dependabot-nuget 0.108.8 → 0.108.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1bdfc287d2ce5059a380ec106d67d325373c82f98f186821db0913dde4e037eb
-  data.tar.gz: c228edf267188d832b780c78b10290af7b8d218245ce298f8ee74f8e959578c0
+  metadata.gz: 14fce520edc9365e1e59ffe1b6d374b22f29e140b72b3c8f3ae9622d01e4c833
+  data.tar.gz: a90d2fe577e3838e290d715edca6928a715b7e7ed042046b6cc0f166df102840
 SHA512:
-  metadata.gz: 3549437af655b05ab057f181be9560728317f920b4739dd83e8c2072b578ef28cbb620ab799b02687b0764aeee4832eb80fc4f134c047e26a020ceea02f00dec
-  data.tar.gz: b54dbb408fd7a60c652dec0d8798bb8b4d8c5600aeca0cf299c7267bf70eee99dcf7fa11f9347bd1430aa17ae860d0e283d77ba6e42f1f8548180b59638c5c8f
+  metadata.gz: 2c5eaf393a40180d3876f18d7ddc140022436deb8e57162b2937b5b9209abd7a45728ae9e2efdc2dd820a74b4c4ffc388689fed67d347caf3e46b940fbe165cc
+  data.tar.gz: d4e8108c8e651e30317c495b3247da0e74a83bd04a3dcf6b981d381613553cc25f52c80ca5ec84353a10868653fd2d653b4ca16273126b3b80d7f3b1e8d525b5

data/lib/dependabot/nuget/update_checker/version_finder.rb

@@ -216,21 +216,10 @@ module Dependabot
         end
 
         def versions_for_v3_repository(repository_details)
-          # If we have a search URL we use it (since it will exclude unlisted
-          # versions)
+          # If we have a search URL that returns results we use it
+          # (since it will exclude unlisted versions)
           if repository_details[:search_url]
-            response = Excon.get(
-              repository_details[:search_url],
-              headers: repository_details[:auth_header],
-              idempotent: true,
-              **excon_defaults
-            )
-            return unless response.status == 200
-
-            JSON.parse(response.body).fetch("data").
-              find { |d| d.fetch("id").casecmp(sanitized_name).zero? }&.
-              fetch("versions")&.
-              map { |d| d.fetch("version") }
+            fetch_versions_from_search_url(repository_details)
           # Otherwise, use the versions URL
           elsif repository_details[:versions_url]
             response = Excon.get(
@@ -245,6 +234,26 @@ module Dependabot
           end
         end
 
+        def fetch_versions_from_search_url(repository_details)
+          response = Excon.get(
+            repository_details[:search_url],
+            headers: repository_details[:auth_header],
+            idempotent: true,
+            **excon_defaults
+          )
+          return unless response.status == 200
+
+          JSON.parse(response.body).fetch("data").
+            find { |d| d.fetch("id").casecmp(sanitized_name).zero? }&.
+            fetch("versions")&.
+            map { |d| d.fetch("version") }
+        rescue Excon::Error::Timeout, Excon::Error::Socket
+          repo_url = repository_details[:repository_url]
+          raise if repo_url == RepositoryFinder::DEFAULT_REPOSITORY_URL
+
+          raise PrivateSourceTimedOut, repo_url
+        end
+
         def dependency_urls
           @dependency_urls ||=
             RepositoryFinder.new(

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-nuget
 version: !ruby/object:Gem::Version
-  version: 0.108.8
+  version: 0.108.9
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-06-08 00:00:00.000000000 Z
+date: 2019-06-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.108.8
+        version: 0.108.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.108.8
+        version: 0.108.9
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement