renovate 42.0.0-next.1 → 42.0.0

package/dist/modules/manager/terraform/lockfile/hash.js.map

@@ -1 +1 @@
-{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/terraform/lockfile/hash.ts"],"names":[],"mappings":";;;;AAAA,sEAAiC;AACjC,sEAAkC;AAClC,0DAA0B;AAC1B,+CAA4C;AAC5C,kDAIgC;AAChC,wEAAiE;AACjE,gEAA0C;AAC1C,4CAAqD;AACrD,gDAA6C;AAC7C,qEAA+C;AAC/C,+EAAqF;AAGrF,MAAa,qBAAqB;IAChC,MAAM,CAAC,IAAI,GAAG,IAAI,WAAI,CAAC,gDAA2B,CAAC,EAAE,CAAC,CAAC;IAEvD,MAAM,CAAC,mBAAmB,GAAG,IAAI,gDAA2B,EAAE,CAAC;IAE/D,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,uBAAuB;IAE5C,MAAM,CAAC,KAAK,CAAC,eAAe,CAClC,QAAgB,EAChB,iBAA2B;QAE3B,MAAM,QAAQ,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE7C,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;YAC1C,MAAM,YAAY,GAAG,eAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,yEAAyE;YAEzE,4BAA4B;YAC5B,MAAM,IAAI,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAExB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,eAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;YACtE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,WAAmB,EACnB,WAAmB;QAEnB,MAAM,IAAA,qBAAO,EAAC,WAAW,EAAE;YACzB,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/C,yBAAyB;QACzB,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAe;QACpC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,MAAM,uBAAuB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,qBAAqB,CAAC,eAAe,CAChD,OAAO,EACP,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAOY,AAAb,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAC9B,KAAqB,EACrB,QAAgB;QAEhB,MAAM,gBAAgB,GAAG,eAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,eAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpE,eAAM,CAAC,KAAK,CACV,+CAA+C,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,CAChF,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,EAAE,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YACxE,eAAM,CAAC,KAAK,CACV,uBAAuB,KAAK,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,UAAU,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CACvG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,kBAAkB;YAClB,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,CACrC,MAAwB;QAExB,eAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAc,EAAC,oBAAoB,CAAC,CAAC;QAE5D,0FAA0F;QAC1F,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE;YACzE,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,YAAY,CACvB,WAAmB,EACnB,UAAkB,EAClB,OAAe;QAEf,eAAM,CAAC,KAAK,CACV,uBAAuB,UAAU,IAAI,OAAO,KAAK,WAAW,GAAG,CAChE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,SAAS,CACtE,WAAW,EACX,UAAU,EACV,OAAO,CACR,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8EAA8E;QAC9E,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAA,wBAAgB,EAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,4BAAoB,CAAC,CACtE,CAAC;QAEF,eAAM,CAAC,KAAK,CACV,0BAA0B,OAAO,CAAC,MAAM,sBAAsB,UAAU,IAAI,OAAO,EAAE,CACtF,CAAC;QAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GACV,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAEvE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAA,mBAAW,EAAC,MAAM,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,eAAM,CAAC,KAAK,CACV,OAAO,QAAQ,CAAC,MAAM,mBAAmB,UAAU,IAAI,OAAO,EAAE,CACjE,CAAC;QAEF,MAAM,QAAQ,GACZ,MAAM,qBAAqB,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QAErD,iEAAiE;QACjE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;;AAvLH,sDAwLC;AAxFc;IALZ,IAAA,iBAAK,EAAC;QACL,SAAS,EAAE,yBAAyB;QACpC,GAAG,EAAE,CAAC,KAAqB,EAAE,EAAE,CAAC,uBAAuB,KAAK,CAAC,GAAG,EAAE;QAClE,UAAU,EAAE,qBAAqB,CAAC,YAAY;KAC/C,CAAC;sDA0BD","sourcesContent":["import crypto from 'node:crypto';\nimport extract from 'extract-zip';\nimport upath from 'upath';\nimport { logger } from '../../../../logger';\nimport {\n  coerceArray,\n  deduplicateArray,\n  isNotNullOrUndefined,\n} from '../../../../util/array';\nimport { cache } from '../../../../util/cache/package/decorator';\nimport * as fs from '../../../../util/fs';\nimport { ensureCacheDir } from '../../../../util/fs';\nimport { Http } from '../../../../util/http';\nimport * as p from '../../../../util/promises';\nimport { TerraformProviderDatasource } from '../../../datasource/terraform-provider';\nimport type { TerraformBuild } from '../../../datasource/terraform-provider/types';\n\nexport class TerraformProviderHash {\n  static http = new Http(TerraformProviderDatasource.id);\n\n  static terraformDatasource = new TerraformProviderDatasource();\n\n  static hashCacheTTL = 10080; // in minutes == 1 week\n\n  private static async hashElementList(\n    basePath: string,\n    fileSystemEntries: string[],\n  ): Promise<string> {\n    const rootHash = crypto.createHash('sha256');\n\n    for (const entryPath of fileSystemEntries) {\n      const absolutePath = upath.resolve(basePath, entryPath);\n      if (!(await fs.cachePathIsFile(absolutePath))) {\n        continue;\n      }\n\n      // build for every file a line looking like \"aaaaaaaaaaaaaaa  file.txt\\n\"\n\n      // get hash of specific file\n      const hash = crypto.createHash('sha256');\n      const fileBuffer = await fs.readCacheFile(absolutePath);\n      hash.update(fileBuffer);\n\n      const line = `${hash.digest('hex')}  ${upath.normalize(entryPath)}\\n`;\n      rootHash.update(line);\n    }\n\n    return rootHash.digest('base64');\n  }\n\n  /**\n   * This is a reimplementation of the Go H1 hash algorithm found at https://github.com/golang/mod/blob/master/sumdb/dirhash/hash.go\n   * The package provides two function HashDir and HashZip where the first is for hashing the contents of a directory\n   * and the second for doing the same but implicitly extracting the contents first.\n   *\n   * The problem starts with that there is a bug which leads to the fact that HashDir and HashZip do not return the same\n   * hash if there are folders inside the content which should be hashed.\n   *\n   * In a folder structure such as\n   * .\n   * ├── Readme.md\n   * └── readme-assets/\n   *     └── image.jpg\n   *\n   * HashDir will create a list of following entries which in turn will hash again\n   * aaaaaaaaaaa  Readme.md\\n\n   * ccccccccccc  readme-assets/image.jpg\\n\n   *\n   * HashZip in contrast will not filter out the directory itself but rather includes it in the hash list\n   * aaaaaaaaaaa  Readme.md\\n\n   * bbbbbbbbbbb  readme-assets/\\n\n   * ccccccccccc  readme-assets/image.jpg\\n\n   *\n   * As the resulting string is used to generate the final hash it will differ based on which function has been used.\n   * The issue is tracked here: https://github.com/golang/go/issues/53448\n   *\n   * This implementation follows the intended implementation and filters out folder entries.\n   * Terraform seems NOT to use HashZip for provider validation, but rather extracts it and then do the hash calculation\n   * even as both are set up in their code base.\n   * https://github.com/hashicorp/terraform/blob/3fdfbd69448b14a4982b3c62a5d36835956fcbaa/internal/getproviders/hash.go#L283-L305\n   *\n   * @param zipFilePath path to the zip file\n   * @param extractPath path to where to temporarily extract the data\n   */\n  static async hashOfZipContent(\n    zipFilePath: string,\n    extractPath: string,\n  ): Promise<string> {\n    await extract(zipFilePath, {\n      dir: extractPath,\n    });\n    const hash = await this.hashOfDir(extractPath);\n    // delete extracted files\n    await fs.rmCache(extractPath);\n\n    return hash;\n  }\n\n  static async hashOfDir(dirPath: string): Promise<string> {\n    const elements = await fs.listCacheDir(dirPath, { recursive: true });\n\n    const sortedFileSystemObjects = elements.sort();\n    return await TerraformProviderHash.hashElementList(\n      dirPath,\n      sortedFileSystemObjects,\n    );\n  }\n\n  @cache({\n    namespace: `terraform-provider-hash`,\n    key: (build: TerraformBuild) => `calculateSingleHash:${build.url}`,\n    ttlMinutes: TerraformProviderHash.hashCacheTTL,\n  })\n  static async calculateSingleHash(\n    build: TerraformBuild,\n    cacheDir: string,\n  ): Promise<string> {\n    const downloadFileName = upath.join(cacheDir, build.filename);\n    const extractPath = upath.join(cacheDir, 'extract', build.filename);\n    logger.trace(\n      `Downloading archive and generating hash for ${build.name}-${build.version}...`,\n    );\n    const startTime = Date.now();\n    const readStream = TerraformProviderHash.http.stream(build.url);\n    const writeStream = fs.createCacheWriteStream(downloadFileName);\n\n    try {\n      await fs.pipeline(readStream, writeStream);\n\n      const hash = await this.hashOfZipContent(downloadFileName, extractPath);\n      logger.debug(\n        `Hash generation for ${build.url} took ${Date.now() - startTime}ms for ${build.name}-${build.version}`,\n      );\n      return hash;\n    } finally {\n      // delete zip file\n      await fs.rmCache(downloadFileName);\n    }\n  }\n\n  static async calculateHashScheme1Hashes(\n    builds: TerraformBuild[],\n  ): Promise<string[]> {\n    logger.debug(`Calculating hashes for ${builds.length} builds`);\n    const cacheDir = await ensureCacheDir('./others/terraform');\n\n    // for each build download ZIP, extract content and generate hash for all containing files\n    return p.map(builds, (build) => this.calculateSingleHash(build, cacheDir), {\n      concurrency: 4,\n    });\n  }\n\n  static async createHashes(\n    registryURL: string,\n    repository: string,\n    version: string,\n  ): Promise<string[] | null> {\n    logger.debug(\n      `Creating hashes for ${repository}@${version} (${registryURL})`,\n    );\n    const builds = await TerraformProviderHash.terraformDatasource.getBuilds(\n      registryURL,\n      repository,\n      version,\n    );\n    if (!builds) {\n      return null;\n    }\n\n    // check if the publisher uses one shasum file for all builds or separate ones\n    // we deduplicate to reduce the number of API calls\n    const shaUrls = deduplicateArray(\n      builds.map((build) => build.shasums_url).filter(isNotNullOrUndefined),\n    );\n\n    logger.debug(\n      `Getting zip hashes for ${shaUrls.length} shasum URL(s) for ${repository}@${version}`,\n    );\n\n    const zhHashes: string[] = [];\n    for (const shaUrl of shaUrls) {\n      const hashes =\n        await TerraformProviderHash.terraformDatasource.getZipHashes(shaUrl);\n\n      zhHashes.push(...coerceArray(hashes));\n    }\n\n    logger.debug(\n      `Got ${zhHashes.length} zip hashes for ${repository}@${version}`,\n    );\n\n    const h1Hashes =\n      await TerraformProviderHash.calculateHashScheme1Hashes(builds);\n\n    const hashes = [];\n    hashes.push(...h1Hashes.map((hash) => `h1:${hash}`));\n    hashes.push(...zhHashes.map((hash) => `zh:${hash}`));\n\n    // sorting the hash alphabetically as terraform does this as well\n    return hashes.sort();\n  }\n}\n"]}
