@paklo/core 0.1.0 → 0.3.0

package/dist/node/dependabot-BteoKZVy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dependabot-BteoKZVy.js","names":["branchName: string","crypto","DEFAULT_EXPERIMENTS: DependabotExperiments","updatingPullRequest: boolean","updateDependencyGroupName: string | null","updateDependencyNames: string[] | null","vulnerabilities: SecurityVulnerability[] | undefined","success: boolean"],"sources":["../../src/dependabot/author.ts","../../src/dependabot/branch-name.ts","../../src/dependabot/experiments.ts","../../src/dependabot/job-builder.ts","../../src/dependabot/update.ts","../../src/dependabot/server.ts"],"sourcesContent":["export type GitAuthor = {\n  name: string;\n  email: string;\n};\n\nexport const DEPENDABOT_DEFAULT_AUTHOR_EMAIL = 'noreply@github.com';\nexport const DEPENDABOT_DEFAULT_AUTHOR_NAME = 'dependabot[bot]';\n","import * as crypto from 'node:crypto';\nimport type { PackageEcosystem } from './config';\nimport type { DependabotExistingPR } from './job';\n\n// TODO: figure out how to handle IDENTIFIER field (in a group) in branch naming\n// Docs: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#groups--\n// -> An identifier for a group is used in branch names and pull request titles.\n\nexport function getBranchNameForUpdate(\n  packageEcosystem: PackageEcosystem,\n  targetBranchName: string | undefined,\n  directory: string | undefined,\n  dependencyGroupName: string | undefined,\n  dependencies: DependabotExistingPR[],\n  separator: string = '/',\n): string {\n  // Based on dependabot-core implementation:\n  // https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/pull_request_creator/branch_namer/solo_strategy.rb\n  // https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/pull_request_creator/branch_namer/dependency_group_strategy.rb\n  let branchName: string;\n  const branchNameMightBeTooLong = dependencyGroupName || dependencies.length > 1;\n  if (branchNameMightBeTooLong) {\n    // Group/multi dependency update\n    // e.g. dependabot/nuget/main/microsoft-3b49c54d9e\n    const dependencyDigest = crypto\n      .createHash('md5')\n      .update(dependencies.map((d) => `${d['dependency-name']}-${d['dependency-version']}`).join(','))\n      .digest('hex')\n      .substring(0, 10);\n    branchName = `${dependencyGroupName || 'multi'}-${dependencyDigest}`;\n  } else {\n    // Single dependency update\n    // e.g. dependabot/nuget/main/Microsoft.Extensions.Logging-1.0.0\n    const dependencyNames = dependencies\n      .map((d) => d['dependency-name'])\n      .join('-and-')\n      .replace(/[:[]]/g, '-') // Replace `:` and `[]` with `-`\n      .replace(/@/g, ''); // Remove `@`\n    const versionSuffix = dependencies[0]?.removed ? 'removed' : dependencies[0]?.['dependency-version'];\n    branchName = `${dependencyNames}-${versionSuffix}`;\n  }\n\n  return sanitizeRef(\n    [\n      'dependabot',\n      packageEcosystem,\n      targetBranchName,\n      // normalize directory to remove leading/trailing slashes and replace remaining ones with the separator\n      directory\n        ?.replace(/^\\/+|\\/+$/g, '')\n        .replace(/\\//g, separator),\n      branchName,\n    ],\n    separator,\n  );\n}\n\nexport function sanitizeRef(refParts: (string | undefined)[], separator: string): string {\n  // Based on dependabot-core implementation:\n  // https://github.com/dependabot/dependabot-core/blob/fc31ae64f492dc977cfe6773ab13fb6373aabec4/common/lib/dependabot/pull_request_creator/branch_namer/base.rb#L99\n\n  // This isn't a complete implementation of git's ref validation, but it\n  // covers most cases that crop up. Its list of allowed characters is a\n  // bit stricter than git's, but that's for cosmetic reasons.\n  return (\n    refParts\n      // Join the parts with the separator, ignore empty parts\n      .filter((p) => p && p.trim().length > 0)\n      .join(separator)\n      // Remove forbidden characters (those not already replaced elsewhere)\n      .replace(/[^A-Za-z0-9/\\-_.(){}]/g, '')\n      // Slashes can't be followed by periods\n      .replace(/\\/\\./g, '/dot-')\n      // Squeeze out consecutive periods and slashes\n      .replace(/\\.+/g, '.')\n      .replace(/\\/+/g, '/')\n      // Trailing periods are forbidden\n      .replace(/\\.$/, '')\n  );\n}\n","import type { DependabotExperiments } from './job';\n\n// The default experiments known to be used by the GitHub Dependabot service.\n// This changes often, update as needed by extracting them from a Dependabot GitHub Action run.\n//  e.g. https://github.com/mburumaxwell/dependabot-azure-devops/actions/workflows/dependabot/dependabot-updates\nexport const DEFAULT_EXPERIMENTS: DependabotExperiments = {\n  'record-ecosystem-versions': true,\n  'record-update-job-unknown-error': true,\n  'proxy-cached': true,\n  'move-job-token': true,\n  'dependency-change-validation': true,\n  'enable-file-parser-python-local': true,\n  'npm-fallback-version-above-v6': true,\n  'lead-security-dependency': true,\n  'enable-record-ecosystem-meta': true,\n  'enable-corepack-for-npm-and-yarn': true,\n  'enable-shared-helpers-command-timeout': true,\n  'enable-dependabot-setting-up-cronjob': true,\n  'enable-engine-version-detection': true,\n  'avoid-duplicate-updates-package-json': true,\n  'allow-refresh-for-existing-pr-dependencies': true,\n  'allow-refresh-group-with-all-dependencies': true,\n  'exclude-local-composer-packages': true,\n  'enable-enhanced-error-details-for-updater': true,\n  'gradle-lockfile-updater': true,\n  'enable-exclude-paths-subdirectory-manifest-files': true,\n  'group-membership-enforcement': true,\n};\n\n/**\n * Parses a comma-separated list of key=value pairs representing experiments.\n * @param raw A comma-separated list of key=value pairs representing experiments.\n * @returns A map of experiment names to their values.\n */\nexport function parseExperiments(raw?: string): DependabotExperiments | undefined {\n  return raw\n    ?.split(',')\n    .filter((entry) => entry.trim() !== '') // <-- filter out empty entries\n    .reduce((acc, cur) => {\n      const [key, value] = cur.split('=', 2);\n      acc[key!] = value || true;\n      return acc;\n    }, {} as DependabotExperiments);\n}\n","import type { SecurityVulnerability } from '@/github';\nimport type {\n  DependabotAllowCondition,\n  DependabotConfig,\n  DependabotGroup,\n  DependabotIgnoreCondition,\n  DependabotRegistry,\n  DependabotUpdate,\n  PackageEcosystem,\n  VersioningStrategy,\n} from './config';\nimport type {\n  DependabotAllowed,\n  DependabotCondition,\n  DependabotCredential,\n  DependabotExistingGroupPR,\n  DependabotExistingPR,\n  DependabotExperiments,\n  DependabotGroupJob,\n  DependabotJobConfig,\n  DependabotPackageManager,\n  DependabotSecurityAdvisory,\n  DependabotSource,\n  DependabotSourceProvider,\n} from './job';\n\nexport type DependabotSourceInfo = {\n  provider: DependabotSourceProvider;\n  hostname: string;\n  'api-endpoint': string;\n  'repository-slug': string;\n};\n\nexport type DependabotJobBuilderOutput = {\n  jobId: number;\n  job: DependabotJobConfig;\n  credentials: DependabotCredential[];\n};\n\n/**\n * Class for building dependabot job objects\n */\nexport class DependabotJobBuilder {\n  private readonly config: DependabotConfig;\n  private readonly update: DependabotUpdate;\n  private readonly experiments: DependabotExperiments;\n  private readonly debug: boolean;\n\n  private readonly packageManager: DependabotPackageManager;\n  private readonly source: DependabotSource;\n  private readonly credentials: DependabotCredential[];\n\n  constructor({\n    source,\n    config,\n    update,\n    systemAccessUser,\n    systemAccessToken,\n    githubToken,\n    experiments,\n    debug,\n  }: {\n    source: DependabotSourceInfo;\n    config: DependabotConfig;\n    update: DependabotUpdate;\n    experiments: DependabotExperiments;\n    systemAccessUser?: string;\n    systemAccessToken?: string;\n    githubToken?: string;\n    /** Determines if verbose log messages are logged */\n    debug: boolean;\n  }) {\n    this.config = config;\n    this.update = update;\n    this.experiments = experiments;\n    this.debug = debug;\n\n    this.packageManager = mapPackageEcosystemToPackageManager(update['package-ecosystem']);\n    this.source = mapSourceFromDependabotConfigToJobConfig(source, update);\n    this.credentials = mapCredentials({\n      sourceHostname: source.hostname,\n      systemAccessUser,\n      systemAccessToken,\n      githubToken,\n      registries: config.registries,\n    });\n  }\n\n  /**\n   * Create a dependabot update job that updates nothing, but will discover the dependency list for a package ecosystem\n   */\n  public forDependenciesList({\n    id,\n    command,\n  }: {\n    id?: number;\n    command: DependabotJobConfig['command'];\n  }): DependabotJobBuilderOutput {\n    id ??= makeRandomJobId();\n    return {\n      jobId: id,\n      job: {\n        id: id,\n        command: command,\n        'package-manager': this.packageManager,\n        'updating-a-pull-request': false,\n        dependencies: null,\n        'allowed-updates': [{ 'dependency-type': 'direct', 'update-type': 'all' }],\n        'ignore-conditions': [{ 'dependency-name': '*' }],\n        'security-updates-only': false,\n        'security-advisories': [],\n        source: this.source,\n        'update-subdependencies': false,\n        'existing-pull-requests': [],\n        'existing-group-pull-requests': [],\n        experiments: this.experiments,\n        'requirements-update-strategy': null,\n        'lockfile-only': false,\n        'commit-message-options': {\n          prefix: null,\n          'prefix-development': null,\n          'include-scope': null,\n        },\n        'vendor-dependencies': false,\n        'repo-private': true,\n        debug: this.debug,\n      },\n      credentials: this.credentials,\n    };\n  }\n\n  /**\n   * Create a dependabot update job that updates all dependencies for a package ecosystem\n   */\n  public forUpdate({\n    id,\n    command,\n    dependencyNamesToUpdate,\n    existingPullRequests,\n    pullRequestToUpdate,\n    securityVulnerabilities,\n  }: {\n    id?: number;\n    command: DependabotJobConfig['command'];\n    dependencyNamesToUpdate?: string[];\n    existingPullRequests: (DependabotExistingPR[] | DependabotExistingGroupPR)[];\n    pullRequestToUpdate?: DependabotExistingPR[] | DependabotExistingGroupPR;\n    securityVulnerabilities?: SecurityVulnerability[];\n  }): DependabotJobBuilderOutput {\n    id ??= makeRandomJobId();\n    const securityOnlyUpdate = this.update['open-pull-requests-limit'] === 0;\n\n    let updatingPullRequest: boolean;\n    let updateDependencyGroupName: string | null = null;\n    let updateDependencyNames: string[] | null;\n    let vulnerabilities: SecurityVulnerability[] | undefined;\n\n    if (pullRequestToUpdate) {\n      updatingPullRequest = true;\n      updateDependencyGroupName = Array.isArray(pullRequestToUpdate)\n        ? null\n        : pullRequestToUpdate['dependency-group-name'];\n      updateDependencyNames = (\n        Array.isArray(pullRequestToUpdate) ? pullRequestToUpdate : pullRequestToUpdate.dependencies\n      )?.map((d) => d['dependency-name']);\n      vulnerabilities = securityVulnerabilities?.filter((v) => updateDependencyNames?.includes(v.package.name));\n    } else {\n      updatingPullRequest = false;\n      const names = dependencyNamesToUpdate?.length ? dependencyNamesToUpdate : null;\n      updateDependencyNames =\n        securityOnlyUpdate && names\n          ? names?.filter((d) => securityVulnerabilities?.find((v) => v.package.name === d))\n          : names;\n      vulnerabilities = securityVulnerabilities;\n    }\n\n    return {\n      jobId: id,\n      job: {\n        id: id,\n        command: command,\n        'package-manager': this.packageManager,\n        'updating-a-pull-request': updatingPullRequest || false,\n        'dependency-group-to-refresh': updateDependencyGroupName,\n        'dependency-groups': mapGroupsFromDependabotConfigToJobConfig(this.update.groups),\n        dependencies: updateDependencyNames,\n        'allowed-updates': mapAllowedUpdatesFromDependabotConfigToJobConfig(this.update.allow, securityOnlyUpdate),\n        'ignore-conditions': mapIgnoreConditionsFromDependabotConfigToJobConfig(this.update.ignore),\n        'security-updates-only': securityOnlyUpdate,\n        'security-advisories': mapSecurityAdvisories(vulnerabilities),\n        source: this.source,\n        'update-subdependencies': false,\n        'existing-pull-requests': existingPullRequests.filter((pr) => Array.isArray(pr)),\n        'existing-group-pull-requests': existingPullRequests.filter(\n          (pr): pr is DependabotExistingGroupPR => !Array.isArray(pr),\n        ),\n        'commit-message-options': {\n          prefix: this.update['commit-message']?.prefix ?? null,\n          'prefix-development': this.update['commit-message']?.['prefix-development'] ?? null,\n          'include-scope':\n            this.update['commit-message']?.include?.toLocaleLowerCase()?.trim() === 'scope' ? true : null,\n        },\n        cooldown: this.update.cooldown,\n        experiments: mapExperiments(this.experiments),\n        'reject-external-code':\n          this.update['insecure-external-code-execution']?.toLocaleLowerCase()?.trim() === 'allow',\n        'requirements-update-strategy': mapVersionStrategyToRequirementsUpdateStrategy(\n          this.update['versioning-strategy'],\n        ),\n        'lockfile-only': this.update['versioning-strategy'] === 'lockfile-only',\n        'vendor-dependencies': this.update.vendor ?? false,\n        'repo-private': true,\n        debug: this.debug,\n        'proxy-log-response-body-on-auth-failure': true,\n        'max-updater-run-time': 2700,\n        'enable-beta-ecosystems': this.config['enable-beta-ecosystems'] || false,\n        // Updates across ecosystems is still in development\n        // See https://github.com/dependabot/dependabot-core/issues/8126\n        //     https://github.com/dependabot/dependabot-core/pull/12339\n        // It needs to merged in the core repo first before we support it\n        // However, to match current job configs and to prevent surprises, we disable it\n        'multi-ecosystem-update': false,\n      },\n      credentials: this.credentials,\n    };\n  }\n}\n\nexport function mapPackageEcosystemToPackageManager(ecosystem: PackageEcosystem): DependabotPackageManager {\n  // Map the dependabot config \"package ecosystem\" to the equivalent dependabot-core/cli \"package manager\".\n  // Config values: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#package-ecosystem-\n  // Core/CLI values: https://github.com/dependabot/dependabot-core/blob/main/common/lib/dependabot/config/file.rb#L60-L81\n  switch (ecosystem) {\n    case 'docker-compose':\n      return 'docker_compose';\n    case 'dotnet-sdk':\n      return 'dotnet_sdk';\n    case 'github-actions':\n      return 'github_actions';\n    case 'gitsubmodule':\n      return 'submodules';\n    case 'gomod':\n      return 'go_modules';\n    case 'mix':\n      return 'hex';\n    case 'npm':\n      return 'npm_and_yarn';\n    // Additional aliases, sometimes used for convenience\n    case 'pipenv':\n      return 'pip';\n    case 'pip-compile':\n      return 'pip';\n    case 'poetry':\n      return 'pip';\n    case 'pnpm':\n      return 'npm_and_yarn';\n    case 'yarn':\n      return 'npm_and_yarn';\n    default:\n      return ecosystem;\n  }\n}\n\nexport function mapSourceFromDependabotConfigToJobConfig(\n  source: DependabotSourceInfo,\n  update: DependabotUpdate,\n): DependabotSource {\n  return {\n    provider: source.provider,\n    'api-endpoint': source['api-endpoint'],\n    hostname: source.hostname,\n    repo: source['repository-slug'],\n    branch: update['target-branch'],\n    commit: null, // use latest commit of target branch\n    directory: update.directory,\n    directories: update.directories,\n  };\n}\n\nexport function mapVersionStrategyToRequirementsUpdateStrategy(strategy?: VersioningStrategy): string | null {\n  if (!strategy) return null;\n  switch (strategy) {\n    case 'auto':\n      return null;\n    case 'increase':\n      return 'bump_versions';\n    case 'increase-if-necessary':\n      return 'bump_versions_if_necessary';\n    case 'lockfile-only':\n      return 'lockfile_only';\n    case 'widen':\n      return 'widen_ranges';\n    default:\n      throw new Error(`Invalid dependabot.yaml versioning strategy option '${strategy}'`);\n  }\n}\n\nexport function mapGroupsFromDependabotConfigToJobConfig(\n  dependencyGroups?: Record<string, DependabotGroup | null>,\n): DependabotGroupJob[] {\n  if (!dependencyGroups || !Object.keys(dependencyGroups).length) return [];\n  return Object.keys(dependencyGroups)\n    .filter((name) => dependencyGroups[name])\n    .map((name) => {\n      const group = dependencyGroups[name]!;\n      return {\n        name: name,\n        'applies-to': group['applies-to'],\n        rules: {\n          patterns: group.patterns?.length ? group.patterns : ['*'],\n          'exclude-patterns': group['exclude-patterns'],\n          'dependency-type': group['dependency-type'],\n          'update-types': group['update-types'],\n        },\n      } satisfies DependabotGroupJob;\n    });\n}\n\nexport function mapAllowedUpdatesFromDependabotConfigToJobConfig(\n  allowedUpdates?: DependabotAllowCondition[],\n  securityOnlyUpdate?: boolean,\n): DependabotAllowed[] {\n  // If no allow conditions are specified, update direct dependencies by default; This is what GitHub does.\n  // NOTE: 'update-type' appears to be a deprecated config, but still appears in the dependabot-core model and GitHub Dependabot job logs.\n  //       See: https://github.com/dependabot/dependabot-core/blob/b3a0c1f86c20729494097ebc695067099f5b4ada/updater/lib/dependabot/job.rb#L253C1-L257C78\n  if (!allowedUpdates) {\n    return [\n      {\n        'dependency-type': 'direct',\n        'update-type': securityOnlyUpdate ? 'security' : 'all',\n      },\n    ];\n  }\n  return allowedUpdates.map((allow) => {\n    return {\n      'dependency-name': allow['dependency-name'],\n      'dependency-type': allow['dependency-type'],\n      'update-type': allow['update-type'],\n    };\n  });\n}\n\nexport function mapIgnoreConditionsFromDependabotConfigToJobConfig(\n  ignoreConditions?: DependabotIgnoreCondition[],\n): DependabotCondition[] {\n  if (!ignoreConditions) return [];\n  return ignoreConditions.map((ignore) => {\n    return {\n      source: ignore.source,\n      'updated-at': ignore['updated-at'],\n      'dependency-name': ignore['dependency-name'] ?? '*',\n      'update-types': ignore['update-types'],\n\n      // The dependabot.yml config docs are not very clear about acceptable values; after scanning dependabot-core and dependabot-cli,\n      // this could either be a single version string (e.g. '>1.0.0'), or multiple version strings separated by commas (e.g. '>1.0.0, <2.0.0')\n      'version-requirement': Array.isArray(ignore.versions) ? (<string[]>ignore.versions)?.join(', ') : ignore.versions,\n    } satisfies DependabotCondition;\n  });\n}\n\nexport function mapExperiments(experiments?: DependabotExperiments): DependabotExperiments {\n  experiments ??= {};\n  return Object.keys(experiments).reduce((acc, key) => {\n    // Experiment values are known to be either 'true', 'false', or a string value.\n    // If the value is 'true' or 'false', convert it to a boolean type so that dependabot-core handles it correctly.\n    const value = experiments[key];\n    if (typeof value === 'string' && value?.toLocaleLowerCase() === 'true') {\n      acc[key] = true;\n    } else if (typeof value === 'string' && value?.toLocaleLowerCase() === 'false') {\n      acc[key] = false;\n    } else {\n      if (typeof value === 'string' || typeof value === 'boolean') acc[key] = value;\n    }\n    return acc;\n  }, {} as DependabotExperiments);\n}\n\nexport function mapSecurityAdvisories(securityVulnerabilities?: SecurityVulnerability[]): DependabotSecurityAdvisory[] {\n  if (!securityVulnerabilities) return [];\n\n  // A single security advisory can cause a vulnerability in multiple versions of a package.\n  // We need to map each unique security advisory to a list of affected-versions and patched-versions.\n  const vulnerabilitiesGroupedByPackageNameAndAdvisoryId = new Map<string, SecurityVulnerability[]>();\n  for (const vuln of securityVulnerabilities) {\n    const key = `${vuln.package.name}/${vuln.advisory.identifiers.map((i) => `${i.type}:${i.value}`).join('/')}`;\n    if (!vulnerabilitiesGroupedByPackageNameAndAdvisoryId.has(key)) {\n      vulnerabilitiesGroupedByPackageNameAndAdvisoryId.set(key, []);\n    }\n    vulnerabilitiesGroupedByPackageNameAndAdvisoryId.get(key)!.push(vuln);\n  }\n  return Array.from(vulnerabilitiesGroupedByPackageNameAndAdvisoryId.values()).map((vulns) => {\n    return {\n      'dependency-name': vulns[0]!.package.name,\n      'affected-versions': vulns.map((v) => v.vulnerableVersionRange).filter((v) => v && v.length > 0),\n      'patched-versions': vulns\n        .map((v) => v.firstPatchedVersion?.identifier)\n        .filter((v) => v && v.length > 0)\n        .map((v) => v!),\n      'unaffected-versions': [],\n    } satisfies DependabotSecurityAdvisory;\n  });\n}\n\nexport function mapCredentials({\n  sourceHostname,\n  systemAccessUser,\n  systemAccessToken,\n  githubToken,\n  registries,\n}: {\n  sourceHostname: string;\n  systemAccessUser?: string;\n  systemAccessToken?: string;\n  githubToken?: string;\n  registries?: Record<string, DependabotRegistry>;\n}): DependabotCredential[] {\n  const credentials = [];\n\n  // Required to authenticate with the git repository when cloning the source code\n  if (systemAccessToken) {\n    credentials.push({\n      type: 'git_source',\n      host: sourceHostname,\n      username: (systemAccessUser ?? '').trim()?.length > 0 ? systemAccessUser : 'x-access-token',\n      password: systemAccessToken,\n    });\n  }\n\n  // Required to avoid rate-limiting errors when generating pull request descriptions (e.g. fetching release notes, commit messages, etc)\n  if (githubToken) {\n    credentials.push({\n      type: 'git_source',\n      host: 'github.com',\n      username: 'x-access-token',\n      password: githubToken,\n    });\n  }\n  if (registries) {\n    // TODO: only registries for the current update should be set\n    // Required to authenticate with private package feeds when finding the latest version of dependencies.\n    // The registries have already been worked on (see parseRegistries) so there is no need to do anything else.\n    credentials.push(...Object.values(registries));\n  }\n\n  return credentials;\n}\n\nexport function makeRandomJobId(): number {\n  const array = new Uint32Array(1);\n  crypto.getRandomValues(array);\n  return array[0]! % 10000000000; // Limit to 10 digits to match GitHub's job IDs\n}\n\nexport function makeRandomJobToken() {\n  const array = new Uint8Array(30);\n  crypto.getRandomValues(array);\n  return Array.from(array, (byte) => (byte % 36).toString(36)).join('');\n}\n","import { z } from 'zod/v4';\nimport { DependabotDependencySchema } from './job';\n\n// we use nullish() because it does optional() and allows the value to be set to null\n\nexport const DependabotDependencyFileSchema = z.object({\n  content: z.string(),\n  content_encoding: z.string().nullish(),\n  deleted: z.boolean().nullish(),\n  directory: z.string(),\n  name: z.string(),\n  operation: z.string(), // TODO: convert to enum?\n  support_file: z.boolean().nullish(),\n  symlink_target: z.string().nullish(),\n  type: z.string().nullish(), // TODO: convert to enum?\n  mode: z.string().nullish(),\n});\nexport type DependabotDependencyFile = z.infer<typeof DependabotDependencyFileSchema>;\n\nexport const DependabotUpdateDependencyListSchema = z.object({\n  dependencies: DependabotDependencySchema.array(),\n  dependency_files: z.string().array().nullish(),\n});\nexport type DependabotUpdateDependencyList = z.infer<typeof DependabotUpdateDependencyListSchema>;\n\nexport const DependabotCreatePullRequestSchema = z.object({\n  'base-commit-sha': z.string(),\n  dependencies: DependabotDependencySchema.array(),\n  'updated-dependency-files': DependabotDependencyFileSchema.array(),\n  'pr-title': z.string(),\n  'pr-body': z.string().nullish(),\n  'commit-message': z.string(),\n  'dependency-group': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotCreatePullRequest = z.infer<typeof DependabotCreatePullRequestSchema>;\n\nexport const DependabotUpdatePullRequestSchema = z.object({\n  'base-commit-sha': z.string(),\n  'dependency-names': z.string().array(),\n  'updated-dependency-files': DependabotDependencyFileSchema.array(),\n  'pr-title': z.string().nullish(), // this is usually excluded when working with dependabot-cli and an empty string if the API\n  'pr-body': z.string().nullish(), // this is usually excluded when working with dependabot-cli and an empty string if the API\n  'commit-message': z.string().nullish(), // this is usually excluded when working with dependabot-cli and an empty string if the API\n  'dependency-group': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotUpdatePullRequest = z.infer<typeof DependabotUpdatePullRequestSchema>;\n\nexport const DependabotClosePullRequestSchema = z.object({\n  'dependency-names': z.string().array(),\n  reason: z.string().nullish(), // TODO: convert to enum?