renovate 44.30.0 → 44.30.2

package/dist/modules/manager/npm/post-update/yarn.js

@@ -199,11 +199,11 @@ async function generateLockFile(lockFileDir, env, config = {}, upgrades = []) {
 	return { lockFile };
 }
 function fuzzyMatchAdditionalYarnrcYml(additionalYarnRcYml, existingYarnrRcYml) {
-	const keys = new Map(Object.keys(existingYarnrRcYml.npmRegistries ?? {}).map((x) => [x.replace(/\/$/, "").replace(/^https?:/, ""), x]));
+	const keys = new Map(Object.keys(existingYarnrRcYml.npmRegistries ?? {}).map((x) => [x.replace(regEx(/\/$/), "").replace(regEx(/^https?:/), ""), x]));
 	return {
 		...additionalYarnRcYml,
 		npmRegistries: Object.entries(additionalYarnRcYml.npmRegistries ?? {}).map(([k, v]) => {
-			return { [keys.get(k.replace(/\/$/, "")) ?? k]: v };
+			return { [keys.get(k.replace(regEx(/\/$/), "")) ?? k]: v };
 		}).reduce((acc, cur) => ({
 			...acc,
 			...cur

package/dist/modules/manager/npm/post-update/yarn.js.map

@@ -1 +1 @@
-{"version":3,"file":"yarn.js","names":[],"sources":["../../../../../lib/modules/manager/npm/post-update/yarn.ts"],"sourcesContent":["import { isString } from '@sindresorhus/is';\nimport semver from 'semver';\nimport { quote } from 'shlex';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global.ts';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { getEnv } from '../../../../util/env.ts';\nimport { exec, getToolSettingsOptions } from '../../../../util/exec/index.ts';\nimport type {\n  CommandWithOptions,\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types.ts';\nimport {\n  localPathIsFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { newlineRegex, regEx } from '../../../../util/regex.ts';\nimport { uniqueStrings } from '../../../../util/string.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport type { PostUpdateConfig, Upgrade } from '../../types.ts';\nimport { getYarnLock, getYarnVersionFromLock } from '../extract/yarn.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport { getNodeToolConstraint } from './node-version.ts';\nimport type { GenerateLockFileResult } from './types.ts';\nimport {\n  getNodeOptions,\n  getPackageManagerVersion,\n  lazyLoadPackageJson,\n} from './utils.ts';\n\nexport async function checkYarnrc(\n  lockFileDir: string,\n): Promise<{ offlineMirror: boolean; yarnPath: string | null }> {\n  let offlineMirror = false;\n  let yarnPath: string | null = null;\n  try {\n    const yarnrc = await readLocalFile(\n      upath.join(lockFileDir, '.yarnrc'),\n      'utf8',\n    );\n    if (isString(yarnrc)) {\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      offlineMirror = !!mirrorLine;\n      const pathLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-path '));\n      if (pathLine) {\n        yarnPath = pathLine.replace(regEx(/^yarn-path\\s+\"?(.+?)\"?$/), '$1');\n      }\n      if (yarnPath) {\n        // resolve binary relative to `yarnrc`\n        yarnPath = upath.join(lockFileDir, yarnPath);\n      }\n      const yarnBinaryExists = yarnPath\n        ? await localPathIsFile(yarnPath)\n        : false;\n      let scrubbedYarnrc = yarnrc\n        .replace('--install.pure-lockfile true', '')\n        .replace('--install.frozen-lockfile true', '');\n      if (!yarnBinaryExists) {\n        scrubbedYarnrc = scrubbedYarnrc.replace(\n          regEx(/^yarn-path\\s+\"?.+?\"?$/gm),\n          '',\n        );\n        yarnPath = null;\n      }\n      if (yarnrc !== scrubbedYarnrc) {\n        logger.debug(`Writing scrubbed .yarnrc to ${lockFileDir}`);\n        await writeLocalFile(\n          upath.join(lockFileDir, '.yarnrc'),\n          scrubbedYarnrc,\n        );\n      }\n    }\n    /* v8 ignore next -- needs test */\n  } catch {\n    // not found\n  }\n  return { offlineMirror, yarnPath };\n}\n\nexport function getOptimizeCommand(fileName: string): string[] {\n  return ['sed', '-i', 's/ steps,/ steps.slice(0,1),/', fileName];\n}\n\nexport function isYarnUpdate(upgrade: Upgrade): boolean {\n  return upgrade.depType === 'packageManager' && upgrade.depName === 'yarn';\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  config: Partial<PostUpdateConfig<NpmManagerData>> = {},\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n  logger.debug(`Spawning yarn install to create ${lockFileName}`);\n  let lockFile: string | null = null;\n  try {\n    const lazyPgkJson = lazyLoadPackageJson(lockFileDir);\n    const toolConstraints: ToolConstraint[] = [\n      await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPgkJson),\n    ];\n    const yarnUpdate = upgrades.find(isYarnUpdate);\n    const yarnCompatibility =\n      (yarnUpdate ? yarnUpdate.newValue : config.constraints?.yarn) ??\n      getPackageManagerVersion('yarn', await lazyPgkJson.getValue()) ??\n      getYarnVersionFromLock(await getYarnLock(lockFileName));\n    const minYarnVersion =\n      semver.validRange(yarnCompatibility) &&\n      semver.minVersion(yarnCompatibility);\n    const isYarn1 = !minYarnVersion || minYarnVersion.major === 1;\n    const isYarnDedupeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '2.2.0');\n    const isYarnModeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '3.0.0');\n\n    const yarnTool: ToolConstraint = {\n      toolName: 'yarn',\n      constraint: '^1.22.18', // needs to be a v1 yarn, otherwise v2 will be installed\n    };\n\n    // check first upgrade, see #17786\n    const hasPackageManager =\n      !!config.managerData?.hasPackageManager ||\n      !!upgrades[0]?.managerData?.hasPackageManager;\n\n    if (!isYarn1 && hasPackageManager) {\n      toolConstraints.push({\n        toolName: 'corepack',\n        constraint: config.constraints?.corepack,\n      });\n    } else {\n      toolConstraints.push(yarnTool);\n      if (isYarn1 && minYarnVersion) {\n        yarnTool.constraint = yarnCompatibility;\n      }\n    }\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n      CI: 'true',\n    };\n\n    const commands: (string | CommandWithOptions)[] = [];\n    let cmdOptions = ''; // should have a leading space\n    if (config.skipInstalls !== false) {\n      if (isYarn1) {\n        const { offlineMirror, yarnPath } = await checkYarnrc(lockFileDir);\n        // v8 ignore else -- TODO: add test #40625\n        if (!offlineMirror) {\n          logger.debug('Updating yarn.lock only - skipping node_modules');\n          // The following change causes Yarn 1.x to exit gracefully after updating the lock file but without installing node_modules\n          yarnTool.toolName = 'yarn-slim';\n          if (yarnPath) {\n            commands.push({\n              command: getOptimizeCommand(yarnPath),\n              ignoreFailure: true,\n            });\n          }\n        }\n      } else if (isYarnModeAvailable) {\n        // Don't run the link step and only fetch what's necessary to compute an updated lockfile\n        cmdOptions += ' --mode=update-lockfile';\n      }\n    }\n\n    if (isYarn1) {\n      cmdOptions +=\n        ' --ignore-engines --ignore-platform --network-timeout 100000';\n      extraEnv.YARN_CACHE_FOLDER = env.YARN_CACHE_FOLDER;\n    } else {\n      extraEnv.YARN_ENABLE_IMMUTABLE_INSTALLS = 'false';\n      extraEnv.YARN_HTTP_TIMEOUT = '100000';\n      extraEnv.YARN_GLOBAL_FOLDER = env.YARN_GLOBAL_FOLDER;\n      if (!config.managerData?.yarnZeroInstall) {\n        logger.debug('Enabling global cache as zero-install is not detected');\n        extraEnv.YARN_ENABLE_GLOBAL_CACHE = '1';\n      }\n    }\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      if (isYarn1) {\n        cmdOptions += ' --ignore-scripts';\n      } else if (isYarnModeAvailable) {\n        if (config.skipInstalls === false) {\n          // Don't run the build scripts\n          cmdOptions += ' --mode=skip-build';\n        }\n      } else {\n        extraEnv.YARN_ENABLE_SCRIPTS = '0';\n      }\n    }\n\n    const { nodeMaxMemory } = getToolSettingsOptions(config.toolSettings);\n    if (nodeMaxMemory) {\n      extraEnv.NODE_OPTIONS = getNodeOptions(nodeMaxMemory);\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv,\n      docker: {},\n      toolConstraints,\n    };\n    /* v8 ignore next 4 -- needs test */\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    if (yarnUpdate && !isYarn1) {\n      logger.debug('Updating Yarn binary');\n      // TODO: types (#22198)\n      commands.push(`yarn set version ${quote(yarnUpdate.newValue!)}`);\n    }\n\n    const allEnv = getEnv();\n    if (allEnv.RENOVATE_X_YARN_PROXY) {\n      // v8 ignore else -- TODO: add test #40625\n      if (allEnv.HTTP_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpProxy');\n        commands.push(\n          `yarn config set --home httpProxy ${quote(allEnv.HTTP_PROXY)}`,\n        );\n      }\n      // v8 ignore else -- TODO: add test #40625\n      if (allEnv.HTTPS_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpsProxy');\n        commands.push(\n          `yarn config set --home httpsProxy ${quote(allEnv.HTTPS_PROXY)}`,\n        );\n      }\n    }\n\n    // This command updates the lock file based on package.json\n    commands.push(`yarn install${cmdOptions}`);\n\n    // rangeStrategy = update-lockfile\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n    if (lockUpdates.length) {\n      logger.debug('Performing lockfileUpdate (yarn)');\n      if (isYarn1) {\n        // `yarn upgrade` updates based on the version range specified in the package file\n        // note - this can hit a yarn bug, see https://github.com/yarnpkg/yarn/issues/8236\n        commands.push(\n          `yarn upgrade ${lockUpdates\n            .map((update) => update.depName)\n            .filter(isString)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      } else {\n        // `yarn up -R` updates to the latest release in each range\n        commands.push(\n          `yarn up -R ${lockUpdates\n            // TODO: types (#22198)\n            .map((update) => `${update.depName!}`)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      }\n    }\n\n    // postUpdateOptions\n    ['fewer', 'highest'].forEach((s) => {\n      if (\n        config.postUpdateOptions?.includes(\n          `yarnDedupe${s.charAt(0).toUpperCase()}${s.slice(1)}`,\n        )\n      ) {\n        logger.debug(`Performing yarn dedupe ${s}`);\n        if (isYarn1) {\n          commands.push(`npx yarn-deduplicate --strategy ${s}`);\n          // Run yarn again in case any changes are necessary\n          commands.push(`yarn install${cmdOptions}`);\n        } else if (isYarnDedupeAvailable && s === 'highest') {\n          commands.push(`yarn dedupe --strategy ${s}${cmdOptions}`);\n        } else {\n          logger.debug(`yarn dedupe ${s} not available`);\n        }\n      }\n    });\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n\n      // Note: Instead of just deleting the `yarn.lock` file, we just wipe it\n      // and keep an empty lock file. Deleting the lock file could result in different\n      // Yarn semantics. e.g. Yarn 2+ will error when `yarn install` is executed in\n      // a subdirectory which is not part of a Yarn workspace. Yarn suggests to create\n      // an empty lock file if a subdirectory should be treated as its own workspace.\n      // https://github.com/yarnpkg/berry/blob/20612e82d26ead5928cc27bf482bb8d62dde87d3/packages/yarnpkg-core/sources/Project.ts#L284.\n      try {\n        await writeLocalFile(lockFileName, '');\n      } catch (err) {\n        // v8 ignore next -- TODO: add test #40625\n        logger.debug(\n          { err, lockFileName },\n          'Error clearing `yarn.lock` for lock file maintenance',\n        );\n      }\n    }\n\n    // Run the commands\n    await exec(commands, execOptions);\n\n    // Read the result\n    lockFile = await readLocalFile(lockFileName, 'utf8');\n  } catch (err) {\n    // v8 ignore if -- TODO: add test #40625\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        err,\n        type: 'yarn',\n      },\n      'lock file error',\n    );\n    const stdouterr = String(err.stdout) + String(err.stderr);\n    // v8 ignore if -- TODO: add test #40625\n    if (\n      stdouterr.includes('ENOSPC: no space left on device') ||\n      stdouterr.includes('Out of diskspace')\n    ) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    }\n    // v8 ignore if -- TODO: add test #40625\n    if (\n      stdouterr.includes('The registry may be down.') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.yarnpkg.com') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.npmjs.org')\n    ) {\n      throw new ExternalHostError(err, NpmDatasource.id);\n    }\n    return { error: true, stderr: err.stderr, stdout: err.stdout };\n  }\n  return { lockFile };\n}\n\nexport function fuzzyMatchAdditionalYarnrcYml<\n  T extends { npmRegistries?: Record<string, unknown> },\n>(additionalYarnRcYml: T, existingYarnrRcYml: T): T {\n  const keys = new Map(\n    Object.keys(existingYarnrRcYml.npmRegistries ?? {}).map((x) => [\n      x.replace(/\\/$/, '').replace(/^https?:/, ''),\n      x,\n    ]),\n  );\n\n  return {\n    ...additionalYarnRcYml,\n    npmRegistries: Object.entries(additionalYarnRcYml.npmRegistries ?? {})\n      .map(([k, v]) => {\n        const key = keys.get(k.replace(/\\/$/, '')) ?? k;\n        return { [key]: v };\n      })\n      .reduce((acc, cur) => ({ ...acc, ...cur }), {}),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsCA,eAAsB,YACpB,aAC8D;CAC9D,IAAI,gBAAgB;CACpB,IAAI,WAA0B;CAC9B,IAAI;EACF,MAAM,SAAS,MAAM,cACnB,MAAM,KAAK,aAAa,SAAS,GACjC,MACF;EACA,IAAI,SAAS,MAAM,GAAG;GAIpB,gBAAgB,CAAC,CAHE,OAChB,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,sBAAsB,CAC7B;GAC3B,MAAM,WAAW,OACd,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,YAAY,CAAC;GAC/C,IAAI,UACF,WAAW,SAAS,QAAQ,MAAM,yBAAyB,GAAG,IAAI;GAEpE,IAAI,UAEF,WAAW,MAAM,KAAK,aAAa,QAAQ;GAE7C,MAAM,mBAAmB,WACrB,MAAM,gBAAgB,QAAQ,IAC9B;GACJ,IAAI,iBAAiB,OAClB,QAAQ,gCAAgC,EAAE,CAAC,CAC3C,QAAQ,kCAAkC,EAAE;GAC/C,IAAI,CAAC,kBAAkB;IACrB,iBAAiB,eAAe,QAC9B,MAAM,yBAAyB,GAC/B,EACF;IACA,WAAW;GACb;GACA,IAAI,WAAW,gBAAgB;IAC7B,OAAO,MAAM,+BAA+B,aAAa;IACzD,MAAM,eACJ,MAAM,KAAK,aAAa,SAAS,GACjC,cACF;GACF;EACF;CAEF,QAAQ,CAER;CACA,OAAO;EAAE;EAAe;CAAS;AACnC;AAEA,SAAgB,mBAAmB,UAA4B;CAC7D,OAAO;EAAC;EAAO;EAAM;EAAiC;CAAQ;AAChE;AAEA,SAAgB,aAAa,SAA2B;CACtD,OAAO,QAAQ,YAAY,oBAAoB,QAAQ,YAAY;AACrE;AAEA,eAAsB,iBACpB,aACA,KACA,SAAoD,CAAC,GACrD,WAAsB,CAAC,GACU;CACjC,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW;CACxD,OAAO,MAAM,mCAAmC,cAAc;CAC9D,IAAI,WAA0B;CAC9B,IAAI;EACF,MAAM,cAAc,oBAAoB,WAAW;EACnD,MAAM,kBAAoC,CACxC,MAAM,sBAAsB,QAAQ,UAAU,aAAa,WAAW,CACxE;EACA,MAAM,aAAa,SAAS,KAAK,YAAY;EAC7C,MAAM,qBACH,aAAa,WAAW,WAAW,OAAO,aAAa,SACxD,yBAAyB,QAAQ,MAAM,YAAY,SAAS,CAAC,KAC7D,uBAAuB,MAAM,YAAY,YAAY,CAAC;EACxD,MAAM,iBACJ,OAAO,WAAW,iBAAiB,KACnC,OAAO,WAAW,iBAAiB;EACrC,MAAM,UAAU,CAAC,kBAAkB,eAAe,UAAU;EAC5D,MAAM,wBACJ,kBAAkB,OAAO,IAAI,gBAAgB,OAAO;EACtD,MAAM,sBACJ,kBAAkB,OAAO,IAAI,gBAAgB,OAAO;EAEtD,MAAM,WAA2B;GAC/B,UAAU;GACV,YAAY;EACd;EAGA,MAAM,oBACJ,CAAC,CAAC,OAAO,aAAa,qBACtB,CAAC,CAAC,SAAS,EAAE,EAAE,aAAa;EAE9B,IAAI,CAAC,WAAW,mBACd,gBAAgB,KAAK;GACnB,UAAU;GACV,YAAY,OAAO,aAAa;EAClC,CAAC;OACI;GACL,gBAAgB,KAAK,QAAQ;GAC7B,IAAI,WAAW,gBACb,SAAS,aAAa;EAE1B;EAEA,MAAM,WAAqB;GACzB,kBAAkB,IAAI;GACtB,kBAAkB,IAAI;GACtB,IAAI;EACN;EAEA,MAAM,WAA4C,CAAC;EACnD,IAAI,aAAa;EACjB,IAAI,OAAO,iBAAiB,OACtB;OAAA,SAAS;IACX,MAAM,EAAE,eAAe,aAAa,MAAM,YAAY,WAAW;;IAEjE,IAAI,CAAC,eAAe;KAClB,OAAO,MAAM,iDAAiD;KAE9D,SAAS,WAAW;KACpB,IAAI,UACF,SAAS,KAAK;MACZ,SAAS,mBAAmB,QAAQ;MACpC,eAAe;KACjB,CAAC;IAEL;GACF,OAAO,IAAI,qBAET,cAAc;EAAA;EAIlB,IAAI,SAAS;GACX,cACE;GACF,SAAS,oBAAoB,IAAI;EACnC,OAAO;GACL,SAAS,iCAAiC;GAC1C,SAAS,oBAAoB;GAC7B,SAAS,qBAAqB,IAAI;GAClC,IAAI,CAAC,OAAO,aAAa,iBAAiB;IACxC,OAAO,MAAM,uDAAuD;IACpE,SAAS,2BAA2B;GACtC;EACF;EACA,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,IAAI,SACF,cAAc;OACT,IAAI,qBACL;OAAA,OAAO,iBAAiB,OAE1B,cAAc;EAAA,OAGhB,SAAS,sBAAsB;EAInC,MAAM,EAAE,kBAAkB,uBAAuB,OAAO,YAAY;EACpE,IAAI,eACF,SAAS,eAAe,eAAe,aAAa;EAGtD,MAAM,cAA2B;GAC/B,SAAS;GACT;GACA,QAAQ,CAAC;GACT;EACF;;EAEA,IAAI,aAAa,IAAI,cAAc,GAAG;GACpC,SAAS,WAAW,IAAI;GACxB,SAAS,YAAY,IAAI;EAC3B;EAEA,IAAI,cAAc,CAAC,SAAS;GAC1B,OAAO,MAAM,sBAAsB;GAEnC,SAAS,KAAK,oBAAoB,MAAM,WAAW,QAAS,GAAG;EACjE;EAEA,MAAM,SAAS,OAAO;EACtB,IAAI,OAAO,uBAAuB;;GAEhC,IAAI,OAAO,cAAc,CAAC,SAAS;IACjC,SAAS,KAAK,oCAAoC;IAClD,SAAS,KACP,oCAAoC,MAAM,OAAO,UAAU,GAC7D;GACF;;GAEA,IAAI,OAAO,eAAe,CAAC,SAAS;IAClC,SAAS,KAAK,qCAAqC;IACnD,SAAS,KACP,qCAAqC,MAAM,OAAO,WAAW,GAC/D;GACF;EACF;EAGA,SAAS,KAAK,eAAe,YAAY;EAGzC,MAAM,cAAc,SAAS,QAAQ,YAAY,QAAQ,gBAAgB;EACzE,IAAI,YAAY,QAAQ;GACtB,OAAO,MAAM,kCAAkC;GAC/C,IAAI,SAGF,SAAS,KACP,gBAAgB,YACb,KAAK,WAAW,OAAO,OAAO,CAAC,CAC/B,OAAO,QAAQ,CAAC,CAChB,OAAO,aAAa,CAAC,CACrB,IAAI,KAAK,CAAC,CACV,KAAK,GAAG,IAAI,YACjB;QAGA,SAAS,KACP,cAAc,YAEX,KAAK,WAAW,GAAG,OAAO,SAAU,CAAC,CACrC,OAAO,aAAa,CAAC,CACrB,IAAI,KAAK,CAAC,CACV,KAAK,GAAG,IAAI,YACjB;EAEJ;EAGA,CAAC,SAAS,SAAS,CAAC,CAAC,SAAS,MAAM;GAClC,IACE,OAAO,mBAAmB,SACxB,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,MAAM,CAAC,GACpD,GACA;IACA,OAAO,MAAM,0BAA0B,GAAG;IAC1C,IAAI,SAAS;KACX,SAAS,KAAK,mCAAmC,GAAG;KAEpD,SAAS,KAAK,eAAe,YAAY;IAC3C,OAAO,IAAI,yBAAyB,MAAM,WACxC,SAAS,KAAK,0BAA0B,IAAI,YAAY;SAExD,OAAO,MAAM,eAAe,EAAE,eAAe;GAEjD;EACF,CAAC;EAED,IAAI,SAAS,MAAM,YAAY,QAAQ,qBAAqB,GAAG;GAC7D,OAAO,MACL,YAAY,aAAa,4CAC3B;GAQA,IAAI;IACF,MAAM,eAAe,cAAc,EAAE;GACvC,SAAS,KAAK;;IAEZ,OAAO,MACL;KAAE;KAAK;IAAa,GACpB,sDACF;GACF;EACF;EAGA,MAAM,KAAK,UAAU,WAAW;EAGhC,WAAW,MAAM,cAAc,cAAc,MAAM;CACrD,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,MACL;GACE;GACA,MAAM;EACR,GACA,iBACF;EACA,MAAM,YAAY,OAAO,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM;;EAExD,IACE,UAAU,SAAS,iCAAiC,KACpD,UAAU,SAAS,kBAAkB,GAErC,MAAM,IAAI,MAAM,8BAA8B;;EAGhD,IACE,UAAU,SAAS,2BAA2B,KAC9C,UAAU,SAAS,4CAA4C,KAC/D,UAAU,SAAS,0CAA0C,GAE7D,MAAM,IAAI,kBAAkB,KAAK,cAAc,EAAE;EAEnD,OAAO;GAAE,OAAO;GAAM,QAAQ,IAAI;GAAQ,QAAQ,IAAI;EAAO;CAC/D;CACA,OAAO,EAAE,SAAS;AACpB;AAEA,SAAgB,8BAEd,qBAAwB,oBAA0B;CAClD,MAAM,OAAO,IAAI,IACf,OAAO,KAAK,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAC7D,EAAE,QAAQ,OAAO,EAAE,CAAC,CAAC,QAAQ,YAAY,EAAE,GAC3C,CACF,CAAC,CACH;CAEA,OAAO;EACL,GAAG;EACH,eAAe,OAAO,QAAQ,oBAAoB,iBAAiB,CAAC,CAAC,CAAC,CACnE,KAAK,CAAC,GAAG,OAAO;GAEf,OAAO,GADK,KAAK,IAAI,EAAE,QAAQ,OAAO,EAAE,CAAC,KAAK,IAC9B,EAAE;EACpB,CAAC,CAAC,CACD,QAAQ,KAAK,SAAS;GAAE,GAAG;GAAK,GAAG;EAAI,IAAI,CAAC,CAAC;CAClD;AACF"}
