dependabot-python 0.279.0 → 0.280.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a5bf717c8f68ca481074e67a3358e97f609347162e8ebdefb1b961af9b3d401b
-  data.tar.gz: b1565b6a609f5c0ed0aab1254cea234cd807c86bae05fcda662ebf2b13fbe480
+  metadata.gz: 769029ca498ad0bf57b8e8a3f7470dded08b67253371747cdc2cd14f19733660
+  data.tar.gz: '05984613c4a3eb2298b755c4e96287c4d1b15a94553a378ab31b8992d20151b7'
 SHA512:
-  metadata.gz: 6d0928e2b3ec818b2de96783f85e25c3afd9df6c68e9aa10a85177a62e2794bad043b0dc6b174c8e5f5e020505c3e4a33d465e663aede6c7a23080acbf5b761f
-  data.tar.gz: 59598f676aff1150e4bd6db41c3911b05c0d056267309dedc1fa3bd49bce20d7d0e3d5c8a10e8d5838db14163fbae77461e7a7a7d3f705b539daa5b5b667c4ff
+  metadata.gz: c3de2cf52a0326efb5e91b045001bfca0f25574394425f70ab59b7c6fe15f9618f690cfd847e8736c81b29d3e8fd28e5524931db4f9bad90171f8daffeeafad3
+  data.tar.gz: d47f611d5f940b9c420f727d2f44d19308a7317a6ca799e86a29369401c64c6e833020f4279a991515ecfe3dcf6c3522d5b0d9aea8a282cbcc181b3a2d3c303a

data/lib/dependabot/python/update_checker/poetry_version_resolver.rb

@@ -353,8 +353,21 @@ module Dependabot
       # package version mentioned in .toml not found in package index
       PACKAGE_NOT_FOUND = /Package (?<pkg>.*) ((?<req_ver>.*)) not found./
 
-      # error code 401 while accessing registry
-      ERROR_401 = /401 Client Error/
+      # client access error codes while accessing package index
+      CLIENT_ERROR_CODES = T.let({
+        error401: /401 Client Error/,
+        error403: /403 Client Error/,
+        error404: /404 Client Error/,
+        http403: /HTTP error 403/,
+        http404: /HTTP error 404/
+      }.freeze, T::Hash[T.nilable(String), Regexp])
+
+      # server response error codes while accessing package index
+      SERVER_ERROR_CODES = T.let({
+        server502: /502 Server Error/,
+        server503: /503 Server Error/,
+        server504: /504 Server Error/
+      }.freeze, T::Hash[T.nilable(String), Regexp])
 
       sig do
         params(
@@ -386,6 +399,8 @@ module Dependabot
 
       public
 
+      # rubocop:disable Metrics/AbcSize
+      # rubocop:disable Metrics/PerceivedComplexity
       sig { params(error: Exception).void }
       def handle_poetry_error(error)
         Dependabot.logger.warn(error.message)
@@ -403,11 +418,22 @@ module Dependabot
 
         raise DependencyFileNotResolvable, error.message if error.message.match(PYTHON_RANGE_NOT_SATISFIED)
 
-        return unless error.message.match?(ERROR_401)
+        SERVER_ERROR_CODES.each do |(_error_codes, error_regex)|
+          next unless error.message.match?(error_regex)
 
-        url = URI.extract(error.message).first.then { sanitize_url(_1) }
-        raise PrivateSourceAuthenticationFailure, url
+          index_url = URI.extract(error.message.to_s).last .then { sanitize_url(_1) }
+          raise InconsistentRegistryResponse, index_url
+        end
+
+        CLIENT_ERROR_CODES.each do |(_error_codes, error_regex)|
+          next unless error.message.match?(error_regex)
+
+          index_url = URI.extract(error.message.to_s).last .then { sanitize_url(_1) }
+          raise PrivateSourceAuthenticationFailure, index_url
+        end
       end
+      # rubocop:enable Metrics/AbcSize
+      # rubocop:enable Metrics/PerceivedComplexity
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.279.0
+  version: 0.280.0
 platform: ruby
 authors:
 - Dependabot
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-03 00:00:00.000000000 Z
+date: 2024-10-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.279.0
+        version: 0.280.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.279.0
+        version: 0.280.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -156,14 +156,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.8.1
+        version: 0.8.5
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement
@@ -288,8 +288,8 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.279.0
-post_install_message: 
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.280.0
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -305,7 +305,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 3.1.0
 requirements: []
 rubygems_version: 3.5.9
-signing_key: 
+signing_key:
 specification_version: 4
 summary: Provides Dependabot support for Python
 test_files: []