\n});\nexport type DependabotClosePullRequest = z.infer<typeof DependabotClosePullRequestSchema>;\n\nexport const DependabotMarkAsProcessedSchema = z.object({\n  'base-commit-sha': z.string().nullish(),\n});\nexport type DependabotMarkAsProcessed = z.infer<typeof DependabotMarkAsProcessedSchema>;\n\nexport const DependabotRecordUpdateJobErrorSchema = z.object({\n  'error-type': z.string(),\n  'error-details': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotRecordUpdateJobError = z.infer<typeof DependabotRecordUpdateJobErrorSchema>;\n\nexport const DependabotRecordUpdateJobUnknownErrorSchema = z.object({\n  'error-type': z.string(),\n  'error-details': z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotRecordUpdateJobUnknownError = z.infer<typeof DependabotRecordUpdateJobUnknownErrorSchema>;\n\nexport const DependabotRecordEcosystemVersionsSchema = z.object({\n  ecosystem_versions: z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotRecordEcosystemVersions = z.infer<typeof DependabotRecordEcosystemVersionsSchema>;\n\nexport const DependabotEcosystemVersionManagerSchema = z.object({\n  name: z.string(),\n  version: z.string(),\n  raw_version: z.string(),\n  requirement: z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotEcosystemVersionManager = z.infer<typeof DependabotEcosystemVersionManagerSchema>;\n\nexport const DependabotEcosystemMetaSchema = z.object({\n  name: z.string(),\n  package_manager: DependabotEcosystemVersionManagerSchema.nullish(),\n  version: DependabotEcosystemVersionManagerSchema.nullish(),\n});\nexport type DependabotEcosystemMeta = z.infer<typeof DependabotEcosystemMetaSchema>;\n\nexport const DependabotRecordEcosystemMetaSchema = z.object({\n  ecosystem: DependabotEcosystemMetaSchema,\n});\nexport type DependabotRecordEcosystemMeta = z.infer<typeof DependabotRecordEcosystemMetaSchema>;\n\nexport const DependabotIncrementMetricSchema = z.object({\n  metric: z.string(),\n  tags: z.record(z.string(), z.any()).nullish(),\n});\nexport type DependabotIncrementMetric = z.infer<typeof DependabotIncrementMetricSchema>;\n\nexport const DependabotMetricSchema = z.object({\n  metric: z.string(),\n  type: z.enum(['increment', 'gauge', 'distribution', 'histogram']),\n  value: z.number().nullish(),\n  values: z.number().array().nullish(),\n  tags: z.record(z.string(), z.string()).nullish(),\n});\nexport type DependabotMetric = z.infer<typeof DependabotMetricSchema>;\n","import { zValidator } from '@hono/zod-validator';\nimport { Hono } from 'hono';\nimport { type ZodType, z } from 'zod/v4';\nimport { logger } from '@/logger';\nimport type { DependabotCredential, DependabotJobConfig } from './job';\nimport {\n  DependabotClosePullRequestSchema,\n  DependabotCreatePullRequestSchema,\n  DependabotIncrementMetricSchema,\n  DependabotMarkAsProcessedSchema,\n  DependabotMetricSchema,\n  DependabotRecordEcosystemMetaSchema,\n  DependabotRecordEcosystemVersionsSchema,\n  DependabotRecordUpdateJobErrorSchema,\n  DependabotRecordUpdateJobUnknownErrorSchema,\n  DependabotUpdateDependencyListSchema,\n  DependabotUpdatePullRequestSchema,\n} from './update';\n\nexport const DependabotRequestTypeSchema = z.enum([\n  'create_pull_request',\n  'update_pull_request',\n  'close_pull_request',\n  'record_update_job_error',\n  'record_update_job_unknown_error',\n  'mark_as_processed',\n  'update_dependency_list',\n  'record_ecosystem_versions',\n  'record_ecosystem_meta',\n  'increment_metric',\n  'record_metrics',\n]);\nexport type DependabotRequestType = z.infer<typeof DependabotRequestTypeSchema>;\n\nexport const DependabotRequestSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('create_pull_request'), data: DependabotCreatePullRequestSchema }),\n  z.object({ type: z.literal('update_pull_request'), data: DependabotUpdatePullRequestSchema }),\n  z.object({ type: z.literal('close_pull_request'), data: DependabotClosePullRequestSchema }),\n  z.object({ type: z.literal('record_update_job_error'), data: DependabotRecordUpdateJobErrorSchema }),\n  z.object({ type: z.literal('record_update_job_unknown_error'), data: DependabotRecordUpdateJobUnknownErrorSchema }),\n  z.object({ type: z.literal('mark_as_processed'), data: DependabotMarkAsProcessedSchema }),\n  z.object({ type: z.literal('update_dependency_list'), data: DependabotUpdateDependencyListSchema }),\n  z.object({ type: z.literal('record_ecosystem_versions'), data: DependabotRecordEcosystemVersionsSchema }),\n  z.object({ type: z.literal('record_ecosystem_meta'), data: DependabotRecordEcosystemMetaSchema.array() }),\n  z.object({ type: z.literal('increment_metric'), data: DependabotIncrementMetricSchema }),\n  z.object({ type: z.literal('record_metrics'), data: DependabotMetricSchema.array() }),\n]);\nexport type DependabotRequest = z.infer<typeof DependabotRequestSchema>;\n\nexport type DependabotTokenType = 'job' | 'credentials';\n\n/**\n * Function type for authenticating requests.\n * @param type - The type of authentication ('job' or 'credentials').\n * @param id - The ID of the dependabot job.\n * @param value - The authentication value (e.g., API key).\n * @returns A promise that resolves to a boolean indicating whether the authentication was successful.\n */\ntype AuthenticatorFunc = (type: DependabotTokenType, id: number, value: string) => Promise<boolean>;\n\n/**\n * Handler function for processing dependabot requests.\n * @param id - The ID of the dependabot job.\n * @param request - The dependabot request to handle.\n * @returns A promise that resolves to the result of handling the request.\n */\ntype HandlerFunc = (id: number, request: DependabotRequest) => Promise<boolean>;\n\nexport type CreateApiServerAppOptions = {\n  /**\n   * Base path for the endpoints.\n   * @default `/api/update_jobs`\n   */\n  basePath?: string;\n\n  /** Handler function for authenticating requests. */\n  authenticate: AuthenticatorFunc;\n\n  /** Function for getting a dependabot job by ID. */\n  getJob: (id: number) => Promise<DependabotJobConfig | undefined>;\n\n  /** Function for getting dependabot credentials by job ID. */\n  getCredentials: (id: number) => Promise<DependabotCredential[] | undefined>;\n\n  /** Handler function for processing the operations. */\n  handle: HandlerFunc;\n};\n\n/**\n * Creates an API server application for handling dependabot update jobs.\n * The endpoints in the server application have paths in the format: `/api/update_jobs/:id/{operation}`,\n * where `:id` is the job ID and `{operation}` is one of the defined operations e.g. `create_pull_request`.\n *\n * You should set the job endpoint URL in the job container to\n * `http://<host>:<port>/api/update_jobs/:id` where `<host>` and `<port>` are the host and port\n *\n * These endpoints are protected using the provided API key.\n * @param params - The parameters for creating the API server application.\n * @returns The created API server application.\n */\nexport function createApiServerApp({\n  basePath = `/api/update_jobs`,\n  authenticate,\n  getJob,\n  getCredentials,\n  handle,\n}: CreateApiServerAppOptions): Hono {\n  // Setup app with base path and middleware\n  const app = new Hono().basePath(basePath);\n\n  // Handle endpoints:\n  // - POST  request to /create_pull_request\n  // - POST  request to /update_pull_request\n  // - POST  request to /close_pull_request\n  // - POST  request to /record_update_job_error\n  // - POST  request to /record_update_job_unknown_error\n  // - PATCH request to /mark_as_processed\n  // - POST  request to /update_dependency_list\n  // - POST  request to /record_ecosystem_versions\n  // - POST  request to /record_ecosystem_meta\n  // - POST  request to /increment_metric\n\n  function operation<T extends ZodType>(type: DependabotRequestType, schema: T, method?: string) {\n    app.on(\n      method || 'post',\n      `/:id/${type}`,\n      zValidator('param', z.object({ id: z.coerce.number() })),\n      async (context, next) => {\n        /**\n         * Do not authenticate in scenarios where the server is not using HTTPS because the\n         * dependabot proxy will not send the job token over HTTP, yet trying to get HTTPS to work\n         * with localhost (self-signed certs) against docker (host.docker.internal) is complicated.\n         */\n        const url = new URL(context.req.url);\n        const isHTTPS = url.protocol === 'https:';\n        if (isHTTPS) {\n          const { id } = context.req.valid('param');\n          const value = context.req.header('Authorization');\n          if (!value) return context.body(null, 401);\n          const valid = await authenticate('job', id, value);\n          if (!valid) return context.body(null, 403);\n        } else {\n          logger.trace(`Skipping authentication because it is not secure ${context.req.url}`);\n        }\n        await next();\n      },\n      zValidator('json', z.object({ data: schema })),\n      async (context) => {\n        const { id } = context.req.valid('param');\n        const { data } = context.req.valid('json') as { data: z.infer<typeof schema> };\n        // biome-ignore lint/suspicious/noExplicitAny: generic\n        const success: boolean = await handle(id, { type, data: data as any });\n        return context.body(null, success ? 204 : 400);\n      },\n    );\n  }\n\n  operation('create_pull_request', DependabotCreatePullRequestSchema);\n  operation('update_pull_request', DependabotUpdatePullRequestSchema);\n  operation('close_pull_request', DependabotClosePullRequestSchema);\n  operation('record_update_job_error', DependabotRecordUpdateJobErrorSchema);\n  operation('record_update_job_unknown_error', DependabotRecordUpdateJobUnknownErrorSchema);\n  operation('mark_as_processed', DependabotMarkAsProcessedSchema, 'patch');\n  operation('update_dependency_list', DependabotUpdateDependencyListSchema);\n  operation('record_ecosystem_versions', DependabotRecordEcosystemVersionsSchema);\n  operation('record_ecosystem_meta', DependabotRecordEcosystemMetaSchema.array());\n  operation('increment_metric', DependabotIncrementMetricSchema);\n  operation('record_metrics', DependabotMetricSchema.array());\n\n  // Handle endpoints:\n  // - GET request to /details\n  // - GET request to /credentials\n  app.on(\n    'get',\n    '/:id/details',\n    zValidator('param', z.object({ id: z.coerce.number() })),\n    async (context, next) => {\n      const { id } = context.req.valid('param');\n      const value = context.req.header('Authorization');\n      if (!value) return context.body(null, 401);\n      const valid = await authenticate('job', id, value);\n      if (!valid) return context.body(null, 403);\n      await next();\n    },\n    async (context) => {\n      const { id } = context.req.valid('param');\n      const job = await getJob(id);\n      if (!job) return context.body(null, 204);\n      return context.json(job);\n    },\n  );\n  app.on(\n    'get',\n    '/:id/credentials',\n    zValidator('param', z.object({ id: z.coerce.number() })),\n    async (context, next) => {\n      const { id } = context.req.valid('param');\n      const value = context.req.header('Authorization');\n      if (!value) return context.body(null, 401);\n      const valid = await authenticate('credentials', id, value);\n      if (!valid) return context.body(null, 403);\n      await next();\n    },\n    async (context) => {\n      const { id } = context.req.valid('param');\n      const credentials = await getCredentials(id);\n      if (!credentials) return context.body(null, 204);\n      return context.json(credentials);\n    },\n  );\n\n  return app;\n}\n"],"mappings":";;;;;;;;AAKA,MAAa,kCAAkC;AAC/C,MAAa,iCAAiC;;;;ACE9C,SAAgB,uBACd,kBACA,kBACA,WACA,qBACA,cACA,YAAoB,KACZ;CAIR,IAAIA;AAEJ,KADiC,uBAAuB,aAAa,SAAS,GAChD;EAG5B,MAAM,mBAAmBC,SACtB,WAAW,MAAM,CACjB,OAAO,aAAa,KAAK,MAAM,GAAG,EAAE,mBAAmB,GAAG,EAAE,wBAAwB,CAAC,KAAK,IAAI,CAAC,CAC/F,OAAO,MAAM,CACb,UAAU,GAAG,GAAG;AACnB,eAAa,GAAG,uBAAuB,QAAQ,GAAG;OAUlD,cAAa,GANW,aACrB,KAAK,MAAM,EAAE,mBAAmB,CAChC,KAAK,QAAQ,CACb,QAAQ,UAAU,IAAI,CACtB,QAAQ,MAAM,GAAG,CAEY,GADV,aAAa,IAAI,UAAU,YAAY,aAAa,KAAK;AAIjF,QAAO,YACL;EACE;EACA;EACA;EAEA,WACI,QAAQ,cAAc,GAAG,CAC1B,QAAQ,OAAO,UAAU;EAC5B;EACD,EACD,UACD;;AAGH,SAAgB,YAAY,UAAkC,WAA2B;AAOvF,QACE,SAEG,QAAQ,MAAM,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CACvC,KAAK,UAAU,CAEf,QAAQ,0BAA0B,GAAG,CAErC,QAAQ,SAAS,QAAQ,CAEzB,QAAQ,QAAQ,IAAI,CACpB,QAAQ,QAAQ,IAAI,CAEpB,QAAQ,OAAO,GAAG;;;;;ACxEzB,MAAaC,sBAA6C;CACxD,6BAA6B;CAC7B,mCAAmC;CACnC,gBAAgB;CAChB,kBAAkB;CAClB,gCAAgC;CAChC,mCAAmC;CACnC,iCAAiC;CACjC,4BAA4B;CAC5B,gCAAgC;CAChC,oCAAoC;CACpC,yCAAyC;CACzC,wCAAwC;CACxC,mCAAmC;CACnC,wCAAwC;CACxC,8CAA8C;CAC9C,6CAA6C;CAC7C,mCAAmC;CACnC,6CAA6C;CAC7C,2BAA2B;CAC3B,oDAAoD;CACpD,gCAAgC;CACjC;;;;;;AAOD,SAAgB,iBAAiB,KAAiD;AAChF,QAAO,KACH,MAAM,IAAI,CACX,QAAQ,UAAU,MAAM,MAAM,KAAK,GAAG,CACtC,QAAQ,KAAK,QAAQ;EACpB,MAAM,CAAC,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;AACtC,MAAI,OAAQ,SAAS;AACrB,SAAO;IACN,EAAE,CAA0B;;;;;;;;ACAnC,IAAa,uBAAb,MAAkC;CAChC,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,AAAiB;CACjB,AAAiB;CACjB,AAAiB;CAEjB,YAAY,EACV,QACA,QACA,QACA,kBACA,mBACA,aACA,aACA,SAWC;AACD,OAAK,SAAS;AACd,OAAK,SAAS;AACd,OAAK,cAAc;AACnB,OAAK,QAAQ;AAEb,OAAK,iBAAiB,oCAAoC,OAAO,qBAAqB;AACtF,OAAK,SAAS,yCAAyC,QAAQ,OAAO;AACtE,OAAK,cAAc,eAAe;GAChC,gBAAgB,OAAO;GACvB;GACA;GACA;GACA,YAAY,OAAO;GACpB,CAAC;;;;;CAMJ,AAAO,oBAAoB,EACzB,IACA,WAI6B;AAC7B,SAAO,iBAAiB;AACxB,SAAO;GACL,OAAO;GACP,KAAK;IACC;IACK;IACT,mBAAmB,KAAK;IACxB,2BAA2B;IAC3B,cAAc;IACd,mBAAmB,CAAC;KAAE,mBAAmB;KAAU,eAAe;KAAO,CAAC;IAC1E,qBAAqB,CAAC,EAAE,mBAAmB,KAAK,CAAC;IACjD,yBAAyB;IACzB,uBAAuB,EAAE;IACzB,QAAQ,KAAK;IACb,0BAA0B;IAC1B,0BAA0B,EAAE;IAC5B,gCAAgC,EAAE;IAClC,aAAa,KAAK;IAClB,gCAAgC;IAChC,iBAAiB;IACjB,0BAA0B;KACxB,QAAQ;KACR,sBAAsB;KACtB,iBAAiB;KAClB;IACD,uBAAuB;IACvB,gBAAgB;IAChB,OAAO,KAAK;IACb;GACD,aAAa,KAAK;GACnB;;;;;CAMH,AAAO,UAAU,EACf,IACA,SACA,yBACA,sBACA,qBACA,2BAQ6B;AAC7B,SAAO,iBAAiB;EACxB,MAAM,qBAAqB,KAAK,OAAO,gCAAgC;EAEvE,IAAIC;EACJ,IAAIC,4BAA2C;EAC/C,IAAIC;EACJ,IAAIC;AAEJ,MAAI,qBAAqB;AACvB,yBAAsB;AACtB,+BAA4B,MAAM,QAAQ,oBAAoB,GAC1D,OACA,oBAAoB;AACxB,4BACE,MAAM,QAAQ,oBAAoB,GAAG,sBAAsB,oBAAoB,eAC9E,KAAK,MAAM,EAAE,mBAAmB;AACnC,qBAAkB,yBAAyB,QAAQ,MAAM,uBAAuB,SAAS,EAAE,QAAQ,KAAK,CAAC;SACpG;AACL,yBAAsB;GACtB,MAAM,QAAQ,yBAAyB,SAAS,0BAA0B;AAC1E,2BACE,sBAAsB,QAClB,OAAO,QAAQ,MAAM,yBAAyB,MAAM,MAAM,EAAE,QAAQ,SAAS,EAAE,CAAC,GAChF;AACN,qBAAkB;;AAGpB,SAAO;GACL,OAAO;GACP,KAAK;IACC;IACK;IACT,mBAAmB,KAAK;IACxB,2BAA2B,uBAAuB;IAClD,+BAA+B;IAC/B,qBAAqB,yCAAyC,KAAK,OAAO,OAAO;IACjF,cAAc;IACd,mBAAmB,iDAAiD,KAAK,OAAO,OAAO,mBAAmB;IAC1G,qBAAqB,mDAAmD,KAAK,OAAO,OAAO;IAC3F,yBAAyB;IACzB,uBAAuB,sBAAsB,gBAAgB;IAC7D,QAAQ,KAAK;IACb,0BAA0B;IAC1B,0BAA0B,qBAAqB,QAAQ,OAAO,MAAM,QAAQ,GAAG,CAAC;IAChF,gCAAgC,qBAAqB,QAClD,OAAwC,CAAC,MAAM,QAAQ,GAAG,CAC5D;IACD,0BAA0B;KACxB,QAAQ,KAAK,OAAO,mBAAmB,UAAU;KACjD,sBAAsB,KAAK,OAAO,oBAAoB,yBAAyB;KAC/E,iBACE,KAAK,OAAO,mBAAmB,SAAS,mBAAmB,EAAE,MAAM,KAAK,UAAU,OAAO;KAC5F;IACD,UAAU,KAAK,OAAO;IACtB,aAAa,eAAe,KAAK,YAAY;IAC7C,wBACE,KAAK,OAAO,qCAAqC,mBAAmB,EAAE,MAAM,KAAK;IACnF,gCAAgC,+CAC9B,KAAK,OAAO,uBACb;IACD,iBAAiB,KAAK,OAAO,2BAA2B;IACxD,uBAAuB,KAAK,OAAO,UAAU;IAC7C,gBAAgB;IAChB,OAAO,KAAK;IACZ,2CAA2C;IAC3C,wBAAwB;IACxB,0BAA0B,KAAK,OAAO,6BAA6B;IAMnE,0BAA0B;IAC3B;GACD,aAAa,KAAK;GACnB;;;AAIL,SAAgB,oCAAoC,WAAuD;AAIzG,SAAQ,WAAR;EACE,KAAK,iBACH,QAAO;EACT,KAAK,aACH,QAAO;EACT,KAAK,iBACH,QAAO;EACT,KAAK,eACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,MACH,QAAO;EAET,KAAK,SACH,QAAO;EACT,KAAK,cACH,QAAO;EACT,KAAK,SACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,KAAK,OACH,QAAO;EACT,QACE,QAAO;;;AAIb,SAAgB,yCACd,QACA,QACkB;AAClB,QAAO;EACL,UAAU,OAAO;EACjB,gBAAgB,OAAO;EACvB,UAAU,OAAO;EACjB,MAAM,OAAO;EACb,QAAQ,OAAO;EACf,QAAQ;EACR,WAAW,OAAO;EAClB,aAAa,OAAO;EACrB;;AAGH,SAAgB,+CAA+C,UAA8C;AAC3G,KAAI,CAAC,SAAU,QAAO;AACtB,SAAQ,UAAR;EACE,KAAK,OACH,QAAO;EACT,KAAK,WACH,QAAO;EACT,KAAK,wBACH,QAAO;EACT,KAAK,gBACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,uDAAuD,SAAS,GAAG;;;AAIzF,SAAgB,yCACd,kBACsB;AACtB,KAAI,CAAC,oBAAoB,CAAC,OAAO,KAAK,iBAAiB,CAAC,OAAQ,QAAO,EAAE;AACzE,QAAO,OAAO,KAAK,iBAAiB,CACjC,QAAQ,SAAS,iBAAiB,MAAM,CACxC,KAAK,SAAS;EACb,MAAM,QAAQ,iBAAiB;AAC/B,SAAO;GACC;GACN,cAAc,MAAM;GACpB,OAAO;IACL,UAAU,MAAM,UAAU,SAAS,MAAM,WAAW,CAAC,IAAI;IACzD,oBAAoB,MAAM;IAC1B,mBAAmB,MAAM;IACzB,gBAAgB,MAAM;IACvB;GACF;GACD;;AAGN,SAAgB,iDACd,gBACA,oBACqB;AAIrB,KAAI,CAAC,eACH,QAAO,CACL;EACE,mBAAmB;EACnB,eAAe,qBAAqB,aAAa;EAClD,CACF;AAEH,QAAO,eAAe,KAAK,UAAU;AACnC,SAAO;GACL,mBAAmB,MAAM;GACzB,mBAAmB,MAAM;GACzB,eAAe,MAAM;GACtB;GACD;;AAGJ,SAAgB,mDACd,kBACuB;AACvB,KAAI,CAAC,iBAAkB,QAAO,EAAE;AAChC,QAAO,iBAAiB,KAAK,WAAW;AACtC,SAAO;GACL,QAAQ,OAAO;GACf,cAAc,OAAO;GACrB,mBAAmB,OAAO,sBAAsB;GAChD,gBAAgB,OAAO;GAIvB,uBAAuB,MAAM,QAAQ,OAAO,SAAS,GAAc,OAAO,UAAW,KAAK,KAAK,GAAG,OAAO;GAC1G;GACD;;AAGJ,SAAgB,eAAe,aAA4D;AACzF,iBAAgB,EAAE;AAClB,QAAO,OAAO,KAAK,YAAY,CAAC,QAAQ,KAAK,QAAQ;EAGnD,MAAM,QAAQ,YAAY;AAC1B,MAAI,OAAO,UAAU,YAAY,OAAO,mBAAmB,KAAK,OAC9D,KAAI,OAAO;WACF,OAAO,UAAU,YAAY,OAAO,mBAAmB,KAAK,QACrE,KAAI,OAAO;WAEP,OAAO,UAAU,YAAY,OAAO,UAAU,UAAW,KAAI,OAAO;AAE1E,SAAO;IACN,EAAE,CAA0B;;AAGjC,SAAgB,sBAAsB,yBAAiF;AACrH,KAAI,CAAC,wBAAyB,QAAO,EAAE;CAIvC,MAAM,mEAAmD,IAAI,KAAsC;AACnG,MAAK,MAAM,QAAQ,yBAAyB;EAC1C,MAAM,MAAM,GAAG,KAAK,QAAQ,KAAK,GAAG,KAAK,SAAS,YAAY,KAAK,MAAM,GAAG,EAAE,KAAK,GAAG,EAAE,QAAQ,CAAC,KAAK,IAAI;AAC1G,MAAI,CAAC,iDAAiD,IAAI,IAAI,CAC5D,kDAAiD,IAAI,KAAK,EAAE,CAAC;AAE/D,mDAAiD,IAAI,IAAI,CAAE,KAAK,KAAK;;AAEvE,QAAO,MAAM,KAAK,iDAAiD,QAAQ,CAAC,CAAC,KAAK,UAAU;AAC1F,SAAO;GACL,mBAAmB,MAAM,GAAI,QAAQ;GACrC,qBAAqB,MAAM,KAAK,MAAM,EAAE,uBAAuB,CAAC,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE;GAChG,oBAAoB,MACjB,KAAK,MAAM,EAAE,qBAAqB,WAAW,CAC7C,QAAQ,MAAM,KAAK,EAAE,SAAS,EAAE,CAChC,KAAK,MAAM,EAAG;GACjB,uBAAuB,EAAE;GAC1B;GACD;;AAGJ,SAAgB,eAAe,EAC7B,gBACA,kBACA,mBACA,aACA,cAOyB;CACzB,MAAM,cAAc,EAAE;AAGtB,KAAI,kBACF,aAAY,KAAK;EACf,MAAM;EACN,MAAM;EACN,WAAW,oBAAoB,IAAI,MAAM,EAAE,SAAS,IAAI,mBAAmB;EAC3E,UAAU;EACX,CAAC;AAIJ,KAAI,YACF,aAAY,KAAK;EACf,MAAM;EACN,MAAM;EACN,UAAU;EACV,UAAU;EACX,CAAC;AAEJ,KAAI,WAIF,aAAY,KAAK,GAAG,OAAO,OAAO,WAAW,CAAC;AAGhD,QAAO;;AAGT,SAAgB,kBAA0B;CACxC,MAAM,QAAQ,IAAI,YAAY,EAAE;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAM;;AAGrB,SAAgB,qBAAqB;CACnC,MAAM,QAAQ,IAAI,WAAW,GAAG;AAChC,QAAO,gBAAgB,MAAM;AAC7B,QAAO,MAAM,KAAK,QAAQ,UAAU,OAAO,IAAI,SAAS,GAAG,CAAC,CAAC,KAAK,GAAG;;;;;ACncvE,MAAa,iCAAiC,EAAE,OAAO;CACrD,SAAS,EAAE,QAAQ;CACnB,kBAAkB,EAAE,QAAQ,CAAC,SAAS;CACtC,SAAS,EAAE,SAAS,CAAC,SAAS;CAC9B,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CAChB,WAAW,EAAE,QAAQ;CACrB,cAAc,EAAE,SAAS,CAAC,SAAS;CACnC,gBAAgB,EAAE,QAAQ,CAAC,SAAS;CACpC,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC1B,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC3B,CAAC;AAGF,MAAa,uCAAuC,EAAE,OAAO;CAC3D,cAAc,2BAA2B,OAAO;CAChD,kBAAkB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAC/C,CAAC;AAGF,MAAa,oCAAoC,EAAE,OAAO;CACxD,mBAAmB,EAAE,QAAQ;CAC7B,cAAc,2BAA2B,OAAO;CAChD,4BAA4B,+BAA+B,OAAO;CAClE,YAAY,EAAE,QAAQ;CACtB,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,kBAAkB,EAAE,QAAQ;CAC5B,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CAC5D,CAAC;AAGF,MAAa,oCAAoC,EAAE,OAAO;CACxD,mBAAmB,EAAE,QAAQ;CAC7B,oBAAoB,EAAE,QAAQ,CAAC,OAAO;CACtC,4BAA4B,+BAA+B,OAAO;CAClE,YAAY,EAAE,QAAQ,CAAC,SAAS;CAChC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,SAAS;CACtC,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CAC5D,CAAC;AAGF,MAAa,mCAAmC,EAAE,OAAO;CACvD,oBAAoB,EAAE,QAAQ,CAAC,OAAO;CACtC,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC7B,CAAC;AAGF,MAAa,kCAAkC,EAAE,OAAO,EACtD,mBAAmB,EAAE,QAAQ,CAAC,SAAS,EACxC,CAAC;AAGF,MAAa,uCAAuC,EAAE,OAAO;CAC3D,cAAc,EAAE,QAAQ;CACxB,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACzD,CAAC;AAGF,MAAa,8CAA8C,EAAE,OAAO;CAClE,cAAc,EAAE,QAAQ;CACxB,iBAAiB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACzD,CAAC;AAGF,MAAa,0CAA0C,EAAE,OAAO,EAC9D,oBAAoB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS,EAC5D,CAAC;AAGF,MAAa,0CAA0C,EAAE,OAAO;CAC9D,MAAM,EAAE,QAAQ;CAChB,SAAS,EAAE,QAAQ;CACnB,aAAa,EAAE,QAAQ;CACvB,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACrD,CAAC;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,MAAM,EAAE,QAAQ;CAChB,iBAAiB,wCAAwC,SAAS;CAClE,SAAS,wCAAwC,SAAS;CAC3D,CAAC;AAGF,MAAa,sCAAsC,EAAE,OAAO,EAC1D,WAAW,+BACZ,CAAC;AAGF,MAAa,kCAAkC,EAAE,OAAO;CACtD,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CAC9C,CAAC;AAGF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ;CAClB,MAAM,EAAE,KAAK;EAAC;EAAa;EAAS;EAAgB;EAAY,CAAC;CACjE,OAAO,EAAE,QAAQ,CAAC,SAAS;CAC3B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACpC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,SAAS;CACjD,CAAC;;;;ACxFF,MAAa,8BAA8B,EAAE,KAAK;CAChD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,0BAA0B,EAAE,mBAAmB,QAAQ;CAClE,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,sBAAsB;EAAE,MAAM;EAAmC,CAAC;CAC7F,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,sBAAsB;EAAE,MAAM;EAAmC,CAAC;CAC7F,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,qBAAqB;EAAE,MAAM;EAAkC,CAAC;CAC3F,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,0BAA0B;EAAE,MAAM;EAAsC,CAAC;CACpG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,kCAAkC;EAAE,MAAM;EAA6C,CAAC;CACnH,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,oBAAoB;EAAE,MAAM;EAAiC,CAAC;CACzF,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,yBAAyB;EAAE,MAAM;EAAsC,CAAC;CACnG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,4BAA4B;EAAE,MAAM;EAAyC,CAAC;CACzG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,wBAAwB;EAAE,MAAM,oCAAoC,OAAO;EAAE,CAAC;CACzG,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,mBAAmB;EAAE,MAAM;EAAiC,CAAC;CACxF,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,iBAAiB;EAAE,MAAM,uBAAuB,OAAO;EAAE,CAAC;CACtF,CAAC;;;;;;;;;;;;;AAsDF,SAAgB,mBAAmB,EACjC,WAAW,oBACX,cACA,QACA,gBACA,UACkC;CAElC,MAAM,MAAM,IAAI,MAAM,CAAC,SAAS,SAAS;CAczC,SAAS,UAA6B,MAA6B,QAAW,QAAiB;AAC7F,MAAI,GACF,UAAU,QACV,QAAQ,QACR,WAAW,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,EACxD,OAAO,SAAS,SAAS;AAQvB,OAFY,IAAI,IAAI,QAAQ,IAAI,IAAI,CAChB,aAAa,UACpB;IACX,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;IACzC,MAAM,QAAQ,QAAQ,IAAI,OAAO,gBAAgB;AACjD,QAAI,CAAC,MAAO,QAAO,QAAQ,KAAK,MAAM,IAAI;AAE1C,QAAI,CADU,MAAM,aAAa,OAAO,IAAI,MAAM,CACtC,QAAO,QAAQ,KAAK,MAAM,IAAI;SAE1C,QAAO,MAAM,oDAAoD,QAAQ,IAAI,MAAM;AAErF,SAAM,MAAM;KAEd,WAAW,QAAQ,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,CAAC,EAC9C,OAAO,YAAY;GACjB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;GACzC,MAAM,EAAE,SAAS,QAAQ,IAAI,MAAM,OAAO;GAE1C,MAAMC,UAAmB,MAAM,OAAO,IAAI;IAAE;IAAY;IAAa,CAAC;AACtE,UAAO,QAAQ,KAAK,MAAM,UAAU,MAAM,IAAI;IAEjD;;AAGH,WAAU,uBAAuB,kCAAkC;AACnE,WAAU,uBAAuB,kCAAkC;AACnE,WAAU,sBAAsB,iCAAiC;AACjE,WAAU,2BAA2B,qCAAqC;AAC1E,WAAU,mCAAmC,4CAA4C;AACzF,WAAU,qBAAqB,iCAAiC,QAAQ;AACxE,WAAU,0BAA0B,qCAAqC;AACzE,WAAU,6BAA6B,wCAAwC;AAC/E,WAAU,yBAAyB,oCAAoC,OAAO,CAAC;AAC/E,WAAU,oBAAoB,gCAAgC;AAC9D,WAAU,kBAAkB,uBAAuB,OAAO,CAAC;AAK3D,KAAI,GACF,OACA,gBACA,WAAW,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,EACxD,OAAO,SAAS,SAAS;EACvB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,QAAQ,QAAQ,IAAI,OAAO,gBAAgB;AACjD,MAAI,CAAC,MAAO,QAAO,QAAQ,KAAK,MAAM,IAAI;AAE1C,MAAI,CADU,MAAM,aAAa,OAAO,IAAI,MAAM,CACtC,QAAO,QAAQ,KAAK,MAAM,IAAI;AAC1C,QAAM,MAAM;IAEd,OAAO,YAAY;EACjB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,MAAM,MAAM,OAAO,GAAG;AAC5B,MAAI,CAAC,IAAK,QAAO,QAAQ,KAAK,MAAM,IAAI;AACxC,SAAO,QAAQ,KAAK,IAAI;GAE3B;AACD,KAAI,GACF,OACA,oBACA,WAAW,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,QAAQ,EAAE,CAAC,CAAC,EACxD,OAAO,SAAS,SAAS;EACvB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,QAAQ,QAAQ,IAAI,OAAO,gBAAgB;AACjD,MAAI,CAAC,MAAO,QAAO,QAAQ,KAAK,MAAM,IAAI;AAE1C,MAAI,CADU,MAAM,aAAa,eAAe,IAAI,MAAM,CAC9C,QAAO,QAAQ,KAAK,MAAM,IAAI;AAC1C,QAAM,MAAM;IAEd,OAAO,YAAY;EACjB,MAAM,EAAE,OAAO,QAAQ,IAAI,MAAM,QAAQ;EACzC,MAAM,cAAc,MAAM,eAAe,GAAG;AAC5C,MAAI,CAAC,YAAa,QAAO,QAAQ,KAAK,MAAM,IAAI;AAChD,SAAO,QAAQ,KAAK,YAAY;GAEnC;AAED,QAAO"}

package/dist/node/dependabot.d.ts

@@ -1,3 +0,0 @@
-import { $ as sanitizeRef, $t as DependabotGroup, A as DependabotRequest, At as DependabotProxyConfig, B as makeRandomJobToken, Bt as DependabotSourceProviderSchema, C as DependabotRecordUpdateJobUnknownError, Cn as DEPENDABOT_DEFAULT_AUTHOR_NAME, Ct as DependabotGroupRuleJobSchema, D as DependabotUpdatePullRequest, Dt as DependabotJobFileSchema, E as DependabotUpdateDependencyListSchema, Et as DependabotJobFile, F as createApiServerApp, Ft as DependabotRequirementSourceSchema, G as mapIgnoreConditionsFromDependabotConfigToJobConfig, Gt as DependabotAllowCondition, H as mapCredentials, Ht as FetchedFiles, I as DependabotJobBuilder, It as DependabotSecurityAdvisory, J as mapSourceFromDependabotConfigToJobConfig, Jt as DependabotCommitMessageSchema, K as mapPackageEcosystemToPackageManager, Kt as DependabotAllowConditionSchema, L as DependabotJobBuilderOutput, Lt as DependabotSecurityAdvisorySchema, M as DependabotRequestType, Mt as DependabotRequirement, N as DependabotRequestTypeSchema, Nt as DependabotRequirementSchema, O as DependabotUpdatePullRequestSchema, Ot as DependabotPackageManager, P as DependabotTokenType, Pt as DependabotRequirementSource, Q as getBranchNameForUpdate, Qt as DependabotCooldownSchema, R as DependabotSourceInfo, Rt as DependabotSource, S as DependabotRecordUpdateJobErrorSchema, Sn as DEPENDABOT_DEFAULT_AUTHOR_EMAIL, St as DependabotGroupRuleJob, T as DependabotUpdateDependencyList, Tt as DependabotJobConfigSchema, U as mapExperiments, Ut as FileFetcherInput, V as mapAllowedUpdatesFromDependabotConfigToJobConfig, Vt as DependabotSourceSchema, W as mapGroupsFromDependabotConfigToJobConfig, Wt as FileUpdaterInput, X as DEFAULT_EXPERIMENTS, Xt as DependabotConfigSchema, Y as mapVersionStrategyToRequirementsUpdateStrategy, Yt as DependabotConfig, Z as parseExperiments, Zt as DependabotCooldown, _ as DependabotRecordEcosystemMeta, _n as parseUpdates, _t as DependabotExistingPRSchema, a as DependabotDependencyFile, an as DependabotRegistrySchema, at as DependabotCommandSchema, b as DependabotRecordEcosystemVersionsSchema, bn as convertPlaceholder, bt as DependabotGroupJob, c as DependabotEcosystemMetaSchema, cn as DependabotUpdate, ct as DependabotCondition, d as DependabotIncrementMetric, dn as PackageEcosystem, dt as DependabotCredentialSchema, en as DependabotGroupSchema, et as CertificateAuthority, f as DependabotIncrementMetricSchema, fn as PackageEcosystemSchema, ft as DependabotDependency, g as DependabotMetricSchema, gn as parseRegistries, gt as DependabotExistingPR, h as DependabotMetric, hn as parseDependabotConfig, ht as DependabotExistingGroupPRSchema, i as DependabotCreatePullRequestSchema, in as DependabotRegistry, it as DependabotCommand, j as DependabotRequestSchema, jt as DependabotProxyConfigSchema, k as CreateApiServerAppOptions, kt as DependabotPackageManagerSchema, l as DependabotEcosystemVersionManager, ln as DependabotUpdateSchema, lt as DependabotConditionSchema, m as DependabotMarkAsProcessedSchema, mn as VersioningStrategySchema, mt as DependabotExistingGroupPR, n as DependabotClosePullRequestSchema, nn as DependabotIgnoreConditionSchema, nt as DependabotAllowed, o as DependabotDependencyFileSchema, on as DependabotSchedule, ot as DependabotCommitOptions, p as DependabotMarkAsProcessed, pn as VersioningStrategy, pt as DependabotDependencySchema, q as mapSecurityAdvisories, qt as DependabotCommitMessage, r as DependabotCreatePullRequest, rn as DependabotPullRequestBranchName, rt as DependabotAllowedSchema, s as DependabotEcosystemMeta, sn as DependabotScheduleSchema, st as DependabotCommitOptionsSchema, t as DependabotClosePullRequest, tn as DependabotIgnoreCondition, tt as CertificateAuthoritySchema, u as DependabotEcosystemVersionManagerSchema, un as POSSIBLE_CONFIG_FILE_PATHS, ut as DependabotCredential, v as DependabotRecordEcosystemMetaSchema, vn as validateConfiguration, vt as DependabotExperiments, w as DependabotRecordUpdateJobUnknownErrorSchema, wn as GitAuthor, wt as DependabotJobConfig, x as DependabotRecordUpdateJobError, xn as extractPlaceholder, xt as DependabotGroupJobSchema, y as DependabotRecordEcosystemVersions, yn as VariableFinderFn, yt as DependabotExperimentsSchema, z as makeRandomJobId, zt as DependabotSourceProvider } from "./index-DP9JfUPG.js";
-import "./index-3wZw74Ah.js";
-export { CertificateAuthority, CertificateAuthoritySchema, CreateApiServerAppOptions, DEFAULT_EXPERIMENTS, DEPENDABOT_DEFAULT_AUTHOR_EMAIL, DEPENDABOT_DEFAULT_AUTHOR_NAME, DependabotAllowCondition, DependabotAllowConditionSchema, DependabotAllowed, DependabotAllowedSchema, DependabotClosePullRequest, DependabotClosePullRequestSchema, DependabotCommand, DependabotCommandSchema, DependabotCommitMessage, DependabotCommitMessageSchema, DependabotCommitOptions, DependabotCommitOptionsSchema, DependabotCondition, DependabotConditionSchema, DependabotConfig, DependabotConfigSchema, DependabotCooldown, DependabotCooldownSchema, DependabotCreatePullRequest, DependabotCreatePullRequestSchema, DependabotCredential, DependabotCredentialSchema, DependabotDependency, DependabotDependencyFile, DependabotDependencyFileSchema, DependabotDependencySchema, DependabotEcosystemMeta, DependabotEcosystemMetaSchema, DependabotEcosystemVersionManager, DependabotEcosystemVersionManagerSchema, DependabotExistingGroupPR, DependabotExistingGroupPRSchema, DependabotExistingPR, DependabotExistingPRSchema, DependabotExperiments, DependabotExperimentsSchema, DependabotGroup, DependabotGroupJob, DependabotGroupJobSchema, DependabotGroupRuleJob, DependabotGroupRuleJobSchema, DependabotGroupSchema, DependabotIgnoreCondition, DependabotIgnoreConditionSchema, DependabotIncrementMetric, DependabotIncrementMetricSchema, DependabotJobBuilder, DependabotJobBuilderOutput, DependabotJobConfig, DependabotJobConfigSchema, DependabotJobFile, DependabotJobFileSchema, DependabotMarkAsProcessed, DependabotMarkAsProcessedSchema, DependabotMetric, DependabotMetricSchema, DependabotPackageManager, DependabotPackageManagerSchema, DependabotProxyConfig, DependabotProxyConfigSchema, DependabotPullRequestBranchName, DependabotRecordEcosystemMeta, DependabotRecordEcosystemMetaSchema, DependabotRecordEcosystemVersions, DependabotRecordEcosystemVersionsSchema, DependabotRecordUpdateJobError, DependabotRecordUpdateJobErrorSchema, DependabotRecordUpdateJobUnknownError, DependabotRecordUpdateJobUnknownErrorSchema, DependabotRegistry, DependabotRegistrySchema, DependabotRequest, DependabotRequestSchema, DependabotRequestType, DependabotRequestTypeSchema, DependabotRequirement, DependabotRequirementSchema, DependabotRequirementSource, DependabotRequirementSourceSchema, DependabotSchedule, DependabotScheduleSchema, DependabotSecurityAdvisory, DependabotSecurityAdvisorySchema, DependabotSource, DependabotSourceInfo, DependabotSourceProvider, DependabotSourceProviderSchema, DependabotSourceSchema, DependabotTokenType, DependabotUpdate, DependabotUpdateDependencyList, DependabotUpdateDependencyListSchema, DependabotUpdatePullRequest, DependabotUpdatePullRequestSchema, DependabotUpdateSchema, FetchedFiles, FileFetcherInput, FileUpdaterInput, GitAuthor, POSSIBLE_CONFIG_FILE_PATHS, PackageEcosystem, PackageEcosystemSchema, VariableFinderFn, VersioningStrategy, VersioningStrategySchema, convertPlaceholder, createApiServerApp, extractPlaceholder, getBranchNameForUpdate, makeRandomJobId, makeRandomJobToken, mapAllowedUpdatesFromDependabotConfigToJobConfig, mapCredentials, mapExperiments, mapGroupsFromDependabotConfigToJobConfig, mapIgnoreConditionsFromDependabotConfigToJobConfig, mapPackageEcosystemToPackageManager, mapSecurityAdvisories, mapSourceFromDependabotConfigToJobConfig, mapVersionStrategyToRequirementsUpdateStrategy, parseDependabotConfig, parseExperiments, parseRegistries, parseUpdates, sanitizeRef, validateConfiguration };

