renovate 44.238.0 → 44.238.2

package/dist/modules/datasource/docker/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":["hostRules.find","dockerVersioning"],"sources":["../../../../lib/modules/datasource/docker/common.ts"],"sourcesContent":["import { isNonEmptyString, isString, isUndefined } from '@sindresorhus/is';\nimport {\n  HOST_BLOCKED,\n  HOST_DISABLED,\n  PAGE_NOT_FOUND_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport { detectPlatform } from '../../../util/common.ts';\nimport { parseGitUrl } from '../../../util/git/url.ts';\nimport { toSha256 } from '../../../util/hash.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { memCacheProvider } from '../../../util/http/cache/memory-http-cache-provider.ts';\nimport type { Http } from '../../../util/http/index.ts';\nimport {\n  isForbidden,\n  isNotFound,\n  isOk,\n  isRateLimited,\n  isServerError,\n  isUnauthorized,\n} from '../../../util/http/status.ts';\nimport type {\n  HttpOptions,\n  HttpResponse,\n  OutgoingHttpHeaders,\n} from '../../../util/http/types.ts';\nimport { refusedHostMessage } from '../../../util/http/util.ts';\nimport type { ParamsChallenge } from '../../../util/http/www-authenticate.ts';\nimport { BearerScheme, parse } from '../../../util/http/www-authenticate.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { addSecretForSanitizing } from '../../../util/sanitize.ts';\nimport {\n  ensureTrailingSlash,\n  parseUrl,\n  trimTrailingSlash,\n} from '../../../util/url.ts';\nimport { api as dockerVersioning } from '../../versioning/docker/index.ts';\nimport { getGoogleAuthToken } from '../util.ts';\nimport { ecrRegex, getECRAuthToken, isECRMaxResultsResponse } from './ecr.ts';\nimport { googleRegex } from './google.ts';\nimport type { OciHelmConfig } from './schema.ts';\nimport { RegistryAuthToken } from './schema.ts';\nimport type { RegistryRepository } from './types.ts';\n\nexport const dockerDatasourceId = 'docker';\n\nexport const imageUrlLabel = 'org.opencontainers.image.url';\n\nexport const sourceLabel = 'org.opencontainers.image.source';\nexport const sourceLabels = [sourceLabel, 'org.label-schema.vcs-url'] as const;\n\nexport const gitRefLabel = 'org.opencontainers.image.revision';\n\nexport const DOCKER_HUB = 'https://index.docker.io';\n\nexport function isDockerHost(host: string): boolean {\n  const regex = regEx(/(?:^|\\.)docker\\.io$/);\n  return regex.test(host);\n}\n\nexport async function getAuthHeaders(\n  http: Http,\n  registryHost: string,\n  dockerRepository: string,\n  apiCheckUrl = `${registryHost}/v2/`,\n): Promise<OutgoingHttpHeaders | undefined> {\n  try {\n    const options = {\n      throwHttpErrors: false,\n      noAuth: true,\n      cacheProvider: memCacheProvider,\n    };\n    // Written as an if/else rather than a ternary on purpose: v8 gives the\n    // branch that follows an `await` inside a ternary a negative hit count,\n    // which the coverage reporters then read as uncovered.\n    let apiCheckResponse: HttpResponse<unknown>;\n    if (apiCheckUrl.endsWith('/v2/')) {\n      apiCheckResponse = await http.get(apiCheckUrl, options);\n    } else {\n      // use json request, as this will be cached for tags, so it returns json\n      // TODO: add cache test\n      apiCheckResponse = await http.getJsonUnchecked(apiCheckUrl, options);\n    }\n\n    if (isOk(apiCheckResponse)) {\n      logger.debug(`No registry auth required for ${apiCheckUrl}`);\n      return {};\n    }\n    if (isNotFound(apiCheckResponse)) {\n      logger.debug(`Page Not Found ${apiCheckUrl}`);\n      // throw error up to be caught and potentially retried with library/ prefix\n      throw new Error(PAGE_NOT_FOUND_ERROR);\n    }\n    // Some ECR-compatible private registries (e.g. corporate Docker proxies) reject\n    // n>1000 with 405 even on the auth-probe request.  Fall back to probing the base\n    // /v2/ endpoint so getAuthHeaders can still obtain a valid token; the main fetch\n    // loop already retries with n=1000 when it encounters this same error.\n    if (isECRMaxResultsResponse(apiCheckResponse)) {\n      logger.debug(\n        { apiCheckUrl },\n        'Registry rejected n>1000 on auth probe; retrying auth check via base /v2/ endpoint',\n      );\n      return getAuthHeaders(http, registryHost, dockerRepository);\n    }\n    if (\n      !isUnauthorized(apiCheckResponse) ||\n      !isNonEmptyString(apiCheckResponse.headers['www-authenticate'])\n    ) {\n      logger.warn(\n        { apiCheckUrl, res: apiCheckResponse },\n        'Invalid registry response',\n      );\n      return undefined;\n    }\n\n    const rule = hostRules.find({\n      hostType: dockerDatasourceId,\n      url: apiCheckUrl,\n    });\n    const opts: HttpOptions = {};\n\n    if (ecrRegex.test(registryHost)) {\n      logger.once.debug(`hostRules: ecr auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ecr auth for Docker registry`,\n      );\n      const [, region] = coerceArray(ecrRegex.exec(registryHost));\n      const auth = await getECRAuthToken(region, rule);\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      }\n    } else if (\n      googleRegex.test(registryHost) &&\n      isUndefined(rule.username) &&\n      isUndefined(rule.password) &&\n      isUndefined(rule.token)\n    ) {\n      logger.once.debug(`hostRules: google auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using google auth for Docker registry`,\n      );\n      const auth = await getGoogleAuthToken();\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      } else {\n        logger.once.debug(\n          { registryHost, dockerRepository },\n          'Could not get Google access token, using no auth',\n        );\n      }\n    } else if (rule.username && rule.password) {\n      logger.once.debug(`hostRules: basic auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using basic auth for Docker registry`,\n      );\n      const auth = Buffer.from(`${rule.username}:${rule.password}`).toString(\n        'base64',\n      );\n      opts.headers = { authorization: `Basic ${auth}` };\n    } else if (rule.token) {\n      const authType = rule.authType ?? 'Bearer';\n      logger.once.debug(\n        `hostRules: ${authType} token auth for ${registryHost}`,\n      );\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ${authType} token for Docker registry`,\n      );\n      opts.headers = { authorization: `${authType} ${rule.token}` };\n    }\n\n    const challenges = parse(apiCheckResponse.headers['www-authenticate']);\n    const authenticateHeader = challenges.find(\n      (c): c is ParamsChallenge => c.scheme === BearerScheme,\n    );\n\n    // If realm isn't an url, we should directly use auth header\n    // Can happen when we get a Basic auth or some other auth type\n    // * WWW-Authenticate: Basic realm=\"Artifactory Realm\"\n    // * Www-Authenticate: Basic realm=\"https://123456789.dkr.ecr.eu-central-1.amazonaws.com/\",service=\"ecr.amazonaws.com\"\n    // * www-authenticate: Bearer realm=\"https://ghcr.io/token\",service=\"ghcr.io\",scope=\"repository:user/image:pull\"\n    // * www-authenticate: Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\"\n    // * www-authenticate: Bearer realm=\"https://codeberg.org/v2/token\",service=\"container_registry\",scope=\"*\",Basic realm=\"https://codeberg.org/v2\",service=\"container_registry\",scope=\"*\"\n    if (\n      !authenticateHeader ||\n      !isString(authenticateHeader.params?.realm) ||\n      parseUrl(authenticateHeader.params.realm) === null\n    ) {\n      logger.once.debug(`hostRules: testing direct auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository, authenticateHeader },\n        `Invalid realm, testing direct auth`,\n      );\n      return opts.headers ?? undefined;\n    }\n\n    // already guarded by above clause\n    const authUrl = parseUrl(`${authenticateHeader.params.realm}`)!;\n\n    // repo isn't known to server yet, so causing wrong scope `repository:user/image:pull`\n    if (\n      isString(authenticateHeader.params.scope) &&\n      !apiCheckUrl.endsWith('/v2/')\n    ) {\n      authUrl.searchParams.append('scope', authenticateHeader.params.scope);\n    } else {\n      authUrl.searchParams.append(\n        'scope',\n        `repository:${dockerRepository}:pull`,\n      );\n    }\n\n    if (isString(authenticateHeader.params.service)) {\n      authUrl.searchParams.append('service', authenticateHeader.params.service);\n    }\n\n    logger.trace(\n      { registryHost, dockerRepository, authUrl: authUrl.href },\n      `Obtaining docker registry token`,\n    );\n    opts.noAuth = true;\n    opts.cacheProvider = memCacheProvider;\n    const authResponse = (\n      await http.getJson(authUrl.href, opts, RegistryAuthToken)\n    ).body;\n\n    const token = authResponse.token ?? authResponse.access_token;\n    /* v8 ignore next -- TODO: add test */\n    if (!token) {\n      logger.warn('Failed to obtain docker registry token');\n      return undefined;\n    }\n    // sanitize token\n    addSecretForSanitizing(token);\n    return {\n      authorization: `Bearer ${token}`,\n    };\n  } catch (err) /* istanbul ignore next */ {\n    /* v8 ignore if -- quay.io errors are swallowed pending #9604, not reproduced in specs */\n    if (err.host === 'quay.io') {\n      // TODO: debug why quay throws errors (#9604)\n      return undefined;\n    }\n    /* v8 ignore if -- registry auth rejection is logged and swallowed, not mocked in specs */\n    if (isUnauthorized(err)) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Unauthorized docker lookup',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    /* v8 ignore if -- registry permission rejection is logged and swallowed, not mocked in specs */\n    if (isForbidden(err)) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Not allowed to access docker registry',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    if (err.name === 'RequestError' && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- Docker Hub rate limiting maps to ExternalHostError, not mocked in specs */\n    if (isRateLimited(err) && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- registry server errors map to ExternalHostError, not mocked in specs */\n    if (isServerError(err)) {\n      throw new ExternalHostError(err);\n    }\n    if (err.message === PAGE_NOT_FOUND_ERROR) {\n      throw err;\n    }\n    /* v8 ignore if -- hostRules-disabled host is swallowed silently, not mocked in specs */\n    if ([HOST_BLOCKED, HOST_DISABLED].includes(err.message)) {\n      logger.trace(\n        { registryHost, dockerRepository, err },\n        refusedHostMessage(err),\n      );\n      return undefined;\n    }\n    logger.warn(\n      { registryHost, dockerRepository, err },\n      'Error obtaining docker token',\n    );\n    return undefined;\n  }\n}\n\nexport function getRegistryRepository(\n  packageName: string,\n  registryUrl: string,\n): RegistryRepository {\n  if (registryUrl !== DOCKER_HUB) {\n    const registryEndingWithSlash = ensureTrailingSlash(\n      registryUrl.replace(regEx(/^https?:\\/\\//), ''),\n    );\n    if (packageName.startsWith(registryEndingWithSlash)) {\n      let registryHost = trimTrailingSlash(registryUrl);\n      if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n        registryHost = `https://${registryHost}`;\n      }\n      let dockerRepository = packageName.replace(registryEndingWithSlash, '');\n      const fullUrl = `${registryHost}/${dockerRepository}`;\n      const parsedFullUrl = parseUrl(fullUrl);\n      if (!parsedFullUrl) {\n        return { registryHost, dockerRepository };\n      }\n      registryHost = parsedFullUrl.origin;\n      dockerRepository = parsedFullUrl.pathname.substring(1);\n      return {\n        registryHost,\n        dockerRepository,\n      };\n    }\n  }\n  let registryHost = registryUrl;\n  const split = packageName.split('/');\n  const hasRegistryHost = split[0].includes('.') || split[0].includes(':');\n  if (split.length > 1 && hasRegistryHost) {\n    [registryHost] = split;\n    split.shift();\n  }\n  let dockerRepository = split.join('/');\n\n  if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n    registryHost = `https://${registryHost}`;\n  }\n\n  const { path, base } = coerceObject(\n    regEx(/^(?<base>https:\\/\\/[^/]+)\\/(?<path>.+)$/).exec(registryHost)?.groups,\n  );\n  if (base && path) {\n    registryHost = base;\n    dockerRepository = `${trimTrailingSlash(path)}/${dockerRepository}`;\n  }\n\n  registryHost = registryHost\n    .replace('https://docker.io', 'https://index.docker.io')\n    .replace('https://registry-1.docker.io', 'https://index.docker.io');\n\n  const opts = hostRules.find({\n    hostType: dockerDatasourceId,\n    url: registryHost,\n  });\n  if (opts?.insecureRegistry) {\n    registryHost = registryHost.replace('https', 'http');\n  }\n  if (registryHost.endsWith('.docker.io') && !dockerRepository.includes('/')) {\n    dockerRepository = `library/${dockerRepository}`;\n  }\n  return {\n    registryHost,\n    dockerRepository,\n  };\n}\n\nexport function extractDigestFromResponseBody(\n  manifestResponse: HttpResponse,\n): string {\n  return `sha256:${toSha256(manifestResponse.body)}`;\n}\n\nexport function findLatestStable(tags: string[]): string | null {\n  let stable: string | null = null;\n\n  for (const tag of tags) {\n    if (!dockerVersioning.isValid(tag) || !dockerVersioning.isStable(tag)) {\n      continue;\n    }\n\n    if (!stable || dockerVersioning.isGreaterThan(tag, stable)) {\n      stable = tag;\n    }\n  }\n\n  return stable;\n}\n\nconst chartRepo = regEx(/charts?|helm|helm-charts?/i);\n\nfunction isPossibleChartRepo(url: string): boolean {\n  if (detectPlatform(url) === null) {\n    return false;\n  }\n\n  const parsed = parseGitUrl(url);\n  return chartRepo.test(parsed.name);\n}\n\nexport function findHelmSourceUrl(release: OciHelmConfig): string | null {\n  if (release.home && isPossibleChartRepo(release.home)) {\n    return release.home;\n  }\n\n  if (!release.sources?.length) {\n    return null;\n  }\n\n  for (const url of release.sources) {\n    if (isPossibleChartRepo(url)) {\n      return url;\n    }\n  }\n\n  // fallback\n  return release.sources[0];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AA+CA,MAAa,qBAAqB;AAElC,MAAa,gBAAgB;AAE7B,MAAa,cAAc;AAC3B,MAAa,eAAe,CAAC,aAAa,0BAA0B;AAEpE,MAAa,cAAc;AAE3B,MAAa,aAAa;AAE1B,SAAgB,aAAa,MAAuB;CAElD,OADc,MAAM,qBACT,CAAC,CAAC,KAAK,IAAI;AACxB;AAEA,eAAsB,eACpB,MACA,cACA,kBACA,cAAc,GAAG,aAAa,OACY;CAC1C,IAAI;EACF,MAAM,UAAU;GACd,iBAAiB;GACjB,QAAQ;GACR,eAAe;EACjB;EAIA,IAAI;EACJ,IAAI,YAAY,SAAS,MAAM,GAC7B,mBAAmB,MAAM,KAAK,IAAI,aAAa,OAAO;OAItD,mBAAmB,MAAM,KAAK,iBAAiB,aAAa,OAAO;EAGrE,IAAI,KAAK,gBAAgB,GAAG;GAC1B,OAAO,MAAM,iCAAiC,aAAa;GAC3D,OAAO,CAAC;EACV;EACA,IAAI,WAAW,gBAAgB,GAAG;GAChC,OAAO,MAAM,kBAAkB,aAAa;GAE5C,MAAM,IAAI,MAAM,oBAAoB;EACtC;EAKA,IAAI,wBAAwB,gBAAgB,GAAG;GAC7C,OAAO,MACL,EAAE,YAAY,GACd,oFACF;GACA,OAAO,eAAe,MAAM,cAAc,gBAAgB;EAC5D;EACA,IACE,CAAC,eAAe,gBAAgB,KAChC,CAAC,iBAAiB,iBAAiB,QAAQ,mBAAmB,GAC9D;GACA,OAAO,KACL;IAAE;IAAa,KAAK;GAAiB,GACrC,2BACF;GACA;EACF;EAEA,MAAM,OAAOA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;EACD,MAAM,OAAoB,CAAC;EAE3B,IAAI,SAAS,KAAK,YAAY,GAAG;GAC/B,OAAO,KAAK,MAAM,2BAA2B,cAAc;GAC3D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,oCACF;GACA,MAAM,GAAG,UAAU,YAAY,SAAS,KAAK,YAAY,CAAC;GAC1D,MAAM,OAAO,MAAM,gBAAgB,QAAQ,IAAI;GAC/C,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;EAEpD,OAAO,IACL,YAAY,KAAK,YAAY,KAC7B,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,KAAK,GACtB;GACA,OAAO,KAAK,MAAM,8BAA8B,cAAc;GAC9D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,MAAM,OAAO,MAAM,mBAAmB;GACtC,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;QAEhD,OAAO,KAAK,MACV;IAAE;IAAc;GAAiB,GACjC,kDACF;EAEJ,OAAO,IAAI,KAAK,YAAY,KAAK,UAAU;GACzC,OAAO,KAAK,MAAM,6BAA6B,cAAc;GAC7D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,sCACF;GAIA,KAAK,UAAU,EAAE,eAAe,SAHnB,OAAO,KAAK,GAAG,KAAK,SAAS,GAAG,KAAK,UAAU,CAAC,CAAC,SAC5D,QAE0C,IAAI;EAClD,OAAO,IAAI,KAAK,OAAO;GACrB,MAAM,WAAW,KAAK,YAAY;GAClC,OAAO,KAAK,MACV,cAAc,SAAS,kBAAkB,cAC3C;GACA,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,SAAS,SAAS,2BACpB;GACA,KAAK,UAAU,EAAE,eAAe,GAAG,SAAS,GAAG,KAAK,QAAQ;EAC9D;EAGA,MAAM,qBADa,MAAM,iBAAiB,QAAQ,mBACd,CAAC,CAAC,MACnC,MAA4B,EAAE,WAAW,YAC5C;EASA,IACE,CAAC,sBACD,CAAC,SAAS,mBAAmB,QAAQ,KAAK,KAC1C,SAAS,mBAAmB,OAAO,KAAK,MAAM,MAC9C;GACA,OAAO,KAAK,MAAM,sCAAsC,cAAc;GACtE,OAAO,MACL;IAAE;IAAc;IAAkB;GAAmB,GACrD,oCACF;GACA,OAAO,KAAK,WAAW,KAAA;EACzB;EAGA,MAAM,UAAU,SAAS,GAAG,mBAAmB,OAAO,OAAO;EAG7D,IACE,SAAS,mBAAmB,OAAO,KAAK,KACxC,CAAC,YAAY,SAAS,MAAM,GAE5B,QAAQ,aAAa,OAAO,SAAS,mBAAmB,OAAO,KAAK;OAEpE,QAAQ,aAAa,OACnB,SACA,cAAc,iBAAiB,MACjC;EAGF,IAAI,SAAS,mBAAmB,OAAO,OAAO,GAC5C,QAAQ,aAAa,OAAO,WAAW,mBAAmB,OAAO,OAAO;EAG1E,OAAO,MACL;GAAE;GAAc;GAAkB,SAAS,QAAQ;EAAK,GACxD,iCACF;EACA,KAAK,SAAS;EACd,KAAK,gBAAgB;EACrB,MAAM,gBACJ,MAAM,KAAK,QAAQ,QAAQ,MAAM,MAAM,iBAAiB,EAAA,CACxD;EAEF,MAAM,QAAQ,aAAa,SAAS,aAAa;;EAEjD,IAAI,CAAC,OAAO;GACV,OAAO,KAAK,wCAAwC;GACpD;EACF;EAEA,uBAAuB,KAAK;EAC5B,OAAO,EACL,eAAe,UAAU,QAC3B;CACF,SAAS,gCAAgC;;EAEvC,IAAI,IAAI,SAAS,WAEf;;EAGF,IAAI,eAAe,GAAG,GAAG;GACvB,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,4BACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;;EAEA,IAAI,YAAY,GAAG,GAAG;GACpB,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;EACA,IAAI,IAAI,SAAS,kBAAkB,aAAa,YAAY,GAC1D,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,cAAc,GAAG,KAAK,aAAa,YAAY,GACjD,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,cAAc,GAAG,GACnB,MAAM,IAAI,kBAAkB,GAAG;EAEjC,IAAI,IAAI,YAAA,kBACN,MAAM;;EAGR,IAAI,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,OAAO,GAAG;GACvD,OAAO,MACL;IAAE;IAAc;IAAkB;GAAI,GACtC,mBAAmB,GAAG,CACxB;GACA;EACF;EACA,OAAO,KACL;GAAE;GAAc;GAAkB;EAAI,GACtC,8BACF;EACA;CACF;AACF;AAEA,SAAgB,sBACd,aACA,aACoB;CACpB,IAAI,gBAAA,2BAA4B;EAC9B,MAAM,0BAA0B,oBAC9B,YAAY,QAAQ,MAAM,cAAc,GAAG,EAAE,CAC/C;EACA,IAAI,YAAY,WAAW,uBAAuB,GAAG;GACnD,IAAI,eAAe,kBAAkB,WAAW;GAChD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;GAE5B,IAAI,mBAAmB,YAAY,QAAQ,yBAAyB,EAAE;GACtE,MAAM,UAAU,GAAG,aAAa,GAAG;GACnC,MAAM,gBAAgB,SAAS,OAAO;GACtC,IAAI,CAAC,eACH,OAAO;IAAE;IAAc;GAAiB;GAE1C,eAAe,cAAc;GAC7B,mBAAmB,cAAc,SAAS,UAAU,CAAC;GACrD,OAAO;IACL;IACA;GACF;EACF;CACF;CACA,IAAI,eAAe;CACnB,MAAM,QAAQ,YAAY,MAAM,GAAG;CACnC,MAAM,kBAAkB,MAAM,EAAE,CAAC,SAAS,GAAG,KAAK,MAAM,EAAE,CAAC,SAAS,GAAG;CACvE,IAAI,MAAM,SAAS,KAAK,iBAAiB;EACvC,CAAC,gBAAgB;EACjB,MAAM,MAAM;CACd;CACA,IAAI,mBAAmB,MAAM,KAAK,GAAG;CAErC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;CAG5B,MAAM,EAAE,MAAM,SAAS,aACrB,MAAM,yCAAyC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,MACvE;CACA,IAAI,QAAQ,MAAM;EAChB,eAAe;EACf,mBAAmB,GAAG,kBAAkB,IAAI,EAAE,GAAG;CACnD;CAEA,eAAe,aACZ,QAAQ,qBAAqB,yBAAyB,CAAC,CACvD,QAAQ,gCAAgC,yBAAyB;CAMpE,IAJaA,KAAe;EAC1B,UAAA;EACA,KAAK;CACP,CACO,CAAC,EAAE,kBACR,eAAe,aAAa,QAAQ,SAAS,MAAM;CAErD,IAAI,aAAa,SAAS,YAAY,KAAK,CAAC,iBAAiB,SAAS,GAAG,GACvE,mBAAmB,WAAW;CAEhC,OAAO;EACL;EACA;CACF;AACF;AAEA,SAAgB,8BACd,kBACQ;CACR,OAAO,UAAU,SAAS,iBAAiB,IAAI;AACjD;AAEA,SAAgB,iBAAiB,MAA+B;CAC9D,IAAI,SAAwB;CAE5B,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAACC,IAAiB,QAAQ,GAAG,KAAK,CAACA,IAAiB,SAAS,GAAG,GAClE;EAGF,IAAI,CAAC,UAAUA,IAAiB,cAAc,KAAK,MAAM,GACvD,SAAS;CAEb;CAEA,OAAO;AACT;AAEA,MAAM,YAAY,MAAM,4BAA4B;AAEpD,SAAS,oBAAoB,KAAsB;CACjD,IAAI,eAAe,GAAG,MAAM,MAC1B,OAAO;CAGT,MAAM,SAAS,YAAY,GAAG;CAC9B,OAAO,UAAU,KAAK,OAAO,IAAI;AACnC;AAEA,SAAgB,kBAAkB,SAAuC;CACvE,IAAI,QAAQ,QAAQ,oBAAoB,QAAQ,IAAI,GAClD,OAAO,QAAQ;CAGjB,IAAI,CAAC,QAAQ,SAAS,QACpB,OAAO;CAGT,KAAK,MAAM,OAAO,QAAQ,SACxB,IAAI,oBAAoB,GAAG,GACzB,OAAO;CAKX,OAAO,QAAQ,QAAQ;AACzB"}
+{"version":3,"file":"common.js","names":["hostRules.find","dockerVersioning"],"sources":["../../../../lib/modules/datasource/docker/common.ts"],"sourcesContent":["import { isNonEmptyString, isString, isUndefined } from '@sindresorhus/is';\nimport {\n  HOST_BLOCKED,\n  HOST_DISABLED,\n  PAGE_NOT_FOUND_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport { detectPlatform } from '../../../util/common.ts';\nimport { parseGitUrl } from '../../../util/git/url.ts';\nimport { toSha256 } from '../../../util/hash.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { memCacheProvider } from '../../../util/http/cache/memory-http-cache-provider.ts';\nimport type { Http } from '../../../util/http/index.ts';\nimport {\n  isForbidden,\n  isNotFound,\n  isOk,\n  isRateLimited,\n  isRateLimitedOrServerError,\n  isServerError,\n  isUnauthorized,\n} from '../../../util/http/status.ts';\nimport type {\n  HttpOptions,\n  HttpResponse,\n  OutgoingHttpHeaders,\n} from '../../../util/http/types.ts';\nimport { refusedHostMessage } from '../../../util/http/util.ts';\nimport type { ParamsChallenge } from '../../../util/http/www-authenticate.ts';\nimport { BearerScheme, parse } from '../../../util/http/www-authenticate.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { addSecretForSanitizing } from '../../../util/sanitize.ts';\nimport {\n  ensureTrailingSlash,\n  parseUrl,\n  trimTrailingSlash,\n} from '../../../util/url.ts';\nimport { api as dockerVersioning } from '../../versioning/docker/index.ts';\nimport { getGoogleAuthToken } from '../util.ts';\nimport { ecrRegex, getECRAuthToken, isECRMaxResultsResponse } from './ecr.ts';\nimport { googleRegex } from './google.ts';\nimport type { OciHelmConfig } from './schema.ts';\nimport { RegistryAuthToken } from './schema.ts';\nimport type { RegistryRepository } from './types.ts';\n\nexport const dockerDatasourceId = 'docker';\n\nexport const imageUrlLabel = 'org.opencontainers.image.url';\n\nexport const sourceLabel = 'org.opencontainers.image.source';\nexport const sourceLabels = [sourceLabel, 'org.label-schema.vcs-url'] as const;\n\nexport const gitRefLabel = 'org.opencontainers.image.revision';\n\nexport const DOCKER_HUB = 'https://index.docker.io';\n\nexport function isDockerHost(host: string): boolean {\n  const regex = regEx(/(?:^|\\.)docker\\.io$/);\n  return regex.test(host);\n}\n\nexport async function getAuthHeaders(\n  http: Http,\n  registryHost: string,\n  dockerRepository: string,\n  apiCheckUrl = `${registryHost}/v2/`,\n): Promise<OutgoingHttpHeaders | undefined> {\n  try {\n    const options = {\n      throwHttpErrors: false,\n      noAuth: true,\n      cacheProvider: memCacheProvider,\n    };\n    // Written as an if/else rather than a ternary on purpose: v8 gives the\n    // branch that follows an `await` inside a ternary a negative hit count,\n    // which the coverage reporters then read as uncovered.\n    let apiCheckResponse: HttpResponse<unknown>;\n    if (apiCheckUrl.endsWith('/v2/')) {\n      apiCheckResponse = await http.get(apiCheckUrl, options);\n    } else {\n      // use json request, as this will be cached for tags, so it returns json\n      // TODO: add cache test\n      apiCheckResponse = await http.getJsonUnchecked(apiCheckUrl, options);\n    }\n\n    if (isOk(apiCheckResponse)) {\n      logger.debug(`No registry auth required for ${apiCheckUrl}`);\n      return {};\n    }\n    if (isNotFound(apiCheckResponse)) {\n      logger.debug(`Page Not Found ${apiCheckUrl}`);\n      // throw error up to be caught and potentially retried with library/ prefix\n      throw new Error(PAGE_NOT_FOUND_ERROR);\n    }\n    // Some ECR-compatible private registries (e.g. corporate Docker proxies) reject\n    // n>1000 with 405 even on the auth-probe request.  Fall back to probing the base\n    // /v2/ endpoint so getAuthHeaders can still obtain a valid token; the main fetch\n    // loop already retries with n=1000 when it encounters this same error.\n    if (isECRMaxResultsResponse(apiCheckResponse)) {\n      logger.debug(\n        { apiCheckUrl },\n        'Registry rejected n>1000 on auth probe; retrying auth check via base /v2/ endpoint',\n      );\n      return getAuthHeaders(http, registryHost, dockerRepository);\n    }\n    if (isRateLimitedOrServerError(apiCheckResponse)) {\n      throw new ExternalHostError(\n        new Error(\n          `Registry auth probe ${apiCheckUrl} failed with status ${apiCheckResponse.statusCode}`,\n        ),\n      );\n    }\n    if (\n      !isUnauthorized(apiCheckResponse) ||\n      !isNonEmptyString(apiCheckResponse.headers['www-authenticate'])\n    ) {\n      logger.warn(\n        {\n          apiCheckUrl,\n          statusCode: apiCheckResponse.statusCode,\n          res: apiCheckResponse,\n        },\n        'Invalid registry response',\n      );\n      return undefined;\n    }\n\n    const rule = hostRules.find({\n      hostType: dockerDatasourceId,\n      url: apiCheckUrl,\n    });\n    const opts: HttpOptions = {};\n\n    if (ecrRegex.test(registryHost)) {\n      logger.once.debug(`hostRules: ecr auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ecr auth for Docker registry`,\n      );\n      const [, region] = coerceArray(ecrRegex.exec(registryHost));\n      const auth = await getECRAuthToken(region, rule);\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      }\n    } else if (\n      googleRegex.test(registryHost) &&\n      isUndefined(rule.username) &&\n      isUndefined(rule.password) &&\n      isUndefined(rule.token)\n    ) {\n      logger.once.debug(`hostRules: google auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using google auth for Docker registry`,\n      );\n      const auth = await getGoogleAuthToken();\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      } else {\n        logger.once.debug(\n          { registryHost, dockerRepository },\n          'Could not get Google access token, using no auth',\n        );\n      }\n    } else if (rule.username && rule.password) {\n      logger.once.debug(`hostRules: basic auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using basic auth for Docker registry`,\n      );\n      const auth = Buffer.from(`${rule.username}:${rule.password}`).toString(\n        'base64',\n      );\n      opts.headers = { authorization: `Basic ${auth}` };\n    } else if (rule.token) {\n      const authType = rule.authType ?? 'Bearer';\n      logger.once.debug(\n        `hostRules: ${authType} token auth for ${registryHost}`,\n      );\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ${authType} token for Docker registry`,\n      );\n      opts.headers = { authorization: `${authType} ${rule.token}` };\n    }\n\n    const challenges = parse(apiCheckResponse.headers['www-authenticate']);\n    const authenticateHeader = challenges.find(\n      (c): c is ParamsChallenge => c.scheme === BearerScheme,\n    );\n\n    // If realm isn't an url, we should directly use auth header\n    // Can happen when we get a Basic auth or some other auth type\n    // * WWW-Authenticate: Basic realm=\"Artifactory Realm\"\n    // * Www-Authenticate: Basic realm=\"https://123456789.dkr.ecr.eu-central-1.amazonaws.com/\",service=\"ecr.amazonaws.com\"\n    // * www-authenticate: Bearer realm=\"https://ghcr.io/token\",service=\"ghcr.io\",scope=\"repository:user/image:pull\"\n    // * www-authenticate: Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\"\n    // * www-authenticate: Bearer realm=\"https://codeberg.org/v2/token\",service=\"container_registry\",scope=\"*\",Basic realm=\"https://codeberg.org/v2\",service=\"container_registry\",scope=\"*\"\n    if (\n      !authenticateHeader ||\n      !isString(authenticateHeader.params?.realm) ||\n      parseUrl(authenticateHeader.params.realm) === null\n    ) {\n      logger.once.debug(`hostRules: testing direct auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository, authenticateHeader },\n        `Invalid realm, testing direct auth`,\n      );\n      return opts.headers ?? undefined;\n    }\n\n    // already guarded by above clause\n    const authUrl = parseUrl(`${authenticateHeader.params.realm}`)!;\n\n    // repo isn't known to server yet, so causing wrong scope `repository:user/image:pull`\n    if (\n      isString(authenticateHeader.params.scope) &&\n      !apiCheckUrl.endsWith('/v2/')\n    ) {\n      authUrl.searchParams.append('scope', authenticateHeader.params.scope);\n    } else {\n      authUrl.searchParams.append(\n        'scope',\n        `repository:${dockerRepository}:pull`,\n      );\n    }\n\n    if (isString(authenticateHeader.params.service)) {\n      authUrl.searchParams.append('service', authenticateHeader.params.service);\n    }\n\n    logger.trace(\n      { registryHost, dockerRepository, authUrl: authUrl.href },\n      `Obtaining docker registry token`,\n    );\n    opts.noAuth = true;\n    opts.cacheProvider = memCacheProvider;\n    const authResponse = (\n      await http.getJson(authUrl.href, opts, RegistryAuthToken)\n    ).body;\n\n    const token = authResponse.token ?? authResponse.access_token;\n    /* v8 ignore next -- TODO: add test */\n    if (!token) {\n      logger.warn('Failed to obtain docker registry token');\n      return undefined;\n    }\n    // sanitize token\n    addSecretForSanitizing(token);\n    return {\n      authorization: `Bearer ${token}`,\n    };\n  } catch (err) /* istanbul ignore next */ {\n    if (err instanceof ExternalHostError) {\n      throw err;\n    }\n    /* v8 ignore if -- quay.io errors are swallowed pending #9604, not reproduced in specs */\n    if (err.host === 'quay.io') {\n      // TODO: debug why quay throws errors (#9604)\n      return undefined;\n    }\n    /* v8 ignore if -- registry auth rejection is logged and swallowed, not mocked in specs */\n    if (isUnauthorized(err)) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Unauthorized docker lookup',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    /* v8 ignore if -- registry permission rejection is logged and swallowed, not mocked in specs */\n    if (isForbidden(err)) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Not allowed to access docker registry',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    if (err.name === 'RequestError' && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- Docker Hub rate limiting maps to ExternalHostError, not mocked in specs */\n    if (isRateLimited(err) && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- registry server errors map to ExternalHostError, not mocked in specs */\n    if (isServerError(err)) {\n      throw new ExternalHostError(err);\n    }\n    if (err.message === PAGE_NOT_FOUND_ERROR) {\n      throw err;\n    }\n    /* v8 ignore if -- hostRules-disabled host is swallowed silently, not mocked in specs */\n    if ([HOST_BLOCKED, HOST_DISABLED].includes(err.message)) {\n      logger.trace(\n        { registryHost, dockerRepository, err },\n        refusedHostMessage(err),\n      );\n      return undefined;\n    }\n    logger.warn(\n      { registryHost, dockerRepository, err },\n      'Error obtaining docker token',\n    );\n    return undefined;\n  }\n}\n\nexport function getRegistryRepository(\n  packageName: string,\n  registryUrl: string,\n): RegistryRepository {\n  if (registryUrl !== DOCKER_HUB) {\n    const registryEndingWithSlash = ensureTrailingSlash(\n      registryUrl.replace(regEx(/^https?:\\/\\//), ''),\n    );\n    if (packageName.startsWith(registryEndingWithSlash)) {\n      let registryHost = trimTrailingSlash(registryUrl);\n      if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n        registryHost = `https://${registryHost}`;\n      }\n      let dockerRepository = packageName.replace(registryEndingWithSlash, '');\n      const fullUrl = `${registryHost}/${dockerRepository}`;\n      const parsedFullUrl = parseUrl(fullUrl);\n      if (!parsedFullUrl) {\n        return { registryHost, dockerRepository };\n      }\n      registryHost = parsedFullUrl.origin;\n      dockerRepository = parsedFullUrl.pathname.substring(1);\n      return {\n        registryHost,\n        dockerRepository,\n      };\n    }\n  }\n  let registryHost = registryUrl;\n  const split = packageName.split('/');\n  const hasRegistryHost = split[0].includes('.') || split[0].includes(':');\n  if (split.length > 1 && hasRegistryHost) {\n    [registryHost] = split;\n    split.shift();\n  }\n  let dockerRepository = split.join('/');\n\n  if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n    registryHost = `https://${registryHost}`;\n  }\n\n  const { path, base } = coerceObject(\n    regEx(/^(?