+{"version":3,"file":"yarn.js","names":[],"sources":["../../../../../lib/modules/manager/npm/post-update/yarn.ts"],"sourcesContent":["import { isString } from '@sindresorhus/is';\nimport semver from 'semver';\nimport { quote } from 'shlex';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../../config/global.ts';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { getEnv } from '../../../../util/env.ts';\nimport { exec, getToolSettingsOptions } from '../../../../util/exec/index.ts';\nimport type {\n  CommandWithOptions,\n  ExecOptions,\n  ExtraEnv,\n  ToolConstraint,\n} from '../../../../util/exec/types.ts';\nimport {\n  localPathIsFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { newlineRegex, regEx } from '../../../../util/regex.ts';\nimport { uniqueStrings } from '../../../../util/string.ts';\nimport { NpmDatasource } from '../../../datasource/npm/index.ts';\nimport type { PostUpdateConfig, Upgrade } from '../../types.ts';\nimport { getYarnLock, getYarnVersionFromLock } from '../extract/yarn.ts';\nimport type { NpmManagerData } from '../types.ts';\nimport { getNodeToolConstraint } from './node-version.ts';\nimport type { GenerateLockFileResult } from './types.ts';\nimport {\n  getNodeOptions,\n  getPackageManagerVersion,\n  lazyLoadPackageJson,\n} from './utils.ts';\n\nexport async function checkYarnrc(\n  lockFileDir: string,\n): Promise<{ offlineMirror: boolean; yarnPath: string | null }> {\n  let offlineMirror = false;\n  let yarnPath: string | null = null;\n  try {\n    const yarnrc = await readLocalFile(\n      upath.join(lockFileDir, '.yarnrc'),\n      'utf8',\n    );\n    if (isString(yarnrc)) {\n      const mirrorLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-offline-mirror '));\n      offlineMirror = !!mirrorLine;\n      const pathLine = yarnrc\n        .split(newlineRegex)\n        .find((line) => line.startsWith('yarn-path '));\n      if (pathLine) {\n        yarnPath = pathLine.replace(regEx(/^yarn-path\\s+\"?(.+?)\"?$/), '$1');\n      }\n      if (yarnPath) {\n        // resolve binary relative to `yarnrc`\n        yarnPath = upath.join(lockFileDir, yarnPath);\n      }\n      const yarnBinaryExists = yarnPath\n        ? await localPathIsFile(yarnPath)\n        : false;\n      let scrubbedYarnrc = yarnrc\n        .replace('--install.pure-lockfile true', '')\n        .replace('--install.frozen-lockfile true', '');\n      if (!yarnBinaryExists) {\n        scrubbedYarnrc = scrubbedYarnrc.replace(\n          regEx(/^yarn-path\\s+\"?.+?\"?$/gm),\n          '',\n        );\n        yarnPath = null;\n      }\n      if (yarnrc !== scrubbedYarnrc) {\n        logger.debug(`Writing scrubbed .yarnrc to ${lockFileDir}`);\n        await writeLocalFile(\n          upath.join(lockFileDir, '.yarnrc'),\n          scrubbedYarnrc,\n        );\n      }\n    }\n    /* v8 ignore next -- needs test */\n  } catch {\n    // not found\n  }\n  return { offlineMirror, yarnPath };\n}\n\nexport function getOptimizeCommand(fileName: string): string[] {\n  return ['sed', '-i', 's/ steps,/ steps.slice(0,1),/', fileName];\n}\n\nexport function isYarnUpdate(upgrade: Upgrade): boolean {\n  return upgrade.depType === 'packageManager' && upgrade.depName === 'yarn';\n}\n\nexport async function generateLockFile(\n  lockFileDir: string,\n  env: NodeJS.ProcessEnv,\n  config: Partial<PostUpdateConfig<NpmManagerData>> = {},\n  upgrades: Upgrade[] = [],\n): Promise<GenerateLockFileResult> {\n  const lockFileName = upath.join(lockFileDir, 'yarn.lock');\n  logger.debug(`Spawning yarn install to create ${lockFileName}`);\n  let lockFile: string | null = null;\n  try {\n    const lazyPgkJson = lazyLoadPackageJson(lockFileDir);\n    const toolConstraints: ToolConstraint[] = [\n      await getNodeToolConstraint(config, upgrades, lockFileDir, lazyPgkJson),\n    ];\n    const yarnUpdate = upgrades.find(isYarnUpdate);\n    const yarnCompatibility =\n      (yarnUpdate ? yarnUpdate.newValue : config.constraints?.yarn) ??\n      getPackageManagerVersion('yarn', await lazyPgkJson.getValue()) ??\n      getYarnVersionFromLock(await getYarnLock(lockFileName));\n    const minYarnVersion =\n      semver.validRange(yarnCompatibility) &&\n      semver.minVersion(yarnCompatibility);\n    const isYarn1 = !minYarnVersion || minYarnVersion.major === 1;\n    const isYarnDedupeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '2.2.0');\n    const isYarnModeAvailable =\n      minYarnVersion && semver.gte(minYarnVersion, '3.0.0');\n\n    const yarnTool: ToolConstraint = {\n      toolName: 'yarn',\n      constraint: '^1.22.18', // needs to be a v1 yarn, otherwise v2 will be installed\n    };\n\n    // check first upgrade, see #17786\n    const hasPackageManager =\n      !!config.managerData?.hasPackageManager ||\n      !!upgrades[0]?.managerData?.hasPackageManager;\n\n    if (!isYarn1 && hasPackageManager) {\n      toolConstraints.push({\n        toolName: 'corepack',\n        constraint: config.constraints?.corepack,\n      });\n    } else {\n      toolConstraints.push(yarnTool);\n      if (isYarn1 && minYarnVersion) {\n        yarnTool.constraint = yarnCompatibility;\n      }\n    }\n\n    const extraEnv: ExtraEnv = {\n      NPM_CONFIG_CACHE: env.NPM_CONFIG_CACHE,\n      npm_config_store: env.npm_config_store,\n      CI: 'true',\n    };\n\n    const commands: (string | CommandWithOptions)[] = [];\n    let cmdOptions = ''; // should have a leading space\n    if (config.skipInstalls !== false) {\n      if (isYarn1) {\n        const { offlineMirror, yarnPath } = await checkYarnrc(lockFileDir);\n        // v8 ignore else -- TODO: add test #40625\n        if (!offlineMirror) {\n          logger.debug('Updating yarn.lock only - skipping node_modules');\n          // The following change causes Yarn 1.x to exit gracefully after updating the lock file but without installing node_modules\n          yarnTool.toolName = 'yarn-slim';\n          if (yarnPath) {\n            commands.push({\n              command: getOptimizeCommand(yarnPath),\n              ignoreFailure: true,\n            });\n          }\n        }\n      } else if (isYarnModeAvailable) {\n        // Don't run the link step and only fetch what's necessary to compute an updated lockfile\n        cmdOptions += ' --mode=update-lockfile';\n      }\n    }\n\n    if (isYarn1) {\n      cmdOptions +=\n        ' --ignore-engines --ignore-platform --network-timeout 100000';\n      extraEnv.YARN_CACHE_FOLDER = env.YARN_CACHE_FOLDER;\n    } else {\n      extraEnv.YARN_ENABLE_IMMUTABLE_INSTALLS = 'false';\n      extraEnv.YARN_HTTP_TIMEOUT = '100000';\n      extraEnv.YARN_GLOBAL_FOLDER = env.YARN_GLOBAL_FOLDER;\n      if (!config.managerData?.yarnZeroInstall) {\n        logger.debug('Enabling global cache as zero-install is not detected');\n        extraEnv.YARN_ENABLE_GLOBAL_CACHE = '1';\n      }\n    }\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      if (isYarn1) {\n        cmdOptions += ' --ignore-scripts';\n      } else if (isYarnModeAvailable) {\n        if (config.skipInstalls === false) {\n          // Don't run the build scripts\n          cmdOptions += ' --mode=skip-build';\n        }\n      } else {\n        extraEnv.YARN_ENABLE_SCRIPTS = '0';\n      }\n    }\n\n    const { nodeMaxMemory } = getToolSettingsOptions(config.toolSettings);\n    if (nodeMaxMemory) {\n      extraEnv.NODE_OPTIONS = getNodeOptions(nodeMaxMemory);\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv,\n      docker: {},\n      toolConstraints,\n    };\n    /* v8 ignore next 4 -- needs test */\n    if (GlobalConfig.get('exposeAllEnv')) {\n      extraEnv.NPM_AUTH = env.NPM_AUTH;\n      extraEnv.NPM_EMAIL = env.NPM_EMAIL;\n    }\n\n    if (yarnUpdate && !isYarn1) {\n      logger.debug('Updating Yarn binary');\n      // TODO: types (#22198)\n      commands.push(`yarn set version ${quote(yarnUpdate.newValue!)}`);\n    }\n\n    const allEnv = getEnv();\n    if (allEnv.RENOVATE_X_YARN_PROXY) {\n      // v8 ignore else -- TODO: add test #40625\n      if (allEnv.HTTP_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpProxy');\n        commands.push(\n          `yarn config set --home httpProxy ${quote(allEnv.HTTP_PROXY)}`,\n        );\n      }\n      // v8 ignore else -- TODO: add test #40625\n      if (allEnv.HTTPS_PROXY && !isYarn1) {\n        commands.push('yarn config unset --home httpsProxy');\n        commands.push(\n          `yarn config set --home httpsProxy ${quote(allEnv.HTTPS_PROXY)}`,\n        );\n      }\n    }\n\n    // This command updates the lock file based on package.json\n    commands.push(`yarn install${cmdOptions}`);\n\n    // rangeStrategy = update-lockfile\n    const lockUpdates = upgrades.filter((upgrade) => upgrade.isLockfileUpdate);\n    if (lockUpdates.length) {\n      logger.debug('Performing lockfileUpdate (yarn)');\n      if (isYarn1) {\n        // `yarn upgrade` updates based on the version range specified in the package file\n        // note - this can hit a yarn bug, see https://github.com/yarnpkg/yarn/issues/8236\n        commands.push(\n          `yarn upgrade ${lockUpdates\n            .map((update) => update.depName)\n            .filter(isString)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      } else {\n        // `yarn up -R` updates to the latest release in each range\n        commands.push(\n          `yarn up -R ${lockUpdates\n            // TODO: types (#22198)\n            .map((update) => `${update.depName!}`)\n            .filter(uniqueStrings)\n            .map(quote)\n            .join(' ')}${cmdOptions}`,\n        );\n      }\n    }\n\n    // postUpdateOptions\n    ['fewer', 'highest'].forEach((s) => {\n      if (\n        config.postUpdateOptions?.includes(\n          `yarnDedupe${s.charAt(0).toUpperCase()}${s.slice(1)}`,\n        )\n      ) {\n        logger.debug(`Performing yarn dedupe ${s}`);\n        if (isYarn1) {\n          commands.push(`npx yarn-deduplicate --strategy ${s}`);\n          // Run yarn again in case any changes are necessary\n          commands.push(`yarn install${cmdOptions}`);\n        } else if (isYarnDedupeAvailable && s === 'highest') {\n          commands.push(`yarn dedupe --strategy ${s}${cmdOptions}`);\n        } else {\n          logger.debug(`yarn dedupe ${s} not available`);\n        }\n      }\n    });\n\n    if (upgrades.find((upgrade) => upgrade.isLockFileMaintenance)) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n\n      // Note: Instead of just deleting the `yarn.lock` file, we just wipe it\n      // and keep an empty lock file. Deleting the lock file could result in different\n      // Yarn semantics. e.g. Yarn 2+ will error when `yarn install` is executed in\n      // a subdirectory which is not part of a Yarn workspace. Yarn suggests to create\n      // an empty lock file if a subdirectory should be treated as its own workspace.\n      // https://github.com/yarnpkg/berry/blob/20612e82d26ead5928cc27bf482bb8d62dde87d3/packages/yarnpkg-core/sources/Project.ts#L284.\n      try {\n        await writeLocalFile(lockFileName, '');\n      } catch (err) {\n        // v8 ignore next -- TODO: add test #40625\n        logger.debug(\n          { err, lockFileName },\n          'Error clearing `yarn.lock` for lock file maintenance',\n        );\n      }\n    }\n\n    // Run the commands\n    await exec(commands, execOptions);\n\n    // Read the result\n    lockFile = await readLocalFile(lockFileName, 'utf8');\n  } catch (err) {\n    // v8 ignore if -- TODO: add test #40625\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug(\n      {\n        err,\n        type: 'yarn',\n      },\n      'lock file error',\n    );\n    const stdouterr = String(err.stdout) + String(err.stderr);\n    // v8 ignore if -- TODO: add test #40625\n    if (\n      stdouterr.includes('ENOSPC: no space left on device') ||\n      stdouterr.includes('Out of diskspace')\n    ) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    }\n    // v8 ignore if -- TODO: add test #40625\n    if (\n      stdouterr.includes('The registry may be down.') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.yarnpkg.com') ||\n      stdouterr.includes('getaddrinfo ENOTFOUND registry.npmjs.org')\n    ) {\n      throw new ExternalHostError(err, NpmDatasource.id);\n    }\n    return { error: true, stderr: err.stderr, stdout: err.stdout };\n  }\n  return { lockFile };\n}\n\nexport function fuzzyMatchAdditionalYarnrcYml<\n  T extends { npmRegistries?: Record<string, unknown> },\n>(additionalYarnRcYml: T, existingYarnrRcYml: T): T {\n  const keys = new Map(\n    Object.keys(existingYarnrRcYml.npmRegistries ?? {}).map((x) => [\n      x.replace(regEx(/\\/$/), '').replace(regEx(/^https?:/), ''),\n      x,\n    ]),\n  );\n\n  return {\n    ...additionalYarnRcYml,\n    npmRegistries: Object.entries(additionalYarnRcYml.npmRegistries ?? {})\n      .map(([k, v]) => {\n        const key = keys.get(k.replace(regEx(/\\/$/), '')) ?? k;\n        return { [key]: v };\n      })\n      .reduce((acc, cur) => ({ ...acc, ...cur }), {}),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsCA,eAAsB,YACpB,aAC8D;CAC9D,IAAI,gBAAgB;CACpB,IAAI,WAA0B;CAC9B,IAAI;EACF,MAAM,SAAS,MAAM,cACnB,MAAM,KAAK,aAAa,SAAS,GACjC,MACF;EACA,IAAI,SAAS,MAAM,GAAG;GAIpB,gBAAgB,CAAC,CAHE,OAChB,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,sBAAsB,CAC7B;GAC3B,MAAM,WAAW,OACd,MAAM,YAAY,CAAC,CACnB,MAAM,SAAS,KAAK,WAAW,YAAY,CAAC;GAC/C,IAAI,UACF,WAAW,SAAS,QAAQ,MAAM,yBAAyB,GAAG,IAAI;GAEpE,IAAI,UAEF,WAAW,MAAM,KAAK,aAAa,QAAQ;GAE7C,MAAM,mBAAmB,WACrB,MAAM,gBAAgB,QAAQ,IAC9B;GACJ,IAAI,iBAAiB,OAClB,QAAQ,gCAAgC,EAAE,CAAC,CAC3C,QAAQ,kCAAkC,EAAE;GAC/C,IAAI,CAAC,kBAAkB;IACrB,iBAAiB,eAAe,QAC9B,MAAM,yBAAyB,GAC/B,EACF;IACA,WAAW;GACb;GACA,IAAI,WAAW,gBAAgB;IAC7B,OAAO,MAAM,+BAA+B,aAAa;IACzD,MAAM,eACJ,MAAM,KAAK,aAAa,SAAS,GACjC,cACF;GACF;EACF;CAEF,QAAQ,CAER;CACA,OAAO;EAAE;EAAe;CAAS;AACnC;AAEA,SAAgB,mBAAmB,UAA4B;CAC7D,OAAO;EAAC;EAAO;EAAM;EAAiC;CAAQ;AAChE;AAEA,SAAgB,aAAa,SAA2B;CACtD,OAAO,QAAQ,YAAY,oBAAoB,QAAQ,YAAY;AACrE;AAEA,eAAsB,iBACpB,aACA,KACA,SAAoD,CAAC,GACrD,WAAsB,CAAC,GACU;CACjC,MAAM,eAAe,MAAM,KAAK,aAAa,WAAW;CACxD,OAAO,MAAM,mCAAmC,cAAc;CAC9D,IAAI,WAA0B;CAC9B,IAAI;EACF,MAAM,cAAc,oBAAoB,WAAW;EACnD,MAAM,kBAAoC,CACxC,MAAM,sBAAsB,QAAQ,UAAU,aAAa,WAAW,CACxE;EACA,MAAM,aAAa,SAAS,KAAK,YAAY;EAC7C,MAAM,qBACH,aAAa,WAAW,WAAW,OAAO,aAAa,SACxD,yBAAyB,QAAQ,MAAM,YAAY,SAAS,CAAC,KAC7D,uBAAuB,MAAM,YAAY,YAAY,CAAC;EACxD,MAAM,iBACJ,OAAO,WAAW,iBAAiB,KACnC,OAAO,WAAW,iBAAiB;EACrC,MAAM,UAAU,CAAC,kBAAkB,eAAe,UAAU;EAC5D,MAAM,wBACJ,kBAAkB,OAAO,IAAI,gBAAgB,OAAO;EACtD,MAAM,sBACJ,kBAAkB,OAAO,IAAI,gBAAgB,OAAO;EAEtD,MAAM,WAA2B;GAC/B,UAAU;GACV,YAAY;EACd;EAGA,MAAM,oBACJ,CAAC,CAAC,OAAO,aAAa,qBACtB,CAAC,CAAC,SAAS,EAAE,EAAE,aAAa;EAE9B,IAAI,CAAC,WAAW,mBACd,gBAAgB,KAAK;GACnB,UAAU;GACV,YAAY,OAAO,aAAa;EAClC,CAAC;OACI;GACL,gBAAgB,KAAK,QAAQ;GAC7B,IAAI,WAAW,gBACb,SAAS,aAAa;EAE1B;EAEA,MAAM,WAAqB;GACzB,kBAAkB,IAAI;GACtB,kBAAkB,IAAI;GACtB,IAAI;EACN;EAEA,MAAM,WAA4C,CAAC;EACnD,IAAI,aAAa;EACjB,IAAI,OAAO,iBAAiB,OACtB;OAAA,SAAS;IACX,MAAM,EAAE,eAAe,aAAa,MAAM,YAAY,WAAW;;IAEjE,IAAI,CAAC,eAAe;KAClB,OAAO,MAAM,iDAAiD;KAE9D,SAAS,WAAW;KACpB,IAAI,UACF,SAAS,KAAK;MACZ,SAAS,mBAAmB,QAAQ;MACpC,eAAe;KACjB,CAAC;IAEL;GACF,OAAO,IAAI,qBAET,cAAc;EAAA;EAIlB,IAAI,SAAS;GACX,cACE;GACF,SAAS,oBAAoB,IAAI;EACnC,OAAO;GACL,SAAS,iCAAiC;GAC1C,SAAS,oBAAoB;GAC7B,SAAS,qBAAqB,IAAI;GAClC,IAAI,CAAC,OAAO,aAAa,iBAAiB;IACxC,OAAO,MAAM,uDAAuD;IACpE,SAAS,2BAA2B;GACtC;EACF;EACA,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,IAAI,SACF,cAAc;OACT,IAAI,qBACL;OAAA,OAAO,iBAAiB,OAE1B,cAAc;EAAA,OAGhB,SAAS,sBAAsB;EAInC,MAAM,EAAE,kBAAkB,uBAAuB,OAAO,YAAY;EACpE,IAAI,eACF,SAAS,eAAe,eAAe,aAAa;EAGtD,MAAM,cAA2B;GAC/B,SAAS;GACT;GACA,QAAQ,CAAC;GACT;EACF;;EAEA,IAAI,aAAa,IAAI,cAAc,GAAG;GACpC,SAAS,WAAW,IAAI;GACxB,SAAS,YAAY,IAAI;EAC3B;EAEA,IAAI,cAAc,CAAC,SAAS;GAC1B,OAAO,MAAM,sBAAsB;GAEnC,SAAS,KAAK,oBAAoB,MAAM,WAAW,QAAS,GAAG;EACjE;EAEA,MAAM,SAAS,OAAO;EACtB,IAAI,OAAO,uBAAuB;;GAEhC,IAAI,OAAO,cAAc,CAAC,SAAS;IACjC,SAAS,KAAK,oCAAoC;IAClD,SAAS,KACP,oCAAoC,MAAM,OAAO,UAAU,GAC7D;GACF;;GAEA,IAAI,OAAO,eAAe,CAAC,SAAS;IAClC,SAAS,KAAK,qCAAqC;IACnD,SAAS,KACP,qCAAqC,MAAM,OAAO,WAAW,GAC/D;GACF;EACF;EAGA,SAAS,KAAK,eAAe,YAAY;EAGzC,MAAM,cAAc,SAAS,QAAQ,YAAY,QAAQ,gBAAgB;EACzE,IAAI,YAAY,QAAQ;GACtB,OAAO,MAAM,kCAAkC;GAC/C,IAAI,SAGF,SAAS,KACP,gBAAgB,YACb,KAAK,WAAW,OAAO,OAAO,CAAC,CAC/B,OAAO,QAAQ,CAAC,CAChB,OAAO,aAAa,CAAC,CACrB,IAAI,KAAK,CAAC,CACV,KAAK,GAAG,IAAI,YACjB;QAGA,SAAS,KACP,cAAc,YAEX,KAAK,WAAW,GAAG,OAAO,SAAU,CAAC,CACrC,OAAO,aAAa,CAAC,CACrB,IAAI,KAAK,CAAC,CACV,KAAK,GAAG,IAAI,YACjB;EAEJ;EAGA,CAAC,SAAS,SAAS,CAAC,CAAC,SAAS,MAAM;GAClC,IACE,OAAO,mBAAmB,SACxB,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,IAAI,EAAE,MAAM,CAAC,GACpD,GACA;IACA,OAAO,MAAM,0BAA0B,GAAG;IAC1C,IAAI,SAAS;KACX,SAAS,KAAK,mCAAmC,GAAG;KAEpD,SAAS,KAAK,eAAe,YAAY;IAC3C,OAAO,IAAI,yBAAyB,MAAM,WACxC,SAAS,KAAK,0BAA0B,IAAI,YAAY;SAExD,OAAO,MAAM,eAAe,EAAE,eAAe;GAEjD;EACF,CAAC;EAED,IAAI,SAAS,MAAM,YAAY,QAAQ,qBAAqB,GAAG;GAC7D,OAAO,MACL,YAAY,aAAa,4CAC3B;GAQA,IAAI;IACF,MAAM,eAAe,cAAc,EAAE;GACvC,SAAS,KAAK;;IAEZ,OAAO,MACL;KAAE;KAAK;IAAa,GACpB,sDACF;GACF;EACF;EAGA,MAAM,KAAK,UAAU,WAAW;EAGhC,WAAW,MAAM,cAAc,cAAc,MAAM;CACrD,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,MACL;GACE;GACA,MAAM;EACR,GACA,iBACF;EACA,MAAM,YAAY,OAAO,IAAI,MAAM,IAAI,OAAO,IAAI,MAAM;;EAExD,IACE,UAAU,SAAS,iCAAiC,KACpD,UAAU,SAAS,kBAAkB,GAErC,MAAM,IAAI,MAAM,8BAA8B;;EAGhD,IACE,UAAU,SAAS,2BAA2B,KAC9C,UAAU,SAAS,4CAA4C,KAC/D,UAAU,SAAS,0CAA0C,GAE7D,MAAM,IAAI,kBAAkB,KAAK,cAAc,EAAE;EAEnD,OAAO;GAAE,OAAO;GAAM,QAAQ,IAAI;GAAQ,QAAQ,IAAI;EAAO;CAC/D;CACA,OAAO,EAAE,SAAS;AACpB;AAEA,SAAgB,8BAEd,qBAAwB,oBAA0B;CAClD,MAAM,OAAO,IAAI,IACf,OAAO,KAAK,mBAAmB,iBAAiB,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAC7D,EAAE,QAAQ,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC,QAAQ,MAAM,UAAU,GAAG,EAAE,GACzD,CACF,CAAC,CACH;CAEA,OAAO;EACL,GAAG;EACH,eAAe,OAAO,QAAQ,oBAAoB,iBAAiB,CAAC,CAAC,CAAC,CACnE,KAAK,CAAC,GAAG,OAAO;GAEf,OAAO,GADK,KAAK,IAAI,EAAE,QAAQ,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,IACrC,EAAE;EACpB,CAAC,CAAC,CACD,QAAQ,KAAK,SAAS;GAAE,GAAG;GAAK,GAAG;EAAI,IAAI,CAAC,CAAC;CAClD;AACF"}