package/dist/node/dependabot.js

@@ -1,6 +0,0 @@
-import "./environment-DX5CD-dD.js";
-import "./logger-bWnHxtAf.js";
-import { A as DependabotUpdateSchema, C as DependabotCommitMessageSchema, D as DependabotIgnoreConditionSchema, E as DependabotGroupSchema, F as parseRegistries, I as parseUpdates, L as validateConfiguration, M as PackageEcosystemSchema, N as VersioningStrategySchema, O as DependabotRegistrySchema, P as parseDependabotConfig, R as convertPlaceholder, S as DependabotAllowConditionSchema, T as DependabotCooldownSchema, _ as DependabotRequirementSchema, a as DependabotConditionSchema, b as DependabotSourceProviderSchema, c as DependabotExistingGroupPRSchema, d as DependabotGroupJobSchema, f as DependabotGroupRuleJobSchema, g as DependabotProxyConfigSchema, h as DependabotPackageManagerSchema, i as DependabotCommitOptionsSchema, j as POSSIBLE_CONFIG_FILE_PATHS, k as DependabotScheduleSchema, l as DependabotExistingPRSchema, m as DependabotJobFileSchema, n as DependabotAllowedSchema, o as DependabotCredentialSchema, p as DependabotJobConfigSchema, r as DependabotCommandSchema, s as DependabotDependencySchema, t as CertificateAuthoritySchema, u as DependabotExperimentsSchema, v as DependabotRequirementSourceSchema, w as DependabotConfigSchema, x as DependabotSourceSchema, y as DependabotSecurityAdvisorySchema, z as extractPlaceholder } from "./job-Crr4kh3e.js";
-import { A as DEFAULT_EXPERIMENTS, C as mapExperiments, D as mapSecurityAdvisories, E as mapPackageEcosystemToPackageManager, F as DEPENDABOT_DEFAULT_AUTHOR_NAME, M as getBranchNameForUpdate, N as sanitizeRef, O as mapSourceFromDependabotConfigToJobConfig, P as DEPENDABOT_DEFAULT_AUTHOR_EMAIL, S as mapCredentials, T as mapIgnoreConditionsFromDependabotConfigToJobConfig, _ as DependabotUpdatePullRequestSchema, a as DependabotCreatePullRequestSchema, b as makeRandomJobToken, c as DependabotEcosystemVersionManagerSchema, d as DependabotMetricSchema, f as DependabotRecordEcosystemMetaSchema, g as DependabotUpdateDependencyListSchema, h as DependabotRecordUpdateJobUnknownErrorSchema, i as DependabotClosePullRequestSchema, j as parseExperiments, k as mapVersionStrategyToRequirementsUpdateStrategy, l as DependabotIncrementMetricSchema, m as DependabotRecordUpdateJobErrorSchema, n as DependabotRequestTypeSchema, o as DependabotDependencyFileSchema, p as DependabotRecordEcosystemVersionsSchema, r as createApiServerApp, s as DependabotEcosystemMetaSchema, t as DependabotRequestSchema, u as DependabotMarkAsProcessedSchema, v as DependabotJobBuilder, w as mapGroupsFromDependabotConfigToJobConfig, x as mapAllowedUpdatesFromDependabotConfigToJobConfig, y as makeRandomJobId } from "./dependabot-BteoKZVy.js";
-
-export { CertificateAuthoritySchema, DEFAULT_EXPERIMENTS, DEPENDABOT_DEFAULT_AUTHOR_EMAIL, DEPENDABOT_DEFAULT_AUTHOR_NAME, DependabotAllowConditionSchema, DependabotAllowedSchema, DependabotClosePullRequestSchema, DependabotCommandSchema, DependabotCommitMessageSchema, DependabotCommitOptionsSchema, DependabotConditionSchema, DependabotConfigSchema, DependabotCooldownSchema, DependabotCreatePullRequestSchema, DependabotCredentialSchema, DependabotDependencyFileSchema, DependabotDependencySchema, DependabotEcosystemMetaSchema, DependabotEcosystemVersionManagerSchema, DependabotExistingGroupPRSchema, DependabotExistingPRSchema, DependabotExperimentsSchema, DependabotGroupJobSchema, DependabotGroupRuleJobSchema, DependabotGroupSchema, DependabotIgnoreConditionSchema, DependabotIncrementMetricSchema, DependabotJobBuilder, DependabotJobConfigSchema, DependabotJobFileSchema, DependabotMarkAsProcessedSchema, DependabotMetricSchema, DependabotPackageManagerSchema, DependabotProxyConfigSchema, DependabotRecordEcosystemMetaSchema, DependabotRecordEcosystemVersionsSchema, DependabotRecordUpdateJobErrorSchema, DependabotRecordUpdateJobUnknownErrorSchema, DependabotRegistrySchema, DependabotRequestSchema, DependabotRequestTypeSchema, DependabotRequirementSchema, DependabotRequirementSourceSchema, DependabotScheduleSchema, DependabotSecurityAdvisorySchema, DependabotSourceProviderSchema, DependabotSourceSchema, DependabotUpdateDependencyListSchema, DependabotUpdatePullRequestSchema, DependabotUpdateSchema, POSSIBLE_CONFIG_FILE_PATHS, PackageEcosystemSchema, VersioningStrategySchema, convertPlaceholder, createApiServerApp, extractPlaceholder, getBranchNameForUpdate, makeRandomJobId, makeRandomJobToken, mapAllowedUpdatesFromDependabotConfigToJobConfig, mapCredentials, mapExperiments, mapGroupsFromDependabotConfigToJobConfig, mapIgnoreConditionsFromDependabotConfigToJobConfig, mapPackageEcosystemToPackageManager, mapSecurityAdvisories, mapSourceFromDependabotConfigToJobConfig, mapVersionStrategyToRequirementsUpdateStrategy, parseDependabotConfig, parseExperiments, parseRegistries, parseUpdates, sanitizeRef, validateConfiguration };

package/dist/node/environment-DX5CD-dD.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"environment-DX5CD-dD.js","names":[],"sources":["../../src/environment/git.ts","../../src/environment/platform.ts","../../src/environment/site-url.ts","../../src/environment/index.ts"],"sourcesContent":["/**\n * Retrieves the name of the current Git branch from the environment variables or from Git itself.\n * The priority order for retrieving the branch name is as follows:\n * 1. `process.env.GITHUB_REF_NAME`\n * 2. `process.env.VERCEL_GIT_COMMIT_REF`\n * 3. `process.env.CF_PAGES_BRANCH`\n * 4. Retrieve the branch name from Git using the `getBranchFromGit` function.\n * @returns The name of the current Git branch, or undefined if it cannot be determined.\n */\nexport function getBranch(): string | undefined {\n  // GITHUB_REF_NAME may change on every build and we do not want the turbo cache to be invalidated on every build\n  return (\n    process.env.GITHUB_REF_NAME ||\n    process.env.VERCEL_GIT_COMMIT_REF ||\n    process.env.CF_PAGES_BRANCH ||\n    getBranchFromGit()\n  );\n}\n\n/**\n * Retrieves the Git SHA (commit hash) from the environment variables or from Git itself.\n * The priority order for retrieving the Git SHA is as follows:\n * 1. `process.env.GITHUB_SHA`\n * 2. `process.env.VERCEL_GIT_COMMIT_SHA`\n * 3. `process.env.CF_PAGES_COMMIT_SHA`\n * 4. Retrieve the SHA from Git using the `getShaFromGit` function.\n * @returns The Git SHA (commit hash) if available, otherwise `undefined`.\n */\nexport function getSha(): string | undefined {\n  // GITHUB_SHA changes on every build and we do not want the turbo cache to be invalidated on every build\n  return (\n    process?.env.GITHUB_SHA || process?.env.VERCEL_GIT_COMMIT_SHA || process?.env.CF_PAGES_COMMIT_SHA || getShaFromGit()\n  );\n}\n\n/**\n * Retrieves the SHA (commit hash) from the Git repository.\n * @returns The SHA (commit hash) as a string, or undefined if it cannot be retrieved.\n */\nfunction getShaFromGit(): string | undefined {\n  try {\n    if (process.env.NEXT_RUNTIME === 'nodejs') {\n      const { execSync } = require('node:child_process');\n      return execSync('git rev-parse HEAD').toString().trim();\n    }\n  } catch {\n    return undefined;\n  }\n}\n\n/**\n * Retrieves the current branch name from Git.\n * @returns The name of the current branch, or 'unknown' if an error occurs.\n */\nfunction getBranchFromGit(): string | undefined {\n  try {\n    if (process.env.NEXT_RUNTIME === 'nodejs') {\n      const { execSync } = require('node:child_process');\n      return execSync('git rev-parse --abbrev-ref HEAD').toString().trim();\n    }\n  } catch {\n    return undefined;\n  }\n}\n","export type Platform =\n  | 'azure_app_service'\n  | 'azure_container_apps'\n  | 'azure_static_web_app'\n  | 'cloudflare_pages'\n  | 'vercel'\n  | undefined;\n\nexport function getPlatform(): Platform {\n  if (process.env.CONTAINER_APP_ENV_DNS_SUFFIX) return 'azure_container_apps';\n  // SWA is a special case of Azure App Service so we need to check it first\n  else if (process.env.WEBSITE_STATICWEBAPP_RESOURCE_ID) return 'azure_static_web_app';\n  else if (process.env.WEBSITE_HOSTNAME) return 'azure_app_service';\n  else if (process.env.CF_PAGES_URL) return 'cloudflare_pages';\n  else if (process.env.VERCEL_BRANCH_URL) return 'vercel';\n\n  return undefined;\n}\n","interface SiteUrlOptions {\n  /** Whether the current environment is development. */\n  development: boolean;\n\n  /** Whether the current branch is the main branch. */\n  main: boolean;\n\n  /** The default URL to use if no other URL is found. */\n  defaultValue: string;\n}\n\n/**\n * Get the site URL based on the environment variables.\n * @param options - The options to use.\n * @returns The site URL.\n */\nexport function getSiteUrlCombined({ development, main, defaultValue }: SiteUrlOptions) {\n  // if we are in development, use localhost\n  if (development) return `http://localhost:${process.env.PORT || 3000}`;\n\n  // if we are on the main branch, use the known URL\n  if (main) return defaultValue;\n\n  // if we are on Azure ContainerApps, use the provided URL\n  let value = getSiteUrlForAca();\n  if (value && value.length > 0) return value;\n\n  // if we are on Azure App Service, use the provided URL\n  value = getSiteUrlForAppService();\n  if (value && value.length > 0) return value;\n\n  // if we are on Azure Static WebApps, use the provided URL\n  value = getSiteUrlForSwa();\n  if (value && value.length > 0) return value;\n\n  // if we are on Vercel, use the provided URL\n  value = process.env.VERCEL_BRANCH_URL;\n  if (value && value.length > 0) return `https://${value}`;\n\n  // if we are on Cloudflare Pages, use the provided URL\n  value = process.env.CF_PAGES_URL;\n  if (value && value.length > 0) return value;\n\n  return defaultValue; // fallback (edge cases)\n}\n\nexport function getSiteUrlForAca(): string | undefined {\n  /*\n   * Having looked at the available ENV variables when deployed, we can form the URL from\n   * combinations of the following variables:\n   * CONTAINER_APP_ENV_DNS_SUFFIX (e.g. \"jollyplant-9349db20.westeurope.azurecontainerapps.io\")\n   * CONTAINER_APP_NAME (e.g. \"paklo-website\")\n   */\n\n  const suffix = process.env.CONTAINER_APP_ENV_DNS_SUFFIX;\n  const name = process.env.CONTAINER_APP_NAME;\n  if (!suffix || !name) return undefined;\n  return `https://${name}.${suffix}`;\n}\n\nexport function getSiteUrlForAppService(): string | undefined {\n  /*\n   * Environment variables for Azure App Service are documented at\n   * https://learn.microsoft.com/en-us/azure/app-service/reference-app-settings?tabs=kudu%2Cdotnet#app-environment\n   *\n   * WEBSITE_HOSTNAME (e.g. \"paklo-website.azurewebsites.net\")\n   */\n\n  const value = process.env.WEBSITE_HOSTNAME;\n  return value ? `https://${value}` : undefined;\n}\n\nexport function getSiteUrlForSwa(): string | undefined {\n  /*\n   * Having looked at the available ENV variables when deployed to both production and preview environments,\n   * only the WEBSITE_AUTH_V2_CONFIG_JSON has values we can use for this.\n   *\n   * Sample value for production:\n   * {\\\"platform\\\":{\\\"enabled\\\":true},\\\"globalValidation\\\":{\\\"excludedPaths\\\":[\\\"/.swa/health.html\\\"]},\\\"identityProviders\\\":{\\\"azureStaticWebApps\\\":{\\\"registration\\\":{\\\"clientId\\\":\\\"black-bush-020715303.5.azurestaticapps.net\\\"}}},\\\"legacyProperties\\\":{\\\"configVersion\\\":\\\"v2\\\",\\\"legacyVersion\\\":\\\"V2\\\"}}\n   *\n   * Sample value for preview environment (named 331):\n   * {\\\"platform\\\":{\\\"enabled\\\":true},\\\"globalValidation\\\":{\\\"excludedPaths\\\":[\\\"/.swa/health.html\\\"]},\\\"identityProviders\\\":{\\\"azureStaticWebApps\\\":{\\\"registration\\\":{\\\"clientId\\\":\\\"black-bush-020715303-331.westeurope.5.azurestaticapps.net\\\"}}},\\\"legacyProperties\\\":{\\\"configVersion\\\":\\\"v2\\\",\\\"legacyVersion\\\":\\\"V2\\\"}}\n   *\n   * The part we are interested in is the clientId value. We can extract this value and use it as the domain to form the siteUrl.\n   */\n\n  const config = process.env.WEBSITE_AUTH_V2_CONFIG_JSON;\n  const clientIdMatch = config?.match(/\"clientId\":\"([^\"]+)\"/);\n  return clientIdMatch ? `https://${clientIdMatch[1]}` : undefined;\n}\n","import { getBranch, getSha } from './git';\nimport { getPlatform, type Platform } from './platform';\nimport { getSiteUrlCombined } from './site-url';\n\nexport type Environment = {\n  /** The current environment. */\n  name?: 'development' | 'production' | 'test';\n\n  /** Whether the current environment is development. */\n  development: boolean;\n\n  /** Whether the current environment is production. */\n  production: boolean;\n\n  /** Whether the current environment is test. */\n  test: boolean;\n\n  /** The current platform. */\n  platform: Platform;\n\n  /** The current commit SHA. */\n  sha?: string;\n\n  /** The current branch name. */\n  branch?: string;\n\n  /** Whether the current branch is the main branch. */\n  main: boolean;\n};\n\nfunction getEnvironment(): Environment {\n  const env = process.env.NODE_ENV as Environment['name'];\n  const branch = getBranch();\n  const sha = getSha();\n  const platform = getPlatform();\n\n  return {\n    name: env,\n    development: env === 'development',\n    production: env === 'production',\n    test: env === 'test',\n    platform,\n    sha,\n    branch,\n    main: branch === 'main',\n  };\n}\n\nexport const environment = getEnvironment();\n\nexport interface SiteUrlOptions {\n  /** The default URL to use if no other URL is found. */\n  defaultValue: string;\n}\n\nexport function getSiteUrl({ defaultValue }: SiteUrlOptions): string {\n  const { development, main } = environment;\n  return getSiteUrlCombined({ development, main, defaultValue: defaultValue });\n}\n"],"mappings":";;;;;;;;;;;;;;;;AASA,SAAgB,YAAgC;AAE9C,QACE,QAAQ,IAAI,mBACZ,QAAQ,IAAI,yBACZ,QAAQ,IAAI,mBACZ,kBAAkB;;;;;;;;;;;AAatB,SAAgB,SAA6B;AAE3C,QACE,SAAS,IAAI,cAAc,SAAS,IAAI,yBAAyB,SAAS,IAAI,uBAAuB,eAAe;;;;;;AAQxH,SAAS,gBAAoC;AAC3C,KAAI;AACF,MAAI,QAAQ,IAAI,iBAAiB,UAAU;GACzC,MAAM,EAAE,uBAAqB,qBAAqB;AAClD,UAAO,SAAS,qBAAqB,CAAC,UAAU,CAAC,MAAM;;SAEnD;AACN;;;;;;;AAQJ,SAAS,mBAAuC;AAC9C,KAAI;AACF,MAAI,QAAQ,IAAI,iBAAiB,UAAU;GACzC,MAAM,EAAE,uBAAqB,qBAAqB;AAClD,UAAO,SAAS,kCAAkC,CAAC,UAAU,CAAC,MAAM;;SAEhE;AACN;;;;;;ACrDJ,SAAgB,cAAwB;AACtC,KAAI,QAAQ,IAAI,6BAA8B,QAAO;UAE5C,QAAQ,IAAI,iCAAkC,QAAO;UACrD,QAAQ,IAAI,iBAAkB,QAAO;UACrC,QAAQ,IAAI,aAAc,QAAO;UACjC,QAAQ,IAAI,kBAAmB,QAAO;;;;;;;;;;ACEjD,SAAgB,mBAAmB,EAAE,aAAa,MAAM,gBAAgC;AAEtF,KAAI,YAAa,QAAO,oBAAoB,QAAQ,IAAI,QAAQ;AAGhE,KAAI,KAAM,QAAO;CAGjB,IAAI,QAAQ,kBAAkB;AAC9B,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAGtC,SAAQ,yBAAyB;AACjC,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAGtC,SAAQ,kBAAkB;AAC1B,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAGtC,SAAQ,QAAQ,IAAI;AACpB,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO,WAAW;AAGjD,SAAQ,QAAQ,IAAI;AACpB,KAAI,SAAS,MAAM,SAAS,EAAG,QAAO;AAEtC,QAAO;;AAGT,SAAgB,mBAAuC;CAQrD,MAAM,SAAS,QAAQ,IAAI;CAC3B,MAAM,OAAO,QAAQ,IAAI;AACzB,KAAI,CAAC,UAAU,CAAC,KAAM,QAAO;AAC7B,QAAO,WAAW,KAAK,GAAG;;AAG5B,SAAgB,0BAA8C;CAQ5D,MAAM,QAAQ,QAAQ,IAAI;AAC1B,QAAO,QAAQ,WAAW,UAAU;;AAGtC,SAAgB,mBAAuC;CAerD,MAAM,gBADS,QAAQ,IAAI,6BACG,MAAM,uBAAuB;AAC3D,QAAO,gBAAgB,WAAW,cAAc,OAAO;;;;;AC1DzD,SAAS,iBAA8B;CACrC,MAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,SAAS,WAAW;CAC1B,MAAM,MAAM,QAAQ;CACpB,MAAM,WAAW,aAAa;AAE9B,QAAO;EACL,MAAM;EACN,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,MAAM,QAAQ;EACd;EACA;EACA;EACA,MAAM,WAAW;EAClB;;AAGH,MAAa,cAAc,gBAAgB;AAO3C,SAAgB,WAAW,EAAE,gBAAwC;CACnE,MAAM,EAAE,aAAa,SAAS;AAC9B,QAAO,mBAAmB;EAAE;EAAa;EAAoB;EAAc,CAAC"}

