dependabot-nuget 0.238.0 → 0.240.0

data/lib/dependabot/nuget/update_checker/nupkg_fetcher.rb

@@ -1,111 +1,88 @@
-# typed: false
+# typed: true
 # frozen_string_literal: true
 
 require "nokogiri"
 require "zip"
 require "stringio"
-require "dependabot/nuget/update_checker"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
-      class NupkgFetcher
-        require_relative "repository_finder"
-
-        def self.fetch_nupkg_buffer(dependency_urls, package_id, package_version)
-          # check all repositories for the first one that has the nupkg
-          dependency_urls.reduce(nil) do |nupkg_buffer, repository_details|
-            nupkg_buffer || fetch_nupkg_buffer_from_repository(repository_details, package_id, package_version)
-          end
+    class NupkgFetcher
+      require_relative "repository_finder"
+
+      def self.fetch_nupkg_buffer(dependency_urls, package_id, package_version)
+        # check all repositories for the first one that has the nupkg
+        dependency_urls.reduce(nil) do |nupkg_buffer, repository_details|
+          nupkg_buffer || fetch_nupkg_buffer_from_repository(repository_details, package_id, package_version)
         end
+      end
 
-        def self.fetch_nupkg_buffer_from_repository(repository_details, package_id, package_version)
-          return unless package_id && package_version && !package_version.empty?
+      def self.fetch_nupkg_url_from_repository(repository_details, package_id, package_version)
+        return unless package_id && package_version && !package_version.empty?
 
-          feed_url = repository_details[:repository_url]
-          auth_header = repository_details[:auth_header]
+        feed_url = repository_details[:repository_url]
+        repository_type = repository_details[:repository_type]
 
-          azure_devops_match = try_match_azure_url(feed_url)
-          package_url = if azure_devops_match
-                          get_azure_package_url(azure_devops_match, package_id, package_version)
-                        elsif feed_url.include?("/v2")
-                          get_nuget_v2_package_url(feed_url, package_id, package_version)
-                        elsif feed_url.include?("/v3")
-                          get_nuget_v3_package_url(feed_url, package_id, package_version)
-                        else
-                          raise Dependabot::DependencyFileNotResolvable, "Unexpected NuGet feed format: #{feed_url}"
-                        end
+        package_url = if repository_type == "v2"
+                        get_nuget_v2_package_url(feed_url, package_id, package_version)
+                      elsif repository_type == "v3"
+                        get_nuget_v3_package_url(repository_details, package_id, package_version)
+                      else
+                        raise Dependabot::DependencyFileNotResolvable, "Unexpected NuGet feed format: #{feed_url}"
+                      end
 
-          fetch_stream(package_url, auth_header)
-        end
+        package_url
+      end
 
-        def self.try_match_azure_url(feed_url)
-          # if url is azure devops
-          azure_devops_regexs = [
-            %r{https://pkgs\.dev\.azure\.com/(?<organization>[^/]+)/(?<project>[^/]+)/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json},
-            %r{https://pkgs\.dev\.azure\.com/(?<organization>[^/]+)/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json(?<project>)},
-            %r{https://(?<organization>[^\.\/]+)\.pkgs\.visualstudio\.com/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json(?<project>)}
-          ]
-          regex = azure_devops_regexs.find { |reg| reg.match(feed_url) }
-          return unless regex
-
-          regex.match(feed_url)
-        end
+      def self.fetch_nupkg_buffer_from_repository(repository_details, package_id, package_version)
+        package_url = fetch_nupkg_url_from_repository(repository_details, package_id, package_version)
+        return unless package_url
 
-        def self.get_azure_package_url(azure_devops_match, package_id, package_version)
-          organization = azure_devops_match[:organization]
-          project = azure_devops_match[:project]
-          feed_id = azure_devops_match[:feedId]
+        auth_header = repository_details[:auth_header]
+        fetch_stream(package_url, auth_header)
+      end
 
