@paklo/core 0.12.1 → 0.13.0

package/dist/{index-rsiHDQ5U.d.mts → index-CviS_2Dy.d.mts}

@@ -1,4 +1,4 @@
-import { p as SecurityVulnerability } from "./index-BfwWezjJ.mjs";
+import { p as SecurityVulnerability } from "./index-BKTxy7XU.mjs";
 import { z } from "zod";
 import { Hono } from "hono";
 
@@ -1214,14 +1214,25 @@ declare const DependabotSourceSchema: z.ZodObject<{
   'api-endpoint': z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, z.core.$strip>;
 type DependabotSource = z.infer<typeof DependabotSourceSchema>;
-declare const DependabotExistingPRSchema: z.ZodObject<{
+declare const DependabotExistingPrDependencySchema: z.ZodObject<{
   'dependency-name': z.ZodString;
   'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
   directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
   removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
 }, z.core.$strip>;
-type DependabotExistingPR = z.infer<typeof DependabotExistingPRSchema>;
-declare const DependabotExistingGroupPRSchema: z.ZodObject<{
+type DependabotExistingPrDependency = z.infer<typeof DependabotExistingPrDependencySchema>;
+declare const DependabotExistingPrSchema: z.ZodObject<{
+  'pr-number': z.ZodNumber;
+  dependencies: z.ZodArray<z.ZodObject<{
+    'dependency-name': z.ZodString;
+    'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type DependabotExistingPr = z.infer<typeof DependabotExistingPrSchema>;
+declare const DependabotExistingGroupPrSchema: z.ZodObject<{
+  'pr-number': z.ZodNumber;
   'dependency-group-name': z.ZodString;
   dependencies: z.ZodArray<z.ZodObject<{
     'dependency-name': z.ZodString;
@@ -1230,7 +1241,7 @@ declare const DependabotExistingGroupPRSchema: z.ZodObject<{
     removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
   }, z.core.$strip>>;
 }, z.core.$strip>;
-type DependabotExistingGroupPR = z.infer<typeof DependabotExistingGroupPRSchema>;
+type DependabotExistingGroupPr = z.infer<typeof DependabotExistingGroupPrSchema>;
 declare const DependabotAllowedSchema: z.ZodObject<{
   'dependency-name': z.ZodOptional<z.ZodNullable<z.ZodString>>;
   'dependency-type': z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -1351,19 +1362,21 @@ declare const DependabotPackageManagerSchema: z.ZodEnum<{
   opentofu: "opentofu";
 }>;
 type DependabotPackageManager = z.infer<typeof DependabotPackageManagerSchema>;
-declare const DEPENDABOT_COMMANDS: readonly ["graph", "version", "recreate"];
+declare const DEPENDABOT_COMMANDS: readonly ["update", "version", "recreate", "graph"];
 declare const DependabotCommandSchema: z.ZodEnum<{
   version: "version";
-  graph: "graph";
+  update: "update";
   recreate: "recreate";
+  graph: "graph";
 }>;
 type DependabotCommand = z.infer<typeof DependabotCommandSchema>;
 declare const DependabotJobConfigSchema: z.ZodObject<{
   id: z.ZodString;
   command: z.ZodOptional<z.ZodEnum<{
     version: "version";
-    graph: "graph";
+    update: "update";
     recreate: "recreate";
+    graph: "graph";
   }>>;
   'package-manager': z.ZodEnum<{
     hex: "hex";
@@ -1417,13 +1430,17 @@ declare const DependabotJobConfigSchema: z.ZodObject<{
   }, z.core.$strip>>>>;
   dependencies: z.ZodNullable<z.ZodArray<z.ZodString>>;
   'dependency-group-to-refresh': z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  'existing-pull-requests': z.ZodArray<z.ZodArray<z.ZodObject<{
-    'dependency-name': z.ZodString;
-    'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
-  }, z.core.$strip>>>;
+  'existing-pull-requests': z.ZodArray<z.ZodObject<{
+    'pr-number': z.ZodNumber;
+    dependencies: z.ZodArray<z.ZodObject<{
+      'dependency-name': z.ZodString;
+      'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+      removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+    }, z.core.$strip>>;
+  }, z.core.$strip>>;
   'existing-group-pull-requests': z.ZodArray<z.ZodObject<{
+    'pr-number': z.ZodNumber;
     'dependency-group-name': z.ZodString;
     dependencies: z.ZodArray<z.ZodObject<{
       'dependency-name': z.ZodString;
@@ -1494,8 +1511,9 @@ declare const DependabotJobFileSchema: z.ZodObject<{
     id: z.ZodString;
     command: z.ZodOptional<z.ZodEnum<{
       version: "version";
-      graph: "graph";
+      update: "update";
       recreate: "recreate";
+      graph: "graph";
     }>>;
     'package-manager': z.ZodEnum<{
       hex: "hex";
@@ -1549,13 +1567,17 @@ declare const DependabotJobFileSchema: z.ZodObject<{
     }, z.core.$strip>>>>;
     dependencies: z.ZodNullable<z.ZodArray<z.ZodString>>;
     'dependency-group-to-refresh': z.ZodOptional<z.ZodNullable<z.ZodString>>;
-    'existing-pull-requests': z.ZodArray<z.ZodArray<z.ZodObject<{
-      'dependency-name': z.ZodString;
-      'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
-      directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-      removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
-    }, z.core.$strip>>>;
+    'existing-pull-requests': z.ZodArray<z.ZodObject<{
+      'pr-number': z.ZodNumber;
+      dependencies: z.ZodArray<z.ZodObject<{
+        'dependency-name': z.ZodString;
+        'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
+      }, z.core.$strip>>;
+    }, z.core.$strip>>;
     'existing-group-pull-requests': z.ZodArray<z.ZodObject<{
+      'pr-number': z.ZodNumber;
       'dependency-group-name': z.ZodString;
       dependencies: z.ZodArray<z.ZodObject<{
         'dependency-name': z.ZodString;
@@ -1633,20 +1655,15 @@ type FileFetcherInput = {
 type FileUpdaterInput = FetchedFiles & {
   job: DependabotJobConfig;
 };
-declare const DependabotPersistedPrSchema: z.ZodUnion<[z.ZodArray<z.ZodObject<{
-  'dependency-name': z.ZodString;
-  'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
-  removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
-}, z.core.$strip>>, z.ZodObject<{
-  'dependency-group-name': z.ZodString;
+declare const DependabotPersistedPrSchema: z.ZodObject<{
   dependencies: z.ZodArray<z.ZodObject<{
     'dependency-name': z.ZodString;
     'dependency-version': z.ZodOptional<z.ZodNullable<z.ZodString>>;
     directory: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     removed: z.ZodOptional<z.ZodNullable<z.ZodBoolean>>;
   }, z.core.$strip>>;
-}, z.core.$strip>]>;
+  'dependency-group-name': z.ZodOptional<z.ZodNullable<z.ZodString>>;
+}, z.core.$strip>;
 type DependabotPersistedPr = z.infer<typeof DependabotPersistedPrSchema>;
 //#endregion
 //#region src/dependabot/branch-name.d.ts
@@ -1661,8 +1678,8 @@ declare function getBranchNameForUpdate({
   packageEcosystem: PackageEcosystem;
   targetBranchName?: string;
   directory?: string;
-  dependencyGroupName?: string;
-  dependencies: DependabotExistingPR[];
+  dependencyGroupName?: string | null;
+  dependencies: DependabotExistingPrDependency[];
   separator?: string;
 }): string;
 declare function sanitizeRef(refParts: (string | undefined)[], separator: string): string;
@@ -1676,18 +1693,12 @@ declare function sanitizeRef(refParts: (string | undefined)[], separator: string
  * Either a single `directory` or multiple `directories` can be specified.
  */
 type MakeDirectoryKeyOptions = {
-  /** The package ecosystem (e.g., 'npm', 'pip', 'bundler') */
-  ecosystem: string;
-  /** Single directory path (optional if directories is provided) */
-  directory?: string | null;
-  /** Multiple directory paths (optional if directory is provided) */
+  /** The package ecosystem (e.g., 'npm', 'pip', 'bundler') */ecosystem: string; /** Single directory path (optional if directories is provided) */
+  directory?: string | null; /** Multiple directory paths (optional if directory is provided) */
   directories?: string[];
 } | {
-  /** The package ecosystem using alternative naming convention */
-  'package-ecosystem': string;
-  /** Single directory path (optional if directories is provided) */
-  directory?: string | null;
-  /** Multiple directory paths (optional if directory is provided) */
+  /** The package ecosystem using alternative naming convention */'package-ecosystem': string; /** Single directory path (optional if directories is provided) */
+  directory?: string | null; /** Multiple directory paths (optional if directory is provided) */
   directories?: string[];
 };
 /**
@@ -1779,19 +1790,16 @@ declare class DependabotJobBuilder {
     experiments: DependabotExperiments;
     systemAccessUser?: string;
     systemAccessToken?: string;
-    githubToken?: string;
-    /** Determines if verbose log messages are logged */
+    githubToken?: string; /** Determines if verbose log messages are logged */
     debug: boolean;
   });
   /**
    * Create a dependabot update job that updates nothing, but will discover the dependency list for a package ecosystem
    */
   forDependenciesList({
-    id,
-    command
+    id
   }: {
     id: string;
-    command: DependabotJobConfig['command'];
   }): DependabotJobBuilderOutput;
   /**
    * Create a dependabot update job that updates all dependencies for a package ecosystem
@@ -1805,10 +1813,10 @@ declare class DependabotJobBuilder {
     securityVulnerabilities
   }: {
     id: string;
-    command: DependabotJobConfig['command'];
+    command: DependabotCommand;
     dependencyNamesToUpdate?: string[];
-    existingPullRequests: DependabotPersistedPr[];
-    pullRequestToUpdate?: DependabotPersistedPr;
+    existingPullRequests: (DependabotExistingPr | DependabotExistingGroupPr)[];
+    pullRequestToUpdate?: DependabotExistingPr | DependabotExistingGroupPr;
     securityVulnerabilities?: SecurityVulnerability[];
   }): DependabotJobBuilderOutput;
 }
@@ -2108,6 +2116,7 @@ declare const DependabotRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         }, z.core.$strip>>;
       }, z.core.$strip>>>;
     }, z.core.$strip>;
+    metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodAny>>>;
   }, z.core.$strip>;
 }, z.core.$strip>, z.ZodObject<{
   type: z.ZodLiteral<"record_ecosystem_versions">;
@@ -2245,19 +2254,15 @@ type CreateApiServerAppOptions = {
    * Base path for the endpoints.
    * @default `/api/update_jobs`
    */
-  basePath?: string;
-  /** Handler function for authenticating requests. */
-  authenticate: AuthenticatorFunc;
-  /** Function for getting a dependabot job by ID. */
-  getJob: GetJobFunc;
-  /** Function for getting dependabot credentials by job ID. */
+  basePath?: string; /** Handler function for authenticating requests. */
+  authenticate: AuthenticatorFunc; /** Function for getting a dependabot job by ID. */
+  getJob: GetJobFunc; /** Function for getting dependabot credentials by job ID. */
   getCredentials: GetCredentialsFunc;
   /**
    * Optional function for inspecting raw dependabot requests.
    * Should only be used for troubleshooting.
    * */
-  inspect?: InspectRequestFunc;
-  /** Handler function for processing the operations. */
+  inspect?: InspectRequestFunc; /** Handler function for processing the operations. */
   handle: HandlerFunc;
 };
 /**
@@ -2427,6 +2432,7 @@ declare const DependabotDependencySubmissionSchema: z.ZodObject<{
       }, z.core.$strip>>;
     }, z.core.$strip>>>;
   }, z.core.$strip>;
+  metadata: z.ZodOptional<z.ZodNullable<z.ZodRecord<z.ZodString, z.ZodAny>>>;
 }, z.core.$strip>;
 type DependabotDependencySubmission = z.infer<typeof DependabotDependencySubmissionSchema>;
 declare const DependabotCreatePullRequestSchema: z.ZodObject<{
@@ -2694,10 +2700,10 @@ type DependabotMetric = z.infer<typeof DependabotMetricSchema>;
 declare function normalizeFilePath(path: string): string;
 declare function normalizeBranchName(branch: string): string;
 declare function normalizeBranchName(branch?: string): string | undefined;
-declare function getDependencyNames(dependencies: DependabotPersistedPr): string[];
+declare function getDependencyNames(pr: DependabotPersistedPr): string[];
 declare function areEqual(a: string[], b: string[]): boolean;
 declare function getPullRequestCloseReason(data: DependabotClosePullRequest): string | undefined;
-declare function getPullRequestDependencies(data: DependabotCreatePullRequest): DependabotPersistedPr;
+declare function getPersistedPr(data: DependabotCreatePullRequest): DependabotPersistedPr;
 declare function getPullRequestDescription({
   packageManager,
   body,
@@ -2709,6 +2715,74 @@ declare function getPullRequestDescription({
   dependencies: DependabotDependency[];
   maxDescriptionLength?: number;
 }): string;
+/**
+ * Determines if a new pull request should supersede an existing pull request.
+ *
+ * Follows GitHub Dependabot's superseding logic:
+ * - **Grouped PRs**: Supersede if same group name AND any dependency version changed
+ * - **Single dependency PRs**: Supersede if updating the exact same dependency with a different version
+ * - **Different scopes**: PRs with different dependency sets don't supersede each other
+ *
+ * A new PR supersedes an old PR when:
+ * 1. Both are for the same group (same `dependency-group-name`), OR
+ *    Both update the exact same set of dependencies (same dependency names)
+ * 2. AND at least one dependency has a different version
+ *
+ * This prevents incorrect superseding when PRs update overlapping but different dependency sets.
+ *
+ * @param oldPr - The existing pull request's dependency data
+ * @param newPr - The new pull request's dependency data
+ * @returns `true` if the new PR should supersede the old PR, `false` otherwise
+ *
+ * @example
+ * ```ts
+ * // Single dependency - same dependency, different version: SUPERSEDE
+ * const oldPr = {
+ *   'dependency-group-name': null,
+ *   dependencies: [{ 'dependency-name': 'lodash', 'dependency-version': '4.17.20' }]
+ * };
+ * const newPr = {
+ *   'dependency-group-name': null,
+ *   dependencies: [{ 'dependency-name': 'lodash', 'dependency-version': '4.17.21' }]
+ * };
+ * shouldSupersede(oldPr, newPr); // returns true
+ * ```
+ *
+ * @example
+ * ```ts
+ * // Different dependency sets - overlap but different scope: DON'T SUPERSEDE
+ * const oldPr = {
+ *   'dependency-group-name': null,
+ *   dependencies: [
+ *     { 'dependency-name': 'lodash', 'dependency-version': '4.17.20' },
+ *     { 'dependency-name': 'express', 'dependency-version': '4.18.0' }
+ *   ]
+ * };
+ * const newPr = {
+ *   'dependency-group-name': null,
+ *   dependencies: [
+ *     { 'dependency-name': 'lodash', 'dependency-version': '4.17.21' },
+ *     { 'dependency-name': 'react', 'dependency-version': '18.0.0' }
+ *   ]
+ * };
+ * shouldSupersede(oldPr, newPr); // returns false - different dependency sets
+ * ```
+ *
+ * @example
+ * ```ts
+ * // Same group - version changed: SUPERSEDE
+ * const oldPr = {
+ *   'dependency-group-name': 'production',
+ *   dependencies: [{ 'dependency-name': 'lodash', 'dependency-version': '4.17.20' }]
+ * };
+ * const newPr = {
+ *   'dependency-group-name': 'production',
+ *   dependencies: [{ 'dependency-name': 'lodash', 'dependency-version': '4.17.21' }]
+ * };
+ * shouldSupersede(oldPr, newPr); // returns true - same group, version changed
+ * ```
+ */
+declare function shouldSupersede(oldPr: DependabotPersistedPr, newPr: DependabotPersistedPr): boolean;
 //#endregion
-export { DependabotJobBuilder as $, DependabotRequirementSchema as $t, DependabotRecordCooldownMeta as A, DependabotRegistry as An, DependabotDependency as At, DependabotRecordUpdateJobWarning as B, parseDependabotConfig as Bn, DependabotGroupRuleJob as Bt, DependabotIncrementMetricSchema as C, DependabotGroup as Cn, DependabotCommandSchema as Ct, DependabotMarkAsProcessedSchema as D, DependabotMultiEcosystemGroup as Dn, DependabotConditionSchema as Dt, DependabotMarkAsProcessed as E, DependabotIgnoreConditionSchema as En, DependabotCondition as Et, DependabotRecordEcosystemVersionsSchema as F, DependabotUpdateSchema as Fn, DependabotExistingPRSchema as Ft, DependabotUpdatePullRequestSchema as G, convertPlaceholder as Gn, DependabotJobFileSchema as Gt, DependabotUpdateDependencyList as H, parseUpdates as Hn, DependabotJobConfig as Ht, DependabotRecordUpdateJobError as I, PackageEcosystem as In, DependabotExperiments as It, DependabotRequestSchema as J, DEPENDABOT_DEFAULT_AUTHOR_NAME as Jn, DependabotPersistedPr as Jt, CreateApiServerAppOptions