package/dist/node/environment.js

@@ -1,3 +0,0 @@
-import { n as getSiteUrl, t as environment } from "./environment-DX5CD-dD.js";
-
-export { environment, getSiteUrl };

package/dist/node/github.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"github.js","names":["results: T2[]","v"],"sources":["../../src/github/ghsa.ts"],"sourcesContent":["import * as semver from 'semver';\nimport { z } from 'zod/v4';\n\nimport { logger } from '@/logger';\n\n// we use nullish() because it does optional() and allows the value to be set to null\n\nconst GHSA_GRAPHQL_API = 'https://api.github.com/graphql';\n\nconst GHSA_SECURITY_VULNERABILITIES_QUERY = `\n  query($ecosystem: SecurityAdvisoryEcosystem, $package: String) {\n    securityVulnerabilities(first: 100, ecosystem: $ecosystem, package: $package) {\n      nodes {\n        advisory {\n          identifiers {\n            type,\n            value\n          },\n          severity,\n          summary,\n          description,\n          references {\n            url\n          }\n          cvss {\n            score\n            vectorString\n          }\n          epss {\n            percentage\n            percentile\n          }\n          cwes (first: 100) {\n            nodes {\n              cweId\n              name\n              description\n            }\n          }\n          publishedAt\n          updatedAt\n          withdrawnAt\n          permalink\n        }\n        vulnerableVersionRange\n        firstPatchedVersion {\n          identifier\n        }\n      }\n    }\n  }\n`;\n\nexport const PackageEcosystemSchema = z.enum([\n  'COMPOSER',\n  'ERLANG',\n  'GO',\n  'ACTIONS',\n  'MAVEN',\n  'NPM',\n  'NUGET',\n  'PIP',\n  'PUB',\n  'RUBYGEMS',\n  'RUST',\n  'SWIFT',\n]);\nexport type PackageEcosystem = z.infer<typeof PackageEcosystemSchema>;\n\nexport const PackageSchema = z.object({\n  name: z.string(),\n  version: z.string().nullish(),\n});\nexport type Package = z.infer<typeof PackageSchema>;\n\nexport const SecurityAdvisoryIdentifierSchema = z.enum(['CVE', 'GHSA']);\nexport type SecurityAdvisoryIdentifierType = z.infer<typeof SecurityAdvisoryIdentifierSchema>;\n\nexport const SecurityAdvisorySeveritySchema = z.enum(['LOW', 'MODERATE', 'HIGH', 'CRITICAL']);\nexport type SecurityAdvisorySeverity = z.infer<typeof SecurityAdvisorySeveritySchema>;\n\nexport const SecurityAdvisorySchema = z.object({\n  identifiers: z.array(\n    z.object({\n      type: z.union([SecurityAdvisoryIdentifierSchema, z.string()]),\n      value: z.string(),\n    }),\n  ),\n  severity: SecurityAdvisorySeveritySchema.nullish(),\n  summary: z.string(),\n  description: z.string().nullish(),\n  references: z.array(z.object({ url: z.string() })).nullish(),\n  cvss: z\n    .object({\n      score: z.number(),\n      vectorString: z.string(),\n    })\n    .nullish(),\n  epss: z\n    .object({\n      percentage: z.number(),\n      percentile: z.number(),\n    })\n    .nullish(),\n  cwes: z\n    .array(\n      z.object({\n        cweId: z.string(),\n        name: z.string(),\n        description: z.string(),\n      }),\n    )\n    .nullish(),\n  publishedAt: z.string().nullish(),\n  updatedAt: z.string().nullish(),\n  withdrawnAt: z.string().nullish(),\n  permalink: z.string().nullish(),\n});\nexport type SecurityAdvisory = z.infer<typeof SecurityAdvisorySchema>;\n\nconst FirstPatchedVersionSchema = z.object({ identifier: z.string() });\nexport type FirstPatchedVersion = z.infer<typeof FirstPatchedVersionSchema>;\n\nexport const SecurityVulnerabilitySchema = z.object({\n  package: PackageSchema,\n  advisory: SecurityAdvisorySchema,\n  vulnerableVersionRange: z.string(),\n  firstPatchedVersion: FirstPatchedVersionSchema.nullish(),\n});\nexport type SecurityVulnerability = z.infer<typeof SecurityVulnerabilitySchema>;\n\nexport function getGhsaPackageEcosystemFromDependabotPackageManager(\n  dependabotPackageManager: string,\n): PackageEcosystem {\n  switch (dependabotPackageManager) {\n    case 'composer':\n      return 'COMPOSER';\n    case 'elm':\n      return 'ERLANG';\n    case 'github_actions':\n      return 'ACTIONS';\n    case 'go_modules':\n      return 'GO';\n    case 'maven':\n      return 'MAVEN';\n    case 'npm_and_yarn':\n      return 'NPM';\n    case 'nuget':\n      return 'NUGET';\n    case 'pip':\n      return 'PIP';\n    case 'pub':\n      return 'PUB';\n    case 'bundler':\n      return 'RUBYGEMS';\n    case 'cargo':\n      return 'RUST';\n    case 'swift':\n      return 'SWIFT';\n    default:\n      throw new Error(`Unknown dependabot package manager: ${dependabotPackageManager}`);\n  }\n}\n\n/**\n * GitHub GraphQL client\n */\nexport class GitHubGraphClient {\n  private readonly accessToken: string;\n\n  constructor(accessToken: string) {\n    this.accessToken = accessToken;\n  }\n\n  /**\n   * Get the list of security vulnerabilities for a given package ecosystem and list of packages\n   * @param packageEcosystem\n   * @param packages\n   */\n  public async getSecurityVulnerabilitiesAsync(\n    packageEcosystem: PackageEcosystem,\n    packages: Package[],\n  ): Promise<SecurityVulnerability[]> {\n    // GitHub API doesn't support querying multiple package at once, so we need to make a request for each package individually.\n    // To speed up the process, we can make the requests in parallel, 100 at a time. We batch the requests to avoid hitting the rate limit too quickly.\n    // https://docs.github.com/en/graphql/overview/rate-limits-and-node-limits-for-the-graphql-api\n    const securityVulnerabilities = await this.batchGraphQueryAsync<Package, SecurityVulnerability>(\n      100,\n      packages,\n      async (pkg) => {\n        const variables = {\n          ecosystem: packageEcosystem,\n          package: pkg.name,\n        };\n        const response = await fetch(GHSA_GRAPHQL_API, {\n          method: 'POST',\n          headers: {\n            Authorization: `Bearer ${this.accessToken}`,\n            'Content-Type': 'application/json',\n          },\n          body: JSON.stringify({\n            query: GHSA_SECURITY_VULNERABILITIES_QUERY,\n            variables: variables,\n          }),\n        });\n        if (!response.ok) {\n          throw new Error(`GHSA GraphQL request failed with response: ${response.status} ${response.statusText}`);\n        }\n        const responseData = await response.json();\n        const errors = responseData?.errors;\n        if (errors) {\n          throw new Error(`GHSA GraphQL request failed with errors: ${JSON.stringify(errors)}`);\n        }\n\n        const vulnerabilities = responseData?.data?.securityVulnerabilities?.nodes;\n        // biome-ignore lint/suspicious/noExplicitAny: generic\n        return vulnerabilities?.filter((v: any) => v?.advisory)?.map((v: any) => ({ package: pkg, ...v }));\n      },\n    );\n\n    return securityVulnerabilities;\n  }\n\n  /**\n   * Batch requests in parallel to speed up the process when we are forced to do a N+1 query\n   * @param batchSize\n   * @param items\n   * @param action\n   * @returns\n   */\n  private async batchGraphQueryAsync<T1, T2>(batchSize: number, items: T1[], action: (item: T1) => Promise<T2[]>) {\n    const results: T2[] = [];\n    for (let i = 0; i < items.length; i += batchSize) {\n      const batch = items.slice(i, i + batchSize);\n      if (batch?.length) {\n        try {\n          const batchResults = await Promise.all(batch.map(action));\n          if (batchResults?.length) {\n            results.push(...batchResults.flat());\n          }\n        } catch (error) {\n          logger.warn(`Request batch [${i}-${i + batchSize}] failed; The data may be incomplete. ${error}`);\n        }\n      }\n    }\n    return results;\n  }\n}\n\nexport function filterVulnerabilities(securityVulnerabilities: SecurityVulnerability[]): SecurityVulnerability[] {\n  // Filter out vulnerabilities that have been withdrawn or that are not relevant the current version of the package\n  const affectedVulnerabilities = securityVulnerabilities\n    .filter((v) => !v.advisory.withdrawnAt)\n    .filter((v) => {\n      const pkg = v.package;\n      if (!pkg || !pkg.version || !v.vulnerableVersionRange) {\n        return false;\n      }\n\n      /**\n       * The vulnerable version range follows a basic syntax with a few forms:\n       *   `= 0.2.0` denotes a single vulnerable version\n       *   `<= 1.0.8` denotes a version range up to and including the specified version\n       *   `< 0.1.11` denotes a version range up to, but excluding, the specified version\n       *   `>= 4.3.0, < 4.3.5` denotes a version range with a known minimum and maximum version\n       *   `>= 0.0.1` denotes a version range with a known minimum, but no known maximum\n       */\n      const versionRangeRequirements = v.vulnerableVersionRange.split(',').map((v) => v.trim());\n      return versionRangeRequirements.every((r) => pkg.version && semver.satisfies(pkg.version, r));\n    });\n  return affectedVulnerabilities;\n}\n"],"mappings":";;;;;;AAOA,MAAM,mBAAmB;AAEzB,MAAM,sCAAsC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4C5C,MAAa,yBAAyB,EAAE,KAAK;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,gBAAgB,EAAE,OAAO;CACpC,MAAM,EAAE,QAAQ;CAChB,SAAS,EAAE,QAAQ,CAAC,SAAS;CAC9B,CAAC;AAGF,MAAa,mCAAmC,EAAE,KAAK,CAAC,OAAO,OAAO,CAAC;AAGvE,MAAa,iCAAiC,EAAE,KAAK;CAAC;CAAO;CAAY;CAAQ;CAAW,CAAC;AAG7F,MAAa,yBAAyB,EAAE,OAAO;CAC7C,aAAa,EAAE,MACb,EAAE,OAAO;EACP,MAAM,EAAE,MAAM,CAAC,kCAAkC,EAAE,QAAQ,CAAC,CAAC;EAC7D,OAAO,EAAE,QAAQ;EAClB,CAAC,CACH;CACD,UAAU,+BAA+B,SAAS;CAClD,SAAS,EAAE,QAAQ;CACnB,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;CAC5D,MAAM,EACH,OAAO;EACN,OAAO,EAAE,QAAQ;EACjB,cAAc,EAAE,QAAQ;EACzB,CAAC,CACD,SAAS;CACZ,MAAM,EACH,OAAO;EACN,YAAY,EAAE,QAAQ;EACtB,YAAY,EAAE,QAAQ;EACvB,CAAC,CACD,SAAS;CACZ,MAAM,EACH,MACC,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ;EACjB,MAAM,EAAE,QAAQ;EAChB,aAAa,EAAE,QAAQ;EACxB,CAAC,CACH,CACA,SAAS;CACZ,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,WAAW,EAAE,QAAQ,CAAC,SAAS;CAChC,CAAC;AAGF,MAAM,4BAA4B,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;AAGtE,MAAa,8BAA8B,EAAE,OAAO;CAClD,SAAS;CACT,UAAU;CACV,wBAAwB,EAAE,QAAQ;CAClC,qBAAqB,0BAA0B,SAAS;CACzD,CAAC;AAGF,SAAgB,oDACd,0BACkB;AAClB,SAAQ,0BAAR;EACE,KAAK,WACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,iBACH,QAAO;EACT,KAAK,aACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,eACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,MACH,QAAO;EACT,KAAK,UACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,KAAK,QACH,QAAO;EACT,QACE,OAAM,IAAI,MAAM,uCAAuC,2BAA2B;;;;;;AAOxF,IAAa,oBAAb,MAA+B;CAC7B,AAAiB;CAEjB,YAAY,aAAqB;AAC/B,OAAK,cAAc;;;;;;;CAQrB,MAAa,gCACX,kBACA,UACkC;AAsClC,SAlCgC,MAAM,KAAK,qBACzC,KACA,UACA,OAAO,QAAQ;GACb,MAAM,YAAY;IAChB,WAAW;IACX,SAAS,IAAI;IACd;GACD,MAAM,WAAW,MAAM,MAAM,kBAAkB;IAC7C,QAAQ;IACR,SAAS;KACP,eAAe,UAAU,KAAK;KAC9B,gBAAgB;KACjB;IACD,MAAM,KAAK,UAAU;KACnB,OAAO;KACI;KACZ,CAAC;IACH,CAAC;AACF,OAAI,CAAC,SAAS,GACZ,OAAM,IAAI,MAAM,8CAA8C,SAAS,OAAO,GAAG,SAAS,aAAa;GAEzG,MAAM,eAAe,MAAM,SAAS,MAAM;GAC1C,MAAM,SAAS,cAAc;AAC7B,OAAI,OACF,OAAM,IAAI,MAAM,4CAA4C,KAAK,UAAU,OAAO,GAAG;AAKvF,WAFwB,cAAc,MAAM,yBAAyB,QAE7C,QAAQ,MAAW,GAAG,SAAS,EAAE,KAAK,OAAY;IAAE,SAAS;IAAK,GAAG;IAAG,EAAE;IAErG;;;;;;;;;CAYH,MAAc,qBAA6B,WAAmB,OAAa,QAAqC;EAC9G,MAAMA,UAAgB,EAAE;AACxB,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,WAAW;GAChD,MAAM,QAAQ,MAAM,MAAM,GAAG,IAAI,UAAU;AAC3C,OAAI,OAAO,OACT,KAAI;IACF,MAAM,eAAe,MAAM,QAAQ,IAAI,MAAM,IAAI,OAAO,CAAC;AACzD,QAAI,cAAc,OAChB,SAAQ,KAAK,GAAG,aAAa,MAAM,CAAC;YAE/B,OAAO;AACd,WAAO,KAAK,kBAAkB,EAAE,GAAG,IAAI,UAAU,wCAAwC,QAAQ;;;AAIvG,SAAO;;;AAIX,SAAgB,sBAAsB,yBAA2E;AAqB/G,QAnBgC,wBAC7B,QAAQ,MAAM,CAAC,EAAE,SAAS,YAAY,CACtC,QAAQ,MAAM;EACb,MAAM,MAAM,EAAE;AACd,MAAI,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,EAAE,uBAC7B,QAAO;AAYT,SADiC,EAAE,uBAAuB,MAAM,IAAI,CAAC,KAAK,QAAMC,IAAE,MAAM,CAAC,CACzD,OAAO,MAAM,IAAI,WAAW,OAAO,UAAU,IAAI,SAAS,EAAE,CAAC;GAC7F"}