<base>https:\\/\\/[^/]+)\\/(?<path>.+)$/).exec(registryHost)?.groups,\n  );\n  if (base && path) {\n    registryHost = base;\n    dockerRepository = `${trimTrailingSlash(path)}/${dockerRepository}`;\n  }\n\n  registryHost = registryHost\n    .replace('https://docker.io', 'https://index.docker.io')\n    .replace('https://registry-1.docker.io', 'https://index.docker.io');\n\n  const opts = hostRules.find({\n    hostType: dockerDatasourceId,\n    url: registryHost,\n  });\n  if (opts?.insecureRegistry) {\n    registryHost = registryHost.replace('https', 'http');\n  }\n  if (registryHost.endsWith('.docker.io') && !dockerRepository.includes('/')) {\n    dockerRepository = `library/${dockerRepository}`;\n  }\n  return {\n    registryHost,\n    dockerRepository,\n  };\n}\n\nexport function extractDigestFromResponseBody(\n  manifestResponse: HttpResponse,\n): string {\n  return `sha256:${toSha256(manifestResponse.body)}`;\n}\n\nexport function findLatestStable(tags: string[]): string | null {\n  let stable: string | null = null;\n\n  for (const tag of tags) {\n    if (!dockerVersioning.isValid(tag) || !dockerVersioning.isStable(tag)) {\n      continue;\n    }\n\n    if (!stable || dockerVersioning.isGreaterThan(tag, stable)) {\n      stable = tag;\n    }\n  }\n\n  return stable;\n}\n\nconst chartRepo = regEx(/charts?|helm|helm-charts?/i);\n\nfunction isPossibleChartRepo(url: string): boolean {\n  if (detectPlatform(url) === null) {\n    return false;\n  }\n\n  const parsed = parseGitUrl(url);\n  return chartRepo.test(parsed.name);\n}\n\nexport function findHelmSourceUrl(release: OciHelmConfig): string | null {\n  if (release.home && isPossibleChartRepo(release.home)) {\n    return release.home;\n  }\n\n  if (!release.sources?.length) {\n    return null;\n  }\n\n  for (const url of release.sources) {\n    if (isPossibleChartRepo(url)) {\n      return url;\n    }\n  }\n\n  // fallback\n  return release.sources[0];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAgDA,MAAa,qBAAqB;AAElC,MAAa,gBAAgB;AAE7B,MAAa,cAAc;AAC3B,MAAa,eAAe,CAAC,aAAa,0BAA0B;AAEpE,MAAa,cAAc;AAE3B,MAAa,aAAa;AAE1B,SAAgB,aAAa,MAAuB;CAElD,OADc,MAAM,qBACT,CAAC,CAAC,KAAK,IAAI;AACxB;AAEA,eAAsB,eACpB,MACA,cACA,kBACA,cAAc,GAAG,aAAa,OACY;CAC1C,IAAI;EACF,MAAM,UAAU;GACd,iBAAiB;GACjB,QAAQ;GACR,eAAe;EACjB;EAIA,IAAI;EACJ,IAAI,YAAY,SAAS,MAAM,GAC7B,mBAAmB,MAAM,KAAK,IAAI,aAAa,OAAO;OAItD,mBAAmB,MAAM,KAAK,iBAAiB,aAAa,OAAO;EAGrE,IAAI,KAAK,gBAAgB,GAAG;GAC1B,OAAO,MAAM,iCAAiC,aAAa;GAC3D,OAAO,CAAC;EACV;EACA,IAAI,WAAW,gBAAgB,GAAG;GAChC,OAAO,MAAM,kBAAkB,aAAa;GAE5C,MAAM,IAAI,MAAM,oBAAoB;EACtC;EAKA,IAAI,wBAAwB,gBAAgB,GAAG;GAC7C,OAAO,MACL,EAAE,YAAY,GACd,oFACF;GACA,OAAO,eAAe,MAAM,cAAc,gBAAgB;EAC5D;EACA,IAAI,2BAA2B,gBAAgB,GAC7C,MAAM,IAAI,kCACR,IAAI,MACF,uBAAuB,YAAY,sBAAsB,iBAAiB,YAC5E,CACF;EAEF,IACE,CAAC,eAAe,gBAAgB,KAChC,CAAC,iBAAiB,iBAAiB,QAAQ,mBAAmB,GAC9D;GACA,OAAO,KACL;IACE;IACA,YAAY,iBAAiB;IAC7B,KAAK;GACP,GACA,2BACF;GACA;EACF;EAEA,MAAM,OAAOA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;EACD,MAAM,OAAoB,CAAC;EAE3B,IAAI,SAAS,KAAK,YAAY,GAAG;GAC/B,OAAO,KAAK,MAAM,2BAA2B,cAAc;GAC3D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,oCACF;GACA,MAAM,GAAG,UAAU,YAAY,SAAS,KAAK,YAAY,CAAC;GAC1D,MAAM,OAAO,MAAM,gBAAgB,QAAQ,IAAI;GAC/C,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;EAEpD,OAAO,IACL,YAAY,KAAK,YAAY,KAC7B,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,KAAK,GACtB;GACA,OAAO,KAAK,MAAM,8BAA8B,cAAc;GAC9D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,MAAM,OAAO,MAAM,mBAAmB;GACtC,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;QAEhD,OAAO,KAAK,MACV;IAAE;IAAc;GAAiB,GACjC,kDACF;EAEJ,OAAO,IAAI,KAAK,YAAY,KAAK,UAAU;GACzC,OAAO,KAAK,MAAM,6BAA6B,cAAc;GAC7D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,sCACF;GAIA,KAAK,UAAU,EAAE,eAAe,SAHnB,OAAO,KAAK,GAAG,KAAK,SAAS,GAAG,KAAK,UAAU,CAAC,CAAC,SAC5D,QAE0C,IAAI;EAClD,OAAO,IAAI,KAAK,OAAO;GACrB,MAAM,WAAW,KAAK,YAAY;GAClC,OAAO,KAAK,MACV,cAAc,SAAS,kBAAkB,cAC3C;GACA,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,SAAS,SAAS,2BACpB;GACA,KAAK,UAAU,EAAE,eAAe,GAAG,SAAS,GAAG,KAAK,QAAQ;EAC9D;EAGA,MAAM,qBADa,MAAM,iBAAiB,QAAQ,mBACd,CAAC,CAAC,MACnC,MAA4B,EAAE,WAAW,YAC5C;EASA,IACE,CAAC,sBACD,CAAC,SAAS,mBAAmB,QAAQ,KAAK,KAC1C,SAAS,mBAAmB,OAAO,KAAK,MAAM,MAC9C;GACA,OAAO,KAAK,MAAM,sCAAsC,cAAc;GACtE,OAAO,MACL;IAAE;IAAc;IAAkB;GAAmB,GACrD,oCACF;GACA,OAAO,KAAK,WAAW,KAAA;EACzB;EAGA,MAAM,UAAU,SAAS,GAAG,mBAAmB,OAAO,OAAO;EAG7D,IACE,SAAS,mBAAmB,OAAO,KAAK,KACxC,CAAC,YAAY,SAAS,MAAM,GAE5B,QAAQ,aAAa,OAAO,SAAS,mBAAmB,OAAO,KAAK;OAEpE,QAAQ,aAAa,OACnB,SACA,cAAc,iBAAiB,MACjC;EAGF,IAAI,SAAS,mBAAmB,OAAO,OAAO,GAC5C,QAAQ,aAAa,OAAO,WAAW,mBAAmB,OAAO,OAAO;EAG1E,OAAO,MACL;GAAE;GAAc;GAAkB,SAAS,QAAQ;EAAK,GACxD,iCACF;EACA,KAAK,SAAS;EACd,KAAK,gBAAgB;EACrB,MAAM,gBACJ,MAAM,KAAK,QAAQ,QAAQ,MAAM,MAAM,iBAAiB,EAAA,CACxD;EAEF,MAAM,QAAQ,aAAa,SAAS,aAAa;;EAEjD,IAAI,CAAC,OAAO;GACV,OAAO,KAAK,wCAAwC;GACpD;EACF;EAEA,uBAAuB,KAAK;EAC5B,OAAO,EACL,eAAe,UAAU,QAC3B;CACF,SAAS,gCAAgC;EACvC,IAAI,eAAe,mBACjB,MAAM;;EAGR,IAAI,IAAI,SAAS,WAEf;;EAGF,IAAI,eAAe,GAAG,GAAG;GACvB,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,4BACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;;EAEA,IAAI,YAAY,GAAG,GAAG;GACpB,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;EACA,IAAI,IAAI,SAAS,kBAAkB,aAAa,YAAY,GAC1D,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,cAAc,GAAG,KAAK,aAAa,YAAY,GACjD,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,cAAc,GAAG,GACnB,MAAM,IAAI,kBAAkB,GAAG;EAEjC,IAAI,IAAI,YAAA,kBACN,MAAM;;EAGR,IAAI,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,OAAO,GAAG;GACvD,OAAO,MACL;IAAE;IAAc;IAAkB;GAAI,GACtC,mBAAmB,GAAG,CACxB;GACA;EACF;EACA,OAAO,KACL;GAAE;GAAc;GAAkB;EAAI,GACtC,8BACF;EACA;CACF;AACF;AAEA,SAAgB,sBACd,aACA,aACoB;CACpB,IAAI,gBAAA,2BAA4B;EAC9B,MAAM,0BAA0B,oBAC9B,YAAY,QAAQ,MAAM,cAAc,GAAG,EAAE,CAC/C;EACA,IAAI,YAAY,WAAW,uBAAuB,GAAG;GACnD,IAAI,eAAe,kBAAkB,WAAW;GAChD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;GAE5B,IAAI,mBAAmB,YAAY,QAAQ,yBAAyB,EAAE;GACtE,MAAM,UAAU,GAAG,aAAa,GAAG;GACnC,MAAM,gBAAgB,SAAS,OAAO;GACtC,IAAI,CAAC,eACH,OAAO;IAAE;IAAc;GAAiB;GAE1C,eAAe,cAAc;GAC7B,mBAAmB,cAAc,SAAS,UAAU,CAAC;GACrD,OAAO;IACL;IACA;GACF;EACF;CACF;CACA,IAAI,eAAe;CACnB,MAAM,QAAQ,YAAY,MAAM,GAAG;CACnC,MAAM,kBAAkB,MAAM,EAAE,CAAC,SAAS,GAAG,KAAK,MAAM,EAAE,CAAC,SAAS,GAAG;CACvE,IAAI,MAAM,SAAS,KAAK,iBAAiB;EACvC,CAAC,gBAAgB;EACjB,MAAM,MAAM;CACd;CACA,IAAI,mBAAmB,MAAM,KAAK,GAAG;CAErC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;CAG5B,MAAM,EAAE,MAAM,SAAS,aACrB,MAAM,yCAAyC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,MACvE;CACA,IAAI,QAAQ,MAAM;EAChB,eAAe;EACf,mBAAmB,GAAG,kBAAkB,IAAI,EAAE,GAAG;CACnD;CAEA,eAAe,aACZ,QAAQ,qBAAqB,yBAAyB,CAAC,CACvD,QAAQ,gCAAgC,yBAAyB;CAMpE,IAJaA,KAAe;EAC1B,UAAA;EACA,KAAK;CACP,CACO,CAAC,EAAE,kBACR,eAAe,aAAa,QAAQ,SAAS,MAAM;CAErD,IAAI,aAAa,SAAS,YAAY,KAAK,CAAC,iBAAiB,SAAS,GAAG,GACvE,mBAAmB,WAAW;CAEhC,OAAO;EACL;EACA;CACF;AACF;AAEA,SAAgB,8BACd,kBACQ;CACR,OAAO,UAAU,SAAS,iBAAiB,IAAI;AACjD;AAEA,SAAgB,iBAAiB,MAA+B;CAC9D,IAAI,SAAwB;CAE5B,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAACC,IAAiB,QAAQ,GAAG,KAAK,CAACA,IAAiB,SAAS,GAAG,GAClE;EAGF,IAAI,CAAC,UAAUA,IAAiB,cAAc,KAAK,MAAM,GACvD,SAAS;CAEb;CAEA,OAAO;AACT;AAEA,MAAM,YAAY,MAAM,4BAA4B;AAEpD,SAAS,oBAAoB,KAAsB;CACjD,IAAI,eAAe,GAAG,MAAM,MAC1B,OAAO;CAGT,MAAM,SAAS,YAAY,GAAG;CAC9B,OAAO,UAAU,KAAK,OAAO,IAAI;AACnC;AAEA,SAAgB,kBAAkB,SAAuC;CACvE,IAAI,QAAQ,QAAQ,oBAAoB,QAAQ,IAAI,GAClD,OAAO,QAAQ;CAGjB,IAAI,CAAC,QAAQ,SAAS,QACpB,OAAO;CAGT,KAAK,MAAM,OAAO,QAAQ,SACxB,IAAI,oBAAoB,GAAG,GACzB,OAAO;CAKX,OAAO,QAAQ,QAAQ;AACzB"}

package/dist/modules/datasource/index.d.ts

@@ -9,5 +9,4 @@ export declare function getPkgReleases(config: GetPkgReleasesConfig): Promise<Re
 export declare function supportsDigests(datasource: string | undefined): boolean;
 export declare function getDigest(config: GetDigestInputConfig, value?: string): Promise<string | null>;
 export declare function getDefaultConfig(datasource: string): Promise<Record<string, unknown>>;
-export { DatasourceApi, DigestConfig, GetDigestInputConfig, GetPkgReleasesConfig, GetReleasesConfig, GitHostTag, PostprocessReleaseConfig, PostprocessReleaseResult, RegistryStrategy, RegistryUrlsConfig, Release, ReleaseResult, ReleaseTags, SourceUrlSupport, isGetPkgReleasesConfig };
-//# sourceMappingURL=index.d.ts.map
+export { DatasourceApi, DigestConfig, GetDigestInputConfig, GetPkgReleasesConfig, GetReleasesConfig, GitHostTag, PostprocessReleaseConfig, PostprocessReleaseResult, RegistryStrategy, RegistryUrlsConfig, Release, ReleaseResult, ReleaseTags, SourceUrlSupport, isGetPkgReleasesConfig };

package/dist/modules/datasource/metadata-manual.js

@@ -1,5 +1,5 @@
-import changelog_urls_default from "../../data/changelog-urls.js";
-import source_urls_default from "../../data/source-urls.js";
+import changelog_urls_default from "../../data/changelog-urls.json.js";
+import source_urls_default from "../../data/source-urls.json.js";
 // lib/modules/datasource/metadata-manual.ts
 const { $schema: _changelogSchema, ...changelogUrls } = changelog_urls_default;
 const manualChangelogUrls = changelogUrls;

package/dist/modules/datasource/npm/schema.d.ts

@@ -121,5 +121,4 @@ export declare const NpmResponse: z.ZodObject<{
   time: z.ZodOptional<z.ZodType<Record<string, string>, any, z.core.$ZodTypeInternals<Record<string, string>, any>>>;
   'dist-tags': z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
 }, z.core.$strip>;
-export type NpmResponse = z.infer<typeof NpmResponse>;
-//# sourceMappingURL=schema.d.ts.map
+export type NpmResponse = z.infer<typeof NpmResponse>;

package/dist/modules/datasource/types.d.ts

@@ -221,5 +221,4 @@ export interface DatasourceApi extends ModuleApi {
    * In other cases, the original `Release` parameter should be returned.
    */
   postprocessRelease?(config: PostprocessReleaseConfig, release: Release): Promise<PostprocessReleaseResult>;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/manager/custom/jsonata/types.d.ts

@@ -19,5 +19,4 @@ export interface JSONataManagerTemplates {
 export interface JSONataManagerConfig extends JSONataManagerTemplates {
   fileFormat: string;
   matchStrings: string[];
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/manager/custom/regex/types.d.ts

@@ -15,5 +15,4 @@ export interface RegexManagerConfig extends RegexManagerTemplates {
   matchStrings: string[];
   matchStringsStrategy?: MatchStringsStrategy;
   autoReplaceStringTemplate?: string;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/manager/custom/types.d.ts

@@ -6,5 +6,4 @@ export type CustomManagerName = 'jsonata' | 'regex';
 export interface CustomManager extends Partial<RegexManagerConfig>, Partial<JSONataManagerConfig> {
   customType: CustomManagerName;
   managerFilePatterns: string[];
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/manager/fingerprint.generated.d.ts

@@ -1,2 +1 @@
-export declare const hashMap: Map<string, string>;
-//# sourceMappingURL=fingerprint.generated.d.ts.map
+export declare const hashMap: Map<string, string>;

package/dist/modules/manager/index.d.ts

@@ -24,5 +24,4 @@ export declare function isKnownManager(mgr: string): boolean;
  * is not provided or is an empty array, it returns the full list of managers.
  */
 export declare function getEnabledManagersList(enabledManagers?: string[]): string[];
-export { hashMap };
-//# sourceMappingURL=index.d.ts.map
+export { hashMap };

package/dist/modules/manager/mise/extract.js

@@ -1,4 +1,4 @@
-import java_version_lts_default from "../../../data/java-version-lts.js";
+import java_version_lts_default from "../../../data/java-version-lts.json.js";
 import { logger } from "../../../logger/index.js";
 import { readLocalFile } from "../../../util/fs/index.js";
 import { coerceObject } from "../../../util/object.js";

package/dist/modules/manager/mise/upgradeable-tooling.js

@@ -1,4 +1,4 @@
-import mise_registry_default from "../../../data/mise-registry.js";
+import mise_registry_default from "../../../data/mise-registry.json.js";
 import { coerceObject } from "../../../util/object.js";
 import { regEx } from "../../../util/regex.js";
 import { GithubReleasesDatasource } from "../../datasource/github-releases/index.js";

package/dist/modules/manager/types.d.ts

@@ -552,5 +552,4 @@ export interface PostUpdateConfig<T = unknown> extends Record<string, any>, Mana
   toolSettings?: RepoToolSettingsOptions;
   minimumReleaseAge?: Nullish<string>;
   isLockFileMaintenance?: boolean;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/platform/bitbucket/index.d.ts

@@ -33,5 +33,4 @@ export declare function ensureComment({ number, topic, content }: EnsureCommentC
 export declare function ensureCommentRemoval(deleteConfig: EnsureCommentRemovalConfig): Promise<void>;
 export declare function createPr({ sourceBranch, targetBranch, prTitle: title, prBody: description, draftPR, platformPrOptions }: CreatePRConfig): Promise<Pr>;
 export declare function updatePr({ number: prNo, prTitle: title, prBody: description, state, targetBranch }: UpdatePrConfig): Promise<void>;
-export declare function mergePr({ branchName, id: prNo, strategy: mergeStrategy }: MergePRConfig): Promise<boolean>;
-//# sourceMappingURL=index.d.ts.map
+export declare function mergePr({ branchName, id: prNo, strategy: mergeStrategy }: MergePRConfig): Promise<boolean>;

package/dist/modules/platform/bitbucket-server/index.d.ts

@@ -43,5 +43,4 @@ export declare function mergePr({ branchName, id: prNo }: MergePRConfig): Promis
 export declare function expandGroupMembers(reviewers: string[]): Promise<string[]>;
 export declare function extractRulesFromCodeOwnersLines(cleanedLines: string[]): FileOwnerRule[];
 export declare function massageMarkdown(input: string): string;
-export declare function maxBodyLength(): number;
-//# sourceMappingURL=index.d.ts.map
+export declare function maxBodyLength(): number;

package/dist/modules/platform/bitbucket-server/types.d.ts

@@ -2,5 +2,4 @@ import { Pr } from "../types.js";
 import "got";
 export interface BbsPr extends Pr {
   version?: number;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/platform/github/schema.d.ts

@@ -157,5 +157,4 @@ export declare const GithubVulnerabilityAlerts: z.ZodPipe<z.ZodType<{
   };
 }[]>>;
 export type GithubVulnerabilityAlerts = z.infer<typeof GithubVulnerabilityAlerts>;
-export type GithubVulnerabilityAlert = GithubVulnerabilityAlerts[number];
-//# sourceMappingURL=schema.d.ts.map
+export type GithubVulnerabilityAlert = GithubVulnerabilityAlerts[number];

package/dist/modules/platform/gitlab/code-owners.d.ts

@@ -1,3 +1,2 @@
 import { FileOwnerRule } from "../types.js";
-export declare function extractRulesFromCodeOwnersLines(cleanedLines: string[]): FileOwnerRule[];
-//# sourceMappingURL=code-owners.d.ts.map
+export declare function extractRulesFromCodeOwnersLines(cleanedLines: string[]): FileOwnerRule[];

package/dist/modules/platform/gitlab/index.d.ts

@@ -49,5 +49,4 @@ export declare function ensureComment({ number, topic, content }: EnsureCommentC
 export declare function ensureCommentRemoval(deleteConfig: EnsureCommentRemovalConfig): Promise<void>;
 export declare function filterUnavailableUsers(users: string[]): Promise<string[]>;
 export declare function expandGroupMembers(reviewersOrAssignees: string[]): Promise<string[]>;
-export { extractRulesFromCodeOwnersLines };
-//# sourceMappingURL=index.d.ts.map
+export { extractRulesFromCodeOwnersLines };

package/dist/modules/platform/gitlab/types.d.ts

@@ -9,5 +9,4 @@ export interface GitlabPr extends Pr {
   headPipelineStatus?: string;
   headPipelineSha?: string;
   headPipelineSource?: string;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/platform/index.d.ts

@@ -5,5 +5,4 @@ export declare function getPlatformList(): string[];
 export declare const platform: Platform;
 export declare function setPlatformApi(name: PlatformId): void;
 export declare function initPlatform(config: AllConfig): Promise<AllConfig>;
-export type { AutodiscoverConfig, BranchStatusConfig, CancelPlatformAutomergeConfig, CreatePRConfig, EnsureCommentConfig, EnsureCommentRemovalConfig, EnsureCommentRemovalConfigByContent, EnsureCommentRemovalConfigByTopic, EnsureIssueConfig, EnsureIssueResult, FileOwnerRule, FindPRConfig, GitUrlOption, Issue, MergePRConfig, Platform, PlatformParams, PlatformPrOptions, PlatformResult, PlatformScm, Pr, PrBodyStruct, PrDebugData, ReattemptPlatformAutomergeConfig, RepoConfigParams, RepoParams, RepoResult, RepoSortMethod, SortMethod, StatusCheckConfig, UpdatePrConfig, VulnerabilityAlert };
-//# sourceMappingURL=index.d.ts.map
+export type { AutodiscoverConfig, BranchStatusConfig, CancelPlatformAutomergeConfig, CreatePRConfig, EnsureCommentConfig, EnsureCommentRemovalConfig, EnsureCommentRemovalConfigByContent, EnsureCommentRemovalConfigByTopic, EnsureIssueConfig, EnsureIssueResult, FileOwnerRule, FindPRConfig, GitUrlOption, Issue, MergePRConfig, Platform, PlatformParams, PlatformPrOptions, PlatformResult, PlatformScm, Pr, PrBodyStruct, PrDebugData, ReattemptPlatformAutomergeConfig, RepoConfigParams, RepoParams, RepoResult, RepoSortMethod, SortMethod, StatusCheckConfig, UpdatePrConfig, VulnerabilityAlert };

package/dist/modules/platform/types.d.ts

@@ -314,5 +314,4 @@ export interface PlatformScm {
   mergeToLocal(branchName: string): Promise<void>;
   mergeAndPush(branchName: string): Promise<void>;
   syncForkWithUpstream?(baseBranch: string): Promise<void>;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/versioning/generic.d.ts