as K, extractPlaceholder as Kn, DependabotPackageManager as Kt, DependabotRecordUpdateJobErrorSchema as L, PackageEcosystemSchema as Ln, DependabotExperimentsSchema as Lt, DependabotRecordEcosystemMeta as M, DependabotSchedule as Mn, DependabotExistingGroupPR as Mt, DependabotRecordEcosystemMetaSchema as N, DependabotScheduleSchema as Nn, DependabotExistingGroupPRSchema as Nt, DependabotMetric as O, DependabotMultiEcosystemGroupSchema as On, DependabotCredential as Ot, DependabotRecordEcosystemVersions as P, DependabotUpdate as Pn, DependabotExistingPR as Pt, createApiServerApp as Q, DependabotRequirement as Qt, DependabotRecordUpdateJobUnknownError as R, VersioningStrategy as Rn, DependabotGroupJob as Rt, DependabotIncrementMetric as S, DependabotCooldownSchema as Sn, DependabotCommand as St, DependabotJobErrorSchema as T, DependabotIgnoreCondition as Tn, DependabotCommitOptionsSchema as Tt, DependabotUpdateDependencyListSchema as U, validateConfiguration as Un, DependabotJobConfigSchema as Ut, DependabotRecordUpdateJobWarningSchema as V, parseRegistries as Vn, DependabotGroupRuleJobSchema as Vt, DependabotUpdatePullRequest as W, VariableFinderFn as Wn, DependabotJobFile as Wt, DependabotRequestTypeSchema as X, DependabotProxyConfig as Xt, DependabotRequestType as Y, GitAuthor as Yn, DependabotPersistedPrSchema as Yt, DependabotTokenType as Z, DependabotProxyConfigSchema as Zt, DependabotDependencySubmissionSchema as _, DependabotCommitMessage as _n, CertificateAuthority as _t, getPullRequestDescription as a, DependabotSourceProvider as an, mapGroupsFromDependabotConfigToJobConfig as at, DependabotEcosystemVersionManager as b, DependabotConfigSchema as bn, DependabotAllowed as bt, DependabotClosePullRequest as c, FetchedFiles as cn, mapSecurityAdvisories as ct, DependabotClosePullRequestSchema as d, BETA_ECOSYSTEMS as dn, DEFAULT_EXPERIMENTS as dt, DependabotRequirementSource as en, DependabotJobBuilderOutput as et, DependabotCreatePullRequest as f, CONFIG_FILE_NAMES as fn, parseExperiments as ft, DependabotDependencySubmission as g, DependabotAllowConditionSchema as gn, sanitizeRef as gt, DependabotDependencyFileSchema as h, DependabotAllowCondition as hn, getBranchNameForUpdate as ht, getPullRequestDependencies as i, DependabotSource as in, mapExperiments as it, DependabotRecordCooldownMetaSchema as j, DependabotRegistrySchema as jn, DependabotDependencySchema as jt, DependabotMetricSchema as k, DependabotPullRequestBranchName as kn, DependabotCredentialSchema as kt, DependabotClosePullRequestReason as l, FileFetcherInput as ln, mapSourceFromDependabotConfigToJobConfig as lt, DependabotDependencyFile as m, CONFIG_FILE_PATHS_GITHUB as mn, makeDirectoryKey as mt, getDependencyNames as n, DependabotSecurityAdvisory as nn, mapAllowedUpdatesFromDependabotConfigToJobConfig as nt, normalizeBranchName as o, DependabotSourceProviderSchema as on, mapIgnoreConditionsFromDependabotConfigToJobConfig as ot, DependabotCreatePullRequestSchema as p, CONFIG_FILE_PATHS_AZURE as pn, setExperiment as pt, DependabotRequest as q, DEPENDABOT_DEFAULT_AUTHOR_EMAIL as qn, DependabotPackageManagerSchema as qt, getPullRequestCloseReason as r, DependabotSecurityAdvisorySchema as rn, mapCredentials as rt, normalizeFilePath as s, DependabotSourceSchema as sn, mapPackageEcosystemToPackageManager as st, areEqual as t, DependabotRequirementSourceSchema as tn, DependabotSourceInfo as tt, DependabotClosePullRequestReasonEnum as u, FileUpdaterInput as un, mapVersionStrategyToRequirementsUpdateStrategy as ut, DependabotEcosystemMeta as v, DependabotCommitMessageSchema as vn, CertificateAuthoritySchema as vt, DependabotJobError as w, DependabotGroupSchema as wn, DependabotCommitOptions as wt, DependabotEcosystemVersionManagerSchema as x, DependabotCooldown as xn, DependabotAllowedSchema as xt, DependabotEcosystemMetaSchema as y, DependabotConfig as yn, DEPENDABOT_COMMANDS as yt, DependabotRecordUpdateJobUnknownErrorSchema as z, VersioningStrategySchema as zn, DependabotGroupJobSchema as zt };