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../../../lib/modules/manager/terraform/lockfile/hash.ts"],"names":[],"mappings":";;;;AAAA,sEAAiC;AACjC,sEAAkC;AAClC,0DAA0B;AAC1B,+CAA4C;AAC5C,kDAIgC;AAChC,wEAAiE;AACjE,gEAA0C;AAC1C,4CAAqD;AACrD,gDAA6C;AAC7C,qEAA+C;AAC/C,+EAAqF;AAGrF,MAAa,qBAAqB;IAChC,MAAM,CAAC,IAAI,GAAG,IAAI,WAAI,CAAC,gDAA2B,CAAC,EAAE,CAAC,CAAC;IAEvD,MAAM,CAAC,mBAAmB,GAAG,IAAI,gDAA2B,EAAE,CAAC;IAE/D,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,uBAAuB;IAE5C,MAAM,CAAC,KAAK,CAAC,eAAe,CAClC,QAAgB,EAChB,iBAA2B;QAE3B,MAAM,QAAQ,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAE7C,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;YAC1C,MAAM,YAAY,GAAG,eAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC9C,SAAS;YACX,CAAC;YAED,yEAAyE;YAEzE,4BAA4B;YAC5B,MAAM,IAAI,GAAG,qBAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAExB,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,eAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC;YACtE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAC3B,WAAmB,EACnB,WAAmB;QAEnB,MAAM,IAAA,qBAAO,EAAC,WAAW,EAAE;YACzB,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC/C,yBAAyB;QACzB,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAe;QACpC,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,MAAM,uBAAuB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,MAAM,qBAAqB,CAAC,eAAe,CAChD,OAAO,EACP,uBAAuB,CACxB,CAAC;IACJ,CAAC;IAOY,AAAb,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAC9B,KAAqB,EACrB,QAAgB;QAEhB,MAAM,gBAAgB,GAAG,eAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,eAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpE,eAAM,CAAC,KAAK,CACV,+CAA+C,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,CAChF,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,EAAE,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YACxE,eAAM,CAAC,KAAK,CACV,uBAAuB,KAAK,CAAC,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,UAAU,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CACvG,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,kBAAkB;YAClB,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,0BAA0B,CACrC,MAAwB;QAExB,eAAM,CAAC,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,MAAM,IAAA,mBAAc,EAAC,WAAW,CAAC,CAAC;QAEnD,0FAA0F;QAC1F,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE;YACzE,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,YAAY,CACvB,WAAmB,EACnB,UAAkB,EAClB,OAAe;QAEf,eAAM,CAAC,KAAK,CACV,uBAAuB,UAAU,IAAI,OAAO,KAAK,WAAW,GAAG,CAChE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,SAAS,CACtE,WAAW,EACX,UAAU,EACV,OAAO,CACR,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8EAA8E;QAC9E,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAA,wBAAgB,EAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,4BAAoB,CAAC,CACtE,CAAC;QAEF,eAAM,CAAC,KAAK,CACV,0BAA0B,OAAO,CAAC,MAAM,sBAAsB,UAAU,IAAI,OAAO,EAAE,CACtF,CAAC;QAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,MAAM,GACV,MAAM,qBAAqB,CAAC,mBAAmB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAEvE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAA,mBAAW,EAAC,MAAM,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,eAAM,CAAC,KAAK,CACV,OAAO,QAAQ,CAAC,MAAM,mBAAmB,UAAU,IAAI,OAAO,EAAE,CACjE,CAAC;QAEF,MAAM,QAAQ,GACZ,MAAM,qBAAqB,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QAErD,iEAAiE;QACjE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;;AAvLH,sDAwLC;AAxFc;IALZ,IAAA,iBAAK,EAAC;QACL,SAAS,EAAE,yBAAyB;QACpC,GAAG,EAAE,CAAC,KAAqB,EAAE,EAAE,CAAC,uBAAuB,KAAK,CAAC,GAAG,EAAE;QAClE,UAAU,EAAE,qBAAqB,CAAC,YAAY;KAC/C,CAAC;sDA0BD","sourcesContent":["import crypto from 'node:crypto';\nimport extract from 'extract-zip';\nimport upath from 'upath';\nimport { logger } from '../../../../logger';\nimport {\n  coerceArray,\n  deduplicateArray,\n  isNotNullOrUndefined,\n} from '../../../../util/array';\nimport { cache } from '../../../../util/cache/package/decorator';\nimport * as fs from '../../../../util/fs';\nimport { ensureCacheDir } from '../../../../util/fs';\nimport { Http } from '../../../../util/http';\nimport * as p from '../../../../util/promises';\nimport { TerraformProviderDatasource } from '../../../datasource/terraform-provider';\nimport type { TerraformBuild } from '../../../datasource/terraform-provider/types';\n\nexport class TerraformProviderHash {\n  static http = new Http(TerraformProviderDatasource.id);\n\n  static terraformDatasource = new TerraformProviderDatasource();\n\n  static hashCacheTTL = 10080; // in minutes == 1 week\n\n  private static async hashElementList(\n    basePath: string,\n    fileSystemEntries: string[],\n  ): Promise<string> {\n    const rootHash = crypto.createHash('sha256');\n\n    for (const entryPath of fileSystemEntries) {\n      const absolutePath = upath.resolve(basePath, entryPath);\n      if (!(await fs.cachePathIsFile(absolutePath))) {\n        continue;\n      }\n\n      // build for every file a line looking like \"aaaaaaaaaaaaaaa  file.txt\\n\"\n\n      // get hash of specific file\n      const hash = crypto.createHash('sha256');\n      const fileBuffer = await fs.readCacheFile(absolutePath);\n      hash.update(fileBuffer);\n\n      const line = `${hash.digest('hex')}  ${upath.normalize(entryPath)}\\n`;\n      rootHash.update(line);\n    }\n\n    return rootHash.digest('base64');\n  }\n\n  /**\n   * This is a reimplementation of the Go H1 hash algorithm found at https://github.com/golang/mod/blob/master/sumdb/dirhash/hash.go\n   * The package provides two function HashDir and HashZip where the first is for hashing the contents of a directory\n   * and the second for doing the same but implicitly extracting the contents first.\n   *\n   * The problem starts with that there is a bug which leads to the fact that HashDir and HashZip do not return the same\n   * hash if there are folders inside the content which should be hashed.\n   *\n   * In a folder structure such as\n   * .\n   * ├── Readme.md\n   * └── readme-assets/\n   *     └── image.jpg\n   *\n   * HashDir will create a list of following entries which in turn will hash again\n   * aaaaaaaaaaa  Readme.md\\n\n   * ccccccccccc  readme-assets/image.jpg\\n\n   *\n   * HashZip in contrast will not filter out the directory itself but rather includes it in the hash list\n   * aaaaaaaaaaa  Readme.md\\n\n   * bbbbbbbbbbb  readme-assets/\\n\n   * ccccccccccc  readme-assets/image.jpg\\n\n   *\n   * As the resulting string is used to generate the final hash it will differ based on which function has been used.\n   * The issue is tracked here: https://github.com/golang/go/issues/53448\n   *\n   * This implementation follows the intended implementation and filters out folder entries.\n   * Terraform seems NOT to use HashZip for provider validation, but rather extracts it and then do the hash calculation\n   * even as both are set up in their code base.\n   * https://github.com/hashicorp/terraform/blob/3fdfbd69448b14a4982b3c62a5d36835956fcbaa/internal/getproviders/hash.go#L283-L305\n   *\n   * @param zipFilePath path to the zip file\n   * @param extractPath path to where to temporarily extract the data\n   */\n  static async hashOfZipContent(\n    zipFilePath: string,\n    extractPath: string,\n  ): Promise<string> {\n    await extract(zipFilePath, {\n      dir: extractPath,\n    });\n    const hash = await this.hashOfDir(extractPath);\n    // delete extracted files\n    await fs.rmCache(extractPath);\n\n    return hash;\n  }\n\n  static async hashOfDir(dirPath: string): Promise<string> {\n    const elements = await fs.listCacheDir(dirPath, { recursive: true });\n\n    const sortedFileSystemObjects = elements.sort();\n    return await TerraformProviderHash.hashElementList(\n      dirPath,\n      sortedFileSystemObjects,\n    );\n  }\n\n  @cache({\n    namespace: `terraform-provider-hash`,\n    key: (build: TerraformBuild) => `calculateSingleHash:${build.url}`,\n    ttlMinutes: TerraformProviderHash.hashCacheTTL,\n  })\n  static async calculateSingleHash(\n    build: TerraformBuild,\n    cacheDir: string,\n  ): Promise<string> {\n    const downloadFileName = upath.join(cacheDir, build.filename);\n    const extractPath = upath.join(cacheDir, 'extract', build.filename);\n    logger.trace(\n      `Downloading archive and generating hash for ${build.name}-${build.version}...`,\n    );\n    const startTime = Date.now();\n    const readStream = TerraformProviderHash.http.stream(build.url);\n    const writeStream = fs.createCacheWriteStream(downloadFileName);\n\n    try {\n      await fs.pipeline(readStream, writeStream);\n\n      const hash = await this.hashOfZipContent(downloadFileName, extractPath);\n      logger.debug(\n        `Hash generation for ${build.url} took ${Date.now() - startTime}ms for ${build.name}-${build.version}`,\n      );\n      return hash;\n    } finally {\n      // delete zip file\n      await fs.rmCache(downloadFileName);\n    }\n  }\n\n  static async calculateHashScheme1Hashes(\n    builds: TerraformBuild[],\n  ): Promise<string[]> {\n    logger.debug(`Calculating hashes for ${builds.length} builds`);\n    const cacheDir = await ensureCacheDir('terraform');\n\n    // for each build download ZIP, extract content and generate hash for all containing files\n    return p.map(builds, (build) => this.calculateSingleHash(build, cacheDir), {\n      concurrency: 4,\n    });\n  }\n\n  static async createHashes(\n    registryURL: string,\n    repository: string,\n    version: string,\n  ): Promise<string[] | null> {\n    logger.debug(\n      `Creating hashes for ${repository}@${version} (${registryURL})`,\n    );\n    const builds = await TerraformProviderHash.terraformDatasource.getBuilds(\n      registryURL,\n      repository,\n      version,\n    );\n    if (!builds) {\n      return null;\n    }\n\n    // check if the publisher uses one shasum file for all builds or separate ones\n    // we deduplicate to reduce the number of API calls\n    const shaUrls = deduplicateArray(\n      builds.map((build) => build.shasums_url).filter(isNotNullOrUndefined),\n    );\n\n    logger.debug(\n      `Getting zip hashes for ${shaUrls.length} shasum URL(s) for ${repository}@${version}`,\n    );\n\n    const zhHashes: string[] = [];\n    for (const shaUrl of shaUrls) {\n      const hashes =\n        await TerraformProviderHash.terraformDatasource.getZipHashes(shaUrl);\n\n      zhHashes.push(...coerceArray(hashes));\n    }\n\n    logger.debug(\n      `Got ${zhHashes.length} zip hashes for ${repository}@${version}`,\n    );\n\n    const h1Hashes =\n      await TerraformProviderHash.calculateHashScheme1Hashes(builds);\n\n    const hashes = [];\n    hashes.push(...h1Hashes.map((hash) => `h1:${hash}`));\n    hashes.push(...zhHashes.map((hash) => `zh:${hash}`));\n\n    // sorting the hash alphabetically as terraform does this as well\n    return hashes.sort();\n  }\n}\n"]}