package/dist/node/http-BG_-s47I.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"http-BG_-s47I.js","names":["data: Array<MultipartFormDataBodyPart['body']>","list: Buffer[]","headers: Record<string, string>","body: BodyInit | undefined","error: ProblemDetails","code: number"],"sources":["../../src/http/headers.ts","../../src/http/multipart.ts","../../src/http/inner.ts"],"sourcesContent":["export const HEADER_NAME_CONTENT_DISPOSITION = 'Content-Disposition';\nexport const HEADER_NAME_CONTENT_TYPE = 'Content-Type';\nexport const HEADER_NAME_ACCEPT = 'Accept';\nexport const HEADER_NAME_USER_AGENT = 'User-Agent';\nexport const HEADER_NAME_AUTHORIZATION = 'Authorization';\n","import { HEADER_NAME_CONTENT_DISPOSITION, HEADER_NAME_CONTENT_TYPE } from './headers';\n\nexport class MultipartFormDataBody {\n  private type = 'multipart/form-data';\n  private boundary: string = `${Math.random().toString(36).substring(2)}`;\n  private parts: Array<MultipartFormDataBodyPart> = [];\n\n  public async encode(): Promise<Buffer> {\n    if (this.parts.length === 0) {\n      throw new Error('MultipartFormDataBody must have at least one part');\n    }\n\n    const data: Array<MultipartFormDataBodyPart['body']> = [];\n\n    for (const part of this.parts) {\n      // write boundary\n      data.push(`--${this.boundary}\\r\\n`);\n\n      // write headers\n      for (const [key, value] of Object.entries(part.headers)) {\n        data.push(`${key}: ${value}\\r\\n`);\n      }\n      data.push('\\r\\n');\n\n      // write body\n      data.push(part.body);\n      data.push('\\r\\n');\n    }\n\n    data.push(`--${this.boundary}--\\r\\n`);\n\n    const list: Buffer[] = [];\n    for (const item of data) {\n      if (item instanceof File) list.push(Buffer.from(await item.arrayBuffer()));\n      else if (typeof item === 'string') list.push(Buffer.from(item, 'utf8'));\n      else list.push(item);\n    }\n    return Buffer.concat(list);\n  }\n\n  public getBoundary(): string {\n    return this.boundary;\n  }\n\n  public getContentType(): string {\n    return `${this.type}; boundary=${this.boundary}`;\n  }\n\n  public add(name: string, value: string) {\n    const part = createPart(name, value);\n    this.parts.push(part);\n  }\n\n  public addFile(name: string, file: File) {\n    const part = createPart(name, file, file.name, file.type);\n    this.parts.push(part);\n  }\n}\n\ntype MultipartFormDataBodyPart = {\n  name: string;\n  headers: Record<string, string>;\n  body: Buffer | File | string;\n};\n\nfunction createPart(\n  name: string,\n  body: MultipartFormDataBodyPart['body'],\n  filename?: string,\n  contentType?: string,\n): MultipartFormDataBodyPart {\n  const headers: Record<string, string> = {};\n  headers[HEADER_NAME_CONTENT_DISPOSITION] = `form-data; name=\"${name}\"${filename ? `; filename=\"${filename}\"` : ''}`;\n  if (contentType) headers[HEADER_NAME_CONTENT_TYPE] = contentType;\n  return { name, headers, body };\n}\n","import type { ZodType } from 'zod/v4';\n\nimport { environment } from '@/environment';\n\nimport {\n  HEADER_NAME_ACCEPT,\n  HEADER_NAME_AUTHORIZATION,\n  HEADER_NAME_CONTENT_TYPE,\n  HEADER_NAME_USER_AGENT,\n} from './headers';\nimport { MultipartFormDataBody } from './multipart';\nimport type { ProblemDetails } from './problem';\n\nconst defaultUserAgent = `paklo/${environment.sha?.substring(0, 7) ?? 'dogfood'}`;\n\nexport type CreateInnerApiClientOptions = {\n  /**\n   * The base URL to use for the API.\n   * @example 'https://api.paklo.app'\n   */\n  baseUrl: string;\n\n  /** The token to use for authentication. This can be a JWT or specialized key. */\n  token?: string;\n};\n\nexport type RequestOptions = {\n  /**\n   * Value for the `User-Agent` header.\n   * This prepends the default value (e.g. `paklo/ab26320`)\n   * which is important when we need to propagate the browser information to the server.\n   */\n  userAgent?: string;\n};\n\nexport type ResourceResponse<T = Record<string, unknown>> = {\n  /** The headers of the response. */\n  headers: Headers;\n\n  /** Whether the request was successful. */\n  successful: boolean;\n\n  /** The status code of the response. */\n  status: number;\n\n  /** The status text of the response. */\n  statusText: string;\n\n  /** The data of the response. */\n  data?: T;\n\n  /** The error of the response. */\n  error?: ProblemDetails;\n};\n\nexport type InnerRequestOptions<T> = RequestOptions & {\n  /**\n   * The base URL to use for the request.\n   * This overrides the default base URL.\n   * @example 'https://api.paklo.app'\n   */\n  baseUrl?: string;\n\n  /** Additional headers to use for the request. */\n  headers?: HeadersInit;\n\n  /** The payload to use for the request. */\n  payload?: Record<string, unknown> | MultipartFormDataBody | ReadableStream | XMLHttpRequestBodyInit;\n\n  /** The schema to use when parsing the response. */\n  schema?: ZodType<T>;\n};\n\ntype InnerRequestOptionsComplete<T> = InnerRequestOptions<T> & {\n  /** The method to use for the request. */\n  method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';\n\n  /** The URL to use for the request. */\n  url: string;\n};\n\nexport class InnerApiClient {\n  private readonly baseUrl: string;\n  private readonly headers: Headers;\n  private readonly token?: string;\n\n  /**\n   * Create a new API client.\n   * @param options The options to use for the client.\n   */\n  constructor({ baseUrl, token }: CreateInnerApiClientOptions) {\n    this.baseUrl = baseUrl;\n\n    this.headers = new Headers({\n      [HEADER_NAME_ACCEPT]: 'application/json',\n    });\n\n    this.token = token;\n  }\n\n  async get<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      url: this.makeUrl(url, options),\n      method: 'GET',\n      ...options,\n    });\n  }\n\n  async post<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'POST',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async put<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'PUT',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async patch<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'PATCH',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async delete<T>(url: string, options?: InnerRequestOptions<T>) {\n    return this.request<T>({\n      method: 'DELETE',\n      url: this.makeUrl(url, options),\n      ...options,\n    });\n  }\n\n  async request<T>(options: InnerRequestOptionsComplete<T>): Promise<ResourceResponse<T>> {\n    const { method, url, payload, userAgent, headers: additionalHeaders, schema } = options;\n\n    // create headers for the request\n    const headers = new Headers(this.headers);\n    const finalUserAgent = userAgent && userAgent.length > 0 ? `${userAgent} (${defaultUserAgent})` : defaultUserAgent;\n    headers.set(HEADER_NAME_USER_AGENT, finalUserAgent);\n\n    // populate authorization header\n    if (this.token) {\n      headers.set(HEADER_NAME_AUTHORIZATION, `Bearer ${this.token}`);\n    }\n\n    // populate additional headers\n    // biome-ignore-start lint/suspicious/useIterableCallbackReturn: not used\n    if (additionalHeaders) {\n      if (additionalHeaders instanceof Headers) {\n        additionalHeaders.forEach((value, key) => headers.set(key, value as string));\n      } else if (Array.isArray(additionalHeaders)) {\n        additionalHeaders.forEach(([key, value]) => headers.set(key, value));\n      } else {\n        Object.entries(additionalHeaders).forEach(([key, value]) => headers.set(key, value as string));\n      }\n    }\n    // biome-ignore-end lint/suspicious/useIterableCallbackReturn: not used\n\n    // prepare body\n    let body: BodyInit | undefined;\n    if (skipSerialization(payload)) body = payload;\n    else if (payload instanceof MultipartFormDataBody) {\n      body = new Uint8Array(await payload.encode());\n      headers.set(HEADER_NAME_CONTENT_TYPE, payload.getContentType());\n    } else {\n      body = JSON.stringify(payload);\n      headers.set(HEADER_NAME_CONTENT_TYPE, 'application/json');\n    }\n\n    // make request\n    try {\n      const response = await fetch(url, { method, headers, body });\n      const { ok: successful, status, statusText } = response;\n\n      if (!successful) {\n        try {\n          const rawError = await response.text();\n          return { headers: response.headers, successful, status, statusText, error: JSON.parse(rawError) };\n        } catch (err) {\n          if (err instanceof SyntaxError) {\n            return {\n              headers: response.headers,\n              successful,\n              status,\n              statusText,\n              error: {\n                title: 'Unknown error',\n                status,\n                statusText: response.statusText,\n              },\n            };\n          }\n\n          const error: ProblemDetails = {\n            title: (err instanceof Error ? err.message : undefined) ?? 'Unknown error',\n            status: response.status,\n            statusText: response.statusText,\n          };\n\n          return { headers: response.headers, successful, status, statusText, error };\n        }\n      }\n\n      const contentLength = response.headers.get('content-length');\n      let data = contentLength && contentLength !== '0' ? ((await response.json()) as T) : undefined;\n      if (data && schema) {\n        const result = await schema.safeParseAsync(data);\n        if (!result.success) {\n          return {\n            headers: response.headers,\n            successful: false,\n            status,\n            statusText,\n            data,\n            error: {\n              title: 'application_error',\n              detail: 'Schema validation error',\n              errors: result.error.flatten().fieldErrors,\n              status: response.status,\n              statusText: response.statusText,\n            },\n          };\n        }\n        data = result.data;\n      }\n\n      return { headers: response.headers, data, successful, status, statusText };\n    } catch (err) {\n      return {\n        headers: new Headers(),\n        successful: false,\n        status: -1,\n        statusText: 'Application Error',\n        error: {\n          title: 'application_error',\n          detail: `Unable to fetch data. The request could not be resolved. ${err}`,\n        },\n      };\n    }\n  }\n\n  private makeUrl<T>(url: string, options?: InnerRequestOptions<T>): string {\n    if (url.startsWith('http://') || url.startsWith('https://')) return url;\n    const baseUrl = options?.baseUrl ?? this.baseUrl;\n    return `${baseUrl}${url}`;\n  }\n}\n\n/**\n * Whether to skip serialization of the payload.\n * @param payload The payload to check.\n * @returns true if the payload should not be serialized; otherwise, false.\n */\nfunction skipSerialization(\n  payload: InnerRequestOptions<never>['payload'],\n): payload is FormData | URLSearchParams | ReadableStream | Blob | ArrayBuffer | string | undefined {\n  return (\n    payload instanceof FormData ||\n    payload instanceof URLSearchParams ||\n    payload instanceof ReadableStream ||\n    payload instanceof Blob ||\n    payload instanceof ArrayBuffer ||\n    payload instanceof Buffer ||\n    typeof payload === 'string' ||\n    !payload\n  );\n}\n\n/** Http request error */\nexport class HttpRequestError extends Error {\n  constructor(\n    message: string,\n    public code: number,\n  ) {\n    super(message);\n  }\n}\n\nexport function isErrorTemporaryFailure(e?: { code?: string | number; message?: string } | null): boolean {\n  if (e instanceof HttpRequestError) {\n    // Check for common HTTP status codes that indicate a temporary failure\n    // See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status\n    switch (e.code) {\n      case 502:\n        return true; // 502 Bad Gateway\n      case 503:\n        return true; // 503 Service Unavailable\n      case 504:\n        return true; // 504 Gateway Timeout\n      default:\n        return false;\n    }\n  } else if (e?.code) {\n    // Check for Node.js system errors that indicate a temporary failure\n    // See: https://nodejs.org/api/errors.html#errors_common_system_errors\n    switch (e.code) {\n      case 'ETIMEDOUT':\n        return true; // Operation timed out\n      default:\n        return false;\n    }\n  } else {\n    return false;\n  }\n}\n"],"mappings":";;;AAAA,MAAa,kCAAkC;AAC/C,MAAa,2BAA2B;AACxC,MAAa,qBAAqB;AAClC,MAAa,yBAAyB;AACtC,MAAa,4BAA4B;;;;ACFzC,IAAa,wBAAb,MAAmC;CACjC,AAAQ,OAAO;CACf,AAAQ,WAAmB,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,UAAU,EAAE;CACrE,AAAQ,QAA0C,EAAE;CAEpD,MAAa,SAA0B;AACrC,MAAI,KAAK,MAAM,WAAW,EACxB,OAAM,IAAI,MAAM,oDAAoD;EAGtE,MAAMA,OAAiD,EAAE;AAEzD,OAAK,MAAM,QAAQ,KAAK,OAAO;AAE7B,QAAK,KAAK,KAAK,KAAK,SAAS,MAAM;AAGnC,QAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,QAAQ,CACrD,MAAK,KAAK,GAAG,IAAI,IAAI,MAAM,MAAM;AAEnC,QAAK,KAAK,OAAO;AAGjB,QAAK,KAAK,KAAK,KAAK;AACpB,QAAK,KAAK,OAAO;;AAGnB,OAAK,KAAK,KAAK,KAAK,SAAS,QAAQ;EAErC,MAAMC,OAAiB,EAAE;AACzB,OAAK,MAAM,QAAQ,KACjB,KAAI,gBAAgB,KAAM,MAAK,KAAK,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC,CAAC;WACjE,OAAO,SAAS,SAAU,MAAK,KAAK,OAAO,KAAK,MAAM,OAAO,CAAC;MAClE,MAAK,KAAK,KAAK;AAEtB,SAAO,OAAO,OAAO,KAAK;;CAG5B,AAAO,cAAsB;AAC3B,SAAO,KAAK;;CAGd,AAAO,iBAAyB;AAC9B,SAAO,GAAG,KAAK,KAAK,aAAa,KAAK;;CAGxC,AAAO,IAAI,MAAc,OAAe;EACtC,MAAM,OAAO,WAAW,MAAM,MAAM;AACpC,OAAK,MAAM,KAAK,KAAK;;CAGvB,AAAO,QAAQ,MAAc,MAAY;EACvC,MAAM,OAAO,WAAW,MAAM,MAAM,KAAK,MAAM,KAAK,KAAK;AACzD,OAAK,MAAM,KAAK,KAAK;;;AAUzB,SAAS,WACP,MACA,MACA,UACA,aAC2B;CAC3B,MAAMC,UAAkC,EAAE;AAC1C,SAAQ,mCAAmC,oBAAoB,KAAK,GAAG,WAAW,eAAe,SAAS,KAAK;AAC/G,KAAI,YAAa,SAAQ,4BAA4B;AACrD,QAAO;EAAE;EAAM;EAAS;EAAM;;;;;AC7DhC,MAAM,mBAAmB,SAAS,YAAY,KAAK,UAAU,GAAG,EAAE,IAAI;AAoEtE,IAAa,iBAAb,MAA4B;CAC1B,AAAiB;CACjB,AAAiB;CACjB,AAAiB;;;;;CAMjB,YAAY,EAAE,SAAS,SAAsC;AAC3D,OAAK,UAAU;AAEf,OAAK,UAAU,IAAI,QAAQ,GACxB,qBAAqB,oBACvB,CAAC;AAEF,OAAK,QAAQ;;CAGf,MAAM,IAAO,KAAa,SAAkC;AAC1D,SAAO,KAAK,QAAW;GACrB,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,QAAQ;GACR,GAAG;GACJ,CAAC;;CAGJ,MAAM,KAAQ,KAAa,SAAkC;AAC3D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,IAAO,KAAa,SAAkC;AAC1D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,MAAS,KAAa,SAAkC;AAC5D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,OAAU,KAAa,SAAkC;AAC7D,SAAO,KAAK,QAAW;GACrB,QAAQ;GACR,KAAK,KAAK,QAAQ,KAAK,QAAQ;GAC/B,GAAG;GACJ,CAAC;;CAGJ,MAAM,QAAW,SAAuE;EACtF,MAAM,EAAE,QAAQ,KAAK,SAAS,WAAW,SAAS,mBAAmB,WAAW;EAGhF,MAAM,UAAU,IAAI,QAAQ,KAAK,QAAQ;EACzC,MAAM,iBAAiB,aAAa,UAAU,SAAS,IAAI,GAAG,UAAU,IAAI,iBAAiB,KAAK;AAClG,UAAQ,IAAI,wBAAwB,eAAe;AAGnD,MAAI,KAAK,MACP,SAAQ,IAAI,2BAA2B,UAAU,KAAK,QAAQ;AAKhE,MAAI,kBACF,KAAI,6BAA6B,QAC/B,mBAAkB,SAAS,OAAO,QAAQ,QAAQ,IAAI,KAAK,MAAgB,CAAC;WACnE,MAAM,QAAQ,kBAAkB,CACzC,mBAAkB,SAAS,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,MAAM,CAAC;MAEpE,QAAO,QAAQ,kBAAkB,CAAC,SAAS,CAAC,KAAK,WAAW,QAAQ,IAAI,KAAK,MAAgB,CAAC;EAMlG,IAAIC;AACJ,MAAI,kBAAkB,QAAQ,CAAE,QAAO;WAC9B,mBAAmB,uBAAuB;AACjD,UAAO,IAAI,WAAW,MAAM,QAAQ,QAAQ,CAAC;AAC7C,WAAQ,IAAI,0BAA0B,QAAQ,gBAAgB,CAAC;SAC1D;AACL,UAAO,KAAK,UAAU,QAAQ;AAC9B,WAAQ,IAAI,0BAA0B,mBAAmB;;AAI3D,MAAI;GACF,MAAM,WAAW,MAAM,MAAM,KAAK;IAAE;IAAQ;IAAS;IAAM,CAAC;GAC5D,MAAM,EAAE,IAAI,YAAY,QAAQ,eAAe;AAE/C,OAAI,CAAC,WACH,KAAI;IACF,MAAM,WAAW,MAAM,SAAS,MAAM;AACtC,WAAO;KAAE,SAAS,SAAS;KAAS;KAAY;KAAQ;KAAY,OAAO,KAAK,MAAM,SAAS;KAAE;YAC1F,KAAK;AACZ,QAAI,eAAe,YACjB,QAAO;KACL,SAAS,SAAS;KAClB;KACA;KACA;KACA,OAAO;MACL,OAAO;MACP;MACA,YAAY,SAAS;MACtB;KACF;IAGH,MAAMC,QAAwB;KAC5B,QAAQ,eAAe,QAAQ,IAAI,UAAU,WAAc;KAC3D,QAAQ,SAAS;KACjB,YAAY,SAAS;KACtB;AAED,WAAO;KAAE,SAAS,SAAS;KAAS;KAAY;KAAQ;KAAY;KAAO;;GAI/E,MAAM,gBAAgB,SAAS,QAAQ,IAAI,iBAAiB;GAC5D,IAAI,OAAO,iBAAiB,kBAAkB,MAAQ,MAAM,SAAS,MAAM,GAAU;AACrF,OAAI,QAAQ,QAAQ;IAClB,MAAM,SAAS,MAAM,OAAO,eAAe,KAAK;AAChD,QAAI,CAAC,OAAO,QACV,QAAO;KACL,SAAS,SAAS;KAClB,YAAY;KACZ;KACA;KACA;KACA,OAAO;MACL,OAAO;MACP,QAAQ;MACR,QAAQ,OAAO,MAAM,SAAS,CAAC;MAC/B,QAAQ,SAAS;MACjB,YAAY,SAAS;MACtB;KACF;AAEH,WAAO,OAAO;;AAGhB,UAAO;IAAE,SAAS,SAAS;IAAS;IAAM;IAAY;IAAQ;IAAY;WACnE,KAAK;AACZ,UAAO;IACL,SAAS,IAAI,SAAS;IACtB,YAAY;IACZ,QAAQ;IACR,YAAY;IACZ,OAAO;KACL,OAAO;KACP,QAAQ,4DAA4D;KACrE;IACF;;;CAIL,AAAQ,QAAW,KAAa,SAA0C;AACxE,MAAI,IAAI,WAAW,UAAU,IAAI,IAAI,WAAW,WAAW,CAAE,QAAO;AAEpE,SAAO,GADS,SAAS,WAAW,KAAK,UACrB;;;;;;;;AASxB,SAAS,kBACP,SACkG;AAClG,QACE,mBAAmB,YACnB,mBAAmB,mBACnB,mBAAmB,kBACnB,mBAAmB,QACnB,mBAAmB,eACnB,mBAAmB,UACnB,OAAO,YAAY,YACnB,CAAC;;;AAKL,IAAa,mBAAb,cAAsC,MAAM;CAC1C,YACE,SACA,AAAOC,MACP;AACA,QAAM,QAAQ;EAFP;;;AAMX,SAAgB,wBAAwB,GAAkE;AACxG,KAAI,aAAa,iBAGf,SAAQ,EAAE,MAAV;EACE,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,QACE,QAAO;;UAEF,GAAG,KAGZ,SAAQ,EAAE,MAAV;EACE,KAAK,YACH,QAAO;EACT,QACE,QAAO;;KAGX,QAAO"}