-//# sourceMappingURL=index-rsiHDQ5U.d.mts.map
+export { createApiServerApp as $, DependabotProxyConfig as $t, DependabotMetricSchema as A, DependabotMultiEcosystemGroup as An, DependabotCredentialSchema as At, DependabotRecordUpdateJobUnknownErrorSchema as B, PackageEcosystemSchema as Bn, DependabotExperimentsSchema as Bt, DependabotIncrementMetric as C, DependabotConfigSchema as Cn, DependabotCommand as Ct, DependabotMarkAsProcessed as D, DependabotGroupSchema as Dn, DependabotCondition as Dt, DependabotJobErrorSchema as E, DependabotGroup as En, DependabotCommitOptionsSchema as Et, DependabotRecordEcosystemVersions as F, DependabotSchedule as Fn, DependabotExistingPr as Ft, DependabotUpdatePullRequest as G, parseUpdates as Gn, DependabotJobConfig as Gt, DependabotRecordUpdateJobWarningSchema as H, VersioningStrategySchema as Hn, DependabotGroupJobSchema as Ht, DependabotRecordEcosystemVersionsSchema as I, DependabotScheduleSchema as In, DependabotExistingPrDependency as It, DependabotRequest as J, convertPlaceholder as Jn, DependabotJobFileSchema as Jt, DependabotUpdatePullRequestSchema as K, validateConfiguration as Kn, DependabotJobConfigSchema as Kt, DependabotRecordUpdateJobError as L, DependabotUpdate as Ln, DependabotExistingPrDependencySchema as Lt, DependabotRecordCooldownMetaSchema as M, DependabotPullRequestBranchName as Mn, DependabotDependencySchema as Mt, DependabotRecordEcosystemMeta as N, DependabotRegistry as Nn, DependabotExistingGroupPr as Nt, DependabotMarkAsProcessedSchema as O, DependabotIgnoreCondition as On, DependabotConditionSchema as Ot, DependabotRecordEcosystemMetaSchema as P, DependabotRegistrySchema as Pn, DependabotExistingGroupPrSchema as Pt, DependabotTokenType as Q, GitAuthor as Qn, DependabotPersistedPrSchema as Qt, DependabotRecordUpdateJobErrorSchema as R, DependabotUpdateSchema as Rn, DependabotExistingPrSchema as Rt, DependabotEcosystemVersionManagerSchema as S, DependabotConfig as Sn, DependabotAllowedSchema as St, DependabotJobError as T, DependabotCooldownSchema as Tn, DependabotCommitOptions as Tt, DependabotUpdateDependencyList as U, parseDependabotConfig as Un, DependabotGroupRuleJob as Ut, DependabotRecordUpdateJobWarning as V, VersioningStrategy as Vn, DependabotGroupJob as Vt, DependabotUpdateDependencyListSchema as W, parseRegistries as Wn, DependabotGroupRuleJobSchema as Wt, DependabotRequestType as X, DEPENDABOT_DEFAULT_AUTHOR_EMAIL as Xn, DependabotPackageManagerSchema as Xt, DependabotRequestSchema as Y, extractPlaceholder as Yn, DependabotPackageManager as Yt, DependabotRequestTypeSchema as Z, DEPENDABOT_DEFAULT_AUTHOR_NAME as Zn, DependabotPersistedPr as Zt, DependabotDependencySubmission as _, CONFIG_FILE_PATHS_GITHUB as _n, sanitizeRef as _t, getPullRequestDescription as a, DependabotSecurityAdvisory as an, mapExperiments as at, DependabotEcosystemMetaSchema as b, DependabotCommitMessage as bn, DEPENDABOT_COMMANDS as bt, shouldSupersede as c, DependabotSourceProvider as cn, mapPackageEcosystemToPackageManager as ct, DependabotClosePullRequestReasonEnum as d, FetchedFiles as dn, mapVersionStrategyToRequirementsUpdateStrategy as dt, DependabotProxyConfigSchema as en, DependabotJobBuilder as et, DependabotClosePullRequestSchema as f, FileFetcherInput as fn, DEFAULT_EXPERIMENTS as ft, DependabotDependencyFileSchema as