renovate 44.77.0 → 44.79.0

package/dist/modules/datasource/docker/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":["hostRules.find","dockerVersioning"],"sources":["../../../../lib/modules/datasource/docker/common.ts"],"sourcesContent":["import { isNonEmptyString, isString, isUndefined } from '@sindresorhus/is';\nimport {\n  HOST_DISABLED,\n  PAGE_NOT_FOUND_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport { detectPlatform } from '../../../util/common.ts';\nimport { parseGitUrl } from '../../../util/git/url.ts';\nimport { toSha256 } from '../../../util/hash.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { memCacheProvider } from '../../../util/http/cache/memory-http-cache-provider.ts';\nimport type { Http } from '../../../util/http/index.ts';\nimport type {\n  HttpOptions,\n  HttpResponse,\n  OutgoingHttpHeaders,\n} from '../../../util/http/types.ts';\nimport type { ParamsChallenge } from '../../../util/http/www-authenticate.ts';\nimport { BearerScheme, parse } from '../../../util/http/www-authenticate.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { addSecretForSanitizing } from '../../../util/sanitize.ts';\nimport {\n  ensureTrailingSlash,\n  parseUrl,\n  trimTrailingSlash,\n} from '../../../util/url.ts';\nimport { api as dockerVersioning } from '../../versioning/docker/index.ts';\nimport { getGoogleAuthToken } from '../util.ts';\nimport { ecrRegex, getECRAuthToken, isECRMaxResultsResponse } from './ecr.ts';\nimport { googleRegex } from './google.ts';\nimport type { OciHelmConfig } from './schema.ts';\nimport { RegistryAuthToken } from './schema.ts';\nimport type { RegistryRepository } from './types.ts';\n\nexport const dockerDatasourceId = 'docker';\n\nexport const imageUrlLabel = 'org.opencontainers.image.url';\n\nexport const sourceLabel = 'org.opencontainers.image.source';\nexport const sourceLabels = [sourceLabel, 'org.label-schema.vcs-url'] as const;\n\nexport const gitRefLabel = 'org.opencontainers.image.revision';\n\nexport const DOCKER_HUB = 'https://index.docker.io';\n\nexport function isDockerHost(host: string): boolean {\n  const regex = regEx(/(?:^|\\.)docker\\.io$/);\n  return regex.test(host);\n}\n\nexport async function getAuthHeaders(\n  http: Http,\n  registryHost: string,\n  dockerRepository: string,\n  apiCheckUrl = `${registryHost}/v2/`,\n): Promise<OutgoingHttpHeaders | undefined> {\n  try {\n    const options = {\n      throwHttpErrors: false,\n      noAuth: true,\n      cacheProvider: memCacheProvider,\n    };\n    const apiCheckResponse = apiCheckUrl.endsWith('/v2/')\n      ? await http.get(apiCheckUrl, options)\n      : // use json request, as this will be cached for tags, so it returns json\n        // TODO: add cache test\n        await http.getJsonUnchecked(apiCheckUrl, options);\n\n    if (apiCheckResponse.statusCode === 200) {\n      logger.debug(`No registry auth required for ${apiCheckUrl}`);\n      return {};\n    }\n    if (apiCheckResponse.statusCode === 404) {\n      logger.debug(`Page Not Found ${apiCheckUrl}`);\n      // throw error up to be caught and potentially retried with library/ prefix\n      throw new Error(PAGE_NOT_FOUND_ERROR);\n    }\n    // Some ECR-compatible private registries (e.g. corporate Docker proxies) reject\n    // n>1000 with 405 even on the auth-probe request.  Fall back to probing the base\n    // /v2/ endpoint so getAuthHeaders can still obtain a valid token; the main fetch\n    // loop already retries with n=1000 when it encounters this same error.\n    if (isECRMaxResultsResponse(apiCheckResponse)) {\n      logger.debug(\n        { apiCheckUrl },\n        'Registry rejected n>1000 on auth probe; retrying auth check via base /v2/ endpoint',\n      );\