package/dist/modules/manager/terragrunt/util.js

@@ -4,7 +4,7 @@ exports.keyValueExtractionRegex = void 0;
 exports.getTerragruntDependencyType = getTerragruntDependencyType;
 exports.checkFileContainsDependency = checkFileContainsDependency;
 const regex_1 = require("../../../util/regex");
-exports.keyValueExtractionRegex = (0, regex_1.regEx)(/^\s*source\s+=\s+"(?<value>[^"]+)"\s*$/);
+exports.keyValueExtractionRegex = (0, regex_1.regEx)(/^\s*source\s+=\s+"(?<value>[^"]+)"/);
 function getTerragruntDependencyType(value) {
     switch (value) {
         case 'terraform': {

package/dist/modules/manager/terragrunt/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../lib/modules/manager/terragrunt/util.ts"],"names":[],"mappings":";;;AAOA,kEAWC;AAED,kEAKC;AAzBD,+CAA4C;AAG/B,QAAA,uBAAuB,GAAG,IAAA,aAAK,EAC1C,wCAAwC,CACzC,CAAC;AAEF,SAAgB,2BAA2B,CACzC,KAAa;IAEb,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CACzC,OAAe,EACf,SAAmB;IAEnB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { regEx } from '../../../util/regex';\nimport type { TerragruntDependencyTypes } from './common';\n\nexport const keyValueExtractionRegex = regEx(\n  /^\\s*source\\s+=\\s+\"(?<value>[^\"]+)\"\\s*$/,\n);\n\nexport function getTerragruntDependencyType(\n  value: string,\n): TerragruntDependencyTypes {\n  switch (value) {\n    case 'terraform': {\n      return 'terraform';\n    }\n    default: {\n      return 'unknown';\n    }\n  }\n}\n\nexport function checkFileContainsDependency(\n  content: string,\n  checkList: string[],\n): boolean {\n  return checkList.some((check) => content.includes(check));\n}\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../lib/modules/manager/terragrunt/util.ts"],"names":[],"mappings":";;;AAOA,kEAWC;AAED,kEAKC;AAzBD,+CAA4C;AAG/B,QAAA,uBAAuB,GAAG,IAAA,aAAK,EAC1C,oCAAoC,CACrC,CAAC;AAEF,SAAgB,2BAA2B,CACzC,KAAa;IAEb,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,2BAA2B,CACzC,OAAe,EACf,SAAmB;IAEnB,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC","sourcesContent":["import { regEx } from '../../../util/regex';\nimport type { TerragruntDependencyTypes } from './common';\n\nexport const keyValueExtractionRegex = regEx(\n  /^\\s*source\\s+=\\s+\"(?<value>[^\"]+)\"/,\n);\n\nexport function getTerragruntDependencyType(\n  value: string,\n): TerragruntDependencyTypes {\n  switch (value) {\n    case 'terraform': {\n      return 'terraform';\n    }\n    default: {\n      return 'unknown';\n    }\n  }\n}\n\nexport function checkFileContainsDependency(\n  content: string,\n  checkList: string[],\n): boolean {\n  return checkList.some((check) => content.includes(check));\n}\n"]}

package/dist/modules/manager/types.d.ts

@@ -16,6 +16,8 @@ export interface ExtractConfig extends CustomExtractConfig {
     npmrcMerge?: boolean;
     skipInstalls?: boolean | null;
     repository?: string;
+    currentDigest?: string;
+    newDigest?: string;
 }
 export interface UpdateArtifactsConfig {
     isLockFileMaintenance?: boolean;