g, CONFIG_FILE_PATHS_AZURE as gn, getBranchNameForUpdate as gt, DependabotDependencyFile as h, CONFIG_FILE_NAMES as hn, makeDirectoryKey as ht, getPullRequestCloseReason as i, DependabotRequirementSourceSchema as in, mapCredentials as it, DependabotRecordCooldownMeta as j, DependabotMultiEcosystemGroupSchema as jn, DependabotDependency as jt, DependabotMetric as k, DependabotIgnoreConditionSchema as kn, DependabotCredential as kt, DependabotClosePullRequest as l, DependabotSourceProviderSchema as ln, mapSecurityAdvisories as lt, DependabotCreatePullRequestSchema as m, BETA_ECOSYSTEMS as mn, setExperiment as mt, getDependencyNames as n, DependabotRequirementSchema as nn, DependabotSourceInfo as nt, normalizeBranchName as o, DependabotSecurityAdvisorySchema as on, mapGroupsFromDependabotConfigToJobConfig as ot, DependabotCreatePullRequest as p, FileUpdaterInput as pn, parseExperiments as pt, CreateApiServerAppOptions as q, VariableFinderFn as qn, DependabotJobFile as qt, getPersistedPr as r, DependabotRequirementSource as rn, mapAllowedUpdatesFromDependabotConfigToJobConfig as rt, normalizeFilePath as s, DependabotSource as sn, mapIgnoreConditionsFromDependabotConfigToJobConfig as st, areEqual as t, DependabotRequirement as tn, DependabotJobBuilderOutput as tt, DependabotClosePullRequestReason as u, DependabotSourceSchema as un, mapSourceFromDependabotConfigToJobConfig as ut, DependabotDependencySubmissionSchema as v, DependabotAllowCondition as vn, CertificateAuthority as vt, DependabotIncrementMetricSchema as w, DependabotCooldown as wn, DependabotCommandSchema as wt, DependabotEcosystemVersionManager as x, DependabotCommitMessageSchema as xn, DependabotAllowed as xt, DependabotEcosystemMeta as y, DependabotAllowConditionSchema as yn, CertificateAuthoritySchema as yt, DependabotRecordUpdateJobUnknownError as z, PackageEcosystem as zn, DependabotExperiments as zt };
+//# sourceMappingURL=index-CviS_2Dy.d.mts.map

package/dist/{job-ClEevC5P.mjs → job-CNRfJDsF.mjs}

@@ -412,15 +412,19 @@ const DependabotSourceSchema = z.object({
 	hostname: z.string().nullish(),
 	"api-endpoint": z.string().nullish()
 });
-const DependabotExistingPRSchema = z.object({
+const DependabotExistingPrDependencySchema = z.object({
 	"dependency-name": z.string(),
 	"dependency-version": z.string().nullish(),
 	directory: z.string().nullish(),
 	removed: z.boolean().nullish()
 });
-const DependabotExistingGroupPRSchema = z.object({
+const DependabotExistingPrSchema = z.object({
+	"pr-number": z.number(),
+	dependencies: DependabotExistingPrDependencySchema.array()
+});
+const DependabotExistingGroupPrSchema = DependabotExistingPrSchema.extend({
 	"dependency-group-name": z.string(),
-	dependencies: DependabotExistingPRSchema.array()
+	dependencies: DependabotExistingPrDependencySchema.array()
 });
 const DependabotAllowedSchema = z.object({
 	"dependency-name": z.string().nullish(),
@@ -508,9 +512,10 @@ const DependabotPackageManagerSchema = z.enum([
 	"opentofu"
 ]);
 const DEPENDABOT_COMMANDS = [
-	"graph",
+	"update",
 	"version",
-	"recreate"
+	"recreate",
+	"graph"
 ];
 const DependabotCommandSchema = z.enum(DEPENDABOT_COMMANDS);
 const DependabotJobConfigSchema = z.object({
@@ -522,8 +527,8 @@ const DependabotJobConfigSchema = z.object({
 	"dependency-groups": DependabotGroupJobSchema.array().nullish(),
 	dependencies: z.string().array().nullable(),
 	"dependency-group-to-refresh": z.string().nullish(),
-	"existing-pull-requests": DependabotExistingPRSchema.array().array(),
-	"existing-group-pull-requests": DependabotExistingGroupPRSchema.array(),
+	"existing-pull-requests": DependabotExistingPrSchema.array(),