package/dist/modules/manager/npm/schema.js

@@ -1,3 +1,4 @@
+import { regEx } from "../../../util/regex.js";
 import { Json, LooseRecord, Nullish, Yaml } from "../../../util/schema-utils/index.js";
 import { z } from "zod/v4";
 //#region lib/modules/manager/npm/schema.ts
@@ -47,7 +48,7 @@ const PackageJson = Json.pipe(z.object({
 }));
 const PackageLockV3 = z.object({
 	lockfileVersion: z.literal(3),
-	packages: LooseRecord(z.string().transform((x) => x.replace(/^node_modules\//, "")).refine((x) => x.trim() !== ""), z.object({ version: z.string() }))
+	packages: LooseRecord(z.string().transform((x) => x.replace(regEx(/^node_modules\//), "")).refine((x) => x.trim() !== ""), z.object({ version: z.string() }))
 });
 const PackageLockPreV3 = z.object({
 	lockfileVersion: z.union([z.literal(2), z.literal(1)]),

package/dist/modules/manager/npm/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","names":[],"sources":["../../../../lib/modules/manager/npm/schema.ts"],"sourcesContent":["import { z } from 'zod/v4';\nimport {\n  Json,\n  LooseRecord,\n  Nullish,\n  Yaml,\n} from '../../../util/schema-utils/index.ts';\n\n// pnpm ignores registry URLs containing `${...}` env-var interpolation since v11.5.3\nfunction hasEnvVar(value: string): boolean {\n  return value.includes('${');\n}\n\nfunction withoutEnvVarRegistries(\n  registries: Record<string, string>,\n): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(registries).filter(([, url]) => !hasEnvVar(url)),\n  );\n}\n\nexport const PnpmCatalogs = z.object({\n  catalog: z.optional(z.record(z.string(), z.string())),\n  catalogs: z.optional(z.record(z.string(), z.record(z.string(), z.string()))),\n});\nexport type PnpmCatalogs = z.infer<typeof PnpmCatalogs>;\n\nexport const YarnCatalogs = z.object({\n  catalog: z.optional(z.record(z.string(), z.string())),\n  catalogs: z\n    .optional(z.record(z.string(), z.record(z.string(), z.string())))\n    .catch(undefined),\n});\nexport type YarnCatalogs = z.infer<typeof YarnCatalogs>;\n\nexport const YarnConfig = Yaml.pipe(\n  z\n    .object({\n      npmRegistryServer: z.string().optional(),\n      npmScopes: z\n        .record(\n          z.string(),\n          z.object({\n            npmRegistryServer: z.string().optional(),\n          }),\n        )\n        .optional(),\n    })\n    .and(YarnCatalogs),\n);\nexport type YarnConfig = z.infer<typeof YarnConfig>;\n\nexport const PnpmWorkspaceFile = Yaml.pipe(\n  z\n    .object({\n      packages: z.array(z.string()).optional(),\n      minimumReleaseAge: Nullish(z.number()),\n      minimumReleaseAgeExclude: z.array(z.string()).optional(),\n      overrides: z.record(z.string(), z.string()).optional(),\n      registry: Nullish(z.string()),\n      registries: Nullish(\n        z.record(z.string(), z.string()).transform(withoutEnvVarRegistries),\n      ),\n    })\n    .and(PnpmCatalogs),\n);\nexport type PnpmWorkspaceFile = z.infer<typeof PnpmWorkspaceFile>;\n\nexport const PackageManager = z\n  .string()\n  .transform((val) => val.split('@'))\n  .transform(([name, ...version]) => ({ name, version: version.join('@') }));\n\nconst DevEngineDependency = z.object({\n  name: z.string(),\n  version: z.string().optional(),\n});\n\nconst DevEngine = z.object({\n  packageManager: DevEngineDependency.or(\n    z.array(DevEngineDependency),\n  ).optional(),\n});\n\nexport const PackageJson = Json.pipe(\n  z.object({\n    devEngines: DevEngine.optional(),\n    engines: LooseRecord(z.string()).optional(),\n    dependencies: LooseRecord(z.string()).optional(),\n    devDependencies: LooseRecord(z.string()).optional(),\n    peerDependencies: LooseRecord(z.string()).optional(),\n    packageManager: PackageManager.optional(),\n    volta: LooseRecord(z.string()).optional(),\n  }),\n);\n\nexport type PackageJson = z.infer<typeof PackageJson>;\n\nexport const PackageLockV3 = z.object({\n  lockfileVersion: z.literal(3),\n  packages: LooseRecord(\n    z\n      .string()\n      .transform((x) => x.replace(/^node_modules\\//, ''))\n      .refine((x) => x.trim() !== ''),\n    z.object({ version: z.string() }),\n  ),\n});\n\nexport const PackageLockPreV3 = z\n  .object({\n    lockfileVersion: z.union([z.literal(2), z.literal(1)]),\n    dependencies: LooseRecord(z.object({ version: z.string() })),\n  })\n  .transform(({ lockfileVersion, dependencies: packages }) => ({\n    lockfileVersion,\n    packages,\n  }));\n\nexport const PackageLock = Json.pipe(\n  z.union([PackageLockV3, PackageLockPreV3]),\n).transform(({ packages, lockfileVersion }) => {\n  const lockedVersions: Record<string, string> = {};\n  for (const [entry, val] of Object.entries(packages)) {\n    lockedVersions[entry] = val.version;\n  }\n  return { lockedVersions, lockfileVersion };\n});\n"],"mappings":";;;AASA,SAAS,UAAU,OAAwB;CACzC,OAAO,MAAM,SAAS,IAAI;AAC5B;AAEA,SAAS,wBACP,YACwB;CACxB,OAAO,OAAO,YACZ,OAAO,QAAQ,UAAU,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,CAChE;AACF;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CACpD,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,CAAC;AAGD,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CACpD,UAAU,EACP,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAChE,MAAM,KAAA,CAAS;AACpB,CAAC;AAGD,MAAa,aAAa,KAAK,KAC7B,EACG,OAAO;CACN,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS;CACvC,WAAW,EACR,OACC,EAAE,OAAO,GACT,EAAE,OAAO,EACP,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS,EACzC,CAAC,CACH,CAAC,CACA,SAAS;AACd,CAAC,CAAC,CACD,IAAI,YAAY,CACrB;AAGA,MAAa,oBAAoB,KAAK,KACpC,EACG,OAAO;CACN,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACvC,mBAAmB,QAAQ,EAAE,OAAO,CAAC;CACrC,0BAA0B,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACvD,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrD,UAAU,QAAQ,EAAE,OAAO,CAAC;CAC5B,YAAY,QACV,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,uBAAuB,CACpE;AACF,CAAC,CAAC,CACD,IAAI,YAAY,CACrB;AAGA,MAAa,iBAAiB,EAC3B,OAAO,CAAC,CACR,WAAW,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,CAClC,WAAW,CAAC,MAAM,GAAG,cAAc;CAAE;CAAM,SAAS,QAAQ,KAAK,GAAG;AAAE,EAAE;AAE3E,MAAM,sBAAsB,EAAE,OAAO;CACnC,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;AAED,MAAM,YAAY,EAAE,OAAO,EACzB,gBAAgB,oBAAoB,GAClC,EAAE,MAAM,mBAAmB,CAC7B,CAAC,CAAC,SAAS,EACb,CAAC;AAED,MAAa,cAAc,KAAK,KAC9B,EAAE,OAAO;CACP,YAAY,UAAU,SAAS;CAC/B,SAAS,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,cAAc,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC/C,iBAAiB,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAClD,kBAAkB,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACnD,gBAAgB,eAAe,SAAS;CACxC,OAAO,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC,CACH;AAIA,MAAa,gBAAgB,EAAE,OAAO;CACpC,iBAAiB,EAAE,QAAQ,CAAC;CAC5B,UAAU,YACR,EACG,OAAO,CAAC,CACR,WAAW,MAAM,EAAE,QAAQ,mBAAmB,EAAE,CAAC,CAAC,CAClD,QAAQ,MAAM,EAAE,KAAK,MAAM,EAAE,GAChC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAClC;AACF,CAAC;AAED,MAAa,mBAAmB,EAC7B,OAAO;CACN,iBAAiB,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;CACrD,cAAc,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CACD,WAAW,EAAE,iBAAiB,cAAc,gBAAgB;CAC3D;CACA;AACF,EAAE;AAEJ,MAAa,cAAc,KAAK,KAC9B,EAAE,MAAM,CAAC,eAAe,gBAAgB,CAAC,CAC3C,CAAC,CAAC,WAAW,EAAE,UAAU,sBAAsB;CAC7C,MAAM,iBAAyC,CAAC;CAChD,KAAK,MAAM,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,GAChD,eAAe,SAAS,IAAI;CAE9B,OAAO;EAAE;EAAgB;CAAgB;AAC3C,CAAC"}
+{"version":3,"file":"schema.js","names":[],"sources":["../../../../lib/modules/manager/npm/schema.ts"],"sourcesContent":["import { z } from 'zod/v4';\nimport { regEx } from '../../../util/regex.ts';\nimport {\n  Json,\n  LooseRecord,\n  Nullish,\n  Yaml,\n} from '../../../util/schema-utils/index.ts';\n\n// pnpm ignores registry URLs containing `${...}` env-var interpolation since v11.5.3\nfunction hasEnvVar(value: string): boolean {\n  return value.includes('${');\n}\n\nfunction withoutEnvVarRegistries(\n  registries: Record<string, string>,\n): Record<string, string> {\n  return Object.fromEntries(\n    Object.entries(registries).filter(([, url]) => !hasEnvVar(url)),\n  );\n}\n\nexport const PnpmCatalogs = z.object({\n  catalog: z.optional(z.record(z.string(), z.string())),\n  catalogs: z.optional(z.record(z.string(), z.record(z.string(), z.string()))),\n});\nexport type PnpmCatalogs = z.infer<typeof PnpmCatalogs>;\n\nexport const YarnCatalogs = z.object({\n  catalog: z.optional(z.record(z.string(), z.string())),\n  catalogs: z\n    .optional(z.record(z.string(), z.record(z.string(), z.string())))\n    .catch(undefined),\n});\nexport type YarnCatalogs = z.infer<typeof YarnCatalogs>;\n\nexport const YarnConfig = Yaml.pipe(\n  z\n    .object({\n      npmRegistryServer: z.string().optional(),\n      npmScopes: z\n        .record(\n          z.string(),\n          z.object({\n            npmRegistryServer: z.string().optional(),\n          }),\n        )\n        .optional(),\n    })\n    .and(YarnCatalogs),\n);\nexport type YarnConfig = z.infer<typeof YarnConfig>;\n\nexport const PnpmWorkspaceFile = Yaml.pipe(\n  z\n    .object({\n      packages: z.array(z.string()).optional(),\n      minimumReleaseAge: Nullish(z.number()),\n      minimumReleaseAgeExclude: z.array(z.string()).optional(),\n      overrides: z.record(z.string(), z.string()).optional(),\n      registry: Nullish(z.string()),\n      registries: Nullish(\n        z.record(z.string(), z.string()).transform(withoutEnvVarRegistries),\n      ),\n    })\n    .and(PnpmCatalogs),\n);\nexport type PnpmWorkspaceFile = z.infer<typeof PnpmWorkspaceFile>;\n\nexport const PackageManager = z\n  .string()\n  .transform((val) => val.split('@'))\n  .transform(([name, ...version]) => ({ name, version: version.join('@') }));\n\nconst DevEngineDependency = z.object({\n  name: z.string(),\n  version: z.string().optional(),\n});\n\nconst DevEngine = z.object({\n  packageManager: DevEngineDependency.or(\n    z.array(DevEngineDependency),\n  ).optional(),\n});\n\nexport const PackageJson = Json.pipe(\n  z.object({\n    devEngines: DevEngine.optional(),\n    engines: LooseRecord(z.string()).optional(),\n    dependencies: LooseRecord(z.string()).optional(),\n    devDependencies: LooseRecord(z.string()).optional(),\n    peerDependencies: LooseRecord(z.string()).optional(),\n    packageManager: PackageManager.optional(),\n    volta: LooseRecord(z.string()).optional(),\n  }),\n);\n\nexport type PackageJson = z.infer<typeof PackageJson>;\n\nexport const PackageLockV3 = z.object({\n  lockfileVersion: z.literal(3),\n  packages: LooseRecord(\n    z\n      .string()\n      .transform((x) => x.replace(regEx(/^node_modules\\//), ''))\n      .refine((x) => x.trim() !== ''),\n    z.object({ version: z.string() }),\n  ),\n});\n\nexport const PackageLockPreV3 = z\n  .object({\n    lockfileVersion: z.union([z.literal(2), z.literal(1)]),\n    dependencies: LooseRecord(z.object({ version: z.string() })),\n  })\n  .transform(({ lockfileVersion, dependencies: packages }) => ({\n    lockfileVersion,\n    packages,\n  }));\n\nexport const PackageLock = Json.pipe(\n  z.union([PackageLockV3, PackageLockPreV3]),\n).transform(({ packages, lockfileVersion }) => {\n  const lockedVersions: Record<string, string> = {};\n  for (const [entry, val] of Object.entries(packages)) {\n    lockedVersions[entry] = val.version;\n  }\n  return { lockedVersions, lockfileVersion };\n});\n"],"mappings":";;;;AAUA,SAAS,UAAU,OAAwB;CACzC,OAAO,MAAM,SAAS,IAAI;AAC5B;AAEA,SAAS,wBACP,YACwB;CACxB,OAAO,OAAO,YACZ,OAAO,QAAQ,UAAU,CAAC,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,CAAC,CAChE;AACF;AAEA,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CACpD,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,CAAC;AAGD,MAAa,eAAe,EAAE,OAAO;CACnC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC;CACpD,UAAU,EACP,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAChE,MAAM,KAAA,CAAS;AACpB,CAAC;AAGD,MAAa,aAAa,KAAK,KAC7B,EACG,OAAO;CACN,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS;CACvC,WAAW,EACR,OACC,EAAE,OAAO,GACT,EAAE,OAAO,EACP,mBAAmB,EAAE,OAAO,CAAC,CAAC,SAAS,EACzC,CAAC,CACH,CAAC,CACA,SAAS;AACd,CAAC,CAAC,CACD,IAAI,YAAY,CACrB;AAGA,MAAa,oBAAoB,KAAK,KACpC,EACG,OAAO;CACN,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACvC,mBAAmB,QAAQ,EAAE,OAAO,CAAC;CACrC,0BAA0B,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACvD,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACrD,UAAU,QAAQ,EAAE,OAAO,CAAC;CAC5B,YAAY,QACV,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,uBAAuB,CACpE;AACF,CAAC,CAAC,CACD,IAAI,YAAY,CACrB;AAGA,MAAa,iBAAiB,EAC3B,OAAO,CAAC,CACR,WAAW,QAAQ,IAAI,MAAM,GAAG,CAAC,CAAC,CAClC,WAAW,CAAC,MAAM,GAAG,cAAc;CAAE;CAAM,SAAS,QAAQ,KAAK,GAAG;AAAE,EAAE;AAE3E,MAAM,sBAAsB,EAAE,OAAO;CACnC,MAAM,EAAE,OAAO;CACf,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC;AAED,MAAM,YAAY,EAAE,OAAO,EACzB,gBAAgB,oBAAoB,GAClC,EAAE,MAAM,mBAAmB,CAC7B,CAAC,CAAC,SAAS,EACb,CAAC;AAED,MAAa,cAAc,KAAK,KAC9B,EAAE,OAAO;CACP,YAAY,UAAU,SAAS;CAC/B,SAAS,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC1C,cAAc,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAC/C,iBAAiB,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CAClD,kBAAkB,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;CACnD,gBAAgB,eAAe,SAAS;CACxC,OAAO,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS;AAC1C,CAAC,CACH;AAIA,MAAa,gBAAgB,EAAE,OAAO;CACpC,iBAAiB,EAAE,QAAQ,CAAC;CAC5B,UAAU,YACR,EACG,OAAO,CAAC,CACR,WAAW,MAAM,EAAE,QAAQ,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,CACzD,QAAQ,MAAM,EAAE,KAAK,MAAM,EAAE,GAChC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAClC;AACF,CAAC;AAED,MAAa,mBAAmB,EAC7B,OAAO;CACN,iBAAiB,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;CACrD,cAAc,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CACD,WAAW,EAAE,iBAAiB,cAAc,gBAAgB;CAC3D;CACA;AACF,EAAE;AAEJ,MAAa,cAAc,KAAK,KAC9B,EAAE,MAAM,CAAC,eAAe,gBAAgB,CAAC,CAC3C,CAAC,CAAC,WAAW,EAAE,UAAU,sBAAsB;CAC7C,MAAM,iBAAyC,CAAC;CAChD,KAAK,MAAM,CAAC,OAAO,QAAQ,OAAO,QAAQ,QAAQ,GAChD,eAAe,SAAS,IAAI;CAE9B,OAAO;EAAE;EAAgB;CAAgB;AAC3C,CAAC"}

package/dist/modules/manager/npm/update/locked-dependency/yarn-lock/get-locked.js

@@ -1,3 +1,4 @@
+import { regEx } from "../../../../../../util/regex.js";
 import { logger } from "../../../../../../logger/index.js";
 //#region lib/modules/manager/npm/update/locked-dependency/yarn-lock/get-locked.ts
 function parseEntry(depNameConstraint) {
@@ -48,7 +49,7 @@ function getYarn2LockedDependencies(yarnLock, depName, currentVersion) {
 				/* v8 ignore next 3 -- needs test */
 				if (!parsed) continue;
 				const { entryName } = parsed;
-				const constraint = parsed.constraint.replace(/^npm:/, "");
+				const constraint = parsed.constraint.replace(regEx(/^npm:/), "");
 				if (entryName === depName && entry?.version === currentVersion) res.push({
 					entry,
 					depNameConstraint,

package/dist/modules/manager/npm/update/locked-dependency/yarn-lock/get-locked.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-locked.js","names":[],"sources":["../../../../../../../lib/modules/manager/npm/update/locked-dependency/yarn-lock/get-locked.ts"],"sourcesContent":["import { logger } from '../../../../../../logger/index.ts';\nimport type { YarnLock, YarnLockEntrySummary } from './types.ts';\n\nexport function parseEntry(depNameConstraint: string): {\n  entryName: string;\n  constraint: string;\n} | null {\n  let entryName: string;\n  let constraint: string;\n  const split = depNameConstraint.split('@');\n  if (split.length === 2) {\n    [entryName, constraint] = split;\n  } else if (split.length === 3) {\n    entryName = `@${split[1]}`;\n    constraint = split[2];\n  } else {\n    logger.debug({ depNameConstraint }, 'Unexpected depNameConstraint');\n    return null;\n  }\n  return { entryName, constraint };\n}\n\nexport function getYarn1LockedDependencies(\n  yarnLock: YarnLock,\n  depName: string,\n  currentVersion: string,\n): YarnLockEntrySummary[] {\n  const res: YarnLockEntrySummary[] = [];\n  try {\n    for (const [depNameConstraint, entry] of Object.entries(yarnLock)) {\n      const parsed = parseEntry(depNameConstraint);\n      /* v8 ignore next 3 -- needs test */\n      if (!parsed) {\n        continue;\n      }\n      const { entryName, constraint } = parsed;\n      if (entryName === depName && entry?.version === currentVersion) {\n        res.push({ entry, depNameConstraint, depName, constraint });\n      }\n    }\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'getLockedDependencies() error');\n  }\n  return res;\n}\n\nexport function getYarn2LockedDependencies(\n  yarnLock: YarnLock,\n  depName: string,\n  currentVersion: string,\n): YarnLockEntrySummary[] {\n  const res: YarnLockEntrySummary[] = [];\n  try {\n    for (const [fullConstraint, entry] of Object.entries(yarnLock)) {\n      if (fullConstraint === '__metadata') {\n        continue;\n      }\n      for (const subConstraint of fullConstraint.split(', ')) {\n        const depNameConstraint = subConstraint;\n        const parsed = parseEntry(depNameConstraint);\n        /* v8 ignore next 3 -- needs test */\n        if (!parsed) {\n          continue;\n        }\n        const { entryName } = parsed;\n        const constraint = parsed.constraint.replace(/^npm:/, '');\n        if (entryName === depName && entry?.version === currentVersion) {\n          res.push({ entry, depNameConstraint, depName, constraint });\n        }\n      }\n    }\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'getLockedDependencies() error');\n  }\n  return res;\n}\n\n// Finds matching dependencies withing a package lock file of sub-entry\nexport function getLockedDependencies(\n  yarnLock: YarnLock,\n  depName: string,\n  currentVersion: string,\n): YarnLockEntrySummary[] {\n  if ('__metadata' in yarnLock) {\n    return getYarn2LockedDependencies(yarnLock, depName, currentVersion);\n  }\n  return getYarn1LockedDependencies(yarnLock, depName, currentVersion);\n}\n"],"mappings":";;AAGA,SAAgB,WAAW,mBAGlB;CACP,IAAI;CACJ,IAAI;CACJ,MAAM,QAAQ,kBAAkB,MAAM,GAAG;CACzC,IAAI,MAAM,WAAW,GACnB,CAAC,WAAW,cAAc;MACrB,IAAI,MAAM,WAAW,GAAG;EAC7B,YAAY,IAAI,MAAM;EACtB,aAAa,MAAM;CACrB,OAAO;EACL,OAAO,MAAM,EAAE,kBAAkB,GAAG,8BAA8B;EAClE,OAAO;CACT;CACA,OAAO;EAAE;EAAW;CAAW;AACjC;AAEA,SAAgB,2BACd,UACA,SACA,gBACwB;CACxB,MAAM,MAA8B,CAAC;CACrC,IAAI;EACF,KAAK,MAAM,CAAC,mBAAmB,UAAU,OAAO,QAAQ,QAAQ,GAAG;GACjE,MAAM,SAAS,WAAW,iBAAiB;;GAE3C,IAAI,CAAC,QACH;GAEF,MAAM,EAAE,WAAW,eAAe;GAClC,IAAI,cAAc,WAAW,OAAO,YAAY,gBAC9C,IAAI,KAAK;IAAE;IAAO;IAAmB;IAAS;GAAW,CAAC;EAE9D;CACF,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,+BAA+B;CACtD;CACA,OAAO;AACT;AAEA,SAAgB,2BACd,UACA,SACA,gBACwB;CACxB,MAAM,MAA8B,CAAC;CACrC,IAAI;EACF,KAAK,MAAM,CAAC,gBAAgB,UAAU,OAAO,QAAQ,QAAQ,GAAG;GAC9D,IAAI,mBAAmB,cACrB;GAEF,KAAK,MAAM,iBAAiB,eAAe,MAAM,IAAI,GAAG;IACtD,MAAM,oBAAoB;IAC1B,MAAM,SAAS,WAAW,iBAAiB;;IAE3C,IAAI,CAAC,QACH;IAEF,MAAM,EAAE,cAAc;IACtB,MAAM,aAAa,OAAO,WAAW,QAAQ,SAAS,EAAE;IACxD,IAAI,cAAc,WAAW,OAAO,YAAY,gBAC9C,IAAI,KAAK;KAAE;KAAO;KAAmB;KAAS;IAAW,CAAC;GAE9D;EACF;CACF,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,+BAA+B;CACtD;CACA,OAAO;AACT;AAGA,SAAgB,sBACd,UACA,SACA,gBACwB;CACxB,IAAI,gBAAgB,UAClB,OAAO,2BAA2B,UAAU,SAAS,cAAc;CAErE,OAAO,2BAA2B,UAAU,SAAS,cAAc;AACrE"}
+{"version":3,"file":"get-locked.js","names":[],"sources":["../../../../../../../lib/modules/manager/npm/update/locked-dependency/yarn-lock/get-locked.ts"],"sourcesContent":["import { logger } from '../../../../../../logger/index.ts';\nimport { regEx } from '../../../../../../util/regex.ts';\nimport type { YarnLock, YarnLockEntrySummary } from './types.ts';\n\nexport function parseEntry(depNameConstraint: string): {\n  entryName: string;\n  constraint: string;\n} | null {\n  let entryName: string;\n  let constraint: string;\n  const split = depNameConstraint.split('@');\n  if (split.length === 2) {\n    [entryName, constraint] = split;\n  } else if (split.length === 3) {\n    entryName = `@${split[1]}`;\n    constraint = split[2];\n  } else {\n    logger.debug({ depNameConstraint }, 'Unexpected depNameConstraint');\n    return null;\n  }\n  return { entryName, constraint };\n}\n\nexport function getYarn1LockedDependencies(\n  yarnLock: YarnLock,\n  depName: string,\n  currentVersion: string,\n): YarnLockEntrySummary[] {\n  const res: YarnLockEntrySummary[] = [];\n  try {\n    for (const [depNameConstraint, entry] of Object.entries(yarnLock)) {\n      const parsed = parseEntry(depNameConstraint);\n      /* v8 ignore next 3 -- needs test */\n      if (!parsed) {\n        continue;\n      }\n      const { entryName, constraint } = parsed;\n      if (entryName === depName && entry?.version === currentVersion) {\n        res.push({ entry, depNameConstraint, depName, constraint });\n      }\n    }\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'getLockedDependencies() error');\n  }\n  return res;\n}\n\nexport function getYarn2LockedDependencies(\n  yarnLock: YarnLock,\n  depName: string,\n  currentVersion: string,\n): YarnLockEntrySummary[] {\n  const res: YarnLockEntrySummary[] = [];\n  try {\n    for (const [fullConstraint, entry] of Object.entries(yarnLock)) {\n      if (fullConstraint === '__metadata') {\n        continue;\n      }\n      for (const subConstraint of fullConstraint.split(', ')) {\n        const depNameConstraint = subConstraint;\n        const parsed = parseEntry(depNameConstraint);\n        /* v8 ignore next 3 -- needs test */\n        if (!parsed) {\n          continue;\n        }\n        const { entryName } = parsed;\n        const constraint = parsed.constraint.replace(regEx(/^npm:/), '');\n        if (entryName === depName && entry?.version === currentVersion) {\n          res.push({ entry, depNameConstraint, depName, constraint });\n        }\n      }\n    }\n  } catch (err) /* v8 ignore next -- TODO: add test #40625 */ {\n    logger.warn({ err }, 'getLockedDependencies() error');\n  }\n  return res;\n}\n\n// Finds matching dependencies withing a package lock file of sub-entry\nexport function getLockedDependencies(\n  yarnLock: YarnLock,\n  depName: string,\n  currentVersion: string,\n): YarnLockEntrySummary[] {\n  if ('__metadata' in yarnLock) {\n    return getYarn2LockedDependencies(yarnLock, depName, currentVersion);\n  }\n  return getYarn1LockedDependencies(yarnLock, depName, currentVersion);\n}\n"],"mappings":";;;AAIA,SAAgB,WAAW,mBAGlB;CACP,IAAI;CACJ,IAAI;CACJ,MAAM,QAAQ,kBAAkB,MAAM,GAAG;CACzC,IAAI,MAAM,WAAW,GACnB,CAAC,WAAW,cAAc;MACrB,IAAI,MAAM,WAAW,GAAG;EAC7B,YAAY,IAAI,MAAM;EACtB,aAAa,MAAM;CACrB,OAAO;EACL,OAAO,MAAM,EAAE,kBAAkB,GAAG,8BAA8B;EAClE,OAAO;CACT;CACA,OAAO;EAAE;EAAW;CAAW;AACjC;AAEA,SAAgB,2BACd,UACA,SACA,gBACwB;CACxB,MAAM,MAA8B,CAAC;CACrC,IAAI;EACF,KAAK,MAAM,CAAC,mBAAmB,UAAU,OAAO,QAAQ,QAAQ,GAAG;GACjE,MAAM,SAAS,WAAW,iBAAiB;;GAE3C,IAAI,CAAC,QACH;GAEF,MAAM,EAAE,WAAW,eAAe;GAClC,IAAI,cAAc,WAAW,OAAO,YAAY,gBAC9C,IAAI,KAAK;IAAE;IAAO;IAAmB;IAAS;GAAW,CAAC;EAE9D;CACF,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,+BAA+B;CACtD;CACA,OAAO;AACT;AAEA,SAAgB,2BACd,UACA,SACA,gBACwB;CACxB,MAAM,MAA8B,CAAC;CACrC,IAAI;EACF,KAAK,MAAM,CAAC,gBAAgB,UAAU,OAAO,QAAQ,QAAQ,GAAG;GAC9D,IAAI,mBAAmB,cACrB;GAEF,KAAK,MAAM,iBAAiB,eAAe,MAAM,IAAI,GAAG;IACtD,MAAM,oBAAoB;IAC1B,MAAM,SAAS,WAAW,iBAAiB;;IAE3C,IAAI,CAAC,QACH;IAEF,MAAM,EAAE,cAAc;IACtB,MAAM,aAAa,OAAO,WAAW,QAAQ,MAAM,OAAO,GAAG,EAAE;IAC/D,IAAI,cAAc,WAAW,OAAO,YAAY,gBAC9C,IAAI,KAAK;KAAE;KAAO;KAAmB;KAAS;IAAW,CAAC;GAE9D;EACF;CACF,SAAS,mDAAmD;EAC1D,OAAO,KAAK,EAAE,IAAI,GAAG,+BAA+B;CACtD;CACA,OAAO;AACT;AAGA,SAAgB,sBACd,UACA,SACA,gBACwB;CACxB,IAAI,gBAAgB,UAClB,OAAO,2BAA2B,UAAU,SAAS,cAAc;CAErE,OAAO,2BAA2B,UAAU,SAAS,cAAc;AACrE"}

package/dist/modules/manager/npm/update/locked-dependency/yarn-lock/replace.js

@@ -4,7 +4,7 @@ import { logger } from "../../../../../../logger/index.js";
 function replaceConstraintVersion(lockFileContent, depName, constraint, newVersion, newConstraint) {
 	if (lockFileContent.startsWith("__metadata:")) return lockFileContent;
 	const depNameConstraint = `${depName}@${constraint}`;
-	const matchString = `(${depNameConstraint.replace(/(@|\^|\.|\\|\|)/g, "\\$1")}(("|",|,)[^\n:]*)?:\n)(.*\n)*?(\\s+dependencies|\n[@a-z])`;
+	const matchString = `(${depNameConstraint.replace(regEx(/(@|\^|\.|\\|\|)/g), "\\$1")}(("|",|,)[^\n:]*)?:\n)(.*\n)*?(\\s+dependencies|\n[@a-z])`;
 	const matchResult = regEx(matchString).exec(lockFileContent);
 	/* v8 ignore next -- needs test */
 	if (!matchResult) {

package/dist/modules/manager/npm/update/locked-dependency/yarn-lock/replace.js.map