package/dist/modules/manager/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/modules/manager/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ReleaseType } from 'semver';\nimport type {\n  MatchStringsStrategy,\n  UpdateType,\n  ValidationMessage,\n} from '../../config/types';\nimport type { Category } from '../../constants';\nimport type {\n  MaybePromise,\n  ModuleApi,\n  RangeStrategy,\n  SkipReason,\n  StageName,\n} from '../../types';\nimport type { FileChange } from '../../util/git/types';\nimport type { MergeConfidence } from '../../util/merge-confidence/types';\nimport type { Timestamp } from '../../util/timestamp';\nimport type { RegistryStrategy } from '../datasource';\nimport type { CustomExtractConfig } from './custom/types';\n\nexport interface ManagerData<T> {\n  managerData?: T;\n}\n\nexport interface ExtractConfig extends CustomExtractConfig {\n  registryAliases?: Record<string, string>;\n  npmrc?: string;\n  npmrcMerge?: boolean;\n  skipInstalls?: boolean | null;\n  repository?: string;\n}\n\nexport interface UpdateArtifactsConfig {\n  isLockFileMaintenance?: boolean;\n  constraints?: Record<string, string>;\n  composerIgnorePlatformReqs?: string[];\n  goGetDirs?: string[];\n  currentValue?: string;\n  postUpdateOptions?: string[];\n  ignorePlugins?: boolean;\n  ignoreScripts?: boolean;\n  updateType?: UpdateType;\n  newValue?: string;\n  newVersion?: string;\n  newMajor?: number;\n  registryAliases?: Record<string, string>;\n  skipArtifactsUpdate?: boolean;\n  lockFiles?: string[];\n}\n\nexport interface RangeConfig<T = Record<string, any>> extends ManagerData<T> {\n  currentValue?: string;\n  depName?: string;\n  depType?: string;\n  manager?: string;\n  rangeStrategy: RangeStrategy;\n}\n\nexport interface PackageFileContent<T = Record<string, any>>\n  extends ManagerData<T> {\n  autoReplaceStringTemplate?: string;\n  extractedConstraints?: Record<string, string>;\n  datasource?: string;\n  registryUrls?: string[];\n  additionalRegistryUrls?: string[];\n  deps: PackageDependency[];\n  lockFiles?: string[];\n  npmrc?: string;\n  packageFileVersion?: string;\n  skipInstalls?: boolean | null;\n  matchStrings?: string[];\n  matchStringsStrategy?: MatchStringsStrategy;\n  fileFormat?: string;\n}\n\nexport interface PackageFile<T = Record<string, any>>\n  extends PackageFileContent<T> {\n  packageFile: string;\n}\n\nexport interface LookupUpdate {\n  bucket?: string;\n  branchName?: string;\n  commitMessageAction?: string;\n  isBump?: boolean;\n  isLockfileUpdate?: boolean;\n  isPin?: boolean;\n  isPinDigest?: boolean;\n  isRange?: boolean;\n  isRollback?: boolean;\n  isReplacement?: boolean;\n  newDigest?: string;\n  newMajor?: number;\n  newMinor?: number;\n  newPatch?: number;\n  newName?: string;\n  newValue?: string;\n  semanticCommitType?: string;\n  pendingChecks?: boolean;\n  pendingVersions?: string[];\n  newVersion?: string;\n  updateType?: UpdateType;\n  isBreaking?: boolean;\n  mergeConfidenceLevel?: MergeConfidence | undefined;\n  userStrings?: Record<string, string>;\n  checksumUrl?: string;\n  downloadUrl?: string;\n  releaseTimestamp?: Timestamp;\n  newVersionAgeInDays?: number;\n  registryUrl?: string;\n  libYears?: number;\n}\n\n/**\n * @property {string} depName - Display name of the package. See #16012\n * @property {string} packageName - The name of the package, used in comparisons. depName is used as fallback if this is not set. See #16012\n */\nexport interface PackageDependency<T = Record<string, any>>\n  extends ManagerData<T> {\n  currentValue?: string | null;\n  currentDigest?: string;\n  depName?: string;\n  depType?: string;\n  fileReplacePosition?: number;\n  sharedVariableName?: string;\n  lineNumber?: number;\n  packageName?: string;\n  target?: string;\n  versioning?: string;\n  dataType?: string;\n  enabled?: boolean;\n  bumpVersion?: ReleaseType;\n  npmPackageAlias?: boolean;\n  packageFileVersion?: string;\n  gitRef?: boolean;\n  sourceUrl?: string | null;\n  pinDigests?: boolean;\n  currentRawValue?: string;\n  major?: { enabled?: boolean };\n  prettyDepType?: string;\n  newValue?: string;\n  warnings?: ValidationMessage[];\n  commitMessageTopic?: string;\n  currentDigestShort?: string;\n  datasource?: string;\n  deprecationMessage?: string;\n  digestOneAndOnly?: boolean;\n  fixedVersion?: string;\n  currentVersion?: string;\n  currentVersionTimestamp?: string;\n  lockedVersion?: string;\n  propSource?: string;\n  registryUrls?: string[] | null;\n  rangeStrategy?: RangeStrategy;\n  skipReason?: SkipReason;\n  skipStage?: StageName;\n  sourceLine?: number;\n  newVersion?: string;\n  updates?: LookupUpdate[];\n  replaceString?: string;\n  autoReplaceStringTemplate?: string;\n  editFile?: string;\n  separateMinorPatch?: boolean;\n  extractVersion?: string;\n  isInternal?: boolean;\n  variableName?: string;\n  indentation?: string;\n\n  /**\n   * override data source's default strategy.\n   */\n  registryStrategy?: RegistryStrategy;\n\n  mostRecentTimestamp?: Timestamp;\n  isAbandoned?: boolean;\n}\n\nexport interface Upgrade<T = Record<string, any>> extends PackageDependency<T> {\n  workspace?: string;\n  isLockfileUpdate?: boolean;\n  currentRawValue?: any;\n  depGroup?: string;\n  lockFiles?: string[];\n  manager?: string;\n  name?: string;\n  newDigest?: string;\n  newFrom?: string;\n  newMajor?: number;\n  newName?: string;\n  newValue?: string;\n  packageFile?: string;\n  rangeStrategy?: RangeStrategy;\n  newVersion?: string;\n  updateType?: UpdateType;\n  version?: string;\n  isLockFileMaintenance?: boolean;\n  isRemediation?: boolean;\n  isVulnerabilityAlert?: boolean;\n  vulnerabilitySeverity?: string;\n  registryUrls?: string[] | null;\n  currentVersion?: string;\n  replaceString?: string;\n  replacementApproach?: 'replace' | 'alias';\n}\n\nexport interface ArtifactNotice {\n  file: string;\n  message: string;\n}\n\nexport interface ArtifactError {\n  fileName?: string;\n  lockFile?: string;\n  stderr?: string;\n}\n\nexport type UpdateArtifactsResult =\n  | {\n      file?: FileChange;\n      notice?: ArtifactNotice;\n      artifactError?: undefined;\n    }\n  | {\n      file?: undefined;\n      notice?: undefined;\n      artifactError?: ArtifactError;\n    };\n\nexport interface UpdateArtifact<T = Record<string, unknown>> {\n  packageFileName: string;\n  updatedDeps: Upgrade<T>[];\n  newPackageFileContent: string;\n  config: UpdateArtifactsConfig;\n}\n\nexport interface UpdateDependencyConfig<T = Record<string, any>> {\n  fileContent: string;\n  upgrade: Upgrade<T>;\n}\n\nexport interface BumpPackageVersionResult {\n  bumpedContent: string | null;\n}\n\nexport interface UpdateLockedConfig {\n  packageFile: string;\n  packageFileContent?: string;\n  lockFile: string;\n  lockFileContent?: string;\n  depName: string;\n  currentVersion: string;\n  newVersion: string;\n  allowParentUpdates?: boolean;\n  allowHigherOrRemoved?: boolean;\n}\n\nexport interface UpdateLockedResult {\n  status: 'unsupported' | 'updated' | 'already-updated' | 'update-failed';\n  files?: Record<string, string>;\n}\n\nexport interface GlobalManagerConfig {\n  npmrc?: string;\n  npmrcMerge?: boolean;\n}\n\nexport interface ManagerApi extends ModuleApi {\n  defaultConfig: Record<string, unknown>;\n\n  categories?: Category[];\n  supportsLockFileMaintenance?: boolean;\n  supersedesManagers?: string[];\n  supportedDatasources: string[];\n\n  bumpPackageVersion?(\n    content: string,\n    currentValue: string,\n    bumpVersion: ReleaseType,\n    packageFile: string,\n  ): MaybePromise<BumpPackageVersionResult>;\n\n  detectGlobalConfig?(): MaybePromise<GlobalManagerConfig>;\n\n  extractAllPackageFiles?(\n    config: ExtractConfig,\n    files: string[],\n  ): MaybePromise<PackageFile[] | null>;\n\n  extractPackageFile?(\n    content: string,\n    packageFile?: string,\n    config?: ExtractConfig,\n  ): MaybePromise<PackageFileContent | null>;\n\n  getRangeStrategy?(config: RangeConfig): RangeStrategy;\n\n  updateArtifacts?(\n    updateArtifact: UpdateArtifact,\n  ): MaybePromise<UpdateArtifactsResult[] | null>;\n\n  updateDependency?(\n    updateDependencyConfig: UpdateDependencyConfig,\n  ): MaybePromise<string | null>;\n\n  updateLockedDependency?(\n    config: UpdateLockedConfig,\n  ): MaybePromise<UpdateLockedResult>;\n}\n\n// TODO: name and properties used by npm manager\nexport interface PostUpdateConfig<T = Record<string, any>>\n  extends Record<string, any>,\n    ManagerData<T> {\n  // TODO: remove null\n  constraints?: Record<string, string> | null;\n  updatedPackageFiles?: FileChange[];\n  postUpdateOptions?: string[];\n  skipArtifactsUpdate?: boolean;\n  skipInstalls?: boolean | null;\n  ignoreScripts?: boolean;\n\n  packageFile?: string;\n\n  upgrades: Upgrade[];\n  npmLock?: string;\n  yarnLock?: string;\n  branchName: string;\n  reuseExistingBranch?: boolean;\n\n  isLockFileMaintenance?: boolean;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../lib/modules/manager/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { ReleaseType } from 'semver';\nimport type {\n  MatchStringsStrategy,\n  UpdateType,\n  ValidationMessage,\n} from '../../config/types';\nimport type { Category } from '../../constants';\nimport type {\n  MaybePromise,\n  ModuleApi,\n  RangeStrategy,\n  SkipReason,\n  StageName,\n} from '../../types';\nimport type { FileChange } from '../../util/git/types';\nimport type { MergeConfidence } from '../../util/merge-confidence/types';\nimport type { Timestamp } from '../../util/timestamp';\nimport type { RegistryStrategy } from '../datasource';\nimport type { CustomExtractConfig } from './custom/types';\n\nexport interface ManagerData<T> {\n  managerData?: T;\n}\n\nexport interface ExtractConfig extends CustomExtractConfig {\n  registryAliases?: Record<string, string>;\n  npmrc?: string;\n  npmrcMerge?: boolean;\n  skipInstalls?: boolean | null;\n  repository?: string;\n  currentDigest?: string;\n  newDigest?: string;\n}\n\nexport interface UpdateArtifactsConfig {\n  isLockFileMaintenance?: boolean;\n  constraints?: Record<string, string>;\n  composerIgnorePlatformReqs?: string[];\n  goGetDirs?: string[];\n  currentValue?: string;\n  postUpdateOptions?: string[];\n  ignorePlugins?: boolean;\n  ignoreScripts?: boolean;\n  updateType?: UpdateType;\n  newValue?: string;\n  newVersion?: string;\n  newMajor?: number;\n  registryAliases?: Record<string, string>;\n  skipArtifactsUpdate?: boolean;\n  lockFiles?: string[];\n}\n\nexport interface RangeConfig<T = Record<string, any>> extends ManagerData<T> {\n  currentValue?: string;\n  depName?: string;\n  depType?: string;\n  manager?: string;\n  rangeStrategy: RangeStrategy;\n}\n\nexport interface PackageFileContent<T = Record<string, any>>\n  extends ManagerData<T> {\n  autoReplaceStringTemplate?: string;\n  extractedConstraints?: Record<string, string>;\n  datasource?: string;\n  registryUrls?: string[];\n  additionalRegistryUrls?: string[];\n  deps: PackageDependency[];\n  lockFiles?: string[];\n  npmrc?: string;\n  packageFileVersion?: string;\n  skipInstalls?: boolean | null;\n  matchStrings?: string[];\n  matchStringsStrategy?: MatchStringsStrategy;\n  fileFormat?: string;\n}\n\nexport interface PackageFile<T = Record<string, any>>\n  extends PackageFileContent<T> {\n  packageFile: string;\n}\n\nexport interface LookupUpdate {\n  bucket?: string;\n  branchName?: string;\n  commitMessageAction?: string;\n  isBump?: boolean;\n  isLockfileUpdate?: boolean;\n  isPin?: boolean;\n  isPinDigest?: boolean;\n  isRange?: boolean;\n  isRollback?: boolean;\n  isReplacement?: boolean;\n  newDigest?: string;\n  newMajor?: number;\n  newMinor?: number;\n  newPatch?: number;\n  newName?: string;\n  newValue?: string;\n  semanticCommitType?: string;\n  pendingChecks?: boolean;\n  pendingVersions?: string[];\n  newVersion?: string;\n  updateType?: UpdateType;\n  isBreaking?: boolean;\n  mergeConfidenceLevel?: MergeConfidence | undefined;\n  userStrings?: Record<string, string>;\n  checksumUrl?: string;\n  downloadUrl?: string;\n  releaseTimestamp?: Timestamp;\n  newVersionAgeInDays?: number;\n  registryUrl?: string;\n  libYears?: number;\n}\n\n/**\n * @property {string} depName - Display name of the package. See #16012\n * @property {string} packageName - The name of the package, used in comparisons. depName is used as fallback if this is not set. See #16012\n */\nexport interface PackageDependency<T = Record<string, any>>\n  extends ManagerData<T> {\n  currentValue?: string | null;\n  currentDigest?: string;\n  depName?: string;\n  depType?: string;\n  fileReplacePosition?: number;\n  sharedVariableName?: string;\n  lineNumber?: number;\n  packageName?: string;\n  target?: string;\n  versioning?: string;\n  dataType?: string;\n  enabled?: boolean;\n  bumpVersion?: ReleaseType;\n  npmPackageAlias?: boolean;\n  packageFileVersion?: string;\n  gitRef?: boolean;\n  sourceUrl?: string | null;\n  pinDigests?: boolean;\n  currentRawValue?: string;\n  major?: { enabled?: boolean };\n  prettyDepType?: string;\n  newValue?: string;\n  warnings?: ValidationMessage[];\n  commitMessageTopic?: string;\n  currentDigestShort?: string;\n  datasource?: string;\n  deprecationMessage?: string;\n  digestOneAndOnly?: boolean;\n  fixedVersion?: string;\n  currentVersion?: string;\n  currentVersionTimestamp?: string;\n  lockedVersion?: string;\n  propSource?: string;\n  registryUrls?: string[] | null;\n  rangeStrategy?: RangeStrategy;\n  skipReason?: SkipReason;\n  skipStage?: StageName;\n  sourceLine?: number;\n  newVersion?: string;\n  updates?: LookupUpdate[];\n  replaceString?: string;\n  autoReplaceStringTemplate?: string;\n  editFile?: string;\n  separateMinorPatch?: boolean;\n  extractVersion?: string;\n  isInternal?: boolean;\n  variableName?: string;\n  indentation?: string;\n\n  /**\n   * override data source's default strategy.\n   */\n  registryStrategy?: RegistryStrategy;\n\n  mostRecentTimestamp?: Timestamp;\n  isAbandoned?: boolean;\n}\n\nexport interface Upgrade<T = Record<string, any>> extends PackageDependency<T> {\n  workspace?: string;\n  isLockfileUpdate?: boolean;\n  currentRawValue?: any;\n  depGroup?: string;\n  lockFiles?: string[];\n  manager?: string;\n  name?: string;\n  newDigest?: string;\n  newFrom?: string;\n  newMajor?: number;\n  newName?: string;\n  newValue?: string;\n  packageFile?: string;\n  rangeStrategy?: RangeStrategy;\n  newVersion?: string;\n  updateType?: UpdateType;\n  version?: string;\n  isLockFileMaintenance?: boolean;\n  isRemediation?: boolean;\n  isVulnerabilityAlert?: boolean;\n  vulnerabilitySeverity?: string;\n  registryUrls?: string[] | null;\n  currentVersion?: string;\n  replaceString?: string;\n  replacementApproach?: 'replace' | 'alias';\n}\n\nexport interface ArtifactNotice {\n  file: string;\n  message: string;\n}\n\nexport interface ArtifactError {\n  fileName?: string;\n  lockFile?: string;\n  stderr?: string;\n}\n\nexport type UpdateArtifactsResult =\n  | {\n      file?: FileChange;\n      notice?: ArtifactNotice;\n      artifactError?: undefined;\n    }\n  | {\n      file?: undefined;\n      notice?: undefined;\n      artifactError?: ArtifactError;\n    };\n\nexport interface UpdateArtifact<T = Record<string, unknown>> {\n  packageFileName: string;\n  updatedDeps: Upgrade<T>[];\n  newPackageFileContent: string;\n  config: UpdateArtifactsConfig;\n}\n\nexport interface UpdateDependencyConfig<T = Record<string, any>> {\n  fileContent: string;\n  upgrade: Upgrade<T>;\n}\n\nexport interface BumpPackageVersionResult {\n  bumpedContent: string | null;\n}\n\nexport interface UpdateLockedConfig {\n  packageFile: string;\n  packageFileContent?: string;\n  lockFile: string;\n  lockFileContent?: string;\n  depName: string;\n  currentVersion: string;\n  newVersion: string;\n  allowParentUpdates?: boolean;\n  allowHigherOrRemoved?: boolean;\n}\n\nexport interface UpdateLockedResult {\n  status: 'unsupported' | 'updated' | 'already-updated' | 'update-failed';\n  files?: Record<string, string>;\n}\n\nexport interface GlobalManagerConfig {\n  npmrc?: string;\n  npmrcMerge?: boolean;\n}\n\nexport interface ManagerApi extends ModuleApi {\n  defaultConfig: Record<string, unknown>;\n\n  categories?: Category[];\n  supportsLockFileMaintenance?: boolean;\n  supersedesManagers?: string[];\n  supportedDatasources: string[];\n\n  bumpPackageVersion?(\n    content: string,\n    currentValue: string,\n    bumpVersion: ReleaseType,\n    packageFile: string,\n  ): MaybePromise<BumpPackageVersionResult>;\n\n  detectGlobalConfig?(): MaybePromise<GlobalManagerConfig>;\n\n  extractAllPackageFiles?(\n    config: ExtractConfig,\n    files: string[],\n  ): MaybePromise<PackageFile[] | null>;\n\n  extractPackageFile?(\n    content: string,\n    packageFile?: string,\n    config?: ExtractConfig,\n  ): MaybePromise<PackageFileContent | null>;\n\n  getRangeStrategy?(config: RangeConfig): RangeStrategy;\n\n  updateArtifacts?(\n    updateArtifact: UpdateArtifact,\n  ): MaybePromise<UpdateArtifactsResult[] | null>;\n\n  updateDependency?(\n    updateDependencyConfig: UpdateDependencyConfig,\n  ): MaybePromise<string | null>;\n\n  updateLockedDependency?(\n    config: UpdateLockedConfig,\n  ): MaybePromise<UpdateLockedResult>;\n}\n\n// TODO: name and properties used by npm manager\nexport interface PostUpdateConfig<T = Record<string, any>>\n  extends Record<string, any>,\n    ManagerData<T> {\n  // TODO: remove null\n  constraints?: Record<string, string> | null;\n  updatedPackageFiles?: FileChange[];\n  postUpdateOptions?: string[];\n  skipArtifactsUpdate?: boolean;\n  skipInstalls?: boolean | null;\n  ignoreScripts?: boolean;\n\n  packageFile?: string;\n\n  upgrades: Upgrade[];\n  npmLock?: string;\n  yarnLock?: string;\n  branchName: string;\n  reuseExistingBranch?: boolean;\n\n  isLockFileMaintenance?: boolean;\n}\n"]}

package/dist/modules/manager/typst/extract.d.ts

@@ -0,0 +1,2 @@
+import type { PackageFileContent } from '../types';
+export declare function extractPackageFile(content: string): PackageFileContent;