-          if project.empty?
-            "https://pkgs.dev.azure.com/#{organization}/_apis/packaging/feeds/#{feed_id}/nuget/packages/#{package_id}/versions/#{package_version}/content?sourceProtocolVersion=nuget&api-version=7.0-preview"
-          else
-            "https://pkgs.dev.azure.com/#{organization}/#{project}/_apis/packaging/feeds/#{feed_id}/nuget/packages/#{package_id}/versions/#{package_version}/content?sourceProtocolVersion=nuget&api-version=7.0-preview"
+      def self.get_nuget_v3_package_url(repository_details, package_id, package_version)
+        base_url = repository_details[:base_url].delete_suffix("/")
+        package_id_downcased = package_id.downcase
+        "#{base_url}/#{package_id_downcased}/#{package_version}/#{package_id_downcased}.#{package_version}.nupkg"
+      end
+
+      def self.get_nuget_v2_package_url(feed_url, package_id, package_version)
+        base_url = feed_url
+        base_url += "/" unless base_url.end_with?("/")
+        package_id_downcased = package_id.downcase
+        "#{base_url}/package/#{package_id_downcased}/#{package_version}"
+      end
+
+      def self.fetch_stream(stream_url, auth_header, max_redirects = 5)
+        current_url = stream_url
+        current_redirects = 0
+
+        loop do
+          connection = Excon.new(current_url, persistent: true)
+
+          package_data = StringIO.new
+          response_block = lambda do |chunk, _remaining_bytes, _total_bytes|
+            package_data.write(chunk)
           end
-        end
 
-        def self.get_nuget_v3_package_url(feed_url, package_id, package_version)
-          base_url = feed_url.gsub("/index.json", "-flatcontainer")
-          package_id_downcased = package_id.downcase
-          "#{base_url}/#{package_id_downcased}/#{package_version}/#{package_id_downcased}.#{package_version}.nupkg"
-        end
+          response = connection.request(
+            method: :get,
+            headers: auth_header,
+            response_block: response_block
+          )
 
-        def self.get_nuget_v2_package_url(feed_url, package_id, package_version)
-          base_url = feed_url
-          base_url += "/" unless base_url.end_with?("/")
-          package_id_downcased = package_id.downcase
-          "#{base_url}/package/#{package_id_downcased}/#{package_version}"
-        end
+          if response.status == 303
+            current_redirects += 1
+            return nil if current_redirects > max_redirects
 
-        def self.fetch_stream(stream_url, auth_header, max_redirects = 5)
-          current_url = stream_url
-          current_redirects = 0
-
-          loop do
-            connection = Excon.new(current_url, persistent: true)
-
-            package_data = StringIO.new
-            response_block = lambda do |chunk, _remaining_bytes, _total_bytes|
-              package_data.write(chunk)
-            end
-
-            response = connection.request(
-              method: :get,
-              headers: auth_header,
-              response_block: response_block
-            )
-
-            if response.status == 303
-              current_redirects += 1
-              return nil if current_redirects > max_redirects
-
-              current_url = response.headers["Location"]
-            elsif response.status == 200
-              package_data.rewind
-              return package_data
-            else
-              return nil
-            end
+            current_url = response.headers["Location"]
+          elsif response.status == 200
+            package_data.rewind
+            return package_data
+          else
+            return nil
           end
         end
       end

data/lib/dependabot/nuget/update_checker/nuspec_fetcher.rb

@@ -1,85 +1,82 @@
-# typed: false
+# typed: true
 # frozen_string_literal: true
 
 require "nokogiri"
 require "zip"
 require "stringio"
-require "dependabot/nuget/update_checker"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
-      class NuspecFetcher
-        require_relative "nupkg_fetcher"
-        require_relative "repository_finder"
+    class NuspecFetcher
+      require_relative "nupkg_fetcher"
+      require_relative "repository_finder"
 