package/dist/node/job-Crr4kh3e.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"job-Crr4kh3e.js","names":["matches: RegExpExecArray[]","updates: DependabotUpdate[]","registries: Record<string, DependabotRegistry>","referenced: string[]"],"sources":["../../src/dependabot/placeholder.ts","../../src/dependabot/config.ts","../../src/dependabot/job.ts"],"sourcesContent":["export type VariableFinderFn = (name: string) => string | undefined | Promise<string | undefined>;\n\nasync function convertPlaceholder({\n  input,\n  variableFinder,\n}: {\n  input?: string;\n  variableFinder: VariableFinderFn;\n}): Promise<string | undefined> {\n  if (!input) return undefined;\n\n  const matches: RegExpExecArray[] = extractPlaceholder(input);\n  let result = input;\n  for (const match of matches) {\n    const placeholder = match[0];\n    const name = match[1]!;\n    const value = (await variableFinder(name)) ?? placeholder;\n    result = result.replace(placeholder, value);\n  }\n  return result;\n}\n\nfunction extractPlaceholder(input: string) {\n  const regexp: RegExp = /\\${{\\s*([a-zA-Z_]+[a-zA-Z0-9._-]*)\\s*}}/g;\n\n  return matchAll(input, regexp);\n}\n\nfunction matchAll(input: string, regexp: RegExp, matches: Array<RegExpExecArray> = []) {\n  const matchIfAny = regexp.exec(input);\n  if (matchIfAny) {\n    matches.push(matchIfAny);\n\n    // recurse until no more matches\n    matchAll(input, regexp, matches);\n  }\n  return matches;\n}\n\nexport { convertPlaceholder, extractPlaceholder };\n","import * as yaml from 'js-yaml';\nimport { z } from 'zod/v4';\n\nimport { convertPlaceholder, type VariableFinderFn } from './placeholder';\n\nexport const DependabotRegistrySchema = z\n  .object({\n    type: z.enum([\n      'composer-repository',\n      'docker-registry',\n      'git',\n      'hex-organization',\n      'hex-repository',\n      'maven-repository',\n      'npm-registry',\n      'nuget-feed',\n      'python-index',\n      'rubygems-server',\n      'terraform-registry',\n    ]),\n    url: z.string().optional(),\n    username: z.string().optional(),\n    password: z.string().optional(),\n    key: z.string().optional(),\n    token: z.string().optional(),\n    'replaces-base': z.boolean().optional(),\n    host: z.string().optional(), // for terraform and composer only\n    registry: z.string().optional(), // for npm only\n    organization: z.string().optional(), // for hex-organisation only\n    repo: z.string().optional(), // for hex-repository only\n    'public-key-fingerprint': z.string().optional(), // for hex-repository only\n    'index-url': z.string().optional(), // for python-index only\n    'auth-key': z.string().optional(), // used by composer-repository, docker-registry, etc\n    'tenant-id': z.string().optional(), // can only be for azure related stuff, not sure\n    'client-id': z.string().optional(), // can only be for azure related stuff, not sure\n  })\n  // change underscore to dash in the registry key/type\n  .transform((value) => ({ ...value, type: value.type.replace('-', '_') }));\nexport type DependabotRegistry = z.infer<typeof DependabotRegistrySchema>;\n\nexport const DependabotGroupSchema = z.object({\n  // Define an identifier for the group to use in branch names and pull request titles.\n  // This must start and end with a letter, and can contain letters, pipes |, underscores _, or hyphens -.\n  IDENTIFIER: z\n    .string()\n    .check(\n      z.regex(/^[a-zA-Z][a-zA-Z0-9|_-]*[a-zA-Z]$/, {\n        message:\n          'Group identifier must start and end with a letter, and can contain letters, pipes |, underscores _, or hyphens -.',\n      }),\n    )\n    .optional(),\n  'applies-to': z.enum(['version-updates', 'security-updates']).optional(),\n  'dependency-type': z.enum(['development', 'production']).optional(),\n  patterns: z.string().array().optional(),\n  'exclude-patterns': z.string().array().optional(),\n  'update-types': z.enum(['major', 'minor', 'patch']).array().optional(),\n});\nexport type DependabotGroup = z.infer<typeof DependabotGroupSchema>;\n\nexport const DependabotAllowConditionSchema = z.object({\n  'dependency-name': z.string().optional(),\n  'dependency-type': z.enum(['direct', 'indirect', 'all', 'production', 'development']).optional(),\n  'update-type': z.enum(['all', 'security']).optional(),\n});\nexport type DependabotAllowCondition = z.infer<typeof DependabotAllowConditionSchema>;\n\nexport const DependabotIgnoreConditionSchema = z\n  .object({\n    'dependency-name': z.string().optional(),\n    versions: z.string().array().or(z.string()).optional(),\n    'update-types': z\n      .enum(['version-update:semver-major', 'version-update:semver-minor', 'version-update:semver-patch'])\n      .array()\n      .optional(),\n  })\n  .and(z.record(z.string(), z.any()));\nexport type DependabotIgnoreCondition = z.infer<typeof DependabotIgnoreConditionSchema>;\n\nexport const DependabotScheduleSchema = z.object({\n  interval: z.enum(['daily', 'weekly', 'monthly', 'quarterly', 'semiannually', 'yearly', 'cron']),\n\n  day: z\n    .enum(['sunday', 'monday', 'tuesday', 'wednesday', 'thursday', 'friday', 'saturday'])\n    .optional()\n    .default('monday'),\n\n  time: z\n    .string()\n    .default('02:00')\n    .check(z.regex(/^(0[0-9]|1[0-9]|2[0-3]):[0-5][0-9]$/, { message: 'Time must be in HH:MM format' }))\n    .optional(),\n\n  timezone: z\n    .string()\n    .optional()\n    .default('Etc/UTC')\n    .refine(\n      (value) => {\n        try {\n          // If tz is not a valid IANA name, this throws a RangeError\n          Intl.DateTimeFormat(undefined, { timeZone: value });\n          return true;\n        } catch {\n          return false;\n        }\n      },\n      { message: 'Invalid IANA time zone' },\n    ),\n  cronjob: z\n    .string()\n    .check(z.regex(/^\\S+ \\S+ \\S+ \\S+ \\S+$/, { message: 'Cronjob must be in standard cron format' }))\n    .optional(),\n});\nexport type DependabotSchedule = z.infer<typeof DependabotScheduleSchema>;\n\nexport const DependabotCommitMessageSchema = z.object({\n  prefix: z.string().optional(),\n  'prefix-development': z.string().optional(),\n  include: z.string().optional(),\n});\nexport type DependabotCommitMessage = z.infer<typeof DependabotCommitMessageSchema>;\n\nexport const DependabotCooldownSchema = z.object({\n  'default-days': z.number().optional(),\n  'semver-major-days': z.number().optional(),\n  'semver-minor-days': z.number().optional(),\n  'semver-patch-days': z.number().optional(),\n  include: z.string().array().optional(),\n  exclude: z.string().array().optional(),\n});\nexport type DependabotCooldown = z.infer<typeof DependabotCooldownSchema>;\n\nconst DependabotPullRequestBranchNameSchema = z.object({\n  separator: z.string().optional(),\n});\nexport type DependabotPullRequestBranchName = z.infer<typeof DependabotPullRequestBranchNameSchema>;\n\nexport const PackageEcosystemSchema = z.enum([\n  'bun',\n  'bundler',\n  'cargo',\n  'composer',\n  'devcontainers',\n  'docker',\n  'docker-compose',\n  'dotnet-sdk',\n  'helm',\n  'mix',\n  'elm',\n  'gitsubmodule',\n  'github-actions',\n  'gomod',\n  'gradle',\n  'maven',\n  'npm',\n  'nuget',\n  'pip',\n  'pub',\n  'swift',\n  'terraform',\n  'uv',\n\n  // Additional aliases, sometimes used for convenience\n  'pipenv',\n  'pip-compile',\n  'poetry',\n  'pnpm',\n  'yarn',\n]);\nexport type PackageEcosystem = z.infer<typeof PackageEcosystemSchema>;\n\nexport const VersioningStrategySchema = z.enum(['auto', 'increase', 'increase-if-necessary', 'lockfile-only', 'widen']);\nexport type VersioningStrategy = z.infer<typeof VersioningStrategySchema>;\n\nexport const DependabotUpdateSchema = z\n  .object({\n    'package-ecosystem': PackageEcosystemSchema,\n    directory: z.string().optional(),\n    directories: z.string().array().optional(),\n    allow: DependabotAllowConditionSchema.array().optional(),\n    assignees: z.string().array().optional(),\n    'commit-message': DependabotCommitMessageSchema.optional(),\n    cooldown: DependabotCooldownSchema.optional(),\n    groups: z.record(z.string(), DependabotGroupSchema).optional(),\n    ignore: DependabotIgnoreConditionSchema.array().optional(),\n    'insecure-external-code-execution': z.enum(['allow', 'deny']).optional(),\n    labels: z.string().array().optional(),\n    milestone: z.coerce.string().optional(),\n    'open-pull-requests-limit': z.number().check(z.int(), z.gte(0)).optional(),\n    'pull-request-branch-name': DependabotPullRequestBranchNameSchema.optional(),\n    'rebase-strategy': z.string().optional(),\n    registries: z.string().array().optional(),\n    schedule: DependabotScheduleSchema.optional(),\n    'target-branch': z.string().optional(),\n    vendor: z.boolean().optional(),\n    'versioning-strategy': VersioningStrategySchema.optional(),\n  })\n  .transform((value, { addIssue }) => {\n    // either 'directory' or 'directories' must be specified\n    if (!value.directory && (!value.directories || value.directories.length === 0)) {\n      addIssue(\"Either 'directory' or 'directories' must be specified in the dependency update configuration.\");\n    }\n\n    // validate that 'directory' does not contain glob patterns\n    if (value.directory && /[*?[\\]{}]/.test(value.directory)) {\n      addIssue(\"The 'directory' field must not include glob pattern.\");\n    }\n\n    value['open-pull-requests-limit'] ??= 5; // default to 5 if not specified\n\n    return value;\n  });\nexport type DependabotUpdate = z.infer<typeof DependabotUpdateSchema>;\n\n/**\n * Represents the dependabot.yaml configuration file options.\n * See: https://docs.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates#configuration-options-for-dependabotyml\n */\nexport const DependabotConfigSchema = z.object({\n  /**\n   * Mandatory. configuration file version.\n   **/\n  version: z.number().refine((v) => v === 2, { message: 'Only version 2 of dependabot is supported' }),\n\n  /**\n   * Mandatory. Configure how Dependabot updates the versions or project dependencies.\n   * Each entry configures the update settings for a particular package manager.\n   */\n  updates: DependabotUpdateSchema.array().check(\n    z.minLength(1, { message: 'At least one update configuration is required' }),\n  ),\n\n  /**\n   * Optional.\n   * Specify authentication details to access private package registries.\n   */\n  registries: z.record(z.string(), DependabotRegistrySchema).optional(),\n\n  /**\n   * Optional. Enables updates for ecosystems that are not yet generally available.\n   * https://docs.github.com/en/code-security/dependabot/working-with-dependabot/dependabot-options-reference#enable-beta-ecosystems-\n   */\n  'enable-beta-ecosystems': z.boolean().optional(),\n});\n\nexport type DependabotConfig = z.infer<typeof DependabotConfigSchema>;\n\nexport function parseUpdates(config: DependabotConfig, configPath: string): DependabotUpdate[] {\n  const updates: DependabotUpdate[] = [];\n\n  // Parse the value of each of the updates obtained from the file\n  for (const update of config.updates) {\n    // populate the 'ignore' conditions 'source' and 'updated-at' properties, if missing\n    // NOTE: 'source' and 'updated-at' are not documented in the dependabot.yml config docs, but are defined in the dependabot-core and dependabot-cli models.\n    //       Currently they don't appear to add much value to the update process, but are populated here for completeness.\n    if (update.ignore) {\n      for (const condition of update.ignore) {\n        condition.source ??= configPath;\n        // we don't know the last updated time, so we use the current time\n        condition['updated-at'] ??= new Date().toISOString();\n      }\n    }\n\n    updates.push(update);\n  }\n  return updates;\n}\n\nexport async function parseRegistries(\n  config: DependabotConfig,\n  variableFinder: VariableFinderFn,\n): Promise<Record<string, DependabotRegistry>> {\n  // Parse the value of each of the registries obtained from the config\n  const registries: Record<string, DependabotRegistry> = {};\n  for (const [key, registry] of Object.entries(config.registries || {})) {\n    const updated = { ...registry };\n    const { type } = updated;\n\n    // handle special fields for 'hex-organization' types\n    if (type === 'hex_organization' && !updated.organization) {\n      throw new Error(`The value 'organization' in dependency registry config '${type}' is missing`);\n    }\n\n    // handle special fields for 'hex-repository' types\n    if (type === 'hex_repository' && !updated.repo) {\n      throw new Error(`The value 'repo' in dependency registry config '${key}' is missing`);\n    }\n\n    // parse username, password, key, and token while replacing tokens where necessary\n    updated.username = await convertPlaceholder({ input: updated.username, variableFinder: variableFinder });\n    updated.password = await convertPlaceholder({ input: updated.password, variableFinder: variableFinder });\n    updated.key = await convertPlaceholder({ input: updated.key, variableFinder: variableFinder });\n    updated.token = await convertPlaceholder({ input: updated.token, variableFinder: variableFinder });\n\n    // parse the url\n    const url = updated.url;\n    if (!url && type !== 'hex_organization') {\n      throw new Error(`The value 'url' in dependency registry config '${key}' is missing`);\n    }\n    if (url) {\n      /*\n       * Some credentials do not use the 'url' property in the Ruby updater.\n       * The 'host' and 'registry' properties are derived from the given URL.\n       * The 'registry' property is derived from the 'url' by stripping off the scheme.\n       * The 'host' property is derived from the hostname of the 'url'.\n       *\n       * 'npm_registry' and 'docker_registry' use 'registry' only.\n       * 'terraform_registry' uses 'host' only.\n       * 'composer_repository' uses both 'url' and 'host'.\n       * 'python_index' uses 'index-url' instead of 'url'.\n       */\n\n      if (URL.canParse(url)) {\n        const parsedUrl = new URL(url);\n\n        const addRegistry = type === 'docker_registry' || type === 'npm_registry';\n        if (addRegistry) updated.registry = url.replace('https://', '').replace('http://', '');\n\n        const addHost = type === 'terraform_registry' || type === 'composer_repository';\n        if (addHost) updated.host = parsedUrl.hostname;\n      }\n\n      if (type === 'python_index') updated['index-url'] = url;\n\n      const removeUrl =\n        type === 'docker_registry' ||\n        type === 'npm_registry' ||\n        type === 'terraform_registry' ||\n        type === 'python_index';\n      if (removeUrl) delete updated.url; // remove the url if not needed\n    }\n\n    // add to list\n    registries[key] = updated;\n  }\n  return registries;\n}\n\nexport function validateConfiguration(updates: DependabotUpdate[], registries: Record<string, DependabotRegistry>) {\n  const configured = Object.keys(registries);\n  const referenced: string[] = [];\n  for (const u of updates) referenced.push(...(u.registries ?? []));\n\n  // ensure there are no configured registries that have not been referenced\n  const missingConfiguration = referenced.filter((el) => !configured.includes(el));\n  if (missingConfiguration.length > 0) {\n    throw new Error(\n      `Referenced registries: '${missingConfiguration.join(',')}' have not been configured in the root of dependabot.yml`,\n    );\n  }\n\n  // ensure there are no registries referenced but not configured\n  const missingReferences = configured.filter((el) => !referenced.includes(el));\n  if (missingReferences.length > 0) {\n    throw new Error(`Registries: '${missingReferences.join(',')}' have not been referenced by any update`);\n  }\n}\n\n/**\n * Possible paths to the dependabot config file.\n * Remember to prefix with a forward slash when querying API endpoints or where necessary.\n */\nexport const POSSIBLE_CONFIG_FILE_PATHS = [\n  '.azuredevops/dependabot.yml',\n  '.azuredevops/dependabot.yaml',\n  '.github/dependabot.yaml',\n  '.github/dependabot.yml',\n];\n\n/**\n * Parse the contents of a dependabot config YAML file\n * @returns {DependabotConfig} config - the dependabot configuration\n */\nexport async function parseDependabotConfig({\n  configContents,\n  configPath,\n  variableFinder,\n}: {\n  configContents: string;\n  configPath: string;\n  variableFinder: VariableFinderFn;\n}): Promise<DependabotConfig> {\n  // Load the config\n  const loadedConfig = yaml.load(configContents);\n  if (loadedConfig === null || typeof loadedConfig !== 'object') {\n    throw new Error('Invalid dependabot config object');\n  }\n\n  // Parse the config\n  const config = await DependabotConfigSchema.parseAsync(loadedConfig);\n  const updates = parseUpdates(config, configPath);\n  const registries = await parseRegistries(config, variableFinder);\n  validateConfiguration(updates, registries);\n\n  return { ...config, updates, registries };\n}\n","import { z } from 'zod/v4';\nimport { DependabotCooldownSchema } from './config';\n\n// we use nullish() because it does optional() and allows the value to be set to null\n\nexport const DependabotCredentialSchema = z.record(z.string(), z.any());\nexport type DependabotCredential = z.infer<typeof DependabotCredentialSchema>;\n\nexport const CertificateAuthoritySchema = z.object({\n  cert: z.string(),\n  key: z.string(),\n});\nexport type CertificateAuthority = z.infer<typeof CertificateAuthoritySchema>;\n\nexport const DependabotProxyConfigSchema = z.object({\n  all_credentials: DependabotCredentialSchema.array(),\n  ca: CertificateAuthoritySchema,\n});\nexport type DependabotProxyConfig = z.infer<typeof DependabotProxyConfigSchema>;\n\nexport const DependabotSourceProviderSchema = z.enum(['azure']);\nexport type DependabotSourceProvider = z.infer<typeof DependabotSourceProviderSchema>;\n\nexport const DependabotSourceSchema = z.object({\n  provider: DependabotSourceProviderSchema,\n  repo: z.string(),\n  directory: z.string().nullish(),\n  directories: z.string().array().nullish(),\n  branch: z.string().nullish(),\n  commit: z.string().nullish(),\n  hostname: z.string().nullish(), // Must be provided if api-endpoint is\n  'api-endpoint': z.string().nullish(), // Must be provided if hostname is\n  // TODO: refine to ensure either directory or directories is provided\n  // TODO: refine to ensure either both hostname and api-endpoint have a value or both are undefined\n});\nexport type DependabotSource = z.infer<typeof DependabotSourceSchema>;\n\nexport const DependabotExistingPRSchema = z.object({\n  'dependency-name': z.string(),\n  'dependency-version': z.string().nullish(),\n  directory: z.string().nullish(),\n  removed: z.boolean().nullish(),\n});\nexport type DependabotExistingPR = z.infer<typeof DependabotExistingPRSchema>;\n\nexport const DependabotExistingGroupPRSchema = z.object({\n  'dependency-group-name': z.string(),\n  dependencies: DependabotExistingPRSchema.array(),\n});\nexport type DependabotExistingGroupPR = z.infer<typeof DependabotExistingGroupPRSchema>;\n\nexport const DependabotAllowedSchema = z.object({\n  'dependency-name': z.string().nullish(),\n  'dependency-type': z.string().nullish(),\n  'update-type': z.enum(['all', 'security']).optional(),\n});\nexport type DependabotAllowed = z.infer<typeof DependabotAllowedSchema>;\n\nexport const DependabotGroupRuleJobSchema = z.object({\n  patterns: z.string().array().nullish(),\n  'exclude-patterns': z.string().array().nullish(),\n  'dependency-type': z.string().nullish(),\n  'update-types': z.string().array().nullish(),\n});\nexport type DependabotGroupRuleJob = z.infer<typeof DependabotGroupRuleJobSchema>;\n\nexport const DependabotGroupJobSchema = z.object({\n  name: z.string(),\n  'applies-to': z.string().nullish(),\n  rules: DependabotGroupRuleJobSchema,\n});\nexport type DependabotGroupJob = z.infer<typeof DependabotGroupJobSchema>;\n\nexport const DependabotConditionSchema = z.object({\n  'dependency-name': z.string(),\n  source: z.string().nullish(),\n  'update-types': z.string().array().nullish(),\n  'updated-at': z.coerce.string().nullish(),\n  'version-requirement': z.string().nullish(),\n});\nexport type DependabotCondition = z.infer<typeof DependabotConditionSchema>;\n\nexport const DependabotSecurityAdvisorySchema = z.object({\n  'dependency-name': z.string(),\n  'affected-versions': z.string().array(),\n  'patched-versions': z.string().array().nullish(), // may not be patched as of yet\n  'unaffected-versions': z.string().array(),\n});\nexport type DependabotSecurityAdvisory = z.infer<typeof DependabotSecurityAdvisorySchema>;\n\nexport const DependabotRequirementSourceSchema = z.record(z.string(), z.any());\nexport type DependabotRequirementSource = z.infer<typeof DependabotRequirementSourceSchema>;\n\nexport const DependabotRequirementSchema = z.object({\n  file: z.string().nullish(), // e.g. 'requirements.txt' or '/Root.csproj'\n  groups: z.string().array().nullish(), // e.g. ['dependencies']\n  metadata: z.record(z.string(), z.any()).nullish(),\n  requirement: z.string().nullish(), // e.g. '==3.2.0' or '8.1.0'\n  source: DependabotRequirementSourceSchema.nullish(),\n  version: z.string().nullish(),\n  'previous-version': z.string().nullish(),\n});\nexport type DependabotRequirement = z.infer<typeof DependabotRequirementSchema>;\n\nexport const DependabotDependencySchema = z.object({\n  name: z.string(), // e.g. 'django' or 'GraphQL.Server.Ui.Voyager'\n  'previous-requirements': DependabotRequirementSchema.array().nullish(),\n  'previous-version': z.string().nullish(),\n  version: z.string().nullish(), // e.g. '5.0.1' or '8.1.0'\n  requirements: DependabotRequirementSchema.array().nullish(),\n  removed: z.boolean().nullish(),\n  directory: z.string().nullish(),\n});\nexport type DependabotDependency = z.infer<typeof DependabotDependencySchema>;\n\nexport const DependabotCommitOptionsSchema = z.object({\n  prefix: z.string().nullish(),\n  'prefix-development': z.string().nullish(),\n  'include-scope': z.boolean().nullish(),\n});\nexport type DependabotCommitOptions = z.infer<typeof DependabotCommitOptionsSchema>;\n\nexport const DependabotExperimentsSchema = z.record(z.string(), z.union([z.string(), z.boolean()]));\nexport type DependabotExperiments = z.infer<typeof DependabotExperimentsSchema>;\n\nexport const DependabotPackageManagerSchema = z.enum([\n  'bun',\n  'bundler',\n  'cargo',\n  'composer',\n  'devcontainers',\n  'docker',\n  'docker_compose', //  // ecosystem(s): 'docker-compose',\n  'dotnet_sdk', // ecosystem(s): 'dotnet-sdk'\n  'helm',\n  'hex', // ecosystem(s): 'mix'\n  'elm',\n  'submodules', // ecosystem(s): 'gitsubmodule'\n  'github_actions', // ecosystem(s): 'github-actions'\n  'go_modules', // ecosystem(s): 'gomod'\n  'gradle',\n  'maven',\n  'npm_and_yarn', // ecosystem(s): 'npm', 'pnpm', 'yarn'\n  'nuget',\n  'pip', // ecosystem(s): 'pipenv', 'pip-compile', 'poetry'\n  'pub',\n  'swift',\n  'terraform',\n  'uv',\n]);\nexport type DependabotPackageManager = z.infer<typeof DependabotPackageManagerSchema>;\n\nexport const DependabotCommandSchema = z.enum(['graph', 'version', 'recreate']);\nexport type DependabotCommand = z.infer<typeof DependabotCommandSchema>;\n\n// See: https://github.com/dependabot/cli/blob/main/internal/model/job.go\n//      https://github.com/dependabot/dependabot-core/blob/main/updater/lib/dependabot/job.rb\nexport const DependabotJobConfigSchema = z.object({\n  id: z.number().optional(),\n  command: DependabotCommandSchema.optional(),\n  'package-manager': DependabotPackageManagerSchema,\n  'allowed-updates': DependabotAllowedSchema.array(),\n  debug: z.boolean().nullable(),\n  'dependency-groups': DependabotGroupJobSchema.array().nullish(),\n  dependencies: z.string().array().nullable(),\n  'dependency-group-to-refresh': z.string().nullish(),\n  'existing-pull-requests': DependabotExistingPRSchema.array().array(),\n  'existing-group-pull-requests': DependabotExistingGroupPRSchema.array(),\n  experiments: DependabotExperimentsSchema,\n  'ignore-conditions': DependabotConditionSchema.array(),\n  'lockfile-only': z.boolean(),\n  'requirements-update-strategy': z.string().nullable(),\n  'security-advisories': DependabotSecurityAdvisorySchema.array(),\n  'security-updates-only': z.boolean(),\n  source: DependabotSourceSchema,\n  'update-subdependencies': z.boolean(),\n  'updating-a-pull-request': z.boolean(),\n  'vendor-dependencies': z.boolean(),\n  'reject-external-code': z.boolean().nullish(),\n  'repo-private': z.boolean(),\n  'commit-message-options': DependabotCommitOptionsSchema,\n  'credentials-metadata': DependabotCredentialSchema.array().nullish(),\n  'max-updater-run-time': z.int().nullish(),\n  cooldown: DependabotCooldownSchema.nullish(),\n  'proxy-log-response-body-on-auth-failure': z.boolean().nullish(),\n  'enable-beta-ecosystems': z.boolean().nullish(),\n  'multi-ecosystem-update': z.boolean().nullish(),\n});\nexport type DependabotJobConfig = z.infer<typeof DependabotJobConfigSchema>;\n\nexport const DependabotJobFileSchema = z.object({\n  job: DependabotJobConfigSchema,\n});\nexport type DependabotJobFile = z.infer<typeof DependabotJobFileSchema>;\n\n// Code below is borrowed and adapted from dependabot-action\n\n// biome-ignore-start lint/suspicious/noExplicitAny: generic\nexport type FetchedFiles = {\n  base_commit_sha: string;\n  dependency_files: any[];\n  base64_dependency_files: any[];\n};\n// biome-ignore-end lint/suspicious/noExplicitAny: generic\n\nexport type FileFetcherInput = {\n  job: DependabotJobConfig;\n};\n\nexport type FileUpdaterInput = FetchedFiles & {\n  job: DependabotJobConfig;\n};\n"],"mappings":";;;;AAEA,eAAe,mBAAmB,EAChC,OACA,kBAI8B;AAC9B,KAAI,CAAC,MAAO,QAAO;CAEnB,MAAMA,UAA6B,mBAAmB,MAAM;CAC5D,IAAI,SAAS;AACb,MAAK,MAAM,SAAS,SAAS;EAC3B,MAAM,cAAc,MAAM;EAC1B,MAAM,OAAO,MAAM;EACnB,MAAM,QAAS,MAAM,eAAe,KAAK,IAAK;AAC9C,WAAS,OAAO,QAAQ,aAAa,MAAM;;AAE7C,QAAO;;AAGT,SAAS,mBAAmB,OAAe;AAGzC,QAAO,SAAS,OAFO,2CAEO;;AAGhC,SAAS,SAAS,OAAe,QAAgB,UAAkC,EAAE,EAAE;CACrF,MAAM,aAAa,OAAO,KAAK,MAAM;AACrC,KAAI,YAAY;AACd,UAAQ,KAAK,WAAW;AAGxB,WAAS,OAAO,QAAQ,QAAQ;;AAElC,QAAO;;;;;AC/BT,MAAa,2BAA2B,EACrC,OAAO;CACN,MAAM,EAAE,KAAK;EACX;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,iBAAiB,EAAE,SAAS,CAAC,UAAU;CACvC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,cAAc,EAAE,QAAQ,CAAC,UAAU;CACnC,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC3B,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,aAAa,EAAE,QAAQ,CAAC,UAAU;CAClC,aAAa,EAAE,QAAQ,CAAC,UAAU;CACnC,CAAC,CAED,WAAW,WAAW;CAAE,GAAG;CAAO,MAAM,MAAM,KAAK,QAAQ,KAAK,IAAI;CAAE,EAAE;AAG3E,MAAa,wBAAwB,EAAE,OAAO;CAG5C,YAAY,EACT,QAAQ,CACR,MACC,EAAE,MAAM,qCAAqC,EAC3C,SACE,qHACH,CAAC,CACH,CACA,UAAU;CACb,cAAc,EAAE,KAAK,CAAC,mBAAmB,mBAAmB,CAAC,CAAC,UAAU;CACxE,mBAAmB,EAAE,KAAK,CAAC,eAAe,aAAa,CAAC,CAAC,UAAU;CACnE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACvC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACjD,gBAAgB,EAAE,KAAK;EAAC;EAAS;EAAS;EAAQ,CAAC,CAAC,OAAO,CAAC,UAAU;CACvE,CAAC;AAGF,MAAa,iCAAiC,EAAE,OAAO;CACrD,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,mBAAmB,EAAE,KAAK;EAAC;EAAU;EAAY;EAAO;EAAc;EAAc,CAAC,CAAC,UAAU;CAChG,eAAe,EAAE,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC,UAAU;CACtD,CAAC;AAGF,MAAa,kCAAkC,EAC5C,OAAO;CACN,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtD,gBAAgB,EACb,KAAK;EAAC;EAA+B;EAA+B;EAA8B,CAAC,CACnG,OAAO,CACP,UAAU;CACd,CAAC,CACD,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC;AAGrC,MAAa,2BAA2B,EAAE,OAAO;CAC/C,UAAU,EAAE,KAAK;EAAC;EAAS;EAAU;EAAW;EAAa;EAAgB;EAAU;EAAO,CAAC;CAE/F,KAAK,EACF,KAAK;EAAC;EAAU;EAAU;EAAW;EAAa;EAAY;EAAU;EAAW,CAAC,CACpF,UAAU,CACV,QAAQ,SAAS;CAEpB,MAAM,EACH,QAAQ,CACR,QAAQ,QAAQ,CAChB,MAAM,EAAE,MAAM,uCAAuC,EAAE,SAAS,gCAAgC,CAAC,CAAC,CAClG,UAAU;CAEb,UAAU,EACP,QAAQ,CACR,UAAU,CACV,QAAQ,UAAU,CAClB,QACE,UAAU;AACT,MAAI;AAEF,QAAK,eAAe,QAAW,EAAE,UAAU,OAAO,CAAC;AACnD,UAAO;UACD;AACN,UAAO;;IAGX,EAAE,SAAS,0BAA0B,CACtC;CACH,SAAS,EACN,QAAQ,CACR,MAAM,EAAE,MAAM,yBAAyB,EAAE,SAAS,2CAA2C,CAAC,CAAC,CAC/F,UAAU;CACd,CAAC;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,sBAAsB,EAAE,QAAQ,CAAC,UAAU;CAC3C,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC/B,CAAC;AAGF,MAAa,2BAA2B,EAAE,OAAO;CAC/C,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACtC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACvC,CAAC;AAGF,MAAM,wCAAwC,EAAE,OAAO,EACrD,WAAW,EAAE,QAAQ,CAAC,UAAU,EACjC,CAAC;AAGF,MAAa,yBAAyB,EAAE,KAAK;CAC3C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,2BAA2B,EAAE,KAAK;CAAC;CAAQ;CAAY;CAAyB;CAAiB;CAAQ,CAAC;AAGvH,MAAa,yBAAyB,EACnC,OAAO;CACN,qBAAqB;CACrB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CAC1C,OAAO,+BAA+B,OAAO,CAAC,UAAU;CACxD,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACxC,kBAAkB,8BAA8B,UAAU;CAC1D,UAAU,yBAAyB,UAAU;CAC7C,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC,UAAU;CAC9D,QAAQ,gCAAgC,OAAO,CAAC,UAAU;CAC1D,oCAAoC,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,CAAC,UAAU;CACxE,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACrC,WAAW,EAAE,OAAO,QAAQ,CAAC,UAAU;CACvC,4BAA4B,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU;CAC1E,4BAA4B,sCAAsC,UAAU;CAC5E,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CACzC,UAAU,yBAAyB,UAAU;CAC7C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,QAAQ,EAAE,SAAS,CAAC,UAAU;CAC9B,uBAAuB,yBAAyB,UAAU;CAC3D,CAAC,CACD,WAAW,OAAO,EAAE,eAAe;AAElC,KAAI,CAAC,MAAM,cAAc,CAAC,MAAM,eAAe,MAAM,YAAY,WAAW,GAC1E,UAAS,gGAAgG;AAI3G,KAAI,MAAM,aAAa,YAAY,KAAK,MAAM,UAAU,CACtD,UAAS,uDAAuD;AAGlE,OAAM,gCAAgC;AAEtC,QAAO;EACP;;;;;AAOJ,MAAa,yBAAyB,EAAE,OAAO;CAI7C,SAAS,EAAE,QAAQ,CAAC,QAAQ,MAAM,MAAM,GAAG,EAAE,SAAS,6CAA6C,CAAC;CAMpG,SAAS,uBAAuB,OAAO,CAAC,MACtC,EAAE,UAAU,GAAG,EAAE,SAAS,iDAAiD,CAAC,CAC7E;CAMD,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,UAAU;CAMrE,0BAA0B,EAAE,SAAS,CAAC,UAAU;CACjD,CAAC;AAIF,SAAgB,aAAa,QAA0B,YAAwC;CAC7F,MAAMC,UAA8B,EAAE;AAGtC,MAAK,MAAM,UAAU,OAAO,SAAS;AAInC,MAAI,OAAO,OACT,MAAK,MAAM,aAAa,OAAO,QAAQ;AACrC,aAAU,WAAW;AAErB,aAAU,mCAAkB,IAAI,MAAM,EAAC,aAAa;;AAIxD,UAAQ,KAAK,OAAO;;AAEtB,QAAO;;AAGT,eAAsB,gBACpB,QACA,gBAC6C;CAE7C,MAAMC,aAAiD,EAAE;AACzD,MAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,OAAO,cAAc,EAAE,CAAC,EAAE;EACrE,MAAM,UAAU,EAAE,GAAG,UAAU;EAC/B,MAAM,EAAE,SAAS;AAGjB,MAAI,SAAS,sBAAsB,CAAC,QAAQ,aAC1C,OAAM,IAAI,MAAM,2DAA2D,KAAK,cAAc;AAIhG,MAAI,SAAS,oBAAoB,CAAC,QAAQ,KACxC,OAAM,IAAI,MAAM,mDAAmD,IAAI,cAAc;AAIvF,UAAQ,WAAW,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAA0B;GAAgB,CAAC;AACxG,UAAQ,WAAW,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAA0B;GAAgB,CAAC;AACxG,UAAQ,MAAM,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAAqB;GAAgB,CAAC;AAC9F,UAAQ,QAAQ,MAAM,mBAAmB;GAAE,OAAO,QAAQ;GAAuB;GAAgB,CAAC;EAGlG,MAAM,MAAM,QAAQ;AACpB,MAAI,CAAC,OAAO,SAAS,mBACnB,OAAM,IAAI,MAAM,kDAAkD,IAAI,cAAc;AAEtF,MAAI,KAAK;AAaP,OAAI,IAAI,SAAS,IAAI,EAAE;IACrB,MAAM,YAAY,IAAI,IAAI,IAAI;AAG9B,QADoB,SAAS,qBAAqB,SAAS,eAC1C,SAAQ,WAAW,IAAI,QAAQ,YAAY,GAAG,CAAC,QAAQ,WAAW,GAAG;AAGtF,QADgB,SAAS,wBAAwB,SAAS,sBAC7C,SAAQ,OAAO,UAAU;;AAGxC,OAAI,SAAS,eAAgB,SAAQ,eAAe;AAOpD,OAJE,SAAS,qBACT,SAAS,kBACT,SAAS,wBACT,SAAS,eACI,QAAO,QAAQ;;AAIhC,aAAW,OAAO;;AAEpB,QAAO;;AAGT,SAAgB,sBAAsB,SAA6B,YAAgD;CACjH,MAAM,aAAa,OAAO,KAAK,WAAW;CAC1C,MAAMC,aAAuB,EAAE;AAC/B,MAAK,MAAM,KAAK,QAAS,YAAW,KAAK,GAAI,EAAE,cAAc,EAAE,CAAE;CAGjE,MAAM,uBAAuB,WAAW,QAAQ,OAAO,CAAC,WAAW,SAAS,GAAG,CAAC;AAChF,KAAI,qBAAqB,SAAS,EAChC,OAAM,IAAI,MACR,2BAA2B,qBAAqB,KAAK,IAAI,CAAC,0DAC3D;CAIH,MAAM,oBAAoB,WAAW,QAAQ,OAAO,CAAC,WAAW,SAAS,GAAG,CAAC;AAC7E,KAAI,kBAAkB,SAAS,EAC7B,OAAM,IAAI,MAAM,gBAAgB,kBAAkB,KAAK,IAAI,CAAC,0CAA0C;;;;;;AAQ1G,MAAa,6BAA6B;CACxC;CACA;CACA;CACA;CACD;;;;;AAMD,eAAsB,sBAAsB,EAC1C,gBACA,YACA,kBAK4B;CAE5B,MAAM,eAAe,KAAK,KAAK,eAAe;AAC9C,KAAI,iBAAiB,QAAQ,OAAO,iBAAiB,SACnD,OAAM,IAAI,MAAM,mCAAmC;CAIrD,MAAM,SAAS,MAAM,uBAAuB,WAAW,aAAa;CACpE,MAAM,UAAU,aAAa,QAAQ,WAAW;CAChD,MAAM,aAAa,MAAM,gBAAgB,QAAQ,eAAe;AAChE,uBAAsB,SAAS,WAAW;AAE1C,QAAO;EAAE,GAAG;EAAQ;EAAS;EAAY;;;;;ACtY3C,MAAa,6BAA6B,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC;AAGvE,MAAa,6BAA6B,EAAE,OAAO;CACjD,MAAM,EAAE,QAAQ;CAChB,KAAK,EAAE,QAAQ;CAChB,CAAC;AAGF,MAAa,8BAA8B,EAAE,OAAO;CAClD,iBAAiB,2BAA2B,OAAO;CACnD,IAAI;CACL,CAAC;AAGF,MAAa,iCAAiC,EAAE,KAAK,CAAC,QAAQ,CAAC;AAG/D,MAAa,yBAAyB,EAAE,OAAO;CAC7C,UAAU;CACV,MAAM,EAAE,QAAQ;CAChB,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACzC,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,UAAU,EAAE,QAAQ,CAAC,SAAS;CAC9B,gBAAgB,EAAE,QAAQ,CAAC,SAAS;CAGrC,CAAC;AAGF,MAAa,6BAA6B,EAAE,OAAO;CACjD,mBAAmB,EAAE,QAAQ;CAC7B,sBAAsB,EAAE,QAAQ,CAAC,SAAS;CAC1C,WAAW,EAAE,QAAQ,CAAC,SAAS;CAC/B,SAAS,EAAE,SAAS,CAAC,SAAS;CAC/B,CAAC;AAGF,MAAa,kCAAkC,EAAE,OAAO;CACtD,yBAAyB,EAAE,QAAQ;CACnC,cAAc,2BAA2B,OAAO;CACjD,CAAC;AAGF,MAAa,0BAA0B,EAAE,OAAO;CAC9C,mBAAmB,EAAE,QAAQ,CAAC,SAAS;CACvC,mBAAmB,EAAE,QAAQ,CAAC,SAAS;CACvC,eAAe,EAAE,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC,UAAU;CACtD,CAAC;AAGF,MAAa,+BAA+B,EAAE,OAAO;CACnD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACtC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAChD,mBAAmB,EAAE,QAAQ,CAAC,SAAS;CACvC,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAC7C,CAAC;AAGF,MAAa,2BAA2B,EAAE,OAAO;CAC/C,MAAM,EAAE,QAAQ;CAChB,cAAc,EAAE,QAAQ,CAAC,SAAS;CAClC,OAAO;CACR,CAAC;AAGF,MAAa,4BAA4B,EAAE,OAAO;CAChD,mBAAmB,EAAE,QAAQ;CAC7B,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAC5C,cAAc,EAAE,OAAO,QAAQ,CAAC,SAAS;CACzC,uBAAuB,EAAE,QAAQ,CAAC,SAAS;CAC5C,CAAC;AAGF,MAAa,mCAAmC,EAAE,OAAO;CACvD,mBAAmB,EAAE,QAAQ;CAC7B,qBAAqB,EAAE,QAAQ,CAAC,OAAO;CACvC,oBAAoB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CAChD,uBAAuB,EAAE,QAAQ,CAAC,OAAO;CAC1C,CAAC;AAGF,MAAa,oCAAoC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC;AAG9E,MAAa,8BAA8B,EAAE,OAAO;CAClD,MAAM,EAAE,QAAQ,CAAC,SAAS;CAC1B,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS;CACpC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAC,CAAC,SAAS;CACjD,aAAa,EAAE,QAAQ,CAAC,SAAS;CACjC,QAAQ,kCAAkC,SAAS;CACnD,SAAS,EAAE,QAAQ,CAAC,SAAS;CAC7B,oBAAoB,EAAE,QAAQ,CAAC,SAAS;CACzC,CAAC;AAGF,MAAa,6BAA6B,EAAE,OAAO;CACjD,MAAM,EAAE,QAAQ;CAChB,yBAAyB,4BAA4B,OAAO,CAAC,SAAS;CACtE,oBAAoB,EAAE,QAAQ,CAAC,SAAS;CACxC,SAAS,EAAE,QAAQ,CAAC,SAAS;CAC7B,cAAc,4BAA4B,OAAO,CAAC,SAAS;CAC3D,SAAS,EAAE,SAAS,CAAC,SAAS;CAC9B,WAAW,EAAE,QAAQ,CAAC,SAAS;CAChC,CAAC;AAGF,MAAa,gCAAgC,EAAE,OAAO;CACpD,QAAQ,EAAE,QAAQ,CAAC,SAAS;CAC5B,sBAAsB,EAAE,QAAQ,CAAC,SAAS;CAC1C,iBAAiB,EAAE,SAAS,CAAC,SAAS;CACvC,CAAC;AAGF,MAAa,8BAA8B,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;AAGnG,MAAa,iCAAiC,EAAE,KAAK;CACnD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAGF,MAAa,0BAA0B,EAAE,KAAK;CAAC;CAAS;CAAW;CAAW,CAAC;AAK/E,MAAa,4BAA4B,EAAE,OAAO;CAChD,IAAI,EAAE,QAAQ,CAAC,UAAU;CACzB,SAAS,wBAAwB,UAAU;CAC3C,mBAAmB;CACnB,mBAAmB,wBAAwB,OAAO;CAClD,OAAO,EAAE,SAAS,CAAC,UAAU;CAC7B,qBAAqB,yBAAyB,OAAO,CAAC,SAAS;CAC/D,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU;CAC3C,+BAA+B,EAAE,QAAQ,CAAC,SAAS;CACnD,0BAA0B,2BAA2B,OAAO,CAAC,OAAO;CACpE,gCAAgC,gCAAgC,OAAO;CACvE,aAAa;CACb,qBAAqB,0BAA0B,OAAO;CACtD,iBAAiB,EAAE,SAAS;CAC5B,gCAAgC,EAAE,QAAQ,CAAC,UAAU;CACrD,uBAAuB,iCAAiC,OAAO;CAC/D,yBAAyB,EAAE,SAAS;CACpC,QAAQ;CACR,0BAA0B,EAAE,SAAS;CACrC,2BAA2B,EAAE,SAAS;CACtC,uBAAuB,EAAE,SAAS;CAClC,wBAAwB,EAAE,SAAS,CAAC,SAAS;CAC7C,gBAAgB,EAAE,SAAS;CAC3B,0BAA0B;CAC1B,wBAAwB,2BAA2B,OAAO,CAAC,SAAS;CACpE,wBAAwB,EAAE,KAAK,CAAC,SAAS;CACzC,UAAU,yBAAyB,SAAS;CAC5C,2CAA2C,EAAE,SAAS,CAAC,SAAS;CAChE,0BAA0B,EAAE,SAAS,CAAC,SAAS;CAC/C,0BAA0B,EAAE,SAAS,CAAC,SAAS;CAChD,CAAC;AAGF,MAAa,0BAA0B,EAAE,OAAO,EAC9C,KAAK,2BACN,CAAC"}