package/dist/modules/manager/typst/extract.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractPackageFile = extractPackageFile;
+const tslib_1 = require("tslib");
+const strip_json_comments_1 = tslib_1.__importDefault(require("strip-json-comments"));
+const regex_1 = require("../../../util/regex");
+const typst_1 = require("../../datasource/typst");
+function extractPackageFile(content) {
+    const lines = (0, strip_json_comments_1.default)(content).split(regex_1.newlineRegex);
+    const deps = [];
+    const importRegex = /#import\s+"@(?<namespace>[^/]+)\/(?<pkg>[^:]+):(?<version>[^"]+)"/g;
+    for (const line of lines) {
+        for (const match of line.matchAll(importRegex)) {
+            const { namespace, pkg, version } = match.groups;
+            const dep = {
+                datasource: typst_1.TypstDatasource.id,
+                packageName: `${namespace}/${pkg}`,
+                currentValue: version,
+            };
+            if (namespace === 'preview') {
+                dep.depName = pkg;
+            }
+            if (namespace !== 'preview') {
+                dep.skipReason = namespace === 'local' ? 'local' : 'unsupported';
+            }
+            deps.push(dep);
+        }
+    }
+    return { deps };
+}
+//# sourceMappingURL=extract.js.map

package/dist/modules/manager/typst/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../../../../lib/modules/manager/typst/extract.ts"],"names":[],"mappings":";;AAKA,gDA6BC;;AAlCD,sFAAoD;AACpD,+CAAmD;AACnD,kDAAyD;AAGzD,SAAgB,kBAAkB,CAAC,OAAe;IAChD,MAAM,KAAK,GAAG,IAAA,6BAAiB,EAAC,OAAO,CAAC,CAAC,KAAK,CAAC,oBAAY,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAwB,EAAE,CAAC;IAErC,MAAM,WAAW,GACf,oEAAoE,CAAC;IAEvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAO,CAAC;YAClD,MAAM,GAAG,GAAsB;gBAC7B,UAAU,EAAE,uBAAe,CAAC,EAAE;gBAC9B,WAAW,EAAE,GAAG,SAAS,IAAI,GAAG,EAAE;gBAClC,YAAY,EAAE,OAAO;aACtB,CAAC;YAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC;YACpB,CAAC;YAED,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,UAAU,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC","sourcesContent":["import stripJsonComments from 'strip-json-comments';\nimport { newlineRegex } from '../../../util/regex';\nimport { TypstDatasource } from '../../datasource/typst';\nimport type { PackageDependency, PackageFileContent } from '../types';\n\nexport function extractPackageFile(content: string): PackageFileContent {\n  const lines = stripJsonComments(content).split(newlineRegex);\n  const deps: PackageDependency[] = [];\n\n  const importRegex =\n    /#import\\s+\"@(?<namespace>[^/]+)\\/(?<pkg>[^:]+):(?<version>[^\"]+)\"/g;\n\n  for (const line of lines) {\n    for (const match of line.matchAll(importRegex)) {\n      const { namespace, pkg, version } = match.groups!;\n      const dep: PackageDependency = {\n        datasource: TypstDatasource.id,\n        packageName: `${namespace}/${pkg}`,\n        currentValue: version,\n      };\n\n      if (namespace === 'preview') {\n        dep.depName = pkg;\n      }\n\n      if (namespace !== 'preview') {\n        dep.skipReason = namespace === 'local' ? 'local' : 'unsupported';\n      }\n\n      deps.push(dep);\n    }\n  }\n\n  return { deps };\n}\n"]}

package/dist/modules/manager/typst/index.d.ts

@@ -0,0 +1,7 @@
+import { extractPackageFile } from './extract';
+export { extractPackageFile };
+export declare const displayName = "Typst package";
+export declare const defaultConfig: {
+    managerFilePatterns: string[];
+};
+export declare const supportedDatasources: string[];

package/dist/modules/manager/typst/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.supportedDatasources = exports.defaultConfig = exports.displayName = exports.extractPackageFile = void 0;
+const typst_1 = require("../../datasource/typst");
+const extract_1 = require("./extract");
+Object.defineProperty(exports, "extractPackageFile", { enumerable: true, get: function () { return extract_1.extractPackageFile; } });
+exports.displayName = 'Typst package';
+exports.defaultConfig = {
+    managerFilePatterns: ['/\\.typ$/'],
+};
+exports.supportedDatasources = [typst_1.TypstDatasource.id];
+//# sourceMappingURL=index.js.map

package/dist/modules/manager/typst/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../lib/modules/manager/typst/index.ts"],"names":[],"mappings":";;;AAAA,kDAAyD;AACzD,uCAA+C;AAEtC,mGAFA,4BAAkB,OAEA;AAEd,QAAA,WAAW,GAAG,eAAe,CAAC;AAE9B,QAAA,aAAa,GAAG;IAC3B,mBAAmB,EAAE,CAAC,WAAW,CAAC;CACnC,CAAC;AAEW,QAAA,oBAAoB,GAAG,CAAC,uBAAe,CAAC,EAAE,CAAC,CAAC","sourcesContent":["import { TypstDatasource } from '../../datasource/typst';\nimport { extractPackageFile } from './extract';\n\nexport { extractPackageFile };\n\nexport const displayName = 'Typst package';\n\nexport const defaultConfig = {\n  managerFilePatterns: ['/\\\\.typ$/'],\n};\n\nexport const supportedDatasources = [TypstDatasource.id];\n"]}

package/dist/modules/manager/util.js

@@ -15,8 +15,9 @@ function applyGitSource(dep, git, rev, tag, branch) {
                 platform === 'github'
                     ? github_tags_1.GithubTagsDatasource.id
                     : gitlab_tags_1.GitlabTagsDatasource.id;
-            const { protocol, source, full_name } = (0, url_1.parseGitUrl)(git);
-            dep.registryUrls = [`${protocol}://${source}`];
+            const { source, full_name } = (0, url_1.parseGitUrl)(git);
+            // Always use HTTPS for GitHub/GitLab API endpoints, even if the git URL protocol is SSH.
+            dep.registryUrls = [`https://${source}`];
             dep.packageName = full_name;
         }
         else {

package/dist/modules/manager/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../lib/modules/manager/util.ts"],"names":[],"mappings":";;AAQA,wCAmCC;AA3CD,8CAAmD;AACnD,4CAAiD;AACjD,qDAA2D;AAC3D,qDAA2D;AAC3D,2DAAiE;AACjE,2DAAiE;AAGjE,SAAgB,cAAc,CAC5B,GAAsB,EACtB,GAAW,EACX,GAAuB,EACvB,GAAuB,EACvB,MAA0B;IAE1B,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnD,GAAG,CAAC,UAAU;gBACZ,QAAQ,KAAK,QAAQ;oBACnB,CAAC,CAAC,kCAAoB,CAAC,EAAE;oBACzB,CAAC,CAAC,kCAAoB,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,iBAAW,EAAC,GAAG,CAAC,CAAC;YACzD,GAAG,CAAC,YAAY,GAAG,CAAC,GAAG,QAAQ,MAAM,MAAM,EAAE,CAAC,CAAC;YAC/C,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,UAAU,GAAG,4BAAiB,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;QACxB,CAAC;QACD,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC;QACvB,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,IAAI,GAAG,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,GAAG,4BAAiB,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;QACtB,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;QACxB,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;QACxB,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,UAAU,GAAG,4BAAiB,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;QACtB,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC;QAC1B,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACrE,CAAC;AACH,CAAC","sourcesContent":["import { detectPlatform } from '../../util/common';\nimport { parseGitUrl } from '../../util/git/url';\nimport { GitRefsDatasource } from '../datasource/git-refs';\nimport { GitTagsDatasource } from '../datasource/git-tags';\nimport { GithubTagsDatasource } from '../datasource/github-tags';\nimport { GitlabTagsDatasource } from '../datasource/gitlab-tags';\nimport type { PackageDependency } from './types';\n\nexport function applyGitSource(\n  dep: PackageDependency,\n  git: string,\n  rev: string | undefined,\n  tag: string | undefined,\n  branch: string | undefined,\n): void {\n  if (tag) {\n    const platform = detectPlatform(git);\n    if (platform === 'github' || platform === 'gitlab') {\n      dep.datasource =\n        platform === 'github'\n          ? GithubTagsDatasource.id\n          : GitlabTagsDatasource.id;\n      const { protocol, source, full_name } = parseGitUrl(git);\n      dep.registryUrls = [`${protocol}://${source}`];\n      dep.packageName = full_name;\n    } else {\n      dep.datasource = GitTagsDatasource.id;\n      dep.packageName = git;\n    }\n    dep.currentValue = tag;\n    dep.skipReason = undefined;\n  } else if (rev) {\n    dep.datasource = GitRefsDatasource.id;\n    dep.packageName = git;\n    dep.currentDigest = rev;\n    dep.replaceString = rev;\n    dep.skipReason = undefined;\n  } else {\n    dep.datasource = GitRefsDatasource.id;\n    dep.packageName = git;\n    dep.currentValue = branch;\n    dep.skipReason = branch ? 'git-dependency' : 'unspecified-version';\n  }\n}\n"]}
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../lib/modules/manager/util.ts"],"names":[],"mappings":";;AAQA,wCAoCC;AA5CD,8CAAmD;AACnD,4CAAiD;AACjD,qDAA2D;AAC3D,qDAA2D;AAC3D,2DAAiE;AACjE,2DAAiE;AAGjE,SAAgB,cAAc,CAC5B,GAAsB,EACtB,GAAW,EACX,GAAuB,EACvB,GAAuB,EACvB,MAA0B;IAE1B,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,QAAQ,GAAG,IAAA,uBAAc,EAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACnD,GAAG,CAAC,UAAU;gBACZ,QAAQ,KAAK,QAAQ;oBACnB,CAAC,CAAC,kCAAoB,CAAC,EAAE;oBACzB,CAAC,CAAC,kCAAoB,CAAC,EAAE,CAAC;YAC9B,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,iBAAW,EAAC,GAAG,CAAC,CAAC;YAC/C,yFAAyF;YACzF,GAAG,CAAC,YAAY,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;YACzC,GAAG,CAAC,WAAW,GAAG,SAAS,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,UAAU,GAAG,4BAAiB,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;QACxB,CAAC;QACD,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC;QACvB,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,IAAI,GAAG,EAAE,CAAC;QACf,GAAG,CAAC,UAAU,GAAG,4BAAiB,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;QACtB,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;QACxB,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;QACxB,GAAG,CAAC,UAAU,GAAG,SAAS,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,UAAU,GAAG,4BAAiB,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;QACtB,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC;QAC1B,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACrE,CAAC;AACH,CAAC","sourcesContent":["import { detectPlatform } from '../../util/common';\nimport { parseGitUrl } from '../../util/git/url';\nimport { GitRefsDatasource } from '../datasource/git-refs';\nimport { GitTagsDatasource } from '../datasource/git-tags';\nimport { GithubTagsDatasource } from '../datasource/github-tags';\nimport { GitlabTagsDatasource } from '../datasource/gitlab-tags';\nimport type { PackageDependency } from './types';\n\nexport function applyGitSource(\n  dep: PackageDependency,\n  git: string,\n  rev: string | undefined,\n  tag: string | undefined,\n  branch: string | undefined,\n): void {\n  if (tag) {\n    const platform = detectPlatform(git);\n    if (platform === 'github' || platform === 'gitlab') {\n      dep.datasource =\n        platform === 'github'\n          ? GithubTagsDatasource.id\n          : GitlabTagsDatasource.id;\n      const { source, full_name } = parseGitUrl(git);\n      // Always use HTTPS for GitHub/GitLab API endpoints, even if the git URL protocol is SSH.\n      dep.registryUrls = [`https://${source}`];\n      dep.packageName = full_name;\n    } else {\n      dep.datasource = GitTagsDatasource.id;\n      dep.packageName = git;\n    }\n    dep.currentValue = tag;\n    dep.skipReason = undefined;\n  } else if (rev) {\n    dep.datasource = GitRefsDatasource.id;\n    dep.packageName = git;\n    dep.currentDigest = rev;\n    dep.replaceString = rev;\n    dep.skipReason = undefined;\n  } else {\n    dep.datasource = GitRefsDatasource.id;\n    dep.packageName = git;\n    dep.currentValue = branch;\n    dep.skipReason = branch ? 'git-dependency' : 'unspecified-version';\n  }\n}\n"]}