-        def self.fetch_nuspec(dependency_urls, package_id, package_version)
-          # check all repositories for the first one that has the nuspec
-          dependency_urls.reduce(nil) do |nuspec_xml, repository_details|
-            nuspec_xml || fetch_nuspec_from_repository(repository_details, package_id, package_version)
-          end
+      def self.fetch_nuspec(dependency_urls, package_id, package_version)
+        # check all repositories for the first one that has the nuspec
+        dependency_urls.reduce(nil) do |nuspec_xml, repository_details|
+          nuspec_xml || fetch_nuspec_from_repository(repository_details, package_id, package_version)
         end
+      end
 
-        def self.fetch_nuspec_from_repository(repository_details, package_id, package_version)
-          return unless package_id && package_version && !package_version.empty?
-
-          feed_url = repository_details[:repository_url]
-          auth_header = repository_details[:auth_header]
+      def self.fetch_nuspec_from_repository(repository_details, package_id, package_version)
+        return unless package_id && package_version && !package_version.empty?
 
-          nuspec_xml = nil
+        feed_url = repository_details[:repository_url]
+        auth_header = repository_details[:auth_header]
 
-          if azure_package_feed?(feed_url)
-            # this is an azure devops url we can extract the nuspec from the nupkg
-            package_data = NupkgFetcher.fetch_nupkg_buffer_from_repository(repository_details, package_id,
-                                                                           package_version)
-            return if package_data.nil?
+        nuspec_xml = nil
 
-            nuspec_string = extract_nuspec(package_data, package_id)
-            nuspec_xml = Nokogiri::XML(nuspec_string)
-          else
-            # we can use the normal nuget apis to get the nuspec and list out the dependencies
-            base_url = feed_url.gsub("/index.json", "-flatcontainer")
-            package_id_downcased = package_id.downcase
-            nuspec_url = "#{base_url}/#{package_id_downcased}/#{package_version}/#{package_id_downcased}.nuspec"
+        if azure_package_feed?(feed_url)
+          # this is an azure devops url we can extract the nuspec from the nupkg
+          package_data = NupkgFetcher.fetch_nupkg_buffer_from_repository(repository_details, package_id,
+                                                                         package_version)
+          return if package_data.nil?
 
-            nuspec_response = Dependabot::RegistryClient.get(
-              url: nuspec_url,
-              headers: auth_header
-            )
+          nuspec_string = extract_nuspec(package_data, package_id)
+          nuspec_xml = Nokogiri::XML(nuspec_string)
+        else
+          # we can use the normal nuget apis to get the nuspec and list out the dependencies
+          base_url = feed_url.gsub("/index.json", "-flatcontainer")
+          package_id_downcased = package_id.downcase
+          nuspec_url = "#{base_url}/#{package_id_downcased}/#{package_version}/#{package_id_downcased}.nuspec"
 
-            return unless nuspec_response.status == 200
+          nuspec_response = Dependabot::RegistryClient.get(
+            url: nuspec_url,
+            headers: auth_header
+          )
 
-            nuspec_response_body = remove_wrapping_zero_width_chars(nuspec_response.body)
-            nuspec_xml = Nokogiri::XML(nuspec_response_body)
-          end
+          return unless nuspec_response.status == 200
 
-          nuspec_xml.remove_namespaces!
-          nuspec_xml
+          nuspec_response_body = remove_wrapping_zero_width_chars(nuspec_response.body)
+          nuspec_xml = Nokogiri::XML(nuspec_response_body)
         end
 
-        def self.azure_package_feed?(feed_url)
-          # if url is azure devops
-          azure_devops_regexs = [
-            %r{https://pkgs\.dev\.azure\.com/(?<organization>[^/]+)/(?<project>[^/]+)/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json},
-            %r{https://pkgs\.dev\.azure\.com/(?<organization>[^/]+)/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json(?<project>)},
-            %r{https://(?<organization>[^\.\/]+)\.pkgs\.visualstudio\.com/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json(?<project>)}
-          ]
-          azure_devops_regexs.any? { |reg| reg.match(feed_url) }
-        end
+        nuspec_xml.remove_namespaces!
+        nuspec_xml
+      end
 