@@ -21,5 +21,4 @@ export declare abstract class GenericVersioningApi<T extends GenericVersion = Ge
   sortVersions(version: string, other: string): number;
   matches(version: string, range: string): boolean;
   isSame(type: 'major' | 'minor' | 'patch', a: string, b: string): boolean;
-}
-//# sourceMappingURL=generic.d.ts.map
+}

package/dist/modules/versioning/index.d.ts

@@ -7,5 +7,4 @@ export declare function getVersioningList(): string[];
  */
 export declare function getVersionings(): Map<string, VersioningApi | VersioningApiConstructor>;
 export declare function get(versioning: string | null | undefined): VersioningApi;
-export { DistroDataFile, DistroInfoRecord, DistroInfoRecordWithVersion, DistroSchedule, GenericVersion, NewValueConfig, RangeComparator, VersionComparator, VersionParser, VersioningApi, VersioningApiConstructor };
-//# sourceMappingURL=index.d.ts.map
+export { DistroDataFile, DistroInfoRecord, DistroInfoRecordWithVersion, DistroSchedule, GenericVersion, NewValueConfig, RangeComparator, VersionComparator, VersionParser, VersioningApi, VersioningApiConstructor };

package/dist/modules/versioning/node/schedule.js

@@ -1,4 +1,4 @@
-import node_js_schedule_default from "../../../data/node-js-schedule.js";
+import node_js_schedule_default from "../../../data/node-js-schedule.json.js";
 import { api } from "../semver/index.js";
 // lib/modules/versioning/node/schedule.ts
 const nodeSchedule = node_js_schedule_default;

package/dist/modules/versioning/semver-coerced/index.d.ts

@@ -9,5 +9,4 @@ export declare const supportsRanges = false;
 declare function getSatisfyingVersion(versions: string[], range: string): string | null;
 export declare function isVersion(input: string): boolean;
 export declare const api: VersioningApi;
-export { api as default, getSatisfyingVersion, index_d_exports, isVersion as isValid };
-//# sourceMappingURL=index.d.ts.map
+export { api as default, getSatisfyingVersion, index_d_exports, isVersion as isValid };

package/dist/modules/versioning/types.d.ts

@@ -161,5 +161,4 @@ export type VersioningApiConstructor = new (config?: string) => VersioningApi;
 export interface RangeComparator {
   operator: string;
   version: string;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/modules/versioning/ubuntu/index.d.ts

@@ -4,5 +4,4 @@ export declare const displayName = "Ubuntu";
 export declare const urls: string[];
 export declare const supportsRanges = false;
 export declare const api: VersioningApi;
-export { api as default };
-//# sourceMappingURL=index.d.ts.map
+export { api as default };

package/dist/proxy.d.ts

@@ -1,3 +1,2 @@
 export declare function bootstrap(): void;
-export declare function hasProxy(): boolean;
-//# sourceMappingURL=proxy.d.ts.map
+export declare function hasProxy(): boolean;

package/dist/renovate.d.ts

@@ -1,3 +1 @@
-import { require_punycode } from "./punycode.js";
-import "source-map-support/register.js";
-//# sourceMappingURL=renovate.d.ts.map
+import "source-map-support/register.js";

package/dist/types/base.d.ts

@@ -3,5 +3,4 @@ export interface ModuleApi {
   url?: string;
   /** optional URLs to add to docs as references */
   urls?: string[];
-}
-//# sourceMappingURL=base.d.ts.map
+}

package/dist/types/branch-status.d.ts

@@ -1,2 +1 @@
-export type BranchStatus = 'green' | 'yellow' | 'red';
-//# sourceMappingURL=branch-status.d.ts.map
+export type BranchStatus = 'green' | 'yellow' | 'red';

package/dist/types/commit-message-json.d.ts

@@ -2,5 +2,4 @@ export interface CommitMessageJSON {
   body?: string;
   footer?: string;
   subject?: string;
-}
-//# sourceMappingURL=commit-message-json.d.ts.map
+}

package/dist/types/git.d.ts

@@ -1,3 +1,2 @@
 export type GitProtocol = 'ssh' | 'http' | 'https';
-export type GitOptions = Record<string, null | string | number>;
-//# sourceMappingURL=git.d.ts.map
+export type GitOptions = Record<string, null | string | number>;

package/dist/types/host-rules.d.ts

@@ -57,5 +57,4 @@ export interface InternalHostGrant {
 export type CombinedHostRule = Omit<HostRule, 'encrypted' | 'hostType' | 'matchHost' | 'resolvedHost' | 'readOnly' | 'allowInternal'> & {
   /** computed by `find()` - see {@link InternalHostGrant} */
   internalHostGrant?: InternalHostGrant;
-};
-//# sourceMappingURL=host-rules.d.ts.map
+};

package/dist/types/index.d.ts

@@ -31,5 +31,4 @@ export type MaybePromise<T> = T | Promise<T>;
  * type IsBroken = Extends<AutoMergeType, 'pr' | 'branch' | 'oh-no' >;  // This will give a typescript error
  */
 export type Extends<T, U extends T> = U;
-export type { BranchCache, BranchResult, BranchStatus, BranchUpgradeCache, BunyanRecord, CombinedHostRule, CommitMessageJSON, HostRule, InternalHostGrant, MergeStrategy, ModuleApi, PrBlockedBy, PrState, ProcessResult, ProcessStatus, RangeStrategy, RenovateSplit, RepositoryResult, SkipReason, StageName, UpdateType, ValidationMessage };
-//# sourceMappingURL=index.d.ts.map
+export type { BranchCache, BranchResult, BranchStatus, BranchUpgradeCache, BunyanRecord, CombinedHostRule, CommitMessageJSON, HostRule, InternalHostGrant, MergeStrategy, ModuleApi, PrBlockedBy, PrState, ProcessResult, ProcessStatus, RangeStrategy, RenovateSplit, RepositoryResult, SkipReason, StageName, UpdateType, ValidationMessage };

package/dist/types/pr-state.d.ts

@@ -1,2 +1 @@
-export type PrState = 'merged' | 'open' | 'closed' | 'all' | '!open';
-//# sourceMappingURL=pr-state.d.ts.map
+export type PrState = 'merged' | 'open' | 'closed' | 'all' | '!open';

package/dist/types/skip-reason.d.ts

@@ -21,5 +21,4 @@ export type StageName = 'current-timestamp' | 'datasource-merge' | 'extract' | '
 /**
  * The update was skipped during one of the Enrichment modules.
  */
-'enrichment';
-//# sourceMappingURL=skip-reason.d.ts.map
+'enrichment';

package/dist/types/versioning.d.ts

@@ -1,2 +1 @@
-export type RangeStrategy = 'auto' | 'bump' | 'future' | 'pin' | 'replace' | 'update-lockfile' | 'in-range-only' | 'widen';
-//# sourceMappingURL=versioning.d.ts.map
+export type RangeStrategy = 'auto' | 'bump' | 'future' | 'pin' | 'replace' | 'update-lockfile' | 'in-range-only' | 'widen';

package/dist/util/cache/package/backend.d.ts

@@ -6,5 +6,4 @@ export declare function init(config: AllConfig): Promise<void>;
 export declare function get<T = unknown>(namespace: PackageCacheNamespace, key: string): Promise<T | undefined>;
 export declare function set(namespace: PackageCacheNamespace, key: string, value: unknown, hardTtlMinutes: number): Promise<void>;
 export declare function destroy(): Promise<void>;
-export {};
-//# sourceMappingURL=backend.d.ts.map
+export {};

package/dist/util/cache/package/index.d.ts

@@ -13,5 +13,4 @@ export declare function set(namespace: PackageCacheNamespace, key: string, value
  */
 export declare function setWithRawTtl(namespace: PackageCacheNamespace, key: string, value: unknown, hardTtlMinutes: number): Promise<void>;
 export declare function init(config: AllConfig): Promise<void>;
-export declare function cleanup(_config: AllConfig): Promise<void>;
-//# sourceMappingURL=index.d.ts.map
+export declare function cleanup(_config: AllConfig): Promise<void>;

package/dist/util/cache/package/namespaces.d.ts

@@ -1,3 +1,2 @@
 export declare const packageCacheNamespaces: readonly ['_test-namespace', 'changelog-bitbucket-notes@v2', 'changelog-bitbucket-release', 'changelog-bitbucket-server-notes@v2', 'changelog-bitbucket-server-release', 'changelog-forgejo-notes@v2', 'changelog-forgejo-release', 'changelog-gitea-notes@v2', 'changelog-gitea-release', 'changelog-github-notes@v2', 'changelog-github-release', 'changelog-gitlab-notes@v2', 'changelog-gitlab-release', 'datasource-apk', 'datasource-artifactory', 'datasource-aws-machine-image', 'datasource-aws-rds', 'datasource-aws-eks-addon', 'datasource-azure-bicep-resource', 'datasource-azure-pipelines-tasks', 'datasource-azure-tags', 'datasource-bazel', 'datasource-bitbucket-tags', 'datasource-bitbucket-server-tags', 'datasource-bitrise', 'datasource-buildpacks-registry', 'datasource-cdnjs', 'datasource-conan', 'datasource-conda', 'datasource-cpan', 'datasource-crate-metadata', 'datasource-crate-registry-api', 'datasource-crate', 'datasource-deb', 'datasource-deno', 'datasource-docker-architecture', 'datasource-docker-hub-cache', 'datasource-docker-digest', 'datasource-docker-hub-tags', 'datasource-docker-imageconfig', 'datasource-docker-labels', 'datasource-docker-releases-v2', 'datasource-docker-tags', 'datasource-dotnet-version', 'datasource-elm-package', 'datasource-endoflife-date', 'datasource-galaxy-collection', 'datasource-galaxy', 'datasource-git-refs', 'datasource-git-tags', 'datasource-git', 'datasource-forgejo-releases', 'datasource-forgejo-tags', 'datasource-gitea-releases', 'datasource-gitea-tags', 'datasource-github-digest', 'datasource-github-release-attachments', 'datasource-gitlab-packages', 'datasource-gitlab-releases', 'datasource-gitlab-tags', 'datasource-glasskube-packages', 'datasource-go-direct', 'datasource-go-proxy-timestamps', 'datasource-go-proxy', 'datasource-go', 'datasource-golang-version', 'datasource-gradle-version', 'datasource-helm', 'datasource-hermit', 'datasource-hex', 'datasource-hexpm-bob', 'datasource-java-version', 'datasource-jenkins-plugins', 'datasource-jsr', 'datasource-julia-general-metadata', 'datasource-maven:cache-provider', 'datasource-maven:metadata-not-found', 'datasource-maven:pom-cache-provider', 'datasource-maven:postprocess-reject', 'datasource-nextcloud', 'datasource-node-version', 'datasource-npm:cache-provider', 'datasource-nuget-v3', 'datasource-orb', 'datasource-packagist', 'datasource-pod', 'datasource-python-version', 'datasource-repology', 'datasource-rpm', 'datasource-ruby-version', 'datasource-rubygems', 'datasource-rust-version', 'datasource-sbt-package', 'datasource-terraform-module', 'datasource-terraform-provider', 'datasource-terraform', 'datasource-typst:cache-provider', 'datasource-typst:registry-releases', 'datasource-unity3d', 'datasource-unity3d-packages', 'github-branches-datasource-v1', 'github-releases-datasource-v2', 'github-tags-datasource-v2', 'merge-confidence', 'preset', 'terraform-provider-hash', 'url-sha256'];
-export type PackageCacheNamespace = (typeof packageCacheNamespaces)[number] | `datasource-releases-${string}`;
-//# sourceMappingURL=namespaces.d.ts.map
+export type PackageCacheNamespace = (typeof packageCacheNamespaces)[number] | `datasource-releases-${string}`;