package/dist/modules/manager/vendir/schema.d.ts

@@ -43,14 +43,14 @@ export declare const HelmChart: z.ZodObject<{
         url: string;
     }>;
 }, "strip", z.ZodTypeAny, {
-    name: string;
     version: string;
+    name: string;
     repository: {
         url: string;
     };
 }, {
-    name: string;
     version: string;
+    name: string;
     repository: {
         url: string;
     };
@@ -68,14 +68,14 @@ export declare const HelmChartContent: z.ZodObject<{
             url: string;
         }>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
     }, {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
@@ -83,8 +83,8 @@ export declare const HelmChartContent: z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     path: string;
     helmChart: {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
@@ -92,8 +92,8 @@ export declare const HelmChartContent: z.ZodObject<{
 }, {
     path: string;
     helmChart: {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
@@ -167,14 +167,14 @@ export declare const Contents: z.ZodUnion<[z.ZodObject<{
             url: string;
         }>;
     }, "strip", z.ZodTypeAny, {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
     }, {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
@@ -182,8 +182,8 @@ export declare const Contents: z.ZodUnion<[z.ZodObject<{
 }, "strip", z.ZodTypeAny, {
     path: string;
     helmChart: {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
@@ -191,8 +191,8 @@ export declare const Contents: z.ZodUnion<[z.ZodObject<{
 }, {
     path: string;
     helmChart: {
-        name: string;
         version: string;
+        name: string;
         repository: {
             url: string;
         };
@@ -260,8 +260,8 @@ export declare const Vendir: z.ZodObject<{
         contents: z.ZodEffects<z.ZodArray<z.ZodAny, "many">, ({
             path: string;
             helmChart: {
-                name: string;
                 version: string;
+                name: string;
                 repository: {
                     url: string;
                 };
@@ -285,8 +285,8 @@ export declare const Vendir: z.ZodObject<{
         contents: ({
             path: string;
             helmChart: {
-                name: string;
                 version: string;
+                name: string;
                 repository: {
                     url: string;
                 };
@@ -317,8 +317,8 @@ export declare const Vendir: z.ZodObject<{
         contents: ({
             path: string;
             helmChart: {
-                name: string;
                 version: string;
+                name: string;
                 repository: {
                     url: string;
                 };

package/dist/modules/platform/azure/azure-helper.js

@@ -51,7 +51,7 @@ async function getFile(repoId, filePath, branchName) {
     if (item?.readable) {
         const fileContent = await (0, streams_1.streamToString)(item);
         try {
-            const result = schema_1.WrappedExceptionSchema.safeParse(fileContent);
+            const result = schema_1.WrappedException.safeParse(fileContent);
             if (result.success) {
                 if (result.data.typeKey === 'GitItemNotFoundException') {
                     logger_1.logger.warn({ filePath }, 'Unable to find file');

