dependabot-opentofu 0.352.0 → 0.354.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 85fac2f1361f46f4b585b50a07cd5539874df04bb3ae9b8b9fbd09d337d26b97
-  data.tar.gz: 689360413c36e459f9506ca6bad15bf3bda0f4e985de8a18c88e4ef9035a2266
+  metadata.gz: f4ef84f79abe33090697b0314c1332149c752095c3608c64441664d9a7f35cf2
+  data.tar.gz: d47f6dde29c879e0eda3604c09654470496b3d4fa1d0441a513431caabdd2e3b
 SHA512:
-  metadata.gz: 937d2093261d892492bf0514173f47d8a2170148523349ea209cd824d5ee1ba4bc33cf5d9f0541161c65518787249477f4451487fe2f772e590f9784c24b7581
-  data.tar.gz: 9c1c4249c72ab3ee83e993a1bdd4f2e59772d366936127a02df8395d4e19a9cd13acffd42a3f9ac2a4f552071d61c93940d569237838cbca0deeaeae8832227b
+  metadata.gz: '0947a3388fe7d2a28ed4f38d3833d9bad72326787efb8e475bb0c6c36487c074e17894642d27629af9439a74accb0bb8d7a334d6640152d1b3d2d5226e08625e'
+  data.tar.gz: 46da3a26bf0f9643db38f16e1ae4ad9fa7f1aae6e3aa3e1cf47e1984063d0cd4b55e35cae10330e4ed6c1595257308c6bff7d6c7433ecb58adb8d62e96425764

data/lib/dependabot/opentofu/registry_client.rb

@@ -150,7 +150,10 @@ module Dependabot
       def service_url_for_registry(service_key)
         url_for_registry(services.fetch(service_key))
       rescue KeyError
-        raise Dependabot::PrivateSourceAuthenticationFailure, "Host does not support required OpenTofu-native service"
+        available = services.keys.empty? ? "none" : services.keys.join(", ")
+        raise DependabotError,
+              "Registry at #{hostname} does not support required service '#{service_key}'. " \
+              "Available services: #{available}"
       end
 
       private
@@ -177,7 +180,32 @@ module Dependabot
         @services ||= T.let(
           begin
             response = http_get(url_for_registry("/.well-known/terraform.json"))
-            response.status == 200 ? JSON.parse(response.body) : {}
+            case response.status
+            when 200
+              JSON.parse(response.body)
+            when 500..599
+              # Server error - likely a temporary outage
+              raise RegistryError.new(
+                response.status,
+                "Registry at #{hostname} is currently unavailable (HTTP #{response.status})." \
+                "This may be a temporary outage - please try again later."
+              )
+            when 401
+              # Authentication required or failed
+              raise PrivateSourceAuthenticationFailure, hostname
+            when 404
+              # Service discovery not supported
+              raise RegistryError.new(
+                response.status,
+                "Registry at #{hostname} does not support service discovery: (/.well-known/terraform.json not found)"
+              )
+            else
+              # Unexpected status code
+              raise RegistryError.new(
+                response.status,
+                "Registry at #{hostname} returned unexpected status #{response.status} for service discovery endpoint"
+              )
+            end
           end,
           T.nilable(T::Hash[String, String])
         )

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-opentofu
 version: !ruby/object:Gem::Version
-  version: 0.352.0
+  version: 0.354.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.352.0
+        version: 0.354.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.352.0
+        version: 0.354.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -262,7 +262,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.352.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.354.0
 rdoc_options: []
 require_paths:
 - lib