-        def self.extract_nuspec(zip_stream, package_id)
-          Zip::File.open_buffer(zip_stream) do |zip|
-            nuspec_entry = zip.find { |entry| entry.name == "#{package_id}.nuspec" }
-            return nuspec_entry.get_input_stream.read if nuspec_entry
-          end
-          nil
-        end
+      def self.azure_package_feed?(feed_url)
+        # if url is azure devops
+        azure_devops_regexs = [
+          %r{https://pkgs\.dev\.azure\.com/(?<organization>[^/]+)/(?<project>[^/]+)/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json},
+          %r{https://pkgs\.dev\.azure\.com/(?<organization>[^/]+)/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json(?<project>)},
+          %r{https://(?<organization>[^\.\/]+)\.pkgs\.visualstudio\.com/_packaging/(?<feedId>[^/]+)/nuget/v3/index\.json(?<project>)}
+        ]
+        azure_devops_regexs.any? { |reg| reg.match(feed_url) }
+      end
 
-        def self.remove_wrapping_zero_width_chars(string)
-          string.force_encoding("UTF-8").encode
-                .gsub(/\A[\u200B-\u200D\uFEFF]/, "")
-                .gsub(/[\u200B-\u200D\uFEFF]\Z/, "")
+      def self.extract_nuspec(zip_stream, package_id)
+        Zip::File.open_buffer(zip_stream) do |zip|
+          nuspec_entry = zip.find { |entry| entry.name == "#{package_id}.nuspec" }
+          return nuspec_entry.get_input_stream.read if nuspec_entry
         end
+        nil
+      end
+
+      def self.remove_wrapping_zero_width_chars(string)
+        string.force_encoding("UTF-8").encode
+              .gsub(/\A[\u200B-\u200D\uFEFF]/, "")
+              .gsub(/[\u200B-\u200D\uFEFF]\Z/, "")
       end
     end
   end

data/lib/dependabot/nuget/update_checker/property_updater.rb

@@ -1,12 +1,12 @@
 # typed: true
 # frozen_string_literal: true
 
+require "dependabot/update_checkers/base"
 require "dependabot/nuget/file_parser"
-require "dependabot/nuget/update_checker"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
       class PropertyUpdater
         require_relative "version_finder"
         require_relative "requirements_updater"

data/lib/dependabot/nuget/update_checker/repository_finder.rb

@@ -4,12 +4,13 @@
 require "excon"
 require "nokogiri"
 require "dependabot/errors"
-require "dependabot/nuget/update_checker"
+require "dependabot/update_checkers/base"
 require "dependabot/registry_client"
+require "dependabot/nuget/cache_manager"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
       class RepositoryFinder
         DEFAULT_REPOSITORY_URL = "https://api.nuget.org/v3/index.json"
         DEFAULT_REPOSITORY_API_KEY = "nuget.org"
@@ -26,6 +27,8 @@ module Dependabot
 
         def self.get_default_repository_details(dependency_name)
           {
+            base_url: "https://api.nuget.org/v3-flatcontainer/",
+            registration_url: "https://api.nuget.org/v3/registration5-gz-semver2/#{dependency_name.downcase}/index.json",
             repository_url: DEFAULT_REPOSITORY_URL,
             versions_url: "https://api.nuget.org/v3-flatcontainer/" \
                           "#{dependency_name.downcase}/index.json",
@@ -59,10 +62,14 @@ module Dependabot
           return unless response.status == 200
 
           body = remove_wrapping_zero_width_chars(response.body)
-          base_url = base_url_from_v3_metadata(JSON.parse(body))
-          search_url = search_url_from_v3_metadata(JSON.parse(body))
+          parsed_json = JSON.parse(body)
+          base_url = base_url_from_v3_metadata(parsed_json)
+          resolved_base_url = base_url || repo_details.fetch(:url).gsub("/index.json", "-flatcontainer")
+          search_url = search_url_from_v3_metadata(parsed_json)
+          registration_url = registration_url_from_v3_metadata(parsed_json)
 
           details = {
+            base_url: resolved_base_url,
             repository_url: repo_details.fetch(:url),
             auth_header: auth_header_for_token(repo_details.fetch(:token)),
             repository_type: "v3"
@@ -75,6 +82,11 @@ module Dependabot
             details[:search_url] =
               search_url + "?q=#{dependency.name.downcase}&prerelease=true&semVerLevel=2.0.0"
           end
+
+          if registration_url
+            details[:registration_url] = File.join(registration_url, dependency.name.downcase, "index.json")
+          end
+
           details
         rescue JSON::ParserError
           build_v2_url(response, repo_details)
@@ -83,10 +95,18 @@ module Dependabot
         end
 
         def get_repo_metadata(repo_details)
-          Dependabot::RegistryClient.get(
-            url: repo_details.fetch(:url),
-            headers: auth_header_for_token(repo_details.fetch(:token))
-          )
+          url = repo_details.fetch(:url)
+          cache = CacheManager.cache("repo_finder_metadatacache")
+          if cache[url]
+            cache[url]
+          else
+            result = Dependabot::RegistryClient.get(
+              url: url,
+              headers: auth_header_for_token(repo_details.fetch(:token))
+            )
+            cache[url] = result
+            result
+          end
         end
 
         def base_url_from_v3_metadata(metadata)
@@ -96,6 +116,20 @@ module Dependabot
             &.fetch("@id")
         end
 
+        def registration_url_from_v3_metadata(metadata)
+          allowed_registration_types = %w(
+            RegistrationsBaseUrl
+            RegistrationsBaseUrl/3.0.0-beta
+            RegistrationsBaseUrl/3.0.0-rc
+            RegistrationsBaseUrl/3.4.0
+            RegistrationsBaseUrl/3.6.0
+          )
+          metadata
+            .fetch("resources", [])
+            .find { |r| allowed_registration_types.find { |s| r.fetch("@type") == s } }
+            &.fetch("@id")
+        end
+
         def search_url_from_v3_metadata(metadata)
           # allowable values from here: https://learn.microsoft.com/en-us/nuget/api/search-query-service-resource#versioning
           allowed_search_types = %w(
@@ -120,6 +154,7 @@ module Dependabot
           base_url ||= repo_details.fetch(:url)
 
           {
+            base_url: base_url,
             repository_url: base_url,
             versions_url: File.join(
               base_url,

data/lib/dependabot/nuget/update_checker/requirements_updater.rb

@@ -6,12 +6,12 @@
 # https://docs.microsoft.com/en-us/nuget/reference/package-versioning #
 #######################################################################
 
-require "dependabot/nuget/update_checker"
+require "dependabot/update_checkers/base"
 require "dependabot/nuget/version"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
       class RequirementsUpdater
         def initialize(requirements:, latest_version:, source_details:)
           @requirements = requirements

data/lib/dependabot/nuget/update_checker/tfm_comparer.rb

@@ -1,15 +1,15 @@
 # typed: true
 # frozen_string_literal: true
 
+require "dependabot/update_checkers/base"
 require "dependabot/nuget/version"
 require "dependabot/nuget/requirement"
 require "dependabot/nuget/native_helpers"
-require "dependabot/nuget/update_checker"
 require "dependabot/shared_helpers"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
       class TfmComparer
         def self.are_frameworks_compatible?(project_tfms, package_tfms)
           return false if package_tfms.empty?

data/lib/dependabot/nuget/update_checker/tfm_finder.rb

@@ -4,15 +4,15 @@
 require "excon"
 require "nokogiri"
 
+require "dependabot/update_checkers/base"
 require "dependabot/nuget/version"
 require "dependabot/nuget/requirement"
 require "dependabot/nuget/native_helpers"
-require "dependabot/nuget/update_checker"
 require "dependabot/shared_helpers"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
       class TfmFinder
         require "dependabot/nuget/file_parser/packages_config_parser"
         require "dependabot/nuget/file_parser/project_file_parser"