@@ -1 +1 @@
-{"version":3,"file":"replace.js","names":[],"sources":["../../../../../../../lib/modules/manager/npm/update/locked-dependency/yarn-lock/replace.ts"],"sourcesContent":["import { logger } from '../../../../../../logger/index.ts';\nimport { regEx } from '../../../../../../util/regex.ts';\n\nexport function replaceConstraintVersion(\n  lockFileContent: string,\n  depName: string,\n  constraint: string,\n  newVersion: string,\n  newConstraint?: string,\n): string {\n  if (lockFileContent.startsWith('__metadata:')) {\n    // Yarn 2+\n    return lockFileContent;\n  }\n  const depNameConstraint = `${depName}@${constraint}`;\n  const escaped = depNameConstraint.replace(/(@|\\^|\\.|\\\\|\\|)/g, '\\\\$1');\n  const matchString = `(${escaped}((\"|\",|,)[^\\n:]*)?:\\n)(.*\\n)*?(\\\\s+dependencies|\\n[@a-z])`;\n  // yarn will fill in the details later\n  const matchResult = regEx(matchString).exec(lockFileContent);\n  /* v8 ignore next -- needs test */\n  if (!matchResult) {\n    logger.debug(\n      { depName, constraint, newVersion },\n      'Could not find constraint in lock file',\n    );\n    return lockFileContent;\n  }\n  let constraintLine = matchResult[1];\n  if (newConstraint) {\n    const newDepNameConstraint = `${depName}@${newConstraint}`;\n    constraintLine = constraintLine.replace(\n      depNameConstraint,\n      newDepNameConstraint,\n    );\n  }\n  return lockFileContent.replace(\n    regEx(matchString),\n    `${constraintLine}  version \"${newVersion}\"\\n$5`,\n  );\n}\n"],"mappings":";;;AAGA,SAAgB,yBACd,iBACA,SACA,YACA,YACA,eACQ;CACR,IAAI,gBAAgB,WAAW,aAAa,GAE1C,OAAO;CAET,MAAM,oBAAoB,GAAG,QAAQ,GAAG;CAExC,MAAM,cAAc,IADJ,kBAAkB,QAAQ,oBAAoB,MAChC,EAAE;CAEhC,MAAM,cAAc,MAAM,WAAW,CAAC,CAAC,KAAK,eAAe;;CAE3D,IAAI,CAAC,aAAa;EAChB,OAAO,MACL;GAAE;GAAS;GAAY;EAAW,GAClC,wCACF;EACA,OAAO;CACT;CACA,IAAI,iBAAiB,YAAY;CACjC,IAAI,eAAe;EACjB,MAAM,uBAAuB,GAAG,QAAQ,GAAG;EAC3C,iBAAiB,eAAe,QAC9B,mBACA,oBACF;CACF;CACA,OAAO,gBAAgB,QACrB,MAAM,WAAW,GACjB,GAAG,eAAe,aAAa,WAAW,MAC5C;AACF"}
+{"version":3,"file":"replace.js","names":[],"sources":["../../../../../../../lib/modules/manager/npm/update/locked-dependency/yarn-lock/replace.ts"],"sourcesContent":["import { logger } from '../../../../../../logger/index.ts';\nimport { regEx } from '../../../../../../util/regex.ts';\n\nexport function replaceConstraintVersion(\n  lockFileContent: string,\n  depName: string,\n  constraint: string,\n  newVersion: string,\n  newConstraint?: string,\n): string {\n  if (lockFileContent.startsWith('__metadata:')) {\n    // Yarn 2+\n    return lockFileContent;\n  }\n  const depNameConstraint = `${depName}@${constraint}`;\n  const escaped = depNameConstraint.replace(regEx(/(@|\\^|\\.|\\\\|\\|)/g), '\\\\$1');\n  const matchString = `(${escaped}((\"|\",|,)[^\\n:]*)?:\\n)(.*\\n)*?(\\\\s+dependencies|\\n[@a-z])`;\n  // yarn will fill in the details later\n  const matchResult = regEx(matchString).exec(lockFileContent);\n  /* v8 ignore next -- needs test */\n  if (!matchResult) {\n    logger.debug(\n      { depName, constraint, newVersion },\n      'Could not find constraint in lock file',\n    );\n    return lockFileContent;\n  }\n  let constraintLine = matchResult[1];\n  if (newConstraint) {\n    const newDepNameConstraint = `${depName}@${newConstraint}`;\n    constraintLine = constraintLine.replace(\n      depNameConstraint,\n      newDepNameConstraint,\n    );\n  }\n  return lockFileContent.replace(\n    regEx(matchString),\n    `${constraintLine}  version \"${newVersion}\"\\n$5`,\n  );\n}\n"],"mappings":";;;AAGA,SAAgB,yBACd,iBACA,SACA,YACA,YACA,eACQ;CACR,IAAI,gBAAgB,WAAW,aAAa,GAE1C,OAAO;CAET,MAAM,oBAAoB,GAAG,QAAQ,GAAG;CAExC,MAAM,cAAc,IADJ,kBAAkB,QAAQ,MAAM,kBAAkB,GAAG,MACvC,EAAE;CAEhC,MAAM,cAAc,MAAM,WAAW,CAAC,CAAC,KAAK,eAAe;;CAE3D,IAAI,CAAC,aAAa;EAChB,OAAO,MACL;GAAE;GAAS;GAAY;EAAW,GAClC,wCACF;EACA,OAAO;CACT;CACA,IAAI,iBAAiB,YAAY;CACjC,IAAI,eAAe;EACjB,MAAM,uBAAuB,GAAG,QAAQ,GAAG;EAC3C,iBAAiB,eAAe,QAC9B,mBACA,oBACF;CACF;CACA,OAAO,gBAAgB,QACrB,MAAM,WAAW,GACjB,GAAG,eAAe,aAAa,WAAW,MAC5C;AACF"}

package/dist/modules/manager/nuget/extract.js

@@ -47,7 +47,7 @@ function extractDepsFromXml(xmlNode) {
 			let currentValue = attr?.Version ?? attr?.version ?? child.valueWithPath("Version") ?? attr?.VersionOverride ?? child.valueWithPath("VersionOverride");
 			if (!isNonEmptyStringAndNotWhitespace(currentValue)) dep.skipReason = "invalid-version";
 			let sharedVariableName;
-			currentValue = currentValue?.trim()?.replace(/^\$\((\w+)\)$/, (match, key) => {
+			currentValue = currentValue?.trim()?.replace(regEx(/^\$\((\w+)\)$/), (match, key) => {
 				sharedVariableName = key;
 				const val = vars.get(key);
 				if (val) return val;

package/dist/modules/manager/nuget/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":["semver.isVersion"],"sources":["../../../../lib/modules/manager/nuget/extract.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport type { XmlElement } from 'xmldoc';\nimport { XmlDocument } from 'xmldoc';\nimport { logger } from '../../../logger/index.ts';\nimport { getSiblingFileName, localPathExists } from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { NugetDatasource } from '../../datasource/nuget/index.ts';\nimport * as semver from '../../versioning/semver/index.ts';\nimport { getDep } from '../dockerfile/extract.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFileContent,\n} from '../types.ts';\nimport { extractMsbuildGlobalManifest } from './extract/global-manifest.ts';\nimport { extractPackagesFromSingleCsharpFile } from './extract/single-csharp-file.ts';\nimport type { DotnetToolsManifest, NugetPackageDependency } from './types.ts';\nimport {\n  applyRegistries,\n  findVersion,\n  getConfiguredRegistries,\n  isXmlElement,\n} from './util.ts';\n\n/**\n * https://learn.microsoft.com/nuget/concepts/package-versioning\n * This article mentions that  Nuget 3.x and later tries to restore the lowest possible version\n * regarding to given version range.\n * 1.3.4 equals [1.3.4,)\n */\nconst elemNames = new Set([\n  'PackageReference',\n  'PackageVersion',\n  'DotNetCliToolReference',\n  'GlobalPackageReference',\n]);\n\nfunction extractDepsFromXml(xmlNode: XmlDocument): NugetPackageDependency[] {\n  const results: NugetPackageDependency[] = [];\n  const vars = new Map<string, string>();\n  const todo: XmlElement[] = [xmlNode];\n  while (todo.length) {\n    const child = todo.pop()!;\n    const { name, attr } = child;\n\n    if (name === 'ContainerBaseImage') {\n      const { depName, ...dep } = getDep(child.val, true);\n\n      if (isNonEmptyStringAndNotWhitespace(depName)) {\n        results.push({ ...dep, depName, depType: 'docker' });\n      }\n    } else if (elemNames.has(name)) {\n      const depName = attr?.Include || attr?.Update;\n\n      if (!depName) {\n        continue;\n      }\n\n      const dep: NugetPackageDependency = {\n        datasource: NugetDatasource.id,\n        depType: 'nuget',\n        depName,\n      };\n\n      let currentValue: string | undefined =\n        attr?.Version ??\n        attr?.version ??\n        child.valueWithPath('Version') ??\n        attr?.VersionOverride ??\n        child.valueWithPath('VersionOverride');\n\n      if (!isNonEmptyStringAndNotWhitespace(currentValue)) {\n        dep.skipReason = 'invalid-version';\n      }\n\n      let sharedVariableName: string | undefined;\n\n      currentValue = currentValue\n        ?.trim()\n        ?.replace(/^\\$\\((\\w+)\\)$/, (match, key) => {\n          sharedVariableName = key;\n          const val = vars.get(key);\n          if (val) {\n            return val;\n          }\n          return match;\n        });\n\n      if (sharedVariableName) {\n        if (currentValue === `$(${sharedVariableName})`) {\n          // this means that be failed to find/replace the variable\n          dep.skipReason = 'contains-variable';\n        } else {\n          dep.sharedVariableName = sharedVariableName;\n        }\n      }\n\n      dep.currentValue = currentValue;\n      results.push(dep);\n    } else if (name === 'Sdk') {\n      const depName = attr?.Name;\n      const version = attr?.Version;\n      // if sdk element is present it will always have the Name field but the Version is an optional field\n      if (depName && version) {\n        results.push({\n          depName,\n          currentValue: version,\n          depType: 'msbuild-sdk',\n          datasource: NugetDatasource.id,\n        });\n      }\n    } else if (name === 'Import') {\n      const depName = attr?.Sdk;\n      const version = attr?.Version;\n      if (depName && version) {\n        results.push({\n          depName,\n          currentValue: version,\n          depType: 'msbuild-sdk',\n          datasource: NugetDatasource.id,\n        });\n      }\n    } else {\n      if (name === 'Project') {\n        if (attr?.Sdk) {\n          const str = attr?.Sdk;\n          const [name, version] = str.split('/');\n          if (name && version) {\n            results.push({\n              depName: name,\n              depType: 'msbuild-sdk',\n              currentValue: version,\n              datasource: NugetDatasource.id,\n            });\n          }\n        }\n\n        const propertyGroup = child.childNamed('PropertyGroup');\n        if (propertyGroup) {\n          for (const propChild of propertyGroup.children) {\n            if (isXmlElement(propChild)) {\n              const { name, val } = propChild;\n              if (!['Version', 'TargetFramework'].includes(name)) {\n                vars.set(name, val);\n              }\n            }\n          }\n        }\n      }\n\n      todo.push(...child.children.filter(isXmlElement));\n    }\n  }\n  return results;\n}\n\nexport async function extractPackageFile(\n  content: string,\n  packageFile: string,\n  _config: ExtractConfig,\n): Promise<PackageFileContent | null> {\n  logger.trace(`nuget.extractPackageFile(${packageFile})`);\n\n  const registries = await getConfiguredRegistries(packageFile);\n\n  if (packageFile.endsWith('dotnet-tools.json')) {\n    const deps: PackageDependency[] = [];\n    let manifest: DotnetToolsManifest;\n\n    try {\n      manifest = JSON.parse(content);\n    } catch {\n      logger.debug({ packageFile }, `Invalid JSON`);\n      return null;\n    }\n\n    if (manifest.version !== 1) {\n      logger.debug({ packageFile }, 'Unsupported dotnet tools version');\n      return null;\n    }\n\n    for (const depName of Object.keys(manifest.tools ?? {})) {\n      const tool = manifest.tools[depName];\n      const currentValue = tool.version;\n      const dep: NugetPackageDependency = {\n        depType: 'nuget',\n        depName,\n        currentValue,\n        datasource: NugetDatasource.id,\n      };\n      if (isString(currentValue) && semver.isVersion(currentValue)) {\n        // This is to avoid nuget versioning pinning to [1.2.3]\n        dep.versioning = 'semver';\n      }\n\n      applyRegistries(dep, registries);\n\n      deps.push(dep);\n    }\n\n    return deps.length ? { deps } : null;\n  }\n\n  if (packageFile.endsWith('global.json')) {\n    return extractMsbuildGlobalManifest(content, packageFile, registries);\n  }\n\n  if (packageFile.endsWith('.cs')) {\n    return extractPackagesFromSingleCsharpFile(\n      content,\n      packageFile,\n      registries,\n    );\n  }\n\n  // Simple xml validation.\n  // Should start with `<` and end with `>` after trimming all whitespace\n  if (!regEx(/^\\s*<.+>$/m).test(content.trim())) {\n    logger.debug(`NuGet: Skipping ${packageFile} as it is not XML`);\n    return null;\n  }\n\n  let deps: PackageDependency[] = [];\n  let packageFileVersion: string | undefined;\n  try {\n    const parsedXml = new XmlDocument(content);\n    deps = extractDepsFromXml(parsedXml).map((dep) =>\n      applyRegistries(dep, registries),\n    );\n    packageFileVersion = findVersion(parsedXml)?.val;\n  } catch (err) {\n    logger.debug({ err, packageFile }, `Failed to parse XML`);\n  }\n\n  if (!deps.length) {\n    return null;\n  }\n\n  const res: PackageFileContent = { deps, packageFileVersion };\n  const lockFileName = getSiblingFileName(packageFile, 'packages.lock.json');\n  if (await localPathExists(lockFileName)) {\n    res.lockFiles = [lockFileName];\n  }\n  return res;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA8BA,MAAM,4BAAY,IAAI,IAAI;CACxB;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,mBAAmB,SAAgD;CAC1E,MAAM,UAAoC,CAAC;CAC3C,MAAM,uBAAO,IAAI,IAAoB;CACrC,MAAM,OAAqB,CAAC,OAAO;CACnC,OAAO,KAAK,QAAQ;EAClB,MAAM,QAAQ,KAAK,IAAI;EACvB,MAAM,EAAE,MAAM,SAAS;EAEvB,IAAI,SAAS,sBAAsB;GACjC,MAAM,EAAE,SAAS,GAAG,QAAQ,OAAO,MAAM,KAAK,IAAI;GAElD,IAAI,iCAAiC,OAAO,GAC1C,QAAQ,KAAK;IAAE,GAAG;IAAK;IAAS,SAAS;GAAS,CAAC;EAEvD,OAAO,IAAI,UAAU,IAAI,IAAI,GAAG;GAC9B,MAAM,UAAU,MAAM,WAAW,MAAM;GAEvC,IAAI,CAAC,SACH;GAGF,MAAM,MAA8B;IAClC,YAAY,gBAAgB;IAC5B,SAAS;IACT;GACF;GAEA,IAAI,eACF,MAAM,WACN,MAAM,WACN,MAAM,cAAc,SAAS,KAC7B,MAAM,mBACN,MAAM,cAAc,iBAAiB;GAEvC,IAAI,CAAC,iCAAiC,YAAY,GAChD,IAAI,aAAa;GAGnB,IAAI;GAEJ,eAAe,cACX,KAAK,CAAC,EACN,QAAQ,kBAAkB,OAAO,QAAQ;IACzC,qBAAqB;IACrB,MAAM,MAAM,KAAK,IAAI,GAAG;IACxB,IAAI,KACF,OAAO;IAET,OAAO;GACT,CAAC;GAEH,IAAI,oBACF,IAAI,iBAAiB,KAAK,mBAAmB,IAE3C,IAAI,aAAa;QAEjB,IAAI,qBAAqB;GAI7B,IAAI,eAAe;GACnB,QAAQ,KAAK,GAAG;EAClB,OAAO,IAAI,SAAS,OAAO;GACzB,MAAM,UAAU,MAAM;GACtB,MAAM,UAAU,MAAM;GAEtB,IAAI,WAAW,SACb,QAAQ,KAAK;IACX;IACA,cAAc;IACd,SAAS;IACT,YAAY,gBAAgB;GAC9B,CAAC;EAEL,OAAO,IAAI,SAAS,UAAU;GAC5B,MAAM,UAAU,MAAM;GACtB,MAAM,UAAU,MAAM;GACtB,IAAI,WAAW,SACb,QAAQ,KAAK;IACX;IACA,cAAc;IACd,SAAS;IACT,YAAY,gBAAgB;GAC9B,CAAC;EAEL,OAAO;GACL,IAAI,SAAS,WAAW;IACtB,IAAI,MAAM,KAAK;KAEb,MAAM,CAAC,MAAM,YADD,MAAM,IAAA,CACU,MAAM,GAAG;KACrC,IAAI,QAAQ,SACV,QAAQ,KAAK;MACX,SAAS;MACT,SAAS;MACT,cAAc;MACd,YAAY,gBAAgB;KAC9B,CAAC;IAEL;IAEA,MAAM,gBAAgB,MAAM,WAAW,eAAe;IACtD,IAAI,eACG;UAAA,MAAM,aAAa,cAAc,UACpC,IAAI,aAAa,SAAS,GAAG;MAC3B,MAAM,EAAE,MAAM,QAAQ;MACtB,IAAI,CAAC,CAAC,WAAW,iBAAiB,CAAC,CAAC,SAAS,IAAI,GAC/C,KAAK,IAAI,MAAM,GAAG;KAEtB;;GAGN;GAEA,KAAK,KAAK,GAAG,MAAM,SAAS,OAAO,YAAY,CAAC;EAClD;CACF;CACA,OAAO;AACT;AAEA,eAAsB,mBACpB,SACA,aACA,SACoC;CACpC,OAAO,MAAM,4BAA4B,YAAY,EAAE;CAEvD,MAAM,aAAa,MAAM,wBAAwB,WAAW;CAE5D,IAAI,YAAY,SAAS,mBAAmB,GAAG;EAC7C,MAAM,OAA4B,CAAC;EACnC,IAAI;EAEJ,IAAI;GACF,WAAW,KAAK,MAAM,OAAO;EAC/B,QAAQ;GACN,OAAO,MAAM,EAAE,YAAY,GAAG,cAAc;GAC5C,OAAO;EACT;EAEA,IAAI,SAAS,YAAY,GAAG;GAC1B,OAAO,MAAM,EAAE,YAAY,GAAG,kCAAkC;GAChE,OAAO;EACT;EAEA,KAAK,MAAM,WAAW,OAAO,KAAK,SAAS,SAAS,CAAC,CAAC,GAAG;GAEvD,MAAM,eADO,SAAS,MAAM,QACH,CAAC;GAC1B,MAAM,MAA8B;IAClC,SAAS;IACT;IACA;IACA,YAAY,gBAAgB;GAC9B;GACA,IAAI,SAAS,YAAY,KAAKA,UAAiB,YAAY,GAEzD,IAAI,aAAa;GAGnB,gBAAgB,KAAK,UAAU;GAE/B,KAAK,KAAK,GAAG;EACf;EAEA,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI;CAClC;CAEA,IAAI,YAAY,SAAS,aAAa,GACpC,OAAO,6BAA6B,SAAS,aAAa,UAAU;CAGtE,IAAI,YAAY,SAAS,KAAK,GAC5B,OAAO,oCACL,SACA,aACA,UACF;CAKF,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC,KAAK,QAAQ,KAAK,CAAC,GAAG;EAC7C,OAAO,MAAM,mBAAmB,YAAY,kBAAkB;EAC9D,OAAO;CACT;CAEA,IAAI,OAA4B,CAAC;CACjC,IAAI;CACJ,IAAI;EACF,MAAM,YAAY,IAAI,YAAY,OAAO;EACzC,OAAO,mBAAmB,SAAS,CAAC,CAAC,KAAK,QACxC,gBAAgB,KAAK,UAAU,CACjC;EACA,qBAAqB,YAAY,SAAS,CAAC,EAAE;CAC/C,SAAS,KAAK;EACZ,OAAO,MAAM;GAAE;GAAK;EAAY,GAAG,qBAAqB;CAC1D;CAEA,IAAI,CAAC,KAAK,QACR,OAAO;CAGT,MAAM,MAA0B;EAAE;EAAM;CAAmB;CAC3D,MAAM,eAAe,mBAAmB,aAAa,oBAAoB;CACzE,IAAI,MAAM,gBAAgB,YAAY,GACpC,IAAI,YAAY,CAAC,YAAY;CAE/B,OAAO;AACT"}
+{"version":3,"file":"extract.js","names":["semver.isVersion"],"sources":["../../../../lib/modules/manager/nuget/extract.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport type { XmlElement } from 'xmldoc';\nimport { XmlDocument } from 'xmldoc';\nimport { logger } from '../../../logger/index.ts';\nimport { getSiblingFileName, localPathExists } from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { NugetDatasource } from '../../datasource/nuget/index.ts';\nimport * as semver from '../../versioning/semver/index.ts';\nimport { getDep } from '../dockerfile/extract.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFileContent,\n} from '../types.ts';\nimport { extractMsbuildGlobalManifest } from './extract/global-manifest.ts';\nimport { extractPackagesFromSingleCsharpFile } from './extract/single-csharp-file.ts';\nimport type { DotnetToolsManifest, NugetPackageDependency } from './types.ts';\nimport {\n  applyRegistries,\n  findVersion,\n  getConfiguredRegistries,\n  isXmlElement,\n} from './util.ts';\n\n/**\n * https://learn.microsoft.com/nuget/concepts/package-versioning\n * This article mentions that  Nuget 3.x and later tries to restore the lowest possible version\n * regarding to given version range.\n * 1.3.4 equals [1.3.4,)\n */\nconst elemNames = new Set([\n  'PackageReference',\n  'PackageVersion',\n  'DotNetCliToolReference',\n  'GlobalPackageReference',\n]);\n\nfunction extractDepsFromXml(xmlNode: XmlDocument): NugetPackageDependency[] {\n  const results: NugetPackageDependency[] = [];\n  const vars = new Map<string, string>();\n  const todo: XmlElement[] = [xmlNode];\n  while (todo.length) {\n    const child = todo.pop()!;\n    const { name, attr } = child;\n\n    if (name === 'ContainerBaseImage') {\n      const { depName, ...dep } = getDep(child.val, true);\n\n      if (isNonEmptyStringAndNotWhitespace(depName)) {\n        results.push({ ...dep, depName, depType: 'docker' });\n      }\n    } else if (elemNames.has(name)) {\n      const depName = attr?.Include || attr?.Update;\n\n      if (!depName) {\n        continue;\n      }\n\n      const dep: NugetPackageDependency = {\n        datasource: NugetDatasource.id,\n        depType: 'nuget',\n        depName,\n      };\n\n      let currentValue: string | undefined =\n        attr?.Version ??\n        attr?.version ??\n        child.valueWithPath('Version') ??\n        attr?.VersionOverride ??\n        child.valueWithPath('VersionOverride');\n\n      if (!isNonEmptyStringAndNotWhitespace(currentValue)) {\n        dep.skipReason = 'invalid-version';\n      }\n\n      let sharedVariableName: string | undefined;\n\n      currentValue = currentValue\n        ?.trim()\n        ?.replace(regEx(/^\\$\\((\\w+)\\)$/), (match, key) => {\n          sharedVariableName = key;\n          const val = vars.get(key);\n          if (val) {\n            return val;\n          }\n          return match;\n        });\n\n      if (sharedVariableName) {\n        if (currentValue === `$(${sharedVariableName})`) {\n          // this means that be failed to find/replace the variable\n          dep.skipReason = 'contains-variable';\n        } else {\n          dep.sharedVariableName = sharedVariableName;\n        }\n      }\n\n      dep.currentValue = currentValue;\n      results.push(dep);\n    } else if (name === 'Sdk') {\n      const depName = attr?.Name;\n      const version = attr?.Version;\n      // if sdk element is present it will always have the Name field but the Version is an optional field\n      if (depName && version) {\n        results.push({\n          depName,\n          currentValue: version,\n          depType: 'msbuild-sdk',\n          datasource: NugetDatasource.id,\n        });\n      }\n    } else if (name === 'Import') {\n      const depName = attr?.Sdk;\n      const version = attr?.Version;\n      if (depName && version) {\n        results.push({\n          depName,\n          currentValue: version,\n          depType: 'msbuild-sdk',\n          datasource: NugetDatasource.id,\n        });\n      }\n    } else {\n      if (name === 'Project') {\n        if (attr?.Sdk) {\n          const str = attr?.Sdk;\n          const [name, version] = str.split('/');\n          if (name && version) {\n            results.push({\n              depName: name,\n              depType: 'msbuild-sdk',\n              currentValue: version,\n              datasource: NugetDatasource.id,\n            });\n          }\n        }\n\n        const propertyGroup = child.childNamed('PropertyGroup');\n        if (propertyGroup) {\n          for (const propChild of propertyGroup.children) {\n            if (isXmlElement(propChild)) {\n              const { name, val } = propChild;\n              if (!['Version', 'TargetFramework'].includes(name)) {\n                vars.set(name, val);\n              }\n            }\n          }\n        }\n      }\n\n      todo.push(...child.children.filter(isXmlElement));\n    }\n  }\n  return results;\n}\n\nexport async function extractPackageFile(\n  content: string,\n  packageFile: string,\n  _config: ExtractConfig,\n): Promise<PackageFileContent | null> {\n  logger.trace(`nuget.extractPackageFile(${packageFile})`);\n\n  const registries = await getConfiguredRegistries(packageFile);\n\n  if (packageFile.endsWith('dotnet-tools.json')) {\n    const deps: PackageDependency[] = [];\n    let manifest: DotnetToolsManifest;\n\n    try {\n      manifest = JSON.parse(content);\n    } catch {\n      logger.debug({ packageFile }, `Invalid JSON`);\n      return null;\n    }\n\n    if (manifest.version !== 1) {\n      logger.debug({ packageFile }, 'Unsupported dotnet tools version');\n      return null;\n    }\n\n    for (const depName of Object.keys(manifest.tools ?? {})) {\n      const tool = manifest.tools[depName];\n      const currentValue = tool.version;\n      const dep: NugetPackageDependency = {\n        depType: 'nuget',\n        depName,\n        currentValue,\n        datasource: NugetDatasource.id,\n      };\n      if (isString(currentValue) && semver.isVersion(currentValue)) {\n        // This is to avoid nuget versioning pinning to [1.2.3]\n        dep.versioning = 'semver';\n      }\n\n      applyRegistries(dep, registries);\n\n      deps.push(dep);\n    }\n\n    return deps.length ? { deps } : null;\n  }\n\n  if (packageFile.endsWith('global.json')) {\n    return extractMsbuildGlobalManifest(content, packageFile, registries);\n  }\n\n  if (packageFile.endsWith('.cs')) {\n    return extractPackagesFromSingleCsharpFile(\n      content,\n      packageFile,\n      registries,\n    );\n  }\n\n  // Simple xml validation.\n  // Should start with `<` and end with `>` after trimming all whitespace\n  if (!regEx(/^\\s*<.+>$/m).test(content.trim())) {\n    logger.debug(`NuGet: Skipping ${packageFile} as it is not XML`);\n    return null;\n  }\n\n  let deps: PackageDependency[] = [];\n  let packageFileVersion: string | undefined;\n  try {\n    const parsedXml = new XmlDocument(content);\n    deps = extractDepsFromXml(parsedXml).map((dep) =>\n      applyRegistries(dep, registries),\n    );\n    packageFileVersion = findVersion(parsedXml)?.val;\n  } catch (err) {\n    logger.debug({ err, packageFile }, `Failed to parse XML`);\n  }\n\n  if (!deps.length) {\n    return null;\n  }\n\n  const res: PackageFileContent = { deps, packageFileVersion };\n  const lockFileName = getSiblingFileName(packageFile, 'packages.lock.json');\n  if (await localPathExists(lockFileName)) {\n    res.lockFiles = [lockFileName];\n  }\n  return res;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA8BA,MAAM,4BAAY,IAAI,IAAI;CACxB;CACA;CACA;CACA;AACF,CAAC;AAED,SAAS,mBAAmB,SAAgD;CAC1E,MAAM,UAAoC,CAAC;CAC3C,MAAM,uBAAO,IAAI,IAAoB;CACrC,MAAM,OAAqB,CAAC,OAAO;CACnC,OAAO,KAAK,QAAQ;EAClB,MAAM,QAAQ,KAAK,IAAI;EACvB,MAAM,EAAE,MAAM,SAAS;EAEvB,IAAI,SAAS,sBAAsB;GACjC,MAAM,EAAE,SAAS,GAAG,QAAQ,OAAO,MAAM,KAAK,IAAI;GAElD,IAAI,iCAAiC,OAAO,GAC1C,QAAQ,KAAK;IAAE,GAAG;IAAK;IAAS,SAAS;GAAS,CAAC;EAEvD,OAAO,IAAI,UAAU,IAAI,IAAI,GAAG;GAC9B,MAAM,UAAU,MAAM,WAAW,MAAM;GAEvC,IAAI,CAAC,SACH;GAGF,MAAM,MAA8B;IAClC,YAAY,gBAAgB;IAC5B,SAAS;IACT;GACF;GAEA,IAAI,eACF,MAAM,WACN,MAAM,WACN,MAAM,cAAc,SAAS,KAC7B,MAAM,mBACN,MAAM,cAAc,iBAAiB;GAEvC,IAAI,CAAC,iCAAiC,YAAY,GAChD,IAAI,aAAa;GAGnB,IAAI;GAEJ,eAAe,cACX,KAAK,CAAC,EACN,QAAQ,MAAM,eAAe,IAAI,OAAO,QAAQ;IAChD,qBAAqB;IACrB,MAAM,MAAM,KAAK,IAAI,GAAG;IACxB,IAAI,KACF,OAAO;IAET,OAAO;GACT,CAAC;GAEH,IAAI,oBACF,IAAI,iBAAiB,KAAK,mBAAmB,IAE3C,IAAI,aAAa;QAEjB,IAAI,qBAAqB;GAI7B,IAAI,eAAe;GACnB,QAAQ,KAAK,GAAG;EAClB,OAAO,IAAI,SAAS,OAAO;GACzB,MAAM,UAAU,MAAM;GACtB,MAAM,UAAU,MAAM;GAEtB,IAAI,WAAW,SACb,QAAQ,KAAK;IACX;IACA,cAAc;IACd,SAAS;IACT,YAAY,gBAAgB;GAC9B,CAAC;EAEL,OAAO,IAAI,SAAS,UAAU;GAC5B,MAAM,UAAU,MAAM;GACtB,MAAM,UAAU,MAAM;GACtB,IAAI,WAAW,SACb,QAAQ,KAAK;IACX;IACA,cAAc;IACd,SAAS;IACT,YAAY,gBAAgB;GAC9B,CAAC;EAEL,OAAO;GACL,IAAI,SAAS,WAAW;IACtB,IAAI,MAAM,KAAK;KAEb,MAAM,CAAC,MAAM,YADD,MAAM,IAAA,CACU,MAAM,GAAG;KACrC,IAAI,QAAQ,SACV,QAAQ,KAAK;MACX,SAAS;MACT,SAAS;MACT,cAAc;MACd,YAAY,gBAAgB;KAC9B,CAAC;IAEL;IAEA,MAAM,gBAAgB,MAAM,WAAW,eAAe;IACtD,IAAI,eACG;UAAA,MAAM,aAAa,cAAc,UACpC,IAAI,aAAa,SAAS,GAAG;MAC3B,MAAM,EAAE,MAAM,QAAQ;MACtB,IAAI,CAAC,CAAC,WAAW,iBAAiB,CAAC,CAAC,SAAS,IAAI,GAC/C,KAAK,IAAI,MAAM,GAAG;KAEtB;;GAGN;GAEA,KAAK,KAAK,GAAG,MAAM,SAAS,OAAO,YAAY,CAAC;EAClD;CACF;CACA,OAAO;AACT;AAEA,eAAsB,mBACpB,SACA,aACA,SACoC;CACpC,OAAO,MAAM,4BAA4B,YAAY,EAAE;CAEvD,MAAM,aAAa,MAAM,wBAAwB,WAAW;CAE5D,IAAI,YAAY,SAAS,mBAAmB,GAAG;EAC7C,MAAM,OAA4B,CAAC;EACnC,IAAI;EAEJ,IAAI;GACF,WAAW,KAAK,MAAM,OAAO;EAC/B,QAAQ;GACN,OAAO,MAAM,EAAE,YAAY,GAAG,cAAc;GAC5C,OAAO;EACT;EAEA,IAAI,SAAS,YAAY,GAAG;GAC1B,OAAO,MAAM,EAAE,YAAY,GAAG,kCAAkC;GAChE,OAAO;EACT;EAEA,KAAK,MAAM,WAAW,OAAO,KAAK,SAAS,SAAS,CAAC,CAAC,GAAG;GAEvD,MAAM,eADO,SAAS,MAAM,QACH,CAAC;GAC1B,MAAM,MAA8B;IAClC,SAAS;IACT;IACA;IACA,YAAY,gBAAgB;GAC9B;GACA,IAAI,SAAS,YAAY,KAAKA,UAAiB,YAAY,GAEzD,IAAI,aAAa;GAGnB,gBAAgB,KAAK,UAAU;GAE/B,KAAK,KAAK,GAAG;EACf;EAEA,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI;CAClC;CAEA,IAAI,YAAY,SAAS,aAAa,GACpC,OAAO,6BAA6B,SAAS,aAAa,UAAU;CAGtE,IAAI,YAAY,SAAS,KAAK,GAC5B,OAAO,oCACL,SACA,aACA,UACF;CAKF,IAAI,CAAC,MAAM,YAAY,CAAC,CAAC,KAAK,QAAQ,KAAK,CAAC,GAAG;EAC7C,OAAO,MAAM,mBAAmB,YAAY,kBAAkB;EAC9D,OAAO;CACT;CAEA,IAAI,OAA4B,CAAC;CACjC,IAAI;CACJ,IAAI;EACF,MAAM,YAAY,IAAI,YAAY,OAAO;EACzC,OAAO,mBAAmB,SAAS,CAAC,CAAC,KAAK,QACxC,gBAAgB,KAAK,UAAU,CACjC;EACA,qBAAqB,YAAY,SAAS,CAAC,EAAE;CAC/C,SAAS,KAAK;EACZ,OAAO,MAAM;GAAE;GAAK;EAAY,GAAG,qBAAqB;CAC1D;CAEA,IAAI,CAAC,KAAK,QACR,OAAO;CAGT,MAAM,MAA0B;EAAE;EAAM;CAAmB;CAC3D,MAAM,eAAe,mBAAmB,aAAa,oBAAoB;CACzE,IAAI,MAAM,gBAAgB,YAAY,GACpC,IAAI,YAAY,CAAC,YAAY;CAE/B,OAAO;AACT"}