package/dist/modules/platform/azure/azure-helper.js.map

@@ -1 +1 @@
-{"version":3,"file":"azure-helper.js","sourceRoot":"","sources":["../../../../lib/modules/platform/azure/azure-helper.ts"],"names":[],"mappings":";;AAkBA,0BAYC;AAOD,8CAoBC;AAGD,0BA6CC;AAED,4CAQC;AAED,wCAgEC;AAED,gDAiBC;;AAnMD,wFAAgG;AAChG,4CAAyC;AACzC,mDAAuD;AACvD,kCAA2C;AAC3C,sEAAgD;AAChD,qCAAkD;AAClD,iCAGgB;AAEhB,MAAM,eAAe,GAAG,sCAAsC,CAAC,CAAC,sDAAsD;AAE/G,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,UAAmB;IAEnB,eAAM,CAAC,KAAK,CAAC,WAAW,MAAM,KAAK,UAAW,GAAG,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CACpC,MAAM,EACN,SAAS,EACT,IAAA,qCAA8B,EAAC,UAAU,CAAC,CAC3C,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAOM,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,UAAkB,EAClB,IAAa;IAEb,MAAM,cAAc,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,eAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3E,sBAAsB;QACtB,OAAO;YACL,IAAI,EAAE,IAAA,uBAAgB,EAAC,UAAU,CAAE;YACnC,WAAW,EAAE,0CAA0C;SACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,+BAA+B;QAC/B,IAAI,EAAE,IAAA,uBAAgB,EAAC,UAAU,CAAE;QACnC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAS;KAC/B,CAAC;AACJ,CAAC;AAED,kCAAkC;AAC3B,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,QAAgB,EAChB,UAAkB;IAElB,eAAM,CAAC,KAAK,CAAC,oBAAoB,QAAQ,gBAAgB,UAAU,GAAG,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,WAAW,CACxC,MAAM,EACN,QAAQ,EACR,SAAS,EACT,SAAS,EACT,CAAC,EAAE,6BAA6B;IAChC,KAAK,EACL,KAAK,EACL,IAAI,EACJ;QACE,WAAW,EAAE,CAAC,EAAE,SAAS;QACzB,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,IAAA,0CAAmC,EAAC,UAAU,CAAC;KACzD,CACF,CAAC;IAEF,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,MAAM,IAAA,wBAAc,EAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,+BAAsB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC7D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;oBACvD,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,kCAAkC,EAAE,CAAC;oBAC/D,eAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,uBAAuB,CAAC,CAAC;oBACrD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,qBAAqB,CAAC,CAAC;YAC7B,uEAAuE;QACzE,CAAC,CAAC,oBAAoB;QAEtB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,gBAAgB;AAC/B,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,MAAc;IAEd,eAAM,CAAC,KAAK,CAAC,oBAAoB,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,OAAe,EACf,SAAyB,EACzB,aAAsB;IAEtB,eAAM,CAAC,KAAK,CACV,4BAA4B,SAAS,mBAAmB,aAAa,GAAG,CACzE,CAAC;IAMF,MAAM,eAAe,GAAG,CAAC,KAAY,EAAW,EAAE;QAChD,IACE,KAAK,CAAC,SAAS,KAAK,eAAe;YACnC,uBAAuB;YACvB,CAAC,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,aAAc,EAAE,CAAC,EAC5D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,cAAc;QACd,OAAO,KAAK,CAAC,SAAS,KAAK,OAAO;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;YAC7B,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,CAC3B,MAAM,CACJ,MAAM,QAAQ,CAAC,SAAS,EAAE,CAC3B,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAC/D;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7B,eAAM,CAAC,KAAK;IACV,uBAAuB;IACvB,4BAA4B,SAAU,mDAAmD,IAAI,CAAC,SAAS,CACrG,oBAAoB,EACpB,IAAI,EACJ,CAAC,CACF,EAAE,CACJ,CAAC;IAEF,IAAI,CAAC;QACH,4BAA4B;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACrC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,8CAA2B,CACzB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,CACoB,CAC5C;aACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,8CAA2B,CAAC,aAAa,CAAC;IACnD,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,SAAiB;IAEjB,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC;IAChB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,GAAG,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,GAAG,CAAC;IACd,CAAC,QAAQ,GAAG,IAAI,MAAM,EAAE;IAExB,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import type { WebApiTeam } from 'azure-devops-node-api/interfaces/CoreInterfaces.js';\nimport type {\n  GitCommit,\n  GitRef,\n} from 'azure-devops-node-api/interfaces/GitInterfaces.js';\nimport { GitPullRequestMergeStrategy } from 'azure-devops-node-api/interfaces/GitInterfaces.js';\nimport { logger } from '../../../logger';\nimport { streamToString } from '../../../util/streams';\nimport { getNewBranchName } from '../util';\nimport * as azureApi from './azure-got-wrapper';\nimport { WrappedExceptionSchema } from './schema';\nimport {\n  getBranchNameWithoutRefsPrefix,\n  getBranchNameWithoutRefsheadsPrefix,\n} from './util';\n\nconst mergePolicyGuid = 'fa4e907d-c16b-4a4c-9dfa-4916e5d171ab'; // Magic GUID for merge strategy policy configurations\n\nexport async function getRefs(\n  repoId: string,\n  branchName?: string,\n): Promise<GitRef[]> {\n  logger.debug(`getRefs(${repoId}, ${branchName!})`);\n  const azureApiGit = await azureApi.gitApi();\n  const refs = await azureApiGit.getRefs(\n    repoId,\n    undefined,\n    getBranchNameWithoutRefsPrefix(branchName),\n  );\n  return refs;\n}\n\nexport interface AzureBranchObj {\n  name: string;\n  oldObjectId: string;\n}\n\nexport async function getAzureBranchObj(\n  repoId: string,\n  branchName: string,\n  from?: string,\n): Promise<AzureBranchObj> {\n  const fromBranchName = getNewBranchName(from);\n  const refs = await getRefs(repoId, fromBranchName);\n  if (refs.length === 0) {\n    logger.debug(`getAzureBranchObj without a valid from, so initial commit.`);\n    // TODO: fix undefined\n    return {\n      name: getNewBranchName(branchName)!,\n      oldObjectId: '0000000000000000000000000000000000000000',\n    };\n  }\n  return {\n    // TODO: fix undefined (#22198)\n    name: getNewBranchName(branchName)!,\n    oldObjectId: refs[0].objectId!,\n  };\n}\n\n// if no branchName, look globally\nexport async function getFile(\n  repoId: string,\n  filePath: string,\n  branchName: string,\n): Promise<string | null> {\n  logger.trace(`getFile(filePath=${filePath}, branchName=${branchName})`);\n  const azureApiGit = await azureApi.gitApi();\n  const item = await azureApiGit.getItemText(\n    repoId,\n    filePath,\n    undefined,\n    undefined,\n    0, // because we look for 1 file\n    false,\n    false,\n    true,\n    {\n      versionType: 0, // branch\n      versionOptions: 0,\n      version: getBranchNameWithoutRefsheadsPrefix(branchName),\n    },\n  );\n\n  if (item?.readable) {\n    const fileContent = await streamToString(item);\n    try {\n      const result = WrappedExceptionSchema.safeParse(fileContent);\n      if (result.success) {\n        if (result.data.typeKey === 'GitItemNotFoundException') {\n          logger.warn({ filePath }, 'Unable to find file');\n          return null;\n        }\n        if (result.data.typeKey === 'GitUnresolvableToCommitException') {\n          logger.warn({ branchName }, 'Unable to find branch');\n          return null;\n        }\n      }\n    } catch /* v8 ignore start */ {\n      // it 's not a JSON, so I send the content directly with the line under\n    } /* v8 ignore stop */\n\n    return fileContent;\n  }\n\n  return null; // no file found\n}\n\nexport async function getCommitDetails(\n  commit: string,\n  repoId: string,\n): Promise<GitCommit> {\n  logger.debug(`getCommitDetails(${commit}, ${repoId})`);\n  const azureApiGit = await azureApi.gitApi();\n  const results = await azureApiGit.getCommit(commit, repoId);\n  return results;\n}\n\nexport async function getMergeMethod(\n  repoId: string,\n  project: string,\n  branchRef?: string | null,\n  defaultBranch?: string,\n): Promise<GitPullRequestMergeStrategy> {\n  logger.debug(\n    `getMergeMethod(branchRef=${branchRef}, defaultBranch=${defaultBranch})`,\n  );\n  interface Scope {\n    repositoryId: string;\n    refName?: string;\n    matchKind: 'Prefix' | 'Exact' | 'DefaultBranch';\n  }\n  const isRelevantScope = (scope: Scope): boolean => {\n    if (\n      scope.matchKind === 'DefaultBranch' &&\n      // TODO: types (#22198)\n      (!branchRef || branchRef === `refs/heads/${defaultBranch!}`)\n    ) {\n      return true;\n    }\n    if (scope.repositoryId !== repoId && scope.repositoryId !== null) {\n      return false;\n    }\n    if (!branchRef) {\n      return true;\n    }\n    // TODO #22198\n    return scope.matchKind === 'Exact'\n      ? scope.refName === branchRef\n      : branchRef.startsWith(scope.refName!);\n  };\n\n  const policyConfigurations = (\n    await (\n      await azureApi.policyApi()\n    ).getPolicyConfigurations(project, undefined, mergePolicyGuid)\n  )\n    .filter((p) => p.settings.scope.some(isRelevantScope))\n    .map((p) => p.settings)[0];\n\n  logger.debug(\n    // TODO: types (#22198)\n    `getMergeMethod(branchRef=${branchRef!}) determining mergeMethod from matched policy:\\n${JSON.stringify(\n      policyConfigurations,\n      null,\n      4,\n    )}`,\n  );\n\n  try {\n    // TODO: fix me, wrong types\n    return Object.keys(policyConfigurations)\n      .map(\n        (p) =>\n          GitPullRequestMergeStrategy[\n            p.slice(5) as never\n          ] as never as GitPullRequestMergeStrategy,\n      )\n      .find((p) => p)!;\n  } catch {\n    return GitPullRequestMergeStrategy.NoFastForward;\n  }\n}\n\nexport async function getAllProjectTeams(\n  projectId: string,\n): Promise<WebApiTeam[]> {\n  const allTeams: WebApiTeam[] = [];\n  const azureApiCore = await azureApi.coreApi();\n  const top = 100;\n  let skip = 0;\n  let length = 0;\n\n  do {\n    const teams = await azureApiCore.getTeams(projectId, undefined, top, skip);\n    length = teams.length;\n    allTeams.push(...teams);\n    skip += top;\n  } while (top <= length);\n\n  return allTeams;\n}\n"]}
+{"version":3,"file":"azure-helper.js","sourceRoot":"","sources":["../../../../lib/modules/platform/azure/azure-helper.ts"],"names":[],"mappings":";;AAkBA,0BAYC;AAOD,8CAoBC;AAGD,0BA6CC;AAED,4CAQC;AAED,wCAgEC;AAED,gDAiBC;;AAnMD,wFAAgG;AAChG,4CAAyC;AACzC,mDAAuD;AACvD,kCAA2C;AAC3C,sEAAgD;AAChD,qCAA4C;AAC5C,iCAGgB;AAEhB,MAAM,eAAe,GAAG,sCAAsC,CAAC,CAAC,sDAAsD;AAE/G,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,UAAmB;IAEnB,eAAM,CAAC,KAAK,CAAC,WAAW,MAAM,KAAK,UAAW,GAAG,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,OAAO,CACpC,MAAM,EACN,SAAS,EACT,IAAA,qCAA8B,EAAC,UAAU,CAAC,CAC3C,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAOM,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,UAAkB,EAClB,IAAa;IAEb,MAAM,cAAc,GAAG,IAAA,uBAAgB,EAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,eAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC3E,sBAAsB;QACtB,OAAO;YACL,IAAI,EAAE,IAAA,uBAAgB,EAAC,UAAU,CAAE;YACnC,WAAW,EAAE,0CAA0C;SACxD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,+BAA+B;QAC/B,IAAI,EAAE,IAAA,uBAAgB,EAAC,UAAU,CAAE;QACnC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,QAAS;KAC/B,CAAC;AACJ,CAAC;AAED,kCAAkC;AAC3B,KAAK,UAAU,OAAO,CAC3B,MAAc,EACd,QAAgB,EAChB,UAAkB;IAElB,eAAM,CAAC,KAAK,CAAC,oBAAoB,QAAQ,gBAAgB,UAAU,GAAG,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,WAAW,CACxC,MAAM,EACN,QAAQ,EACR,SAAS,EACT,SAAS,EACT,CAAC,EAAE,6BAA6B;IAChC,KAAK,EACL,KAAK,EACL,IAAI,EACJ;QACE,WAAW,EAAE,CAAC,EAAE,SAAS;QACzB,cAAc,EAAE,CAAC;QACjB,OAAO,EAAE,IAAA,0CAAmC,EAAC,UAAU,CAAC;KACzD,CACF,CAAC;IAEF,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,MAAM,IAAA,wBAAc,EAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,yBAAgB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,0BAA0B,EAAE,CAAC;oBACvD,eAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,KAAK,kCAAkC,EAAE,CAAC;oBAC/D,eAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,uBAAuB,CAAC,CAAC;oBACrD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,qBAAqB,CAAC,CAAC;YAC7B,uEAAuE;QACzE,CAAC,CAAC,oBAAoB;QAEtB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,IAAI,CAAC,CAAC,gBAAgB;AAC/B,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,MAAc;IAEd,eAAM,CAAC,KAAK,CAAC,oBAAoB,MAAM,KAAK,MAAM,GAAG,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,OAAO,CAAC;AACjB,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,OAAe,EACf,SAAyB,EACzB,aAAsB;IAEtB,eAAM,CAAC,KAAK,CACV,4BAA4B,SAAS,mBAAmB,aAAa,GAAG,CACzE,CAAC;IAMF,MAAM,eAAe,GAAG,CAAC,KAAY,EAAW,EAAE;QAChD,IACE,KAAK,CAAC,SAAS,KAAK,eAAe;YACnC,uBAAuB;YACvB,CAAC,CAAC,SAAS,IAAI,SAAS,KAAK,cAAc,aAAc,EAAE,CAAC,EAC5D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC;QACd,CAAC;QACD,cAAc;QACd,OAAO,KAAK,CAAC,SAAS,KAAK,OAAO;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;YAC7B,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,OAAQ,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,CAC3B,MAAM,CACJ,MAAM,QAAQ,CAAC,SAAS,EAAE,CAC3B,CAAC,uBAAuB,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAC/D;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;SACrD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7B,eAAM,CAAC,KAAK;IACV,uBAAuB;IACvB,4BAA4B,SAAU,mDAAmD,IAAI,CAAC,SAAS,CACrG,oBAAoB,EACpB,IAAI,EACJ,CAAC,CACF,EAAE,CACJ,CAAC;IAEF,IAAI,CAAC;QACH,4BAA4B;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACrC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,8CAA2B,CACzB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,CACoB,CAC5C;aACA,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,8CAA2B,CAAC,aAAa,CAAC;IACnD,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB,CACtC,SAAiB;IAEjB,MAAM,QAAQ,GAAiB,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC;IAChB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,GAAG,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3E,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,GAAG,CAAC;IACd,CAAC,QAAQ,GAAG,IAAI,MAAM,EAAE;IAExB,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["import type { WebApiTeam } from 'azure-devops-node-api/interfaces/CoreInterfaces.js';\nimport type {\n  GitCommit,\n  GitRef,\n} from 'azure-devops-node-api/interfaces/GitInterfaces.js';\nimport { GitPullRequestMergeStrategy } from 'azure-devops-node-api/interfaces/GitInterfaces.js';\nimport { logger } from '../../../logger';\nimport { streamToString } from '../../../util/streams';\nimport { getNewBranchName } from '../util';\nimport * as azureApi from './azure-got-wrapper';\nimport { WrappedException } from './schema';\nimport {\n  getBranchNameWithoutRefsPrefix,\n  getBranchNameWithoutRefsheadsPrefix,\n} from './util';\n\nconst mergePolicyGuid = 'fa4e907d-c16b-4a4c-9dfa-4916e5d171ab'; // Magic GUID for merge strategy policy configurations\n\nexport async function getRefs(\n  repoId: string,\n  branchName?: string,\n): Promise<GitRef[]> {\n  logger.debug(`getRefs(${repoId}, ${branchName!})`);\n  const azureApiGit = await azureApi.gitApi();\n  const refs = await azureApiGit.getRefs(\n    repoId,\n    undefined,\n    getBranchNameWithoutRefsPrefix(branchName),\n  );\n  return refs;\n}\n\nexport interface AzureBranchObj {\n  name: string;\n  oldObjectId: string;\n}\n\nexport async function getAzureBranchObj(\n  repoId: string,\n  branchName: string,\n  from?: string,\n): Promise<AzureBranchObj> {\n  const fromBranchName = getNewBranchName(from);\n  const refs = await getRefs(repoId, fromBranchName);\n  if (refs.length === 0) {\n    logger.debug(`getAzureBranchObj without a valid from, so initial commit.`);\n    // TODO: fix undefined\n    return {\n      name: getNewBranchName(branchName)!,\n      oldObjectId: '0000000000000000000000000000000000000000',\n    };\n  }\n  return {\n    // TODO: fix undefined (#22198)\n    name: getNewBranchName(branchName)!,\n    oldObjectId: refs[0].objectId!,\n  };\n}\n\n// if no branchName, look globally\nexport async function getFile(\n  repoId: string,\n  filePath: string,\n  branchName: string,\n): Promise<string | null> {\n  logger.trace(`getFile(filePath=${filePath}, branchName=${branchName})`);\n  const azureApiGit = await azureApi.gitApi();\n  const item = await azureApiGit.getItemText(\n    repoId,\n    filePath,\n    undefined,\n    undefined,\n    0, // because we look for 1 file\n    false,\n    false,\n    true,\n    {\n      versionType: 0, // branch\n      versionOptions: 0,\n      version: getBranchNameWithoutRefsheadsPrefix(branchName),\n    },\n  );\n\n  if (item?.readable) {\n    const fileContent = await streamToString(item);\n    try {\n      const result = WrappedException.safeParse(fileContent);\n      if (result.success) {\n        if (result.data.typeKey === 'GitItemNotFoundException') {\n          logger.warn({ filePath }, 'Unable to find file');\n          return null;\n        }\n        if (result.data.typeKey === 'GitUnresolvableToCommitException') {\n          logger.warn({ branchName }, 'Unable to find branch');\n          return null;\n        }\n      }\n    } catch /* v8 ignore start */ {\n      // it 's not a JSON, so I send the content directly with the line under\n    } /* v8 ignore stop */\n\n    return fileContent;\n  }\n\n  return null; // no file found\n}\n\nexport async function getCommitDetails(\n  commit: string,\n  repoId: string,\n): Promise<GitCommit> {\n  logger.debug(`getCommitDetails(${commit}, ${repoId})`);\n  const azureApiGit = await azureApi.gitApi();\n  const results = await azureApiGit.getCommit(commit, repoId);\n  return results;\n}\n\nexport async function getMergeMethod(\n  repoId: string,\n  project: string,\n  branchRef?: string | null,\n  defaultBranch?: string,\n): Promise<GitPullRequestMergeStrategy> {\n  logger.debug(\n    `getMergeMethod(branchRef=${branchRef}, defaultBranch=${defaultBranch})`,\n  );\n  interface Scope {\n    repositoryId: string;\n    refName?: string;\n    matchKind: 'Prefix' | 'Exact' | 'DefaultBranch';\n  }\n  const isRelevantScope = (scope: Scope): boolean => {\n    if (\n      scope.matchKind === 'DefaultBranch' &&\n      // TODO: types (#22198)\n      (!branchRef || branchRef === `refs/heads/${defaultBranch!}`)\n    ) {\n      return true;\n    }\n    if (scope.repositoryId !== repoId && scope.repositoryId !== null) {\n      return false;\n    }\n    if (!branchRef) {\n      return true;\n    }\n    // TODO #22198\n    return scope.matchKind === 'Exact'\n      ? scope.refName === branchRef\n      : branchRef.startsWith(scope.refName!);\n  };\n\n  const policyConfigurations = (\n    await (\n      await azureApi.policyApi()\n    ).getPolicyConfigurations(project, undefined, mergePolicyGuid)\n  )\n    .filter((p) => p.settings.scope.some(isRelevantScope))\n    .map((p) => p.settings)[0];\n\n  logger.debug(\n    // TODO: types (#22198)\n    `getMergeMethod(branchRef=${branchRef!}) determining mergeMethod from matched policy:\\n${JSON.stringify(\n      policyConfigurations,\n      null,\n      4,\n    )}`,\n  );\n\n  try {\n    // TODO: fix me, wrong types\n    return Object.keys(policyConfigurations)\n      .map(\n        (p) =>\n          GitPullRequestMergeStrategy[\n            p.slice(5) as never\n          ] as never as GitPullRequestMergeStrategy,\n      )\n      .find((p) => p)!;\n  } catch {\n    return GitPullRequestMergeStrategy.NoFastForward;\n  }\n}\n\nexport async function getAllProjectTeams(\n  projectId: string,\n): Promise<WebApiTeam[]> {\n  const allTeams: WebApiTeam[] = [];\n  const azureApiCore = await azureApi.coreApi();\n  const top = 100;\n  let skip = 0;\n  let length = 0;\n\n  do {\n    const teams = await azureApiCore.getTeams(projectId, undefined, top, skip);\n    length = teams.length;\n    allTeams.push(...teams);\n    skip += top;\n  } while (top <= length);\n\n  return allTeams;\n}\n"]}