+	"existing-group-pull-requests": DependabotExistingGroupPrSchema.array(),
 	experiments: DependabotExperimentsSchema,
 	"ignore-conditions": DependabotConditionSchema.array(),
 	"lockfile-only": z.boolean(),
@@ -546,8 +551,8 @@ const DependabotJobConfigSchema = z.object({
 	"exclude-paths": z.string().array().optional()
 });
 const DependabotJobFileSchema = z.object({ job: DependabotJobConfigSchema });
-const DependabotPersistedPrSchema = DependabotExistingPRSchema.array().or(DependabotExistingGroupPRSchema);
+const DependabotPersistedPrSchema = DependabotExistingGroupPrSchema.omit({ "pr-number": true }).extend({ "dependency-group-name": z.string().nullish() });
 
 //#endregion
-export { DependabotConfigSchema as A, parseDependabotConfig as B, DependabotSourceSchema as C, CONFIG_FILE_PATHS_GITHUB as D, CONFIG_FILE_PATHS_AZURE as E, DependabotRegistrySchema as F, extractPlaceholder as G, parseUpdates as H, DependabotScheduleSchema as I, makeDirectoryKey as K, DependabotUpdateSchema as L, DependabotGroupSchema as M, DependabotIgnoreConditionSchema as N, DependabotAllowConditionSchema as O, DependabotMultiEcosystemGroupSchema as P, PackageEcosystemSchema as R, DependabotSourceProviderSchema as S, CONFIG_FILE_NAMES as T, validateConfiguration as U, parseRegistries as V, convertPlaceholder as W, DependabotPersistedPrSchema as _, DependabotCommitOptionsSchema as a, DependabotRequirementSourceSchema as b, DependabotDependencySchema as c, DependabotExperimentsSchema as d, DependabotGroupJobSchema as f, DependabotPackageManagerSchema as g, DependabotJobFileSchema as h, DependabotCommandSchema as i, DependabotCooldownSchema as j, DependabotCommitMessageSchema as k, DependabotExistingGroupPRSchema as l, DependabotJobConfigSchema as m, DEPENDABOT_COMMANDS as n, DependabotConditionSchema as o, DependabotGroupRuleJobSchema as p, DependabotAllowedSchema as r, DependabotCredentialSchema as s, CertificateAuthoritySchema as t, DependabotExistingPRSchema as u, DependabotProxyConfigSchema as v, BETA_ECOSYSTEMS as w, DependabotSecurityAdvisorySchema as x, DependabotRequirementSchema as y, VersioningStrategySchema as z };
-//# sourceMappingURL=job-ClEevC5P.mjs.map
+export { DependabotCommitMessageSchema as A, VersioningStrategySchema as B, DependabotSourceProviderSchema as C, CONFIG_FILE_PATHS_AZURE as D, CONFIG_FILE_NAMES as E, DependabotMultiEcosystemGroupSchema as F, convertPlaceholder as G, parseRegistries as H, DependabotRegistrySchema as I, extractPlaceholder as K, DependabotScheduleSchema as L, DependabotCooldownSchema as M, DependabotGroupSchema as N, CONFIG_FILE_PATHS_GITHUB as O, DependabotIgnoreConditionSchema as P, DependabotUpdateSchema as R, DependabotSecurityAdvisorySchema as S, BETA_ECOSYSTEMS as T, parseUpdates as U, parseDependabotConfig as V, validateConfiguration as W, DependabotPackageManagerSchema as _, DependabotCommitOptionsSchema as a, DependabotRequirementSchema as b, DependabotDependencySchema as c, DependabotExistingPrSchema as d, DependabotExperimentsSchema as f, DependabotJobFileSchema as g, DependabotJobConfigSchema as h, DependabotCommandSchema as i, DependabotConfigSchema as j, DependabotAllowConditionSchema as k, DependabotExistingGroupPrSchema as l, DependabotGroupRuleJobSchema as m, DEPENDABOT_COMMANDS as n, DependabotConditionSchema as o, DependabotGroupJobSchema as p, makeDirectoryKey as q, DependabotAllowedSchema as r, DependabotCredentialSchema as s, CertificateAuthoritySchema as t, DependabotExistingPrDependencySchema as u, DependabotPersistedPrSchema as v, DependabotSourceSchema as w, DependabotRequirementSourceSchema as x, DependabotProxyConfigSchema as y, PackageEcosystemSchema as z };
+//# sourceMappingURL=job-CNRfJDsF.mjs.map