package/dist/util/cache/repository/types.d.ts

@@ -179,5 +179,4 @@ export interface RepoCacheConfig {
   repositoryCache?: RepositoryCacheConfig;
   repositoryCacheType?: RepositoryCacheType;
   repoFingerprint: string;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/util/compress.d.ts

@@ -3,5 +3,4 @@ export declare function compressToBuffer(input: string, quality?: number): Promi
 export declare function decompressFromBuffer(input: Buffer): Promise<string>;
 export declare function compressToBase64(input: string): Promise<string>;
 export declare function decompressFromBase64(input: string): Promise<string>;
-export declare function createDecompressStream(input: Readable): Promise<Readable>;
-//# sourceMappingURL=compress.d.ts.map
+export declare function createDecompressStream(input: Readable): Promise<Readable>;

package/dist/util/exec/common.d.ts

@@ -1,4 +1,3 @@
 import { CommandWithOptions, ExecResult, RawExecOptions } from "./types.js";
 export declare function exec(commandArgument: string | CommandWithOptions, opts: RawExecOptions): Promise<ExecResult>;
-export declare function rawExec(cmd: string | CommandWithOptions, opts: RawExecOptions): Promise<ExecResult>;
-//# sourceMappingURL=common.d.ts.map
+export declare function rawExec(cmd: string | CommandWithOptions, opts: RawExecOptions): Promise<ExecResult>;

package/dist/util/exec/exec-error.d.ts

@@ -16,5 +16,4 @@ export declare class ExecError extends Error {
   signal?: NodeJS.Signals;
   err?: Error;
   constructor(message: string, data: ExecErrorData, err?: Error);
-}
-//# sourceMappingURL=exec-error.d.ts.map
+}

package/dist/util/exec/types.d.ts

@@ -161,5 +161,4 @@ export interface CommandWithOptions {
    * **/
   shell?: boolean | string;
 }
-export {};
-//# sourceMappingURL=types.d.ts.map
+export {};

package/dist/util/git/config.d.ts

@@ -1,5 +1,4 @@
 import "../exec/utils.js";
 import { GitNoVerifyOption } from "./types.js";
-import { SimpleGitOptions } from "simple-git";
-export declare function setNoVerify(value: GitNoVerifyOption[]): void;
-//# sourceMappingURL=config.d.ts.map
+import "simple-git";
+export declare function setNoVerify(value: GitNoVerifyOption[]): void;

package/dist/util/git/index.d.ts

@@ -162,5 +162,4 @@ export declare function diffCommitTree(parentCommitSha: LongCommitSha, commitSha
  */
 export declare function syncForkWithUpstream(branchName: string): Promise<void>;
 export declare function getRemotes(): Promise<string[]>;
-export { setNoVerify, setPrivateKey };
-//# sourceMappingURL=index.d.ts.map
+export { setNoVerify, setPrivateKey };

package/dist/util/git/private-key.d.ts

@@ -1,2 +1 @@
-export declare function setPrivateKey(key: string | undefined, passphrase: string | undefined): void;
-//# sourceMappingURL=private-key.d.ts.map
+export declare function setPrivateKey(key: string | undefined, passphrase: string | undefined): void;

package/dist/util/git/types.d.ts

@@ -162,5 +162,4 @@ export type GitOperationType =
  * See also: https://git-scm.com/book/en/v2/Git-Internals-Plumbing-and-Porcelain
  */
 'other';
-export type { StatusResult };
-//# sourceMappingURL=types.d.ts.map
+export type { StatusResult };

package/dist/util/host-rules.d.ts

@@ -97,5 +97,4 @@ export declare function findAll({ hostType }: {
  * @returns a deep copy of all host rules other than those registered by {@link detachUrlCredentials}
  */
 export declare function getAll(): HostRule[];
-export declare function clear(): void;
-//# sourceMappingURL=host-rules.d.ts.map
+export declare function clear(): void;

package/dist/util/http/cache/types.d.ts

@@ -3,5 +3,4 @@ export interface HttpCacheProvider {
   setCacheHeaders<T extends Pick<GotOptions, 'headers'>>(method: string, url: string, opts: T): Promise<void>;
   bypassServer<T>(method: string, url: string, ignoreSoftTtl?: boolean): Promise<HttpResponse<T> | null>;
   wrapServerResponse<T>(method: string, url: string, resp: HttpResponse<T>): Promise<HttpResponse<T>>;
-}
-//# sourceMappingURL=types.d.ts.map
+}

package/dist/util/http/errors.d.ts

@@ -1,2 +1 @@
-export declare class EmptyResultError extends Error {}
-//# sourceMappingURL=errors.d.ts.map
+export declare class EmptyResultError extends Error {}

package/dist/util/http/github.d.ts

@@ -52,5 +52,4 @@ export declare class GithubHttp extends HttpBase<GithubHttpOptions> {
    */
   getRawTextFile(url: string, options?: InternalHttpOptions & GithubBaseHttpOptions): Promise<HttpResponse>;
 }
-export {};
-//# sourceMappingURL=github.d.ts.map
+export {};

package/dist/util/http/gitlab.d.ts

@@ -12,5 +12,4 @@ export declare class GitlabHttp extends HttpBase<GitlabHttpOptions> {
   protected requestJsonUnsafe<T = unknown>(method: HttpMethod, options: InternalJsonUnsafeOptions<GitlabHttpOptions>): Promise<HttpResponse<T>>;
   protected handleError(url: string | URL, _httpOptions: HttpOptions, err: Error): never;
   protected calculateRetryDelay(retryObject: RetryObject): number;
-}
-//# sourceMappingURL=gitlab.d.ts.map
+}

package/dist/util/http/http.d.ts

@@ -1,6 +1,6 @@
 import { AsyncResult } from "../result.js";
 import { HttpMethod, HttpOptions, HttpResponse, SafeJsonError } from "./types.js";
-import { Options, OptionsInit, RetryObject } from "got";
+import { Options, RetryObject } from "got";
 import { ZodType, z } from "zod/v4";
 import "type-fest";
 export interface InternalJsonUnsafeOptions<Opts extends HttpOptions = HttpOptions> {
@@ -101,5 +101,4 @@ export declare abstract class HttpBase<JSONOpts extends HttpOptions = HttpOption
   stream(url: string, options?: HttpOptions): NodeJS.ReadableStream;
   getToml<Schema extends ZodType<any, any, any>>(url: string, schema?: Schema): Promise<HttpResponse<z.infer<Schema>>>;
   getToml<Schema extends ZodType<any, any, any>>(url: string, options: JSONOpts, schema: Schema): Promise<HttpResponse<z.infer<Schema>>>;
-}
-//# sourceMappingURL=http.d.ts.map
+}

package/dist/util/http/legacy.d.ts

@@ -6,5 +6,4 @@ export type GotLegacyError<E = unknown, T = unknown> = RequestError & {
     errors?: E[];
   };
   headers?: Record<string, T>;
-};
-//# sourceMappingURL=legacy.d.ts.map
+};

package/dist/util/http/types.d.ts

@@ -92,5 +92,4 @@ export interface ConcurrencyLimitRule {
   matchHost: string;
   concurrency: number;
 }
-export type SafeJsonError = RequestError | ZodError | EmptyResultError;
-//# sourceMappingURL=types.d.ts.map
+export type SafeJsonError = RequestError | ZodError | EmptyResultError;

package/dist/util/merge-confidence/common.d.ts

@@ -1,2 +1 @@
-export declare const MERGE_CONFIDENCE: readonly ['low', 'neutral', 'high', 'very high'];
-//# sourceMappingURL=common.d.ts.map
+export declare const MERGE_CONFIDENCE: readonly ['low', 'neutral', 'high', 'very high'];

package/dist/util/merge-confidence/types.d.ts

@@ -1,3 +1,2 @@
 import { MERGE_CONFIDENCE } from "./common.js";
-export type MergeConfidence = (typeof MERGE_CONFIDENCE)[number];
-//# sourceMappingURL=types.d.ts.map
+export type MergeConfidence = (typeof MERGE_CONFIDENCE)[number];

package/dist/util/result.d.ts

@@ -293,5 +293,4 @@ export declare class AsyncResult<T extends Val, E extends Val> implements Promis
   onValue(fn: (value: T) => void): AsyncResult<T, E>;
   onError(fn: (err: E) => void): AsyncResult<T, E>;
 }
-export {};
-//# sourceMappingURL=result.d.ts.map
+export {};