package/dist/modules/platform/azure/schema.d.ts

@@ -1,5 +1,5 @@
-import type { WrappedException } from 'azure-devops-node-api/interfaces/common/VSSInterfaces';
+import type { WrappedException as _WrappedException } from 'azure-devops-node-api/interfaces/common/VSSInterfaces';
 import { z } from 'zod';
-declare const WrappedException: z.ZodSchema<WrappedException>;
-export declare const WrappedExceptionSchema: z.ZodPipeline<z.ZodEffects<z.ZodString, string | number | boolean | import("type-fest").JsonObject | import("type-fest").JsonValue[] | readonly import("type-fest").JsonValue[] | null, string>, z.ZodType<WrappedException, z.ZodTypeDef, WrappedException>>;
+declare const _WrappedException: z.ZodSchema<_WrappedException>;
+export declare const WrappedException: z.ZodPipeline<z.ZodEffects<z.ZodString, string | number | boolean | import("type-fest", { with: { "resolution-mode": "import" } }).JsonObject | import("type-fest", { with: { "resolution-mode": "import" } }).JsonValue[] | readonly import("type-fest", { with: { "resolution-mode": "import" } }).JsonValue[] | null, string>, z.ZodType<_WrappedException, z.ZodTypeDef, _WrappedException>>;
 export {};

package/dist/modules/platform/azure/schema.js

@@ -1,18 +1,18 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WrappedExceptionSchema = void 0;
+exports.WrappedException = void 0;
 const zod_1 = require("zod");
 const schema_utils_1 = require("../../../util/schema-utils");
-const WrappedException = zod_1.z.lazy(() => zod_1.z.object({
+const _WrappedException = zod_1.z.lazy(() => zod_1.z.object({
     customProperties: zod_1.z.record(zod_1.z.any()).optional(),
     errorCode: zod_1.z.number().optional(),
     eventId: zod_1.z.number().optional(),
     helpLink: zod_1.z.string().optional(),
-    innerException: WrappedException.optional(),
+    innerException: _WrappedException.optional(),
     message: zod_1.z.string().optional(),
     stackTrace: zod_1.z.string().optional(),
     typeKey: zod_1.z.string().optional(),
     typeName: zod_1.z.string().optional(),
 }));
-exports.WrappedExceptionSchema = schema_utils_1.Json.pipe(WrappedException);
+exports.WrappedException = schema_utils_1.Json.pipe(_WrappedException);
 //# sourceMappingURL=schema.js.map

package/dist/modules/platform/azure/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../lib/modules/platform/azure/schema.ts"],"names":[],"mappings":";;;AACA,6BAAwB;AACxB,6DAAkD;AAElD,MAAM,gBAAgB,GAAkC,OAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAClE,OAAC,CAAC,MAAM,CAAC;IACP,gBAAgB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CACH,CAAC;AAEW,QAAA,sBAAsB,GAAG,mBAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC","sourcesContent":["import type { WrappedException } from 'azure-devops-node-api/interfaces/common/VSSInterfaces';\nimport { z } from 'zod';\nimport { Json } from '../../../util/schema-utils';\n\nconst WrappedException: z.ZodSchema<WrappedException> = z.lazy(() =>\n  z.object({\n    customProperties: z.record(z.any()).optional(),\n    errorCode: z.number().optional(),\n    eventId: z.number().optional(),\n    helpLink: z.string().optional(),\n    innerException: WrappedException.optional(),\n    message: z.string().optional(),\n    stackTrace: z.string().optional(),\n    typeKey: z.string().optional(),\n    typeName: z.string().optional(),\n  }),\n);\n\nexport const WrappedExceptionSchema = Json.pipe(WrappedException);\n"]}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../../lib/modules/platform/azure/schema.ts"],"names":[],"mappings":";;;AACA,6BAAwB;AACxB,6DAAkD;AAElD,MAAM,iBAAiB,GAAmC,OAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CACpE,OAAC,CAAC,MAAM,CAAC;IACP,gBAAgB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CACH,CAAC;AAEW,QAAA,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC","sourcesContent":["import type { WrappedException as _WrappedException } from 'azure-devops-node-api/interfaces/common/VSSInterfaces';\nimport { z } from 'zod';\nimport { Json } from '../../../util/schema-utils';\n\nconst _WrappedException: z.ZodSchema<_WrappedException> = z.lazy(() =>\n  z.object({\n    customProperties: z.record(z.any()).optional(),\n    errorCode: z.number().optional(),\n    eventId: z.number().optional(),\n    helpLink: z.string().optional(),\n    innerException: _WrappedException.optional(),\n    message: z.string().optional(),\n    stackTrace: z.string().optional(),\n    typeKey: z.string().optional(),\n    typeName: z.string().optional(),\n  }),\n);\n\nexport const WrappedException = Json.pipe(_WrappedException);\n"]}

package/dist/modules/platform/bitbucket/index.js

@@ -273,7 +273,7 @@ async function findPr({ branchName, prTitle, state = 'all', includeOtherAuthors,
 }
 // Gets details for a PR
 async function getPr(prNo) {
-    const pr = (await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/pullrequests/${prNo}`, { cacheProvider: memory_http_cache_provider_1.memCacheProvider })).body;
+    const pr = (await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/pullrequests/${prNo}`, { cacheProvider: repository_http_cache_provider_1.aggressiveRepoCacheProvider })).body;
     /* v8 ignore start */
     if (!pr) {
         return null;
@@ -292,7 +292,7 @@ const escapeHash = (input) => input?.replace((0, regex_1.regEx)(/#/g), '%23');
 // Return the commit SHA for a branch
 async function getBranchCommit(branchName) {
     try {
-        const branch = (await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/refs/branches/${escapeHash(branchName)}`, { cacheProvider: memory_http_cache_provider_1.memCacheProvider })).body;
+        const branch = (await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/refs/branches/${escapeHash(branchName)}`, { cacheProvider: repository_http_cache_provider_1.aggressiveRepoCacheProvider })).body;
         return branch.target.hash;
     }
     catch (err) /* v8 ignore start */ {
@@ -314,7 +314,7 @@ async function getStatus(branchName, memCache = true) {
     const opts = { paginate: true };
     /* v8 ignore start: temporary code */
     if (memCache) {
-        opts.cacheProvider = memory_http_cache_provider_1.memCacheProvider;
+        opts.cacheProvider = repository_http_cache_provider_1.aggressiveRepoCacheProvider;
     }
     else {
         opts.memCache = false;
@@ -369,8 +369,11 @@ async function setBranchStatus({ branchName, context, description, state, url: t
         url,
     };
     await bitbucketHttp.postJson(`/2.0/repositories/${config.repository}/commit/${sha}/statuses/build`, { body });
-    // update status cache
-    await getStatus(branchName, false);
+    // invalidate status cache
+    const branchStatusesUrl = bitbucketHttp
+        .resolveUrl(`/2.0/repositories/${config.repository}/commit/${sha}/statuses`)
+        .toString();
+    repository_http_cache_provider_1.aggressiveRepoCacheProvider.markSynced('get', branchStatusesUrl, false);
 }
 async function findOpenIssues(title) {
     try {
@@ -382,7 +385,7 @@ async function findOpenIssues(title) {
             filters.push(`reporter.uuid="${renovateUserUuid}"`);
         }
         const filter = encodeURIComponent(filters.join(' AND '));
-        return ((await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/issues?q=${filter}`, { cacheProvider: memory_http_cache_provider_1.memCacheProvider })).body.values /* v8 ignore start */ || [] /* v8 ignore stop */);
+        return ((await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/issues?q=${filter}`, { cacheProvider: repository_http_cache_provider_1.aggressiveRepoCacheProvider })).body.values /* v8 ignore start */ || [] /* v8 ignore stop */);
     }
     catch (err) /* v8 ignore start */ {
         logger_1.logger.warn({ err }, 'Error finding issues');
@@ -571,7 +574,7 @@ async function sanitizeReviewers(reviewers, err) {
                 logger_1.logger.debug({ err }, 'PR contains reviewers that may be either inactive or no longer a member of this workspace. Will try setting only active reviewers');
                 // Validate that each previous PR reviewer account is still active
                 for (const reviewer of reviewers) {
-                    const reviewerUser = (await bitbucketHttp.getJsonUnchecked(`/2.0/users/${reviewer.uuid}`, { cacheProvider: memory_http_cache_provider_1.memCacheProvider })).body;
+                    const reviewerUser = (await bitbucketHttp.getJsonUnchecked(`/2.0/users/${reviewer.uuid}`, { cacheProvider: repository_http_cache_provider_1.aggressiveRepoCacheProvider })).body;
                     if (reviewerUser.account_status === 'active') {
                         // There are cases where an active user may still not be a member of a workspace
                         if (await isAccountMemberOfWorkspace(reviewer, config.repository)) {
@@ -610,7 +613,7 @@ async function sanitizeReviewers(reviewers, err) {
 async function isAccountMemberOfWorkspace(reviewer, repository) {
     const workspace = repository.split('/')[0];
     try {
-        await bitbucketHttp.get(`/2.0/workspaces/${workspace}/members/${reviewer.uuid}`, { cacheProvider: memory_http_cache_provider_1.memCacheProvider });
+        await bitbucketHttp.get(`/2.0/workspaces/${workspace}/members/${reviewer.uuid}`, { cacheProvider: repository_http_cache_provider_1.aggressiveRepoCacheProvider });
         return true;
     }
     catch (err) {
@@ -631,7 +634,7 @@ async function createPr({ sourceBranch, targetBranch, prTitle: title, prBody: de
     if (platformPrOptions?.bbUseDefaultReviewers) {
         const reviewersResponse = (await bitbucketHttp.getJsonUnchecked(`/2.0/repositories/${config.repository}/effective-default-reviewers`, {
             paginate: true,
-            cacheProvider: memory_http_cache_provider_1.memCacheProvider,
+            cacheProvider: repository_http_cache_provider_1.aggressiveRepoCacheProvider,
         })).body;
         reviewers = reviewersResponse.values.map((reviewer) => ({
             uuid: reviewer.user.uuid,