package/dist/node/logger-bWnHxtAf.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"logger-bWnHxtAf.js","names":["options: LoggerOptions","destination: DestinationStream | undefined"],"sources":["../../src/logger.ts"],"sourcesContent":["import pino, { type DestinationStream, type Logger, type LoggerOptions } from 'pino';\nimport { PinoPretty } from 'pino-pretty';\n\nimport { environment } from '@/environment';\n\nconst options: LoggerOptions = {\n  level: process.env.LOG_LEVEL || (environment.production ? 'warn' : 'debug'),\n  base: {\n    env: environment.name,\n    sha: environment.sha,\n    branch: environment.branch,\n  },\n};\n\n// pino-pretty has issues with nextjs and we cannot fix in webpack because we are moving to turbopack\n// https://github.com/pinojs/pino/issues/1841#issuecomment-1815284760\n// https://github.com/vercel/next.js/discussions/46987\nconst destination: DestinationStream | undefined = environment.production\n  ? undefined\n  : PinoPretty({\n      colorize: true,\n      // https://github.com/pinojs/pino-pretty#usage-with-jest\n      sync: environment.test,\n    });\nexport const logger = pino(options, destination);\n\n/** Options for creating a logger. */\nexport type CreateOptions = {\n  /**\n   * The name of the application.\n   * @example `website`\n   */\n  name: string;\n};\n\n/**\n * Creates a logger for the application.\n * @param options - The options for creating the logger.\n * @returns The created logger.\n */\nexport function create({ name }: CreateOptions): Logger {\n  const application = `paklo-${name}`;\n  return logger.child({ application }, { level: environment.production ? 'warn' : 'debug' });\n}\n"],"mappings":";;;;;AAKA,MAAMA,UAAyB;CAC7B,OAAO,QAAQ,IAAI,cAAc,YAAY,aAAa,SAAS;CACnE,MAAM;EACJ,KAAK,YAAY;EACjB,KAAK,YAAY;EACjB,QAAQ,YAAY;EACrB;CACF;AAKD,MAAMC,cAA6C,YAAY,aAC3D,SACA,WAAW;CACT,UAAU;CAEV,MAAM,YAAY;CACnB,CAAC;AACN,MAAa,SAAS,KAAK,SAAS,YAAY;;;;;;AAgBhD,SAAgB,OAAO,EAAE,QAA+B;CACtD,MAAM,cAAc,SAAS;AAC7B,QAAO,OAAO,MAAM,EAAE,aAAa,EAAE,EAAE,OAAO,YAAY,aAAa,SAAS,SAAS,CAAC"}

package/dist/node/logger.d.ts

@@ -1,23 +0,0 @@
-import pino, { Logger } from "pino";
-
-//#region src/logger.d.ts
-declare const logger: pino.Logger<never, boolean>;
-/** Options for creating a logger. */
-type CreateOptions = {
-  /**
-   * The name of the application.
-   * @example `website`
-   */
-  name: string;
-};
-/**
- * Creates a logger for the application.
- * @param options - The options for creating the logger.
- * @returns The created logger.
- */
-declare function create({
-  name
-}: CreateOptions): Logger;
-//#endregion
-export { CreateOptions, create, logger };
-//# sourceMappingURL=logger.d.ts.map

package/dist/node/shared-data.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shared-data.js","names":[],"sources":["../../src/shared-data/social-media.ts"],"sourcesContent":["// just me, for now\nexport const socials = {\n  twitter: {\n    username: 'maxwellweru',\n    url: 'https://twitter.com/maxwellweru',\n  },\n  linkedin: {\n    username: 'maxwellweru',\n    url: 'https://www.linkedin.com/in/maxwellweru',\n  },\n  youtube: {\n    channel: 'mburumaxwell',\n    url: 'https://youtube.com/c/mburumaxwell',\n  },\n  github: {\n    username: 'mburumaxwell',\n    url: 'https://github.com/mburumaxwell',\n  },\n};\n"],"mappings":";AACA,MAAa,UAAU;CACrB,SAAS;EACP,UAAU;EACV,KAAK;EACN;CACD,UAAU;EACR,UAAU;EACV,KAAK;EACN;CACD,SAAS;EACP,SAAS;EACT,KAAK;EACN;CACD,QAAQ;EACN,UAAU;EACV,KAAK;EACN;CACF"}

package/dist/node/usage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"usage.js","names":[],"sources":["../../src/usage.ts"],"sourcesContent":["import { z } from 'zod/v4';\nimport { DependabotPackageManagerSchema, DependabotSourceProviderSchema } from '@/dependabot/job';\n\n/**\n * @example\n * ```json\n * {\n *   \"host\": {\n *     \"platform\": \"darwin\",\n *     \"os\": \"25.0.0\",\n *     \"arch\": \"arm64\",\n *     \"machine-hash\": \"d3bbb66be2ad9dfab10af69b450f7e7e814ef7bbf1277a6d0df9e1db44ba4f5c\"\n *   },\n *   \"trigger\": \"user\",\n *   \"provider\": \"azure\",\n *   \"owner\": \"https://dev.azure.com/tingle/\",\n *   \"package-manager\": \"terraform\",\n *   \"version\": \"0.9.0\",\n *   \"id\": 2850677077,\n *   \"started\": \"2025-10-03T14:44:00.191Z\",\n *   \"duration\": 31812,\n *   \"success\": true\n * }\n * ```\n */\nexport const UsageTelemetryRequestDataSchema = z.object({\n  host: z.object({\n    platform: z.string().max(50), // e.g. linux, darwin, win32\n    release: z.string().max(100), // e.g. 26.0.0, 10.0.19043\n    arch: z.string().max(50), // e.g. x64, arm64\n    'machine-hash': z.string().max(250), // e.g. \"d3bbb66be2ad9dfab10af69b450f7e7e814ef7bbf1277a6d0df9e1db44ba4f5c\" for \"Maxwells-MacBook-Pro.local\"\n  }),\n  version: z.string().max(50),\n  trigger: z.enum(['user', 'service']),\n  provider: DependabotSourceProviderSchema,\n  owner: z.url(),\n  project: z.url().optional(), // was added later hence optional for backward compatibility\n  'package-manager': DependabotPackageManagerSchema,\n  id: z.number(), // job identifier, for correlation\n  started: z.coerce.date(),\n  duration: z.number().min(0), // in milliseconds\n  success: z.boolean(),\n});\n\n/**\n * @example\n * ```json\n * {\n *   \"host\": {\n *     \"platform\": \"darwin\",\n *     \"os\": \"25.0.0\",\n *     \"arch\": \"arm64\",\n *     \"machine-hash\": \"d3bbb66be2ad9dfab10af69b450f7e7e814ef7bbf1277a6d0df9e1db44ba4f5c\"\n *   },\n *   \"trigger\": \"user\",\n *   \"provider\": \"azure\",\n *   \"owner\": \"https://dev.azure.com/tingle/\",\n *   \"package-manager\": \"terraform\",\n *   \"version\": \"0.9.0\",\n *   \"id\": 2850677077,\n *   \"started\": \"2025-10-03T14:44:00.191Z\",\n *   \"duration\": 31812,\n *   \"success\": true\n * }\n * ```\n */\nexport type UsageTelemetryRequestData = z.infer<typeof UsageTelemetryRequestDataSchema>;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAyBA,MAAa,kCAAkC,EAAE,OAAO;CACtD,MAAM,EAAE,OAAO;EACb,UAAU,EAAE,QAAQ,CAAC,IAAI,GAAG;EAC5B,SAAS,EAAE,QAAQ,CAAC,IAAI,IAAI;EAC5B,MAAM,EAAE,QAAQ,CAAC,IAAI,GAAG;EACxB,gBAAgB,EAAE,QAAQ,CAAC,IAAI,IAAI;EACpC,CAAC;CACF,SAAS,EAAE,QAAQ,CAAC,IAAI,GAAG;CAC3B,SAAS,EAAE,KAAK,CAAC,QAAQ,UAAU,CAAC;CACpC,UAAU;CACV,OAAO,EAAE,KAAK;CACd,SAAS,EAAE,KAAK,CAAC,UAAU;CAC3B,mBAAmB;CACnB,IAAI,EAAE,QAAQ;CACd,SAAS,EAAE,OAAO,MAAM;CACxB,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC3B,SAAS,EAAE,SAAS;CACrB,CAAC"}