package/dist/modules/manager/nvm/extract.js

@@ -1,10 +1,11 @@
+import { regEx } from "../../../util/regex.js";
 import { NodeVersionDatasource } from "../../datasource/node-version/index.js";
 import { isNonEmptyStringAndNotWhitespace } from "@sindresorhus/is";
 //#region lib/modules/manager/nvm/extract.ts
 function extractPackageFile(content) {
 	return { deps: [{
 		depName: "node",
-		currentValue: content.split("\n").map((line) => line.replace(/#.*$/, "").trim()).filter(isNonEmptyStringAndNotWhitespace).join("\n").trim(),
+		currentValue: content.split("\n").map((line) => line.replace(regEx(/#.*$/), "").trim()).filter(isNonEmptyStringAndNotWhitespace).join("\n").trim(),
 		datasource: NodeVersionDatasource.id
 	}] };
 }

package/dist/modules/manager/nvm/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":[],"sources":["../../../../lib/modules/manager/nvm/extract.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace } from '@sindresorhus/is';\nimport { NodeVersionDatasource } from '../../datasource/node-version/index.ts';\nimport type { PackageDependency, PackageFileContent } from '../types.ts';\n\nexport function extractPackageFile(content: string): PackageFileContent {\n  const dep: PackageDependency = {\n    depName: 'node',\n    currentValue: content\n      .split('\\n')\n      // Remove code comments\n      .map((line) => line.replace(/#.*$/, '').trim())\n      .filter(isNonEmptyStringAndNotWhitespace)\n      .join('\\n')\n      .trim(),\n    datasource: NodeVersionDatasource.id,\n  };\n  return { deps: [dep] };\n}\n"],"mappings":";;;AAIA,SAAgB,mBAAmB,SAAqC;CAYtE,OAAO,EAAE,MAAM,CAAC;EAVd,SAAS;EACT,cAAc,QACX,MAAM,IAAI,CAAC,CAEX,KAAK,SAAS,KAAK,QAAQ,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAC9C,OAAO,gCAAgC,CAAC,CACxC,KAAK,IAAI,CAAC,CACV,KAAK;EACR,YAAY,sBAAsB;CAElB,CAAC,EAAE;AACvB"}
+{"version":3,"file":"extract.js","names":[],"sources":["../../../../lib/modules/manager/nvm/extract.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace } from '@sindresorhus/is';\nimport { regEx } from '../../../util/regex.ts';\nimport { NodeVersionDatasource } from '../../datasource/node-version/index.ts';\nimport type { PackageDependency, PackageFileContent } from '../types.ts';\n\nexport function extractPackageFile(content: string): PackageFileContent {\n  const dep: PackageDependency = {\n    depName: 'node',\n    currentValue: content\n      .split('\\n')\n      // Remove code comments\n      .map((line) => line.replace(regEx(/#.*$/), '').trim())\n      .filter(isNonEmptyStringAndNotWhitespace)\n      .join('\\n')\n      .trim(),\n    datasource: NodeVersionDatasource.id,\n  };\n  return { deps: [dep] };\n}\n"],"mappings":";;;;AAKA,SAAgB,mBAAmB,SAAqC;CAYtE,OAAO,EAAE,MAAM,CAAC;EAVd,SAAS;EACT,cAAc,QACX,MAAM,IAAI,CAAC,CAEX,KAAK,SAAS,KAAK,QAAQ,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CACrD,OAAO,gCAAgC,CAAC,CACxC,KAAK,IAAI,CAAC,CACV,KAAK;EACR,YAAY,sBAAsB;CAElB,CAAC,EAAE;AACvB"}

package/dist/modules/manager/osgi/extract.js

@@ -1,3 +1,4 @@
+import { regEx } from "../../../util/regex.js";
 import { logger } from "../../../logger/index.js";
 import { MavenDatasource } from "../../datasource/maven/index.js";
 import { isArray, isNullOrUndefined, isString } from "@sindresorhus/is";
@@ -32,7 +33,7 @@ function extractPackageFile(content, packageFile, _config) {
 	for (const entry of allBundles) {
 		const rawGav = isString(entry) ? entry : entry.id;
 		if (!rawGav) continue;
-		const gav = rawGav.replace(/\//g, ":");
+		const gav = rawGav.replace(regEx(/\//g), ":");
 		const parts = gav.split(":");
 		if (parts.length < 3 || parts.length > 5) {
 			deps.push({

package/dist/modules/manager/osgi/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":["json5"],"sources":["../../../../lib/modules/manager/osgi/extract.ts"],"sourcesContent":["import { isArray, isNullOrUndefined, isString } from '@sindresorhus/is';\nimport json5 from 'json5';\nimport { coerce, satisfies } from 'semver';\nimport { logger } from '../../../logger/index.ts';\nimport { MavenDatasource } from '../../datasource/maven/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFileContent,\n} from '../types.ts';\nimport type { Bundle, FeatureModel } from './types.ts';\n\nexport function extractPackageFile(\n  content: string,\n  packageFile: string,\n  _config?: ExtractConfig,\n): PackageFileContent | null {\n  // References:\n  // - OSGi compendium release 8 ( https://docs.osgi.org/specification/osgi.cmpn/8.0.0/service.feature.html )\n  // - The Sling implementation of the feature model ( https://sling.apache.org/documentation/development/feature-model.html )\n  logger.trace(`osgi.extractPackageFile($packageFile)`);\n\n  const deps: PackageDependency[] = [];\n  let featureModel: FeatureModel;\n  try {\n    // Compendium R8 159.3: JS comments are supported\n    featureModel = json5.parse<FeatureModel>(content);\n  } catch (err) {\n    logger.warn({ packageFile, err }, 'Failed to parse osgi file');\n    return null;\n  }\n\n  if (\n    // for empty an empty result\n    isNullOrUndefined(featureModel) ||\n    // Compendium R8 159.9: resource versioning\n    !isSupportedFeatureResourceVersion(featureModel, packageFile)\n  ) {\n    return null;\n  }\n\n  // OSGi Compendium R8 159.4: bundles entry\n  const allBundles = featureModel.bundles ?? [];\n\n  // The 'execution-environment' key is supported by the Sling/OSGi feature model implementation\n  const execEnvFramework =\n    featureModel['execution-environment:JSON|false']?.framework;\n  if (!isNullOrUndefined(execEnvFramework)) {\n    allBundles.push(execEnvFramework);\n  }\n\n  // parse custom sections\n  //\n  // Note: we do not support artifact list extensions as defined in\n  // section 159.7.3 yet. As of 05-12-2022, there is no implementation that\n  // supports this\n  for (const [section, value] of Object.entries(featureModel)) {\n    logger.trace({ fileName: packageFile, section }, 'Parsing section');\n    const customSectionEntries = extractArtifactList(section, value);\n    allBundles.push(...customSectionEntries);\n  }\n\n  // convert bundles to dependencies\n  for (const entry of allBundles) {\n    const rawGav = isString(entry) ? entry : entry.id;\n    // skip invalid definitions, such as objects without an id set\n    if (!rawGav) {\n      continue;\n    }\n\n    // both '/' and ':' are valid separators, but the Maven datasource\n    // expects the separator to be ':'\n    const gav = rawGav.replace(/\\//g, ':');\n\n    // identifiers support 3-5 parts, see OSGi R8 - 159.2.1 Identifiers\n    // groupId ':' artifactId ( ':' type ( ':' classifier )? )? ':' version\n    const parts = gav.split(':');\n    if (parts.length < 3 || parts.length > 5) {\n      deps.push({\n        depName: gav,\n        skipReason: 'invalid-value',\n      });\n      continue;\n    }\n    // parsing should use the last entry for the version\n    const currentValue = parts.at(-1)!;\n    const result: PackageDependency = {\n      datasource: MavenDatasource.id,\n      depName: `${parts[0]}:${parts[1]}`,\n    };\n    if (currentValue.includes('${')) {\n      result.skipReason = 'contains-variable';\n    } else {\n      result.currentValue = currentValue;\n    }\n\n    deps.push(result);\n  }\n\n  return deps.length ? { deps } : null;\n}\n\nfunction isSupportedFeatureResourceVersion(\n  featureModel: FeatureModel,\n  fileName: string,\n): boolean {\n  const resourceVersion = featureModel['feature-resource-version'];\n  if (resourceVersion) {\n    const resourceSemVer = coerce(resourceVersion);\n    if (!resourceSemVer) {\n      logger.debug(\n        `Skipping file ${fileName} due to invalid feature-resource-version '${resourceVersion}'`,\n      );\n      return false;\n    }\n\n    // we only support 1.x, although no over version has been defined\n    if (!satisfies(resourceSemVer, '^1')) {\n      logger.debug(\n        `Skipping file ${fileName} due to unsupported feature-resource-version '${resourceVersion}'`,\n      );\n      return false;\n    }\n  }\n\n  return true;\n}\n\nfunction extractArtifactList(\n  sectionName: string,\n  sectionValue: unknown,\n): Bundle[] {\n  // The 'ARTIFACTS' key is supported by the Sling/OSGi feature model implementation\n  if (sectionName.includes(':ARTIFACTS|') && isArray(sectionValue)) {\n    return sectionValue as Bundle[];\n  }\n\n  return [];\n}\n"],"mappings":";;;;;;AAYA,SAAgB,mBACd,SACA,aACA,SAC2B;CAI3B,OAAO,MAAM,uCAAuC;CAEpD,MAAM,OAA4B,CAAC;CACnC,IAAI;CACJ,IAAI;EAEF,eAAeA,MAAM,MAAoB,OAAO;CAClD,SAAS,KAAK;EACZ,OAAO,KAAK;GAAE;GAAa;EAAI,GAAG,2BAA2B;EAC7D,OAAO;CACT;CAEA,IAEE,kBAAkB,YAAY,KAE9B,CAAC,kCAAkC,cAAc,WAAW,GAE5D,OAAO;CAIT,MAAM,aAAa,aAAa,WAAW,CAAC;CAG5C,MAAM,mBACJ,aAAa,mCAAmC,EAAE;CACpD,IAAI,CAAC,kBAAkB,gBAAgB,GACrC,WAAW,KAAK,gBAAgB;CAQlC,KAAK,MAAM,CAAC,SAAS,UAAU,OAAO,QAAQ,YAAY,GAAG;EAC3D,OAAO,MAAM;GAAE,UAAU;GAAa;EAAQ,GAAG,iBAAiB;EAClE,MAAM,uBAAuB,oBAAoB,SAAS,KAAK;EAC/D,WAAW,KAAK,GAAG,oBAAoB;CACzC;CAGA,KAAK,MAAM,SAAS,YAAY;EAC9B,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,MAAM;EAE/C,IAAI,CAAC,QACH;EAKF,MAAM,MAAM,OAAO,QAAQ,OAAO,GAAG;EAIrC,MAAM,QAAQ,IAAI,MAAM,GAAG;EAC3B,IAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG;GACxC,KAAK,KAAK;IACR,SAAS;IACT,YAAY;GACd,CAAC;GACD;EACF;EAEA,MAAM,eAAe,MAAM,GAAG,EAAE;EAChC,MAAM,SAA4B;GAChC,YAAY,gBAAgB;GAC5B,SAAS,GAAG,MAAM,GAAG,GAAG,MAAM;EAChC;EACA,IAAI,aAAa,SAAS,IAAI,GAC5B,OAAO,aAAa;OAEpB,OAAO,eAAe;EAGxB,KAAK,KAAK,MAAM;CAClB;CAEA,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI;AAClC;AAEA,SAAS,kCACP,cACA,UACS;CACT,MAAM,kBAAkB,aAAa;CACrC,IAAI,iBAAiB;EACnB,MAAM,iBAAiB,OAAO,eAAe;EAC7C,IAAI,CAAC,gBAAgB;GACnB,OAAO,MACL,iBAAiB,SAAS,4CAA4C,gBAAgB,EACxF;GACA,OAAO;EACT;EAGA,IAAI,CAAC,UAAU,gBAAgB,IAAI,GAAG;GACpC,OAAO,MACL,iBAAiB,SAAS,gDAAgD,gBAAgB,EAC5F;GACA,OAAO;EACT;CACF;CAEA,OAAO;AACT;AAEA,SAAS,oBACP,aACA,cACU;CAEV,IAAI,YAAY,SAAS,aAAa,KAAK,QAAQ,YAAY,GAC7D,OAAO;CAGT,OAAO,CAAC;AACV"}
+{"version":3,"file":"extract.js","names":["json5"],"sources":["../../../../lib/modules/manager/osgi/extract.ts"],"sourcesContent":["import { isArray, isNullOrUndefined, isString } from '@sindresorhus/is';\nimport json5 from 'json5';\nimport { coerce, satisfies } from 'semver';\nimport { logger } from '../../../logger/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { MavenDatasource } from '../../datasource/maven/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFileContent,\n} from '../types.ts';\nimport type { Bundle, FeatureModel } from './types.ts';\n\nexport function extractPackageFile(\n  content: string,\n  packageFile: string,\n  _config?: ExtractConfig,\n): PackageFileContent | null {\n  // References:\n  // - OSGi compendium release 8 ( https://docs.osgi.org/specification/osgi.cmpn/8.0.0/service.feature.html )\n  // - The Sling implementation of the feature model ( https://sling.apache.org/documentation/development/feature-model.html )\n  logger.trace(`osgi.extractPackageFile($packageFile)`);\n\n  const deps: PackageDependency[] = [];\n  let featureModel: FeatureModel;\n  try {\n    // Compendium R8 159.3: JS comments are supported\n    featureModel = json5.parse<FeatureModel>(content);\n  } catch (err) {\n    logger.warn({ packageFile, err }, 'Failed to parse osgi file');\n    return null;\n  }\n\n  if (\n    // for empty an empty result\n    isNullOrUndefined(featureModel) ||\n    // Compendium R8 159.9: resource versioning\n    !isSupportedFeatureResourceVersion(featureModel, packageFile)\n  ) {\n    return null;\n  }\n\n  // OSGi Compendium R8 159.4: bundles entry\n  const allBundles = featureModel.bundles ?? [];\n\n  // The 'execution-environment' key is supported by the Sling/OSGi feature model implementation\n  const execEnvFramework =\n    featureModel['execution-environment:JSON|false']?.framework;\n  if (!isNullOrUndefined(execEnvFramework)) {\n    allBundles.push(execEnvFramework);\n  }\n\n  // parse custom sections\n  //\n  // Note: we do not support artifact list extensions as defined in\n  // section 159.7.3 yet. As of 05-12-2022, there is no implementation that\n  // supports this\n  for (const [section, value] of Object.entries(featureModel)) {\n    logger.trace({ fileName: packageFile, section }, 'Parsing section');\n    const customSectionEntries = extractArtifactList(section, value);\n    allBundles.push(...customSectionEntries);\n  }\n\n  // convert bundles to dependencies\n  for (const entry of allBundles) {\n    const rawGav = isString(entry) ? entry : entry.id;\n    // skip invalid definitions, such as objects without an id set\n    if (!rawGav) {\n      continue;\n    }\n\n    // both '/' and ':' are valid separators, but the Maven datasource\n    // expects the separator to be ':'\n    const gav = rawGav.replace(regEx(/\\//g), ':');\n\n    // identifiers support 3-5 parts, see OSGi R8 - 159.2.1 Identifiers\n    // groupId ':' artifactId ( ':' type ( ':' classifier )? )? ':' version\n    const parts = gav.split(':');\n    if (parts.length < 3 || parts.length > 5) {\n      deps.push({\n        depName: gav,\n        skipReason: 'invalid-value',\n      });\n      continue;\n    }\n    // parsing should use the last entry for the version\n    const currentValue = parts.at(-1)!;\n    const result: PackageDependency = {\n      datasource: MavenDatasource.id,\n      depName: `${parts[0]}:${parts[1]}`,\n    };\n    if (currentValue.includes('${')) {\n      result.skipReason = 'contains-variable';\n    } else {\n      result.currentValue = currentValue;\n    }\n\n    deps.push(result);\n  }\n\n  return deps.length ? { deps } : null;\n}\n\nfunction isSupportedFeatureResourceVersion(\n  featureModel: FeatureModel,\n  fileName: string,\n): boolean {\n  const resourceVersion = featureModel['feature-resource-version'];\n  if (resourceVersion) {\n    const resourceSemVer = coerce(resourceVersion);\n    if (!resourceSemVer) {\n      logger.debug(\n        `Skipping file ${fileName} due to invalid feature-resource-version '${resourceVersion}'`,\n      );\n      return false;\n    }\n\n    // we only support 1.x, although no over version has been defined\n    if (!satisfies(resourceSemVer, '^1')) {\n      logger.debug(\n        `Skipping file ${fileName} due to unsupported feature-resource-version '${resourceVersion}'`,\n      );\n      return false;\n    }\n  }\n\n  return true;\n}\n\nfunction extractArtifactList(\n  sectionName: string,\n  sectionValue: unknown,\n): Bundle[] {\n  // The 'ARTIFACTS' key is supported by the Sling/OSGi feature model implementation\n  if (sectionName.includes(':ARTIFACTS|') && isArray(sectionValue)) {\n    return sectionValue as Bundle[];\n  }\n\n  return [];\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,mBACd,SACA,aACA,SAC2B;CAI3B,OAAO,MAAM,uCAAuC;CAEpD,MAAM,OAA4B,CAAC;CACnC,IAAI;CACJ,IAAI;EAEF,eAAeA,MAAM,MAAoB,OAAO;CAClD,SAAS,KAAK;EACZ,OAAO,KAAK;GAAE;GAAa;EAAI,GAAG,2BAA2B;EAC7D,OAAO;CACT;CAEA,IAEE,kBAAkB,YAAY,KAE9B,CAAC,kCAAkC,cAAc,WAAW,GAE5D,OAAO;CAIT,MAAM,aAAa,aAAa,WAAW,CAAC;CAG5C,MAAM,mBACJ,aAAa,mCAAmC,EAAE;CACpD,IAAI,CAAC,kBAAkB,gBAAgB,GACrC,WAAW,KAAK,gBAAgB;CAQlC,KAAK,MAAM,CAAC,SAAS,UAAU,OAAO,QAAQ,YAAY,GAAG;EAC3D,OAAO,MAAM;GAAE,UAAU;GAAa;EAAQ,GAAG,iBAAiB;EAClE,MAAM,uBAAuB,oBAAoB,SAAS,KAAK;EAC/D,WAAW,KAAK,GAAG,oBAAoB;CACzC;CAGA,KAAK,MAAM,SAAS,YAAY;EAC9B,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,MAAM;EAE/C,IAAI,CAAC,QACH;EAKF,MAAM,MAAM,OAAO,QAAQ,MAAM,KAAK,GAAG,GAAG;EAI5C,MAAM,QAAQ,IAAI,MAAM,GAAG;EAC3B,IAAI,MAAM,SAAS,KAAK,MAAM,SAAS,GAAG;GACxC,KAAK,KAAK;IACR,SAAS;IACT,YAAY;GACd,CAAC;GACD;EACF;EAEA,MAAM,eAAe,MAAM,GAAG,EAAE;EAChC,MAAM,SAA4B;GAChC,YAAY,gBAAgB;GAC5B,SAAS,GAAG,MAAM,GAAG,GAAG,MAAM;EAChC;EACA,IAAI,aAAa,SAAS,IAAI,GAC5B,OAAO,aAAa;OAEpB,OAAO,eAAe;EAGxB,KAAK,KAAK,MAAM;CAClB;CAEA,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI;AAClC;AAEA,SAAS,kCACP,cACA,UACS;CACT,MAAM,kBAAkB,aAAa;CACrC,IAAI,iBAAiB;EACnB,MAAM,iBAAiB,OAAO,eAAe;EAC7C,IAAI,CAAC,gBAAgB;GACnB,OAAO,MACL,iBAAiB,SAAS,4CAA4C,gBAAgB,EACxF;GACA,OAAO;EACT;EAGA,IAAI,CAAC,UAAU,gBAAgB,IAAI,GAAG;GACpC,OAAO,MACL,iBAAiB,SAAS,gDAAgD,gBAAgB,EAC5F;GACA,OAAO;EACT;CACF;CAEA,OAAO;AACT;AAEA,SAAS,oBACP,aACA,cACU;CAEV,IAAI,YAAY,SAAS,aAAa,KAAK,QAAQ,YAAY,GAC7D,OAAO;CAGT,OAAO,CAAC;AACV"}

package/dist/modules/manager/pep621/processors/uv.js

@@ -1,4 +1,5 @@
 import "../../../../constants/error-messages.js";
+import { regEx } from "../../../../util/regex.js";
 import { logger } from "../../../../logger/index.js";
 import { parseUrl } from "../../../../util/url.js";
 import { find } from "../../../../util/host-rules.js";
@@ -188,7 +189,7 @@ async function getUvIndexCredentials(project) {
 		if (!parsedUrl) continue;
 		if (!name) continue;
 		const { username, password } = await getUsernamePassword(parsedUrl);
-		const NAME = name.toUpperCase().replace(/[^A-Z0-9]/g, "_");
+		const NAME = name.toUpperCase().replace(regEx(/[^A-Z0-9]/g), "_");
 		if (username) entries.push([`UV_INDEX_${NAME}_USERNAME`, username]);
 		if (password) entries.push([`UV_INDEX_${NAME}_PASSWORD`, password]);
 	}

package/dist/modules/manager/pep621/processors/uv.js.map

@@ -1 +1 @@
-{"version":3,"file":"uv.js","names":[],"sources":["../../../../../lib/modules/manager/pep621/processors/uv.ts"],"sourcesContent":["import { isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport type { HostRule } from '../../../../types/index.ts';\nimport type {\n  ExecOptions,\n  ToolConstraint,\n} from '../../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../../util/git/exec.ts';\nimport { find } from '../../../../util/host-rules.ts';\nimport { Result } from '../../../../util/result.ts';\nimport { parseUrl } from '../../../../util/url.ts';\nimport { PypiDatasource } from '../../../datasource/pypi/index.ts';\nimport { getGoogleAuthHostRule } from '../../../datasource/util.ts';\nimport type {\n  PackageDependency,\n  UpdateArtifact,\n  UpdateArtifactsResult,\n  Upgrade,\n} from '../../types.ts';\nimport { applyGitSource } from '../../util.ts';\nimport { type PyProject, UvLockfile } from '../schema.ts';\nimport { depTypes } from '../utils.ts';\n\nimport { BasePyProjectProcessor } from './abstract.ts';\n\nconst uvUpdateCMD = 'uv lock';\nconst gitExec = withGitEnvironment(['pep621']);\n\nexport class UvProcessor extends BasePyProjectProcessor {\n  override lockfileName = 'uv.lock';\n\n  process(project: PyProject, deps: PackageDependency[]): PackageDependency[] {\n    const uv = project.tool?.uv;\n    if (!uv) {\n      return deps;\n    }\n\n    const hasExplicitDefault = uv.index?.some(\n      (index) => index.default && index.explicit,\n    );\n    const defaultIndex = uv.index?.find(\n      (index) => index.default && !index.explicit,\n    );\n    const implicitIndexUrls = uv.index\n      ?.filter((index) => !index.explicit && index.name !== defaultIndex?.name)\n      ?.map(({ url }) => url);\n\n    const devDependencies = uv['dev-dependencies'];\n    if (devDependencies) {\n      deps.push(...devDependencies);\n    }\n\n    // https://docs.astral.sh/uv/concepts/dependencies/#dependency-sources\n    // Skip sources that do not make sense to handle (e.g. path).\n    if (uv.sources || defaultIndex || implicitIndexUrls) {\n      for (const dep of deps) {\n        /* v8 ignore next 3 -- needs test */\n        if (!dep.packageName) {\n          continue;\n        }\n\n        if (dep.depType === 'requires-python') {\n          continue;\n        }\n\n        // Using `packageName` as it applies PEP 508 normalization, which is\n        // also applied by uv when matching a source to a dependency.\n        const depSource = uv.sources?.[dep.packageName];\n        if (depSource) {\n          // Dependency is pinned to a specific source.\n          dep.depType = depTypes.uvSources;\n          if ('index' in depSource) {\n            const index = uv.index?.find(\n              ({ name }) => name === depSource.index,\n            );\n            if (index) {\n              dep.registryUrls = [index.url];\n            }\n          } else if ('git' in depSource) {\n            applyGitSource(\n              dep,\n              depSource.git,\n              depSource.rev,\n              depSource.tag,\n              depSource.branch,\n            );\n          } else if ('url' in depSource) {\n            dep.skipReason = 'unsupported-url';\n          } else if ('path' in depSource) {\n            dep.skipReason = 'path-dependency';\n          } else if ('workspace' in depSource) {\n            dep.skipReason = 'inherited-dependency';\n          } else {\n            /* v8 ignore next -- unreachable through schema */\n            dep.skipReason = 'unknown-registry';\n          }\n        } else {\n          // Dependency is not pinned to a specific source, so we need to\n          // determine the source based on the index configuration.\n          if (hasExplicitDefault) {\n            // don't fall back to pypi if there is an explicit default index\n            dep.registryUrls = [];\n          } else if (defaultIndex) {\n            // There is a default index configured, so use it.\n            dep.registryUrls = [defaultIndex.url];\n          }\n\n          if (implicitIndexUrls?.length) {\n            // If there are implicit indexes, check them first and fall back\n            // to the default.\n            dep.registryUrls = implicitIndexUrls.concat(\n              dep.registryUrls ?? PypiDatasource.defaultURL,\n            );\n          }\n        }\n      }\n    }\n\n    return deps;\n  }\n\n  async extractLockedVersions(\n    project: PyProject,\n    deps: PackageDependency[],\n    packageFile: string,\n  ): Promise<PackageDependency[]> {\n    const lockFileName = await findLocalSiblingOrParent(\n      packageFile,\n      this.lockfileName,\n    );\n    if (lockFileName === null) {\n      logger.debug({ packageFile }, `No uv lock file found`);\n    } else {\n      const lockFileContent = await readLocalFile(lockFileName, 'utf8');\n      if (lockFileContent) {\n        const { val: lockFileMapping, err } = Result.parse(\n          lockFileContent,\n          UvLockfile,\n        ).unwrap();\n\n        if (err) {\n          logger.debug({ packageFile, err }, `Error parsing uv lock file`);\n        } else {\n          for (const dep of deps) {\n            const packageName = dep.packageName;\n            if (packageName && packageName in lockFileMapping) {\n              dep.lockedVersion = lockFileMapping[packageName];\n            }\n          }\n        }\n      }\n    }\n\n    return Promise.resolve(deps);\n  }\n\n  async updateArtifacts(\n    updateArtifact: UpdateArtifact,\n    project: PyProject,\n  ): Promise<UpdateArtifactsResult[] | null> {\n    const { config, updatedDeps, packageFileName } = updateArtifact;\n\n    const { isLockFileMaintenance } = config;\n\n    // abort if no lockfile is defined\n    const lockFileName = await findLocalSiblingOrParent(\n      packageFileName,\n      'uv.lock',\n    );\n    if (lockFileName === null) {\n      logger.debug({ packageFileName }, `No uv lock file found`);\n      return null;\n    }\n    try {\n      const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n      if (!existingLockFileContent) {\n        logger.debug('No uv.lock found');\n        return null;\n      }\n\n      const pythonConstraint: ToolConstraint = {\n        toolName: 'python',\n        constraint:\n          config.constraints?.python ?? project.project?.['requires-python'],\n      };\n      const uvConstraint: ToolConstraint = {\n        toolName: 'uv',\n        constraint:\n          config.constraints?.uv ?? project.tool?.uv?.['required-version'],\n      };\n\n      const extraEnv = {\n        ...(await getUvExtraIndexUrl(project, updateArtifact.updatedDeps)),\n        ...(await getUvIndexCredentials(project)),\n      };\n      const execOptions: ExecOptions = {\n        cwdFile: packageFileName,\n        extraEnv,\n        docker: {},\n        toolConstraints: [pythonConstraint, uvConstraint],\n      };\n\n      // on lockFileMaintenance do not specify any packages and update the complete lock file\n      // else only update specific packages\n      let cmd: string;\n      if (isLockFileMaintenance) {\n        cmd = `${uvUpdateCMD} --upgrade`;\n      } else {\n        cmd = generateCMD(updatedDeps);\n      }\n      await gitExec(cmd, execOptions);\n\n      // check for changes\n      const fileChanges: UpdateArtifactsResult[] = [];\n      const newLockContent = await readLocalFile(lockFileName, 'utf8');\n      const isLockFileChanged = existingLockFileContent !== newLockContent;\n      if (isLockFileChanged) {\n        fileChanges.push({\n          file: {\n            type: 'addition',\n            path: lockFileName,\n            contents: newLockContent,\n          },\n        });\n      } else {\n        logger.debug('uv.lock is unchanged');\n      }\n\n      return fileChanges.length ? fileChanges : null;\n    } catch (err) {\n      if (err.message === TEMPORARY_ERROR) {\n        throw err;\n      }\n      logger.debug({ err }, 'Failed to update uv lock file');\n      return [\n        {\n          artifactError: {\n            fileName: lockFileName,\n            stderr: err.message,\n          },\n        },\n      ];\n    }\n  }\n}\n\nfunction generateCMD(updatedDeps: Upgrade[]): string {\n  const deps: string[] = [];\n\n  for (const dep of updatedDeps) {\n    switch (dep.depType) {\n      case depTypes.optionalDependencies: {\n        deps.push(dep.depName!);\n        break;\n      }\n      case depTypes.uvDevDependencies:\n      case depTypes.uvSources: {\n        deps.push(dep.depName!);\n        break;\n      }\n      case depTypes.buildSystemRequires:\n        // build requirements are not locked in the lock files, no need to update.\n        break;\n      default: {\n        deps.push(dep.packageName!);\n      }\n    }\n  }\n\n  return `${uvUpdateCMD} ${deps.map((dep) => `--upgrade-package ${quote(dep)}`).join(' ')}`;\n}\n\nfunction getMatchingHostRule(url: string | undefined): HostRule {\n  return find({ hostType: PypiDatasource.id, url });\n}\n\nasync function getUsernamePassword(\n  url: URL,\n): Promise<{ username?: string; password?: string }> {\n  const rule = getMatchingHostRule(url.toString());\n  if (rule.username || rule.password) {\n    return rule;\n  }\n\n  if (url.hostname.endsWith('.pkg.dev')) {\n    const hostRule = await getGoogleAuthHostRule();\n    if (hostRule) {\n      return hostRule;\n    }\n    logger.once.debug({ url }, 'Could not get Google access token');\n  }\n\n  return {};\n}\n\nasync function getUvExtraIndexUrl(\n  project: PyProject,\n  deps: Upgrade[],\n): Promise<NodeJS.ProcessEnv> {\n  const pyPiRegistryUrls = deps\n    .filter((dep) => dep.datasource === PypiDatasource.id)\n    .filter((dep) => {\n      // Remove dependencies that are pinned to a specific index\n      const sources = project.tool?.uv?.sources;\n      const packageName = dep.packageName!;\n      return !sources || !(packageName in sources);\n    })\n    .flatMap((dep) => dep.registryUrls)\n    .filter(isString)\n    .filter((registryUrl) => {\n      // Check if the registry URL is not the default one and not already configured\n      const configuredIndexUrls =\n        project.tool?.uv?.index?.map(({ url }) => url) ?? [];\n      return (\n        registryUrl !== PypiDatasource.defaultURL &&\n        !configuredIndexUrls.includes(registryUrl)\n      );\n    });\n\n  const registryUrls = new Set(pyPiRegistryUrls);\n  const extraIndexUrls: string[] = [];\n\n  for (const registryUrl of registryUrls) {\n    const parsedUrl = parseUrl(registryUrl);\n    if (!parsedUrl) {\n      continue;\n    }\n\n    const { username, password } = await getUsernamePassword(parsedUrl);\n    if (username || password) {\n      if (username) {\n        parsedUrl.username = username;\n      }\n      if (password) {\n        parsedUrl.password = password;\n      }\n    }\n\n    extraIndexUrls.push(parsedUrl.toString());\n  }\n\n  return {\n    UV_EXTRA_INDEX_URL: extraIndexUrls.join(' '),\n  };\n}\n\nasync function getUvIndexCredentials(\n  project: PyProject,\n): Promise<NodeJS.ProcessEnv> {\n  const uv_indexes = project.tool?.uv?.index;\n\n  if (!uv_indexes) {\n    return {};\n  }\n\n  const entries = [];\n\n  for (const { name, url } of uv_indexes) {\n    const parsedUrl = parseUrl(url);\n    /* v8 ignore next 3 -- needs test */\n    if (!parsedUrl) {\n      continue;\n    }\n\n    // If no name is provided for the index, authentication information must be passed through alternative methods\n    if (!name) {\n      continue;\n    }\n\n    const { username, password } = await getUsernamePassword(parsedUrl);\n\n    const NAME = name.toUpperCase().replace(/[^A-Z0-9]/g, '_');\n\n    if (username) {\n      entries.push([`UV_INDEX_${NAME}_USERNAME`, username]);\n    }\n\n    if (password) {\n      entries.push([`UV_INDEX_${NAME}_PASSWORD`, password]);\n    }\n  }\n\n  return Object.fromEntries(entries);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA+BA,MAAM,cAAc;AACpB,MAAM,UAAU,mBAAmB,CAAC,QAAQ,CAAC;AAE7C,IAAa,cAAb,cAAiC,uBAAuB;CACtD,eAAwB;CAExB,QAAQ,SAAoB,MAAgD;EAC1E,MAAM,KAAK,QAAQ,MAAM;EACzB,IAAI,CAAC,IACH,OAAO;EAGT,MAAM,qBAAqB,GAAG,OAAO,MAClC,UAAU,MAAM,WAAW,MAAM,QACpC;EACA,MAAM,eAAe,GAAG,OAAO,MAC5B,UAAU,MAAM,WAAW,CAAC,MAAM,QACrC;EACA,MAAM,oBAAoB,GAAG,OACzB,QAAQ,UAAU,CAAC,MAAM,YAAY,MAAM,SAAS,cAAc,IAAI,CAAC,EACvE,KAAK,EAAE,UAAU,GAAG;EAExB,MAAM,kBAAkB,GAAG;EAC3B,IAAI,iBACF,KAAK,KAAK,GAAG,eAAe;EAK9B,IAAI,GAAG,WAAW,gBAAgB,mBAChC,KAAK,MAAM,OAAO,MAAM;;GAEtB,IAAI,CAAC,IAAI,aACP;GAGF,IAAI,IAAI,YAAY,mBAClB;GAKF,MAAM,YAAY,GAAG,UAAU,IAAI;GACnC,IAAI,WAAW;IAEb,IAAI,UAAU,SAAS;IACvB,IAAI,WAAW,WAAW;KACxB,MAAM,QAAQ,GAAG,OAAO,MACrB,EAAE,WAAW,SAAS,UAAU,KACnC;KACA,IAAI,OACF,IAAI,eAAe,CAAC,MAAM,GAAG;IAEjC,OAAO,IAAI,SAAS,WAClB,eACE,KACA,UAAU,KACV,UAAU,KACV,UAAU,KACV,UAAU,MACZ;SACK,IAAI,SAAS,WAClB,IAAI,aAAa;SACZ,IAAI,UAAU,WACnB,IAAI,aAAa;SACZ,IAAI,eAAe,WACxB,IAAI,aAAa;;;IAGjB,IAAI,aAAa;GAErB,OAAO;IAGL,IAAI,oBAEF,IAAI,eAAe,CAAC;SACf,IAAI,cAET,IAAI,eAAe,CAAC,aAAa,GAAG;IAGtC,IAAI,mBAAmB,QAGrB,IAAI,eAAe,kBAAkB,OACnC,IAAI,gBAAgB,eAAe,UACrC;GAEJ;EACF;EAGF,OAAO;CACT;CAEA,MAAM,sBACJ,SACA,MACA,aAC8B;EAC9B,MAAM,eAAe,MAAM,yBACzB,aACA,KAAK,YACP;EACA,IAAI,iBAAiB,MACnB,OAAO,MAAM,EAAE,YAAY,GAAG,uBAAuB;OAChD;GACL,MAAM,kBAAkB,MAAM,cAAc,cAAc,MAAM;GAChE,IAAI,iBAAiB;IACnB,MAAM,EAAE,KAAK,iBAAiB,QAAQ,OAAO,MAC3C,iBACA,UACF,CAAC,CAAC,OAAO;IAET,IAAI,KACF,OAAO,MAAM;KAAE;KAAa;IAAI,GAAG,4BAA4B;SAE/D,KAAK,MAAM,OAAO,MAAM;KACtB,MAAM,cAAc,IAAI;KACxB,IAAI,eAAe,eAAe,iBAChC,IAAI,gBAAgB,gBAAgB;IAExC;GAEJ;EACF;EAEA,OAAO,QAAQ,QAAQ,IAAI;CAC7B;CAEA,MAAM,gBACJ,gBACA,SACyC;EACzC,MAAM,EAAE,QAAQ,aAAa,oBAAoB;EAEjD,MAAM,EAAE,0BAA0B;EAGlC,MAAM,eAAe,MAAM,yBACzB,iBACA,SACF;EACA,IAAI,iBAAiB,MAAM;GACzB,OAAO,MAAM,EAAE,gBAAgB,GAAG,uBAAuB;GACzD,OAAO;EACT;EACA,IAAI;GACF,MAAM,0BAA0B,MAAM,cAAc,cAAc,MAAM;GACxE,IAAI,CAAC,yBAAyB;IAC5B,OAAO,MAAM,kBAAkB;IAC/B,OAAO;GACT;GAEA,MAAM,mBAAmC;IACvC,UAAU;IACV,YACE,OAAO,aAAa,UAAU,QAAQ,UAAU;GACpD;GACA,MAAM,eAA+B;IACnC,UAAU;IACV,YACE,OAAO,aAAa,MAAM,QAAQ,MAAM,KAAK;GACjD;GAMA,MAAM,cAA2B;IAC/B,SAAS;IACT,UAAA;KALA,GAAI,MAAM,mBAAmB,SAAS,eAAe,WAAW;KAChE,GAAI,MAAM,sBAAsB,OAAO;IAIhC;IACP,QAAQ,CAAC;IACT,iBAAiB,CAAC,kBAAkB,YAAY;GAClD;GAIA,IAAI;GACJ,IAAI,uBACF,MAAM,GAAG,YAAY;QAErB,MAAM,YAAY,WAAW;GAE/B,MAAM,QAAQ,KAAK,WAAW;GAG9B,MAAM,cAAuC,CAAC;GAC9C,MAAM,iBAAiB,MAAM,cAAc,cAAc,MAAM;GAE/D,IAD0B,4BAA4B,gBAEpD,YAAY,KAAK,EACf,MAAM;IACJ,MAAM;IACN,MAAM;IACN,UAAU;GACZ,EACF,CAAC;QAED,OAAO,MAAM,sBAAsB;GAGrC,OAAO,YAAY,SAAS,cAAc;EAC5C,SAAS,KAAK;GACZ,IAAI,IAAI,YAAA,mBACN,MAAM;GAER,OAAO,MAAM,EAAE,IAAI,GAAG,+BAA+B;GACrD,OAAO,CACL,EACE,eAAe;IACb,UAAU;IACV,QAAQ,IAAI;GACd,EACF,CACF;EACF;CACF;AACF;AAEA,SAAS,YAAY,aAAgC;CACnD,MAAM,OAAiB,CAAC;CAExB,KAAK,MAAM,OAAO,aAChB,QAAQ,IAAI,SAAZ;EACE,KAAK,SAAS;GACZ,KAAK,KAAK,IAAI,OAAQ;GACtB;EAEF,KAAK,SAAS;EACd,KAAK,SAAS;GACZ,KAAK,KAAK,IAAI,OAAQ;GACtB;EAEF,KAAK,SAAS,qBAEZ;EACF,SACE,KAAK,KAAK,IAAI,WAAY;CAE9B;CAGF,OAAO,GAAG,YAAY,GAAG,KAAK,KAAK,QAAQ,qBAAqB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;AACxF;AAEA,SAAS,oBAAoB,KAAmC;CAC9D,OAAO,KAAK;EAAE,UAAU,eAAe;EAAI;CAAI,CAAC;AAClD;AAEA,eAAe,oBACb,KACmD;CACnD,MAAM,OAAO,oBAAoB,IAAI,SAAS,CAAC;CAC/C,IAAI,KAAK,YAAY,KAAK,UACxB,OAAO;CAGT,IAAI,IAAI,SAAS,SAAS,UAAU,GAAG;EACrC,MAAM,WAAW,MAAM,sBAAsB;EAC7C,IAAI,UACF,OAAO;EAET,OAAO,KAAK,MAAM,EAAE,IAAI,GAAG,mCAAmC;CAChE;CAEA,OAAO,CAAC;AACV;AAEA,eAAe,mBACb,SACA,MAC4B;CAC5B,MAAM,mBAAmB,KACtB,QAAQ,QAAQ,IAAI,eAAe,eAAe,EAAE,CAAC,CACrD,QAAQ,QAAQ;EAEf,MAAM,UAAU,QAAQ,MAAM,IAAI;EAClC,MAAM,cAAc,IAAI;EACxB,OAAO,CAAC,WAAW,EAAE,eAAe;CACtC,CAAC,CAAC,CACD,SAAS,QAAQ,IAAI,YAAY,CAAC,CAClC,OAAO,QAAQ,CAAC,CAChB,QAAQ,gBAAgB;EAEvB,MAAM,sBACJ,QAAQ,MAAM,IAAI,OAAO,KAAK,EAAE,UAAU,GAAG,KAAK,CAAC;EACrD,OACE,gBAAgB,eAAe,cAC/B,CAAC,oBAAoB,SAAS,WAAW;CAE7C,CAAC;CAEH,MAAM,eAAe,IAAI,IAAI,gBAAgB;CAC7C,MAAM,iBAA2B,CAAC;CAElC,KAAK,MAAM,eAAe,cAAc;EACtC,MAAM,YAAY,SAAS,WAAW;EACtC,IAAI,CAAC,WACH;EAGF,MAAM,EAAE,UAAU,aAAa,MAAM,oBAAoB,SAAS;EAClE,IAAI,YAAY,UAAU;GACxB,IAAI,UACF,UAAU,WAAW;GAEvB,IAAI,UACF,UAAU,WAAW;EAEzB;EAEA,eAAe,KAAK,UAAU,SAAS,CAAC;CAC1C;CAEA,OAAO,EACL,oBAAoB,eAAe,KAAK,GAAG,EAC7C;AACF;AAEA,eAAe,sBACb,SAC4B;CAC5B,MAAM,aAAa,QAAQ,MAAM,IAAI;CAErC,IAAI,CAAC,YACH,OAAO,CAAC;CAGV,MAAM,UAAU,CAAC;CAEjB,KAAK,MAAM,EAAE,MAAM,SAAS,YAAY;EACtC,MAAM,YAAY,SAAS,GAAG;;EAE9B,IAAI,CAAC,WACH;EAIF,IAAI,CAAC,MACH;EAGF,MAAM,EAAE,UAAU,aAAa,MAAM,oBAAoB,SAAS;EAElE,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,QAAQ,cAAc,GAAG;EAEzD,IAAI,UACF,QAAQ,KAAK,CAAC,YAAY,KAAK,YAAY,QAAQ,CAAC;EAGtD,IAAI,UACF,QAAQ,KAAK,CAAC,YAAY,KAAK,YAAY,QAAQ,CAAC;CAExD;CAEA,OAAO,OAAO,YAAY,OAAO;AACnC"}
+{"version":3,"file":"uv.js","names":[],"sources":["../../../../../lib/modules/manager/pep621/processors/uv.ts"],"sourcesContent":["import { isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport type { HostRule } from '../../../../types/index.ts';\nimport type {\n  ExecOptions,\n  ToolConstraint,\n} from '../../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n} from '../../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../../util/git/exec.ts';\nimport { find } from '../../../../util/host-rules.ts';\nimport { regEx } from '../../../../util/regex.ts';\nimport { Result } from '../../../../util/result.ts';\nimport { parseUrl } from '../../../../util/url.ts';\nimport { PypiDatasource } from '../../../datasource/pypi/index.ts';\nimport { getGoogleAuthHostRule } from '../../../datasource/util.ts';\nimport type {\n  PackageDependency,\n  UpdateArtifact,\n  UpdateArtifactsResult,\n  Upgrade,\n} from '../../types.ts';\nimport { applyGitSource } from '../../util.ts';\nimport { type PyProject, UvLockfile } from '../schema.ts';\nimport { depTypes } from '../utils.ts';\nimport { BasePyProjectProcessor } from './abstract.ts';\n\nconst uvUpdateCMD = 'uv lock';\nconst gitExec = withGitEnvironment(['pep621']);\n\nexport class UvProcessor extends BasePyProjectProcessor {\n  override lockfileName = 'uv.lock';\n\n  process(project: PyProject, deps: PackageDependency[]): PackageDependency[] {\n    const uv = project.tool?.uv;\n    if (!uv) {\n      return deps;\n    }\n\n    const hasExplicitDefault = uv.index?.some(\n      (index) => index.default && index.explicit,\n    );\n    const defaultIndex = uv.index?.find(\n      (index) => index.default && !index.explicit,\n    );\n    const implicitIndexUrls = uv.index\n      ?.filter((index) => !index.explicit && index.name !== defaultIndex?.name)\n      ?.map(({ url }) => url);\n\n    const devDependencies = uv['dev-dependencies'];\n    if (devDependencies) {\n      deps.push(...devDependencies);\n    }\n\n    // https://docs.astral.sh/uv/concepts/dependencies/#dependency-sources\n    // Skip sources that do not make sense to handle (e.g. path).\n    if (uv.sources || defaultIndex || implicitIndexUrls) {\n      for (const dep of deps) {\n        /* v8 ignore next 3 -- needs test */\n        if (!dep.packageName) {\n          continue;\n        }\n\n        if (dep.depType === 'requires-python') {\n          continue;\n        }\n\n        // Using `packageName` as it applies PEP 508 normalization, which is\n        // also applied by uv when matching a source to a dependency.\n        const depSource = uv.sources?.[dep.packageName];\n        if (depSource) {\n          // Dependency is pinned to a specific source.\n          dep.depType = depTypes.uvSources;\n          if ('index' in depSource) {\n            const index = uv.index?.find(\n              ({ name }) => name === depSource.index,\n            );\n            if (index) {\n              dep.registryUrls = [index.url];\n            }\n          } else if ('git' in depSource) {\n            applyGitSource(\n              dep,\n              depSource.git,\n              depSource.rev,\n              depSource.tag,\n              depSource.branch,\n            );\n          } else if ('url' in depSource) {\n            dep.skipReason = 'unsupported-url';\n          } else if ('path' in depSource) {\n            dep.skipReason = 'path-dependency';\n          } else if ('workspace' in depSource) {\n            dep.skipReason = 'inherited-dependency';\n          } else {\n            /* v8 ignore next -- unreachable through schema */\n            dep.skipReason = 'unknown-registry';\n          }\n        } else {\n          // Dependency is not pinned to a specific source, so we need to\n          // determine the source based on the index configuration.\n          if (hasExplicitDefault) {\n            // don't fall back to pypi if there is an explicit default index\n            dep.registryUrls = [];\n          } else if (defaultIndex) {\n            // There is a default index configured, so use it.\n            dep.registryUrls = [defaultIndex.url];\n          }\n\n          if (implicitIndexUrls?.length) {\n            // If there are implicit indexes, check them first and fall back\n            // to the default.\n            dep.registryUrls = implicitIndexUrls.concat(\n              dep.registryUrls ?? PypiDatasource.defaultURL,\n            );\n          }\n        }\n      }\n    }\n\n    return deps;\n  }\n\n  async extractLockedVersions(\n    project: PyProject,\n    deps: PackageDependency[],\n    packageFile: string,\n  ): Promise<PackageDependency[]> {\n    const lockFileName = await findLocalSiblingOrParent(\n      packageFile,\n      this.lockfileName,\n    );\n    if (lockFileName === null) {\n      logger.debug({ packageFile }, `No uv lock file found`);\n    } else {\n      const lockFileContent = await readLocalFile(lockFileName, 'utf8');\n      if (lockFileContent) {\n        const { val: lockFileMapping, err } = Result.parse(\n          lockFileContent,\n          UvLockfile,\n        ).unwrap();\n\n        if (err) {\n          logger.debug({ packageFile, err }, `Error parsing uv lock file`);\n        } else {\n          for (const dep of deps) {\n            const packageName = dep.packageName;\n            if (packageName && packageName in lockFileMapping) {\n              dep.lockedVersion = lockFileMapping[packageName];\n            }\n          }\n        }\n      }\n    }\n\n    return Promise.resolve(deps);\n  }\n\n  async updateArtifacts(\n    updateArtifact: UpdateArtifact,\n    project: PyProject,\n  ): Promise<UpdateArtifactsResult[] | null> {\n    const { config, updatedDeps, packageFileName } = updateArtifact;\n\n    const { isLockFileMaintenance } = config;\n\n    // abort if no lockfile is defined\n    const lockFileName = await findLocalSiblingOrParent(\n      packageFileName,\n      'uv.lock',\n    );\n    if (lockFileName === null) {\n      logger.debug({ packageFileName }, `No uv lock file found`);\n      return null;\n    }\n    try {\n      const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n      if (!existingLockFileContent) {\n        logger.debug('No uv.lock found');\n        return null;\n      }\n\n      const pythonConstraint: ToolConstraint = {\n        toolName: 'python',\n        constraint:\n          config.constraints?.python ?? project.project?.['requires-python'],\n      };\n      const uvConstraint: ToolConstraint = {\n        toolName: 'uv',\n        constraint:\n          config.constraints?.uv ?? project.tool?.uv?.['required-version'],\n      };\n\n      const extraEnv = {\n        ...(await getUvExtraIndexUrl(project, updateArtifact.updatedDeps)),\n        ...(await getUvIndexCredentials(project)),\n      };\n      const execOptions: ExecOptions = {\n        cwdFile: packageFileName,\n        extraEnv,\n        docker: {},\n        toolConstraints: [pythonConstraint, uvConstraint],\n      };\n\n      // on lockFileMaintenance do not specify any packages and update the complete lock file\n      // else only update specific packages\n      let cmd: string;\n      if (isLockFileMaintenance) {\n        cmd = `${uvUpdateCMD} --upgrade`;\n      } else {\n        cmd = generateCMD(updatedDeps);\n      }\n      await gitExec(cmd, execOptions);\n\n      // check for changes\n      const fileChanges: UpdateArtifactsResult[] = [];\n      const newLockContent = await readLocalFile(lockFileName, 'utf8');\n      const isLockFileChanged = existingLockFileContent !== newLockContent;\n      if (isLockFileChanged) {\n        fileChanges.push({\n          file: {\n            type: 'addition',\n            path: lockFileName,\n            contents: newLockContent,\n          },\n        });\n      } else {\n        logger.debug('uv.lock is unchanged');\n      }\n\n      return fileChanges.length ? fileChanges : null;\n    } catch (err) {\n      if (err.message === TEMPORARY_ERROR) {\n        throw err;\n      }\n      logger.debug({ err }, 'Failed to update uv lock file');\n      return [\n        {\n          artifactError: {\n            fileName: lockFileName,\n            stderr: err.message,\n          },\n        },\n      ];\n    }\n  }\n}\n\nfunction generateCMD(updatedDeps: Upgrade[]): string {\n  const deps: string[] = [];\n\n  for (const dep of updatedDeps) {\n    switch (dep.depType) {\n      case depTypes.optionalDependencies: {\n        deps.push(dep.depName!);\n        break;\n      }\n      case depTypes.uvDevDependencies:\n      case depTypes.uvSources: {\n        deps.push(dep.depName!);\n        break;\n      }\n      case depTypes.buildSystemRequires:\n        // build requirements are not locked in the lock files, no need to update.\n        break;\n      default: {\n        deps.push(dep.packageName!);\n      }\n    }\n  }\n\n  return `${uvUpdateCMD} ${deps.map((dep) => `--upgrade-package ${quote(dep)}`).join(' ')}`;\n}\n\nfunction getMatchingHostRule(url: string | undefined): HostRule {\n  return find({ hostType: PypiDatasource.id, url });\n}\n\nasync function getUsernamePassword(\n  url: URL,\n): Promise<{ username?: string; password?: string }> {\n  const rule = getMatchingHostRule(url.toString());\n  if (rule.username || rule.password) {\n    return rule;\n  }\n\n  if (url.hostname.endsWith('.pkg.dev')) {\n    const hostRule = await getGoogleAuthHostRule();\n    if (hostRule) {\n      return hostRule;\n    }\n    logger.once.debug({ url }, 'Could not get Google access token');\n  }\n\n  return {};\n}\n\nasync function getUvExtraIndexUrl(\n  project: PyProject,\n  deps: Upgrade[],\n): Promise<NodeJS.ProcessEnv> {\n  const pyPiRegistryUrls = deps\n    .filter((dep) => dep.datasource === PypiDatasource.id)\n    .filter((dep) => {\n      // Remove dependencies that are pinned to a specific index\n      const sources = project.tool?.uv?.sources;\n      const packageName = dep.packageName!;\n      return !sources || !(packageName in sources);\n    })\n    .flatMap((dep) => dep.registryUrls)\n    .filter(isString)\n    .filter((registryUrl) => {\n      // Check if the registry URL is not the default one and not already configured\n      const configuredIndexUrls =\n        project.tool?.uv?.index?.map(({ url }) => url) ?? [];\n      return (\n        registryUrl !== PypiDatasource.defaultURL &&\n        !configuredIndexUrls.includes(registryUrl)\n      );\n    });\n\n  const registryUrls = new Set(pyPiRegistryUrls);\n  const extraIndexUrls: string[] = [];\n\n  for (const registryUrl of registryUrls) {\n    const parsedUrl = parseUrl(registryUrl);\n    if (!parsedUrl) {\n      continue;\n    }\n\n    const { username, password } = await getUsernamePassword(parsedUrl);\n    if (username || password) {\n      if (username) {\n        parsedUrl.username = username;\n      }\n      if (password) {\n        parsedUrl.password = password;\n      }\n    }\n\n    extraIndexUrls.push(parsedUrl.toString());\n  }\n\n  return {\n    UV_EXTRA_INDEX_URL: extraIndexUrls.join(' '),\n  };\n}\n\nasync function getUvIndexCredentials(\n  project: PyProject,\n): Promise<NodeJS.ProcessEnv> {\n  const uv_indexes = project.tool?.uv?.index;\n\n  if (!uv_indexes) {\n    return {};\n  }\n\n  const entries = [];\n\n  for (const { name, url } of uv_indexes) {\n    const parsedUrl = parseUrl(url);\n    /* v8 ignore next 3 -- needs test */\n    if (!parsedUrl) {\n      continue;\n    }\n\n    // If no name is provided for the index, authentication information must be passed through alternative methods\n    if (!name) {\n      continue;\n    }\n\n    const { username, password } = await getUsernamePassword(parsedUrl);\n\n    const NAME = name.toUpperCase().replace(regEx(/[^A-Z0-9]/g), '_');\n\n    if (username) {\n      entries.push([`UV_INDEX_${NAME}_USERNAME`, username]);\n    }\n\n    if (password) {\n      entries.push([`UV_INDEX_${NAME}_PASSWORD`, password]);\n    }\n  }\n\n  return Object.fromEntries(entries);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA+BA,MAAM,cAAc;AACpB,MAAM,UAAU,mBAAmB,CAAC,QAAQ,CAAC;AAE7C,IAAa,cAAb,cAAiC,uBAAuB;CACtD,eAAwB;CAExB,QAAQ,SAAoB,MAAgD;EAC1E,MAAM,KAAK,QAAQ,MAAM;EACzB,IAAI,CAAC,IACH,OAAO;EAGT,MAAM,qBAAqB,GAAG,OAAO,MAClC,UAAU,MAAM,WAAW,MAAM,QACpC;EACA,MAAM,eAAe,GAAG,OAAO,MAC5B,UAAU,MAAM,WAAW,CAAC,MAAM,QACrC;EACA,MAAM,oBAAoB,GAAG,OACzB,QAAQ,UAAU,CAAC,MAAM,YAAY,MAAM,SAAS,cAAc,IAAI,CAAC,EACvE,KAAK,EAAE,UAAU,GAAG;EAExB,MAAM,kBAAkB,GAAG;EAC3B,IAAI,iBACF,KAAK,KAAK,GAAG,eAAe;EAK9B,IAAI,GAAG,WAAW,gBAAgB,mBAChC,KAAK,MAAM,OAAO,MAAM;;GAEtB,IAAI,CAAC,IAAI,aACP;GAGF,IAAI,IAAI,YAAY,mBAClB;GAKF,MAAM,YAAY,GAAG,UAAU,IAAI;GACnC,IAAI,WAAW;IAEb,IAAI,UAAU,SAAS;IACvB,IAAI,WAAW,WAAW;KACxB,MAAM,QAAQ,GAAG,OAAO,MACrB,EAAE,WAAW,SAAS,UAAU,KACnC;KACA,IAAI,OACF,IAAI,eAAe,CAAC,MAAM,GAAG;IAEjC,OAAO,IAAI,SAAS,WAClB,eACE,KACA,UAAU,KACV,UAAU,KACV,UAAU,KACV,UAAU,MACZ;SACK,IAAI,SAAS,WAClB,IAAI,aAAa;SACZ,IAAI,UAAU,WACnB,IAAI,aAAa;SACZ,IAAI,eAAe,WACxB,IAAI,aAAa;;;IAGjB,IAAI,aAAa;GAErB,OAAO;IAGL,IAAI,oBAEF,IAAI,eAAe,CAAC;SACf,IAAI,cAET,IAAI,eAAe,CAAC,aAAa,GAAG;IAGtC,IAAI,mBAAmB,QAGrB,IAAI,eAAe,kBAAkB,OACnC,IAAI,gBAAgB,eAAe,UACrC;GAEJ;EACF;EAGF,OAAO;CACT;CAEA,MAAM,sBACJ,SACA,MACA,aAC8B;EAC9B,MAAM,eAAe,MAAM,yBACzB,aACA,KAAK,YACP;EACA,IAAI,iBAAiB,MACnB,OAAO,MAAM,EAAE,YAAY,GAAG,uBAAuB;OAChD;GACL,MAAM,kBAAkB,MAAM,cAAc,cAAc,MAAM;GAChE,IAAI,iBAAiB;IACnB,MAAM,EAAE,KAAK,iBAAiB,QAAQ,OAAO,MAC3C,iBACA,UACF,CAAC,CAAC,OAAO;IAET,IAAI,KACF,OAAO,MAAM;KAAE;KAAa;IAAI,GAAG,4BAA4B;SAE/D,KAAK,MAAM,OAAO,MAAM;KACtB,MAAM,cAAc,IAAI;KACxB,IAAI,eAAe,eAAe,iBAChC,IAAI,gBAAgB,gBAAgB;IAExC;GAEJ;EACF;EAEA,OAAO,QAAQ,QAAQ,IAAI;CAC7B;CAEA,MAAM,gBACJ,gBACA,SACyC;EACzC,MAAM,EAAE,QAAQ,aAAa,oBAAoB;EAEjD,MAAM,EAAE,0BAA0B;EAGlC,MAAM,eAAe,MAAM,yBACzB,iBACA,SACF;EACA,IAAI,iBAAiB,MAAM;GACzB,OAAO,MAAM,EAAE,gBAAgB,GAAG,uBAAuB;GACzD,OAAO;EACT;EACA,IAAI;GACF,MAAM,0BAA0B,MAAM,cAAc,cAAc,MAAM;GACxE,IAAI,CAAC,yBAAyB;IAC5B,OAAO,MAAM,kBAAkB;IAC/B,OAAO;GACT;GAEA,MAAM,mBAAmC;IACvC,UAAU;IACV,YACE,OAAO,aAAa,UAAU,QAAQ,UAAU;GACpD;GACA,MAAM,eAA+B;IACnC,UAAU;IACV,YACE,OAAO,aAAa,MAAM,QAAQ,MAAM,KAAK;GACjD;GAMA,MAAM,cAA2B;IAC/B,SAAS;IACT,UAAA;KALA,GAAI,MAAM,mBAAmB,SAAS,eAAe,WAAW;KAChE,GAAI,MAAM,sBAAsB,OAAO;IAIhC;IACP,QAAQ,CAAC;IACT,iBAAiB,CAAC,kBAAkB,YAAY;GAClD;GAIA,IAAI;GACJ,IAAI,uBACF,MAAM,GAAG,YAAY;QAErB,MAAM,YAAY,WAAW;GAE/B,MAAM,QAAQ,KAAK,WAAW;GAG9B,MAAM,cAAuC,CAAC;GAC9C,MAAM,iBAAiB,MAAM,cAAc,cAAc,MAAM;GAE/D,IAD0B,4BAA4B,gBAEpD,YAAY,KAAK,EACf,MAAM;IACJ,MAAM;IACN,MAAM;IACN,UAAU;GACZ,EACF,CAAC;QAED,OAAO,MAAM,sBAAsB;GAGrC,OAAO,YAAY,SAAS,cAAc;EAC5C,SAAS,KAAK;GACZ,IAAI,IAAI,YAAA,mBACN,MAAM;GAER,OAAO,MAAM,EAAE,IAAI,GAAG,+BAA+B;GACrD,OAAO,CACL,EACE,eAAe;IACb,UAAU;IACV,QAAQ,IAAI;GACd,EACF,CACF;EACF;CACF;AACF;AAEA,SAAS,YAAY,aAAgC;CACnD,MAAM,OAAiB,CAAC;CAExB,KAAK,MAAM,OAAO,aAChB,QAAQ,IAAI,SAAZ;EACE,KAAK,SAAS;GACZ,KAAK,KAAK,IAAI,OAAQ;GACtB;EAEF,KAAK,SAAS;EACd,KAAK,SAAS;GACZ,KAAK,KAAK,IAAI,OAAQ;GACtB;EAEF,KAAK,SAAS,qBAEZ;EACF,SACE,KAAK,KAAK,IAAI,WAAY;CAE9B;CAGF,OAAO,GAAG,YAAY,GAAG,KAAK,KAAK,QAAQ,qBAAqB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;AACxF;AAEA,SAAS,oBAAoB,KAAmC;CAC9D,OAAO,KAAK;EAAE,UAAU,eAAe;EAAI;CAAI,CAAC;AAClD;AAEA,eAAe,oBACb,KACmD;CACnD,MAAM,OAAO,oBAAoB,IAAI,SAAS,CAAC;CAC/C,IAAI,KAAK,YAAY,KAAK,UACxB,OAAO;CAGT,IAAI,IAAI,SAAS,SAAS,UAAU,GAAG;EACrC,MAAM,WAAW,MAAM,sBAAsB;EAC7C,IAAI,UACF,OAAO;EAET,OAAO,KAAK,MAAM,EAAE,IAAI,GAAG,mCAAmC;CAChE;CAEA,OAAO,CAAC;AACV;AAEA,eAAe,mBACb,SACA,MAC4B;CAC5B,MAAM,mBAAmB,KACtB,QAAQ,QAAQ,IAAI,eAAe,eAAe,EAAE,CAAC,CACrD,QAAQ,QAAQ;EAEf,MAAM,UAAU,QAAQ,MAAM,IAAI;EAClC,MAAM,cAAc,IAAI;EACxB,OAAO,CAAC,WAAW,EAAE,eAAe;CACtC,CAAC,CAAC,CACD,SAAS,QAAQ,IAAI,YAAY,CAAC,CAClC,OAAO,QAAQ,CAAC,CAChB,QAAQ,gBAAgB;EAEvB,MAAM,sBACJ,QAAQ,MAAM,IAAI,OAAO,KAAK,EAAE,UAAU,GAAG,KAAK,CAAC;EACrD,OACE,gBAAgB,eAAe,cAC/B,CAAC,oBAAoB,SAAS,WAAW;CAE7C,CAAC;CAEH,MAAM,eAAe,IAAI,IAAI,gBAAgB;CAC7C,MAAM,iBAA2B,CAAC;CAElC,KAAK,MAAM,eAAe,cAAc;EACtC,MAAM,YAAY,SAAS,WAAW;EACtC,IAAI,CAAC,WACH;EAGF,MAAM,EAAE,UAAU,aAAa,MAAM,oBAAoB,SAAS;EAClE,IAAI,YAAY,UAAU;GACxB,IAAI,UACF,UAAU,WAAW;GAEvB,IAAI,UACF,UAAU,WAAW;EAEzB;EAEA,eAAe,KAAK,UAAU,SAAS,CAAC;CAC1C;CAEA,OAAO,EACL,oBAAoB,eAAe,KAAK,GAAG,EAC7C;AACF;AAEA,eAAe,sBACb,SAC4B;CAC5B,MAAM,aAAa,QAAQ,MAAM,IAAI;CAErC,IAAI,CAAC,YACH,OAAO,CAAC;CAGV,MAAM,UAAU,CAAC;CAEjB,KAAK,MAAM,EAAE,MAAM,SAAS,YAAY;EACtC,MAAM,YAAY,SAAS,GAAG;;EAE9B,IAAI,CAAC,WACH;EAIF,IAAI,CAAC,MACH;EAGF,MAAM,EAAE,UAAU,aAAa,MAAM,oBAAoB,SAAS;EAElE,MAAM,OAAO,KAAK,YAAY,CAAC,CAAC,QAAQ,MAAM,YAAY,GAAG,GAAG;EAEhE,IAAI,UACF,QAAQ,KAAK,CAAC,YAAY,KAAK,YAAY,QAAQ,CAAC;EAGtD,IAAI,UACF,QAAQ,KAAK,CAAC,YAAY,KAAK,YAAY,QAAQ,CAAC;CAExD;CAEA,OAAO,OAAO,YAAY,OAAO;AACnC"}

package/dist/modules/manager/pip_requirements/extract.js

@@ -55,7 +55,7 @@ function extractPackageFile(content) {
 			currentValue,
 			datasource: PypiDatasource.id
 		};
-		if (currentValue?.startsWith("==")) dep.currentVersion = currentValue.replace(/^==\s*/, "");
+		if (currentValue?.startsWith("==")) dep.currentVersion = currentValue.replace(regEx(/^==\s*/), "");
 		return dep;
 	}).filter(isTruthy);
 	const res = extractPackageFileFlags(content);

package/dist/modules/manager/pip_requirements/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":["rangePattern"],"sources":["../../../../lib/modules/manager/pip_requirements/extract.ts"],"sourcesContent":["// based on https://www.python.org/dev/peps/pep-0508/#names\nimport { RANGE_PATTERN } from '@renovatebot/pep440';\nimport { isTruthy } from '@sindresorhus/is';\nimport { logger } from '../../../logger/index.ts';\nimport { isSkipComment } from '../../../util/ignore.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport { GitTagsDatasource } from '../../datasource/git-tags/index.ts';\nimport { normalizePythonDepName } from '../../datasource/pypi/common.ts';\nimport { PypiDatasource } from '../../datasource/pypi/index.ts';\nimport type { PackageDependency, PackageFileContent } from '../types.ts';\nimport { extractPackageFileFlags } from './common.ts';\nimport type { PipRequirementsManagerData } from './types.ts';\n\nexport const packagePattern =\n  '[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9._-]*[a-zA-Z0-9]';\nexport const extrasPattern = '(?:\\\\s*\\\\[[^\\\\]]+\\\\])?';\nconst packageGitRegex = regEx(\n  /(?<source>(?:git\\+)(?<protocol>git|ssh|https):\\/\\/(?<gitUrl>(?:(?<user>[^@]+)@)?(?<hostname>[\\w.-]+)(?<delimiter>\\/)(?<scmPath>.*\\/(?<depName>[\\w/-]+))(\\.git)?(?:@(?<version>.*))))/,\n);\n\nconst rangePattern: string = RANGE_PATTERN;\nconst specifierPartPattern = `\\\\s*${rangePattern.replace(\n  regEx(/\\?<\\w+>/g),\n  '?:',\n)}`;\nconst specifierPattern = `${specifierPartPattern}(?:\\\\s*,${specifierPartPattern})*`;\nexport const dependencyPattern = `(${packagePattern})(${extrasPattern})(${specifierPattern})?`;\n\nexport function extractPackageFile(\n  content: string,\n): PackageFileContent<PipRequirementsManagerData> | null {\n  logger.trace('pip_requirements.extractPackageFile()');\n\n  const pkgRegex = regEx(`^(${packagePattern})$`);\n  const pkgValRegex = regEx(`^${dependencyPattern}$`);\n  const deps = content\n    .split(newlineRegex)\n    .map((rawline) => {\n      let dep: PackageDependency = {};\n      const [line, comment] = rawline.split('#').map((part) => part.trim());\n      if (isSkipComment(comment)) {\n        dep.skipReason = 'ignored';\n      }\n      const [lineNoEnvMarkers] = line.split(';').map((part) => part.trim());\n      const lineNoHashes = lineNoEnvMarkers.split(' \\\\')[0];\n      const packageMatches =\n        pkgValRegex.exec(lineNoHashes) ?? pkgRegex.exec(lineNoHashes);\n      const gitPackageMatches = packageGitRegex.exec(lineNoHashes);\n      if (!packageMatches && !gitPackageMatches) {\n        return null;\n      }\n      if (gitPackageMatches?.groups) {\n        const currentVersion = gitPackageMatches.groups.version;\n        const depName = gitPackageMatches.groups.depName;\n        let packageName: string;\n        if (gitPackageMatches.groups.protocol === 'https') {\n          packageName = 'https://'\n            .concat(gitPackageMatches.groups.gitUrl)\n            .replace(`@${currentVersion}`, '');\n        } else {\n          // we need to replace the / with a :\n          const scmPath = gitPackageMatches.groups.scmPath;\n          const delimiter = gitPackageMatches.groups.delimiter;\n          packageName = gitPackageMatches.groups.gitUrl\n            .replace(`${delimiter}${scmPath}`, `:${scmPath}`)\n            .replace(`@${currentVersion}`, '');\n        }\n        dep = {\n          ...dep,\n          depName,\n          currentValue: currentVersion,\n          currentVersion,\n          packageName,\n          datasource: GitTagsDatasource.id,\n        };\n        return dep;\n      }\n\n      // validated above\n      const [, depName, , currVal] = packageMatches!;\n      const currentValue = currVal?.trim();\n      dep = {\n        ...dep,\n        depName,\n        packageName: normalizePythonDepName(depName),\n        currentValue,\n        datasource: PypiDatasource.id,\n      };\n      if (currentValue?.startsWith('==')) {\n        dep.currentVersion = currentValue.replace(/^==\\s*/, '');\n      }\n      return dep;\n    })\n    .filter(isTruthy);\n\n  const res = extractPackageFileFlags(content);\n  res.deps = deps;\n\n  if (\n    !res.deps.length &&\n    !res.registryUrls?.length &&\n    !res.additionalRegistryUrls?.length &&\n    !res.managerData?.requirementsFiles?.length &&\n    !res.managerData?.constraintsFiles?.length\n  ) {\n    return null;\n  }\n  return res;\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,iBACX;AACF,MAAa,gBAAgB;AAC7B,MAAM,kBAAkB,MACtB,sLACF;AAGA,MAAM,uBAAuB,OAAOA,cAAa,QAC/C,MAAM,UAAU,GAChB,IACF;AAEA,MAAa,oBAAoB,IAAI,eAAe,IAAI,cAAc,IAAI,GAD9C,qBAAqB,UAAU,qBAAqB,IACW;AAE3F,SAAgB,mBACd,SACuD;CACvD,OAAO,MAAM,uCAAuC;CAEpD,MAAM,WAAW,MAAM,KAAK,eAAe,GAAG;CAC9C,MAAM,cAAc,MAAM,IAAI,kBAAkB,EAAE;CAClD,MAAM,OAAO,QACV,MAAM,YAAY,CAAC,CACnB,KAAK,YAAY;EAChB,IAAI,MAAyB,CAAC;EAC9B,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC;EACpE,IAAI,cAAc,OAAO,GACvB,IAAI,aAAa;EAEnB,MAAM,CAAC,oBAAoB,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC;EACpE,MAAM,eAAe,iBAAiB,MAAM,KAAK,CAAC,CAAC;EACnD,MAAM,iBACJ,YAAY,KAAK,YAAY,KAAK,SAAS,KAAK,YAAY;EAC9D,MAAM,oBAAoB,gBAAgB,KAAK,YAAY;EAC3D,IAAI,CAAC,kBAAkB,CAAC,mBACtB,OAAO;EAET,IAAI,mBAAmB,QAAQ;GAC7B,MAAM,iBAAiB,kBAAkB,OAAO;GAChD,MAAM,UAAU,kBAAkB,OAAO;GACzC,IAAI;GACJ,IAAI,kBAAkB,OAAO,aAAa,SACxC,cAAc,WACX,OAAO,kBAAkB,OAAO,MAAM,CAAC,CACvC,QAAQ,IAAI,kBAAkB,EAAE;QAC9B;IAEL,MAAM,UAAU,kBAAkB,OAAO;IACzC,MAAM,YAAY,kBAAkB,OAAO;IAC3C,cAAc,kBAAkB,OAAO,OACpC,QAAQ,GAAG,YAAY,WAAW,IAAI,SAAS,CAAC,CAChD,QAAQ,IAAI,kBAAkB,EAAE;GACrC;GACA,MAAM;IACJ,GAAG;IACH;IACA,cAAc;IACd;IACA;IACA,YAAY,kBAAkB;GAChC;GACA,OAAO;EACT;EAGA,MAAM,GAAG,WAAW,WAAW;EAC/B,MAAM,eAAe,SAAS,KAAK;EACnC,MAAM;GACJ,GAAG;GACH;GACA,aAAa,uBAAuB,OAAO;GAC3C;GACA,YAAY,eAAe;EAC7B;EACA,IAAI,cAAc,WAAW,IAAI,GAC/B,IAAI,iBAAiB,aAAa,QAAQ,UAAU,EAAE;EAExD,OAAO;CACT,CAAC,CAAC,CACD,OAAO,QAAQ;CAElB,MAAM,MAAM,wBAAwB,OAAO;CAC3C,IAAI,OAAO;CAEX,IACE,CAAC,IAAI,KAAK,UACV,CAAC,IAAI,cAAc,UACnB,CAAC,IAAI,wBAAwB,UAC7B,CAAC,IAAI,aAAa,mBAAmB,UACrC,CAAC,IAAI,aAAa,kBAAkB,QAEpC,OAAO;CAET,OAAO;AACT"}
+{"version":3,"file":"extract.js","names":["rangePattern"],"sources":["../../../../lib/modules/manager/pip_requirements/extract.ts"],"sourcesContent":["// based on https://www.python.org/dev/peps/pep-0508/#names\nimport { RANGE_PATTERN } from '@renovatebot/pep440';\nimport { isTruthy } from '@sindresorhus/is';\nimport { logger } from '../../../logger/index.ts';\nimport { isSkipComment } from '../../../util/ignore.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport { GitTagsDatasource } from '../../datasource/git-tags/index.ts';\nimport { normalizePythonDepName } from '../../datasource/pypi/common.ts';\nimport { PypiDatasource } from '../../datasource/pypi/index.ts';\nimport type { PackageDependency, PackageFileContent } from '../types.ts';\nimport { extractPackageFileFlags } from './common.ts';\nimport type { PipRequirementsManagerData } from './types.ts';\n\nexport const packagePattern =\n  '[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9._-]*[a-zA-Z0-9]';\nexport const extrasPattern = '(?:\\\\s*\\\\[[^\\\\]]+\\\\])?';\nconst packageGitRegex = regEx(\n  /(?<source>(?:git\\+)(?<protocol>git|ssh|https):\\/\\/(?<gitUrl>(?:(?<user>[^@]+)@)?(?<hostname>[\\w.-]+)(?<delimiter>\\/)(?<scmPath>.*\\/(?<depName>[\\w/-]+))(\\.git)?(?:@(?<version>.*))))/,\n);\n\nconst rangePattern: string = RANGE_PATTERN;\nconst specifierPartPattern = `\\\\s*${rangePattern.replace(\n  regEx(/\\?<\\w+>/g),\n  '?:',\n)}`;\nconst specifierPattern = `${specifierPartPattern}(?:\\\\s*,${specifierPartPattern})*`;\nexport const dependencyPattern = `(${packagePattern})(${extrasPattern})(${specifierPattern})?`;\n\nexport function extractPackageFile(\n  content: string,\n): PackageFileContent<PipRequirementsManagerData> | null {\n  logger.trace('pip_requirements.extractPackageFile()');\n\n  const pkgRegex = regEx(`^(${packagePattern})$`);\n  const pkgValRegex = regEx(`^${dependencyPattern}$`);\n  const deps = content\n    .split(newlineRegex)\n    .map((rawline) => {\n      let dep: PackageDependency = {};\n      const [line, comment] = rawline.split('#').map((part) => part.trim());\n      if (isSkipComment(comment)) {\n        dep.skipReason = 'ignored';\n      }\n      const [lineNoEnvMarkers] = line.split(';').map((part) => part.trim());\n      const lineNoHashes = lineNoEnvMarkers.split(' \\\\')[0];\n      const packageMatches =\n        pkgValRegex.exec(lineNoHashes) ?? pkgRegex.exec(lineNoHashes);\n      const gitPackageMatches = packageGitRegex.exec(lineNoHashes);\n      if (!packageMatches && !gitPackageMatches) {\n        return null;\n      }\n      if (gitPackageMatches?.groups) {\n        const currentVersion = gitPackageMatches.groups.version;\n        const depName = gitPackageMatches.groups.depName;\n        let packageName: string;\n        if (gitPackageMatches.groups.protocol === 'https') {\n          packageName = 'https://'\n            .concat(gitPackageMatches.groups.gitUrl)\n            .replace(`@${currentVersion}`, '');\n        } else {\n          // we need to replace the / with a :\n          const scmPath = gitPackageMatches.groups.scmPath;\n          const delimiter = gitPackageMatches.groups.delimiter;\n          packageName = gitPackageMatches.groups.gitUrl\n            .replace(`${delimiter}${scmPath}`, `:${scmPath}`)\n            .replace(`@${currentVersion}`, '');\n        }\n        dep = {\n          ...dep,\n          depName,\n          currentValue: currentVersion,\n          currentVersion,\n          packageName,\n          datasource: GitTagsDatasource.id,\n        };\n        return dep;\n      }\n\n      // validated above\n      const [, depName, , currVal] = packageMatches!;\n      const currentValue = currVal?.trim();\n      dep = {\n        ...dep,\n        depName,\n        packageName: normalizePythonDepName(depName),\n        currentValue,\n        datasource: PypiDatasource.id,\n      };\n      if (currentValue?.startsWith('==')) {\n        dep.currentVersion = currentValue.replace(regEx(/^==\\s*/), '');\n      }\n      return dep;\n    })\n    .filter(isTruthy);\n\n  const res = extractPackageFileFlags(content);\n  res.deps = deps;\n\n  if (\n    !res.deps.length &&\n    !res.registryUrls?.length &&\n    !res.additionalRegistryUrls?.length &&\n    !res.managerData?.requirementsFiles?.length &&\n    !res.managerData?.constraintsFiles?.length\n  ) {\n    return null;\n  }\n  return res;\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,iBACX;AACF,MAAa,gBAAgB;AAC7B,MAAM,kBAAkB,MACtB,sLACF;AAGA,MAAM,uBAAuB,OAAOA,cAAa,QAC/C,MAAM,UAAU,GAChB,IACF;AAEA,MAAa,oBAAoB,IAAI,eAAe,IAAI,cAAc,IAAI,GAD9C,qBAAqB,UAAU,qBAAqB,IACW;AAE3F,SAAgB,mBACd,SACuD;CACvD,OAAO,MAAM,uCAAuC;CAEpD,MAAM,WAAW,MAAM,KAAK,eAAe,GAAG;CAC9C,MAAM,cAAc,MAAM,IAAI,kBAAkB,EAAE;CAClD,MAAM,OAAO,QACV,MAAM,YAAY,CAAC,CACnB,KAAK,YAAY;EAChB,IAAI,MAAyB,CAAC;EAC9B,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC;EACpE,IAAI,cAAc,OAAO,GACvB,IAAI,aAAa;EAEnB,MAAM,CAAC,oBAAoB,KAAK,MAAM,GAAG,CAAC,CAAC,KAAK,SAAS,KAAK,KAAK,CAAC;EACpE,MAAM,eAAe,iBAAiB,MAAM,KAAK,CAAC,CAAC;EACnD,MAAM,iBACJ,YAAY,KAAK,YAAY,KAAK,SAAS,KAAK,YAAY;EAC9D,MAAM,oBAAoB,gBAAgB,KAAK,YAAY;EAC3D,IAAI,CAAC,kBAAkB,CAAC,mBACtB,OAAO;EAET,IAAI,mBAAmB,QAAQ;GAC7B,MAAM,iBAAiB,kBAAkB,OAAO;GAChD,MAAM,UAAU,kBAAkB,OAAO;GACzC,IAAI;GACJ,IAAI,kBAAkB,OAAO,aAAa,SACxC,cAAc,WACX,OAAO,kBAAkB,OAAO,MAAM,CAAC,CACvC,QAAQ,IAAI,kBAAkB,EAAE;QAC9B;IAEL,MAAM,UAAU,kBAAkB,OAAO;IACzC,MAAM,YAAY,kBAAkB,OAAO;IAC3C,cAAc,kBAAkB,OAAO,OACpC,QAAQ,GAAG,YAAY,WAAW,IAAI,SAAS,CAAC,CAChD,QAAQ,IAAI,kBAAkB,EAAE;GACrC;GACA,MAAM;IACJ,GAAG;IACH;IACA,cAAc;IACd;IACA;IACA,YAAY,kBAAkB;GAChC;GACA,OAAO;EACT;EAGA,MAAM,GAAG,WAAW,WAAW;EAC/B,MAAM,eAAe,SAAS,KAAK;EACnC,MAAM;GACJ,GAAG;GACH;GACA,aAAa,uBAAuB,OAAO;GAC3C;GACA,YAAY,eAAe;EAC7B;EACA,IAAI,cAAc,WAAW,IAAI,GAC/B,IAAI,iBAAiB,aAAa,QAAQ,MAAM,QAAQ,GAAG,EAAE;EAE/D,OAAO;CACT,CAAC,CAAC,CACD,OAAO,QAAQ;CAElB,MAAM,MAAM,wBAAwB,OAAO;CAC3C,IAAI,OAAO;CAEX,IACE,CAAC,IAAI,KAAK,UACV,CAAC,IAAI,cAAc,UACnB,CAAC,IAAI,wBAAwB,UAC7B,CAAC,IAAI,aAAa,mBAAmB,UACrC,CAAC,IAAI,aAAa,kBAAkB,QAEpC,OAAO;CAET,OAAO;AACT"}

package/dist/modules/manager/pip_setup/extract.js

@@ -6,7 +6,7 @@ import { lang, query } from "@renovatebot/good-enough-parser";
 //#region lib/modules/manager/pip_setup/extract.ts
 const python = lang.createLang("python");
 function cleanupNamedGroups(regexSource) {
-	return regexSource.replace(/\(\?<\w+>/g, "(?:");
+	return regexSource.replace(regEx(/\(\?<\w+>/g), "(?:");
 }
 const rangePattern = cleanupNamedGroups(RANGE_PATTERN);
 const versionPattern = `(?:${rangePattern}(?:\\s*,\\s*${rangePattern})*)`;
@@ -46,8 +46,8 @@ function depSkipHandler(ctx) {
 		deps
 	};
 }
-const incompleteDepString = query.str(new RegExp(cleanupNamedGroups(depPattern))).op(regEx(/^\+|\*$/));
-const depString = query.str(new RegExp(cleanupNamedGroups(depPattern)), depStringHandler).opt(query.opt(query.op(",")).comment(/^#\s*renovate\s*:\s*ignore\s*$/, depSkipHandler));
+const incompleteDepString = query.str(regEx(cleanupNamedGroups(depPattern))).op(regEx(/^\+|\*$/));
+const depString = query.str(regEx(cleanupNamedGroups(depPattern)), depStringHandler).opt(query.opt(query.op(",")).comment(regEx(/^#\s*renovate\s*:\s*ignore\s*$/), depSkipHandler));
 const query$1 = query.alt(incompleteDepString, depString);
 function extractPackageFile(content, _packageFile, _config) {
 	const res = python.query(content, query$1, { deps: [] });

package/dist/modules/manager/pip_setup/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":["q","query"],"sources":["../../../../lib/modules/manager/pip_setup/extract.ts"],"sourcesContent":["import type { lexer, parser } from '@renovatebot/good-enough-parser';\nimport { lang, query as q } from '@renovatebot/good-enough-parser';\nimport { RANGE_PATTERN } from '@renovatebot/pep440';\nimport { regEx } from '../../../util/regex.ts';\nimport { normalizePythonDepName } from '../../datasource/pypi/common.ts';\nimport { PypiDatasource } from '../../datasource/pypi/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFileContent,\n} from '../types.ts';\n\ninterface ManagerData {\n  lineNumber: number;\n}\n\ntype Context = PackageFileContent<ManagerData>;\n\nconst python = lang.createLang('python');\n\n// Optimize regex memory usage when we don't need named groups\nfunction cleanupNamedGroups(regexSource: string): string {\n  return regexSource.replace(/\\(\\?<\\w+>/g, '(?:');\n}\n\nconst rangePattern = cleanupNamedGroups(RANGE_PATTERN);\nconst versionPattern = `(?:${rangePattern}(?:\\\\s*,\\\\s*${rangePattern})*)`;\nconst depNamePattern = '(?:[a-zA-Z][-_a-zA-Z0-9\\\\.]*[a-zA-Z0-9])';\nconst depPattern = [\n  '^',\n  `(?<depName>${depNamePattern})`,\n  `(?<extra>(?:\\\\[\\\\s*(?:${depNamePattern}(?:\\\\s*,\\\\s*${depNamePattern})*\\\\s*)\\\\])?)`,\n  `(?<currentValue>${versionPattern})`,\n].join('\\\\s*');\n\nconst extractRegex = regEx(depPattern);\n\n// Extract dependency string\nfunction depStringHandler(\n  ctx: Context,\n  token: lexer.StringValueToken,\n): Context {\n  const depStr = token.value;\n  const match = extractRegex.exec(depStr);\n  // TODO #22198\n  const { depName, currentValue } = match!.groups!;\n\n  const dep: PackageDependency<ManagerData> = {\n    depName,\n    packageName: normalizePythonDepName(depName),\n    currentValue,\n    managerData: {\n      lineNumber: token.line - 1,\n    },\n    datasource: PypiDatasource.id,\n  };\n\n  if (currentValue?.startsWith('==')) {\n    dep.currentVersion = currentValue.replace(regEx(/^==\\s*/), '');\n  }\n\n  return { ...ctx, deps: [...ctx.deps, dep] };\n}\n\n// Add `skip-reason` for dependencies annotated\n// with \"# renovate: ignore\" comment\nfunction depSkipHandler(ctx: Context): Context {\n  const dep = ctx.deps.at(-1);\n  const deps = ctx.deps.slice(0, -1);\n  deps.push({ ...dep, skipReason: 'ignored' });\n  return { ...ctx, deps };\n}\n\nconst incompleteDepString = q\n  .str<Context>(new RegExp(cleanupNamedGroups(depPattern)))\n  .op(regEx(/^\\+|\\*$/));\n\nconst depString = q\n  .str<Context>(new RegExp(cleanupNamedGroups(depPattern)), depStringHandler)\n  .opt(\n    q\n      .opt(q.op<Context>(','))\n      .comment(/^#\\s*renovate\\s*:\\s*ignore\\s*$/, depSkipHandler),\n  );\n\nconst query = q.alt(incompleteDepString, depString);\n\nexport function extractPackageFile(\n  content: string,\n  _packageFile: string,\n  _config: ExtractConfig,\n): PackageFileContent | null {\n  const res = python.query<Context, parser.Node>(content, query, { deps: [] });\n  return res?.deps?.length ? res : null;\n}\n"],"mappings":";;;;;;AAkBA,MAAM,SAAS,KAAK,WAAW,QAAQ;AAGvC,SAAS,mBAAmB,aAA6B;CACvD,OAAO,YAAY,QAAQ,cAAc,KAAK;AAChD;AAEA,MAAM,eAAe,mBAAmB,aAAa;AACrD,MAAM,iBAAiB,MAAM,aAAa,cAAc,aAAa;AACrE,MAAM,iBAAiB;AACvB,MAAM,aAAa;CACjB;CACA,cAAc,eAAe;CAC7B,yBAAyB,eAAe,cAAc,eAAe;CACrE,mBAAmB,eAAe;AACpC,CAAC,CAAC,KAAK,MAAM;AAEb,MAAM,eAAe,MAAM,UAAU;AAGrC,SAAS,iBACP,KACA,OACS;CACT,MAAM,SAAS,MAAM;CAGrB,MAAM,EAAE,SAAS,iBAFH,aAAa,KAAK,MAEM,CAAC,CAAE;CAEzC,MAAM,MAAsC;EAC1C;EACA,aAAa,uBAAuB,OAAO;EAC3C;EACA,aAAa,EACX,YAAY,MAAM,OAAO,EAC3B;EACA,YAAY,eAAe;CAC7B;CAEA,IAAI,cAAc,WAAW,IAAI,GAC/B,IAAI,iBAAiB,aAAa,QAAQ,MAAM,QAAQ,GAAG,EAAE;CAG/D,OAAO;EAAE,GAAG;EAAK,MAAM,CAAC,GAAG,IAAI,MAAM,GAAG;CAAE;AAC5C;AAIA,SAAS,eAAe,KAAuB;CAC7C,MAAM,MAAM,IAAI,KAAK,GAAG,EAAE;CAC1B,MAAM,OAAO,IAAI,KAAK,MAAM,GAAG,EAAE;CACjC,KAAK,KAAK;EAAE,GAAG;EAAK,YAAY;CAAU,CAAC;CAC3C,OAAO;EAAE,GAAG;EAAK;CAAK;AACxB;AAEA,MAAM,sBAAsBA,MACzB,IAAa,IAAI,OAAO,mBAAmB,UAAU,CAAC,CAAC,CAAC,CACxD,GAAG,MAAM,SAAS,CAAC;AAEtB,MAAM,YAAYA,MACf,IAAa,IAAI,OAAO,mBAAmB,UAAU,CAAC,GAAG,gBAAgB,CAAC,CAC1E,IACCA,MACG,IAAIA,MAAE,GAAY,GAAG,CAAC,CAAC,CACvB,QAAQ,kCAAkC,cAAc,CAC7D;AAEF,MAAMC,UAAQD,MAAE,IAAI,qBAAqB,SAAS;AAElD,SAAgB,mBACd,SACA,cACA,SAC2B;CAC3B,MAAM,MAAM,OAAO,MAA4B,SAASC,SAAO,EAAE,MAAM,CAAC,EAAE,CAAC;CAC3E,OAAO,KAAK,MAAM,SAAS,MAAM;AACnC"}
+{"version":3,"file":"extract.js","names":["q","query"],"sources":["../../../../lib/modules/manager/pip_setup/extract.ts"],"sourcesContent":["import type { lexer, parser } from '@renovatebot/good-enough-parser';\nimport { lang, query as q } from '@renovatebot/good-enough-parser';\nimport { RANGE_PATTERN } from '@renovatebot/pep440';\nimport { regEx } from '../../../util/regex.ts';\nimport { normalizePythonDepName } from '../../datasource/pypi/common.ts';\nimport { PypiDatasource } from '../../datasource/pypi/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFileContent,\n} from '../types.ts';\n\ninterface ManagerData {\n  lineNumber: number;\n}\n\ntype Context = PackageFileContent<ManagerData>;\n\nconst python = lang.createLang('python');\n\n// Optimize regex memory usage when we don't need named groups\nfunction cleanupNamedGroups(regexSource: string): string {\n  return regexSource.replace(regEx(/\\(\\?<\\w+>/g), '(?:');\n}\n\nconst rangePattern = cleanupNamedGroups(RANGE_PATTERN);\nconst versionPattern = `(?:${rangePattern}(?:\\\\s*,\\\\s*${rangePattern})*)`;\nconst depNamePattern = '(?:[a-zA-Z][-_a-zA-Z0-9\\\\.]*[a-zA-Z0-9])';\nconst depPattern = [\n  '^',\n  `(?<depName>${depNamePattern})`,\n  `(?<extra>(?:\\\\[\\\\s*(?:${depNamePattern}(?:\\\\s*,\\\\s*${depNamePattern})*\\\\s*)\\\\])?)`,\n  `(?<currentValue>${versionPattern})`,\n].join('\\\\s*');\n\nconst extractRegex = regEx(depPattern);\n\n// Extract dependency string\nfunction depStringHandler(\n  ctx: Context,\n  token: lexer.StringValueToken,\n): Context {\n  const depStr = token.value;\n  const match = extractRegex.exec(depStr);\n  // TODO #22198\n  const { depName, currentValue } = match!.groups!;\n\n  const dep: PackageDependency<ManagerData> = {\n    depName,\n    packageName: normalizePythonDepName(depName),\n    currentValue,\n    managerData: {\n      lineNumber: token.line - 1,\n    },\n    datasource: PypiDatasource.id,\n  };\n\n  if (currentValue?.startsWith('==')) {\n    dep.currentVersion = currentValue.replace(regEx(/^==\\s*/), '');\n  }\n\n  return { ...ctx, deps: [...ctx.deps, dep] };\n}\n\n// Add `skip-reason` for dependencies annotated\n// with \"# renovate: ignore\" comment\nfunction depSkipHandler(ctx: Context): Context {\n  const dep = ctx.deps.at(-1);\n  const deps = ctx.deps.slice(0, -1);\n  deps.push({ ...dep, skipReason: 'ignored' });\n  return { ...ctx, deps };\n}\n\nconst incompleteDepString = q\n  .str<Context>(regEx(cleanupNamedGroups(depPattern)))\n  .op(regEx(/^\\+|\\*$/));\n\nconst depString = q\n  .str<Context>(regEx(cleanupNamedGroups(depPattern)), depStringHandler)\n  .opt(\n    q\n      .opt(q.op<Context>(','))\n      .comment(regEx(/^#\\s*renovate\\s*:\\s*ignore\\s*$/), depSkipHandler),\n  );\n\nconst query = q.alt(incompleteDepString, depString);\n\nexport function extractPackageFile(\n  content: string,\n  _packageFile: string,\n  _config: ExtractConfig,\n): PackageFileContent | null {\n  const res = python.query<Context, parser.Node>(content, query, { deps: [] });\n  return res?.deps?.length ? res : null;\n}\n"],"mappings":";;;;;;AAkBA,MAAM,SAAS,KAAK,WAAW,QAAQ;AAGvC,SAAS,mBAAmB,aAA6B;CACvD,OAAO,YAAY,QAAQ,MAAM,YAAY,GAAG,KAAK;AACvD;AAEA,MAAM,eAAe,mBAAmB,aAAa;AACrD,MAAM,iBAAiB,MAAM,aAAa,cAAc,aAAa;AACrE,MAAM,iBAAiB;AACvB,MAAM,aAAa;CACjB;CACA,cAAc,eAAe;CAC7B,yBAAyB,eAAe,cAAc,eAAe;CACrE,mBAAmB,eAAe;AACpC,CAAC,CAAC,KAAK,MAAM;AAEb,MAAM,eAAe,MAAM,UAAU;AAGrC,SAAS,iBACP,KACA,OACS;CACT,MAAM,SAAS,MAAM;CAGrB,MAAM,EAAE,SAAS,iBAFH,aAAa,KAAK,MAEM,CAAC,CAAE;CAEzC,MAAM,MAAsC;EAC1C;EACA,aAAa,uBAAuB,OAAO;EAC3C;EACA,aAAa,EACX,YAAY,MAAM,OAAO,EAC3B;EACA,YAAY,eAAe;CAC7B;CAEA,IAAI,cAAc,WAAW,IAAI,GAC/B,IAAI,iBAAiB,aAAa,QAAQ,MAAM,QAAQ,GAAG,EAAE;CAG/D,OAAO;EAAE,GAAG;EAAK,MAAM,CAAC,GAAG,IAAI,MAAM,GAAG;CAAE;AAC5C;AAIA,SAAS,eAAe,KAAuB;CAC7C,MAAM,MAAM,IAAI,KAAK,GAAG,EAAE;CAC1B,MAAM,OAAO,IAAI,KAAK,MAAM,GAAG,EAAE;CACjC,KAAK,KAAK;EAAE,GAAG;EAAK,YAAY;CAAU,CAAC;CAC3C,OAAO;EAAE,GAAG;EAAK;CAAK;AACxB;AAEA,MAAM,sBAAsBA,MACzB,IAAa,MAAM,mBAAmB,UAAU,CAAC,CAAC,CAAC,CACnD,GAAG,MAAM,SAAS,CAAC;AAEtB,MAAM,YAAYA,MACf,IAAa,MAAM,mBAAmB,UAAU,CAAC,GAAG,gBAAgB,CAAC,CACrE,IACCA,MACG,IAAIA,MAAE,GAAY,GAAG,CAAC,CAAC,CACvB,QAAQ,MAAM,gCAAgC,GAAG,cAAc,CACpE;AAEF,MAAMC,UAAQD,MAAE,IAAI,qBAAqB,SAAS;AAElD,SAAgB,mBACd,SACA,cACA,SAC2B;CAC3B,MAAM,MAAM,OAAO,MAA4B,SAASC,SAAO,EAAE,MAAM,CAAC,EAAE,CAAC;CAC3E,OAAO,KAAK,MAAM,SAAS,MAAM;AACnC"}

package/dist/modules/manager/pixi/schema.js

@@ -1,3 +1,4 @@
+import { regEx } from "../../../util/regex.js";
 import { LooseRecord, Toml, Yaml } from "../../../util/schema-utils/index.js";
 import { id } from "../../versioning/pep440/index.js";
 import { id as id$1 } from "../../versioning/conda/index.js";
@@ -26,7 +27,7 @@ const PypiDependency = z.union([z.string().transform((version) => ({ version }))
 		versioning: id,
 		datasource: PypiDatasource.id
 	};
-	if (version.startsWith("==")) dep.currentVersion = version.replace(/^==\s*/, "");
+	if (version.startsWith("==")) dep.currentVersion = version.replace(regEx(/^==\s*/), "");
 	return dep;
 });
 const PypiGitDependency = z.object({