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -3,12 +3,13 @@
 
 require "dependabot/nuget/version"
 require "dependabot/nuget/requirement"
+require "dependabot/update_checkers/base"
 require "dependabot/update_checkers/version_filters"
-require "dependabot/nuget/update_checker"
+require "dependabot/nuget/nuget_client"
 
 module Dependabot
   module Nuget
-    class UpdateChecker
+    class UpdateChecker < Dependabot::UpdateCheckers::Base
       class VersionFinder
         require_relative "compatibility_checker"
         require_relative "repository_finder"
@@ -294,40 +295,7 @@ module Dependabot
         end
 
         def versions_for_v3_repository(repository_details)
-          # If we have a search URL that returns results we use it
-          # (since it will exclude unlisted versions)
-          if repository_details[:search_url]
-            fetch_versions_from_search_url(repository_details)
-          # Otherwise, use the versions URL
-          elsif repository_details[:versions_url]
-            response = Dependabot::RegistryClient.get(
-              url: repository_details[:versions_url],
-              headers: repository_details[:auth_header]
-            )
-            return unless response.status == 200
-
-            body = remove_wrapping_zero_width_chars(response.body)
-            JSON.parse(body).fetch("versions")
-          end
-        end
-
-        def fetch_versions_from_search_url(repository_details)
-          response = Dependabot::RegistryClient.get(
-            url: repository_details[:search_url],
-            headers: repository_details[:auth_header]
-          )
-          return unless response.status == 200
-
-          body = remove_wrapping_zero_width_chars(response.body)
-          JSON.parse(body).fetch("data")
-              .find { |d| d.fetch("id").casecmp(sanitized_name).zero? }
-              &.fetch("versions")
-              &.map { |d| d.fetch("version") }
-        rescue Excon::Error::Timeout, Excon::Error::Socket
-          repo_url = repository_details[:repository_url]
-          raise if repo_url == RepositoryFinder::DEFAULT_REPOSITORY_URL
-
-          raise PrivateSourceTimedOut, repo_url
+          NugetClient.get_package_versions_v3(dependency.name, repository_details)
         end
 
         def dependency_urls
@@ -356,12 +324,6 @@ module Dependabot
           dependency.requirement_class
         end
 
-        def remove_wrapping_zero_width_chars(string)
-          string.force_encoding("UTF-8").encode
-                .gsub(/\A[\u200B-\u200D\uFEFF]/, "")
-                .gsub(/[\u200B-\u200D\uFEFF]\Z/, "")
-        end
-
         def excon_options
           # For large JSON files we sometimes need a little longer than for
           # other languages. For example, see:

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.238.0
+  version: 0.240.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-12-07 00:00:00.000000000 Z
+date: 2024-01-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.238.0
+        version: 0.240.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.238.0
+        version: 0.240.0
 - !ruby/object:Gem::Dependency
   name: rubyzip
   requirement: !ruby/object:Gem::Requirement
@@ -134,14 +134,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.57.2
+        version: 1.58.0
 - !ruby/object:Gem::Dependency
   name: rubocop-performance
   requirement: !ruby/object:Gem::Requirement
@@ -226,6 +226,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '3.18'
+- !ruby/object:Gem::Dependency
+  name: webrick
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.7'
 description: Dependabot-Nuget provides support for bumping .NET (NuGet) packages via
   Dependabot. If you want support for multiple package managers, you probably want
   the meta-gem dependabot-omnibus.
@@ -249,6 +263,8 @@ files:
 - lib/dependabot/nuget/file_updater/property_value_updater.rb
 - lib/dependabot/nuget/metadata_finder.rb
 - lib/dependabot/nuget/native_helpers.rb
+- lib/dependabot/nuget/nuget_client.rb
+- lib/dependabot/nuget/nuget_config_credential_helpers.rb
 - lib/dependabot/nuget/requirement.rb
 - lib/dependabot/nuget/update_checker.rb
 - lib/dependabot/nuget/update_checker/compatibility_checker.rb
@@ -267,7 +283,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.238.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.240.0
 post_install_message: 
 rdoc_options: []
 require_paths: