.1
+  version: 0.182.2
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.182.1
+        version: 0.182.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.182.1
+        version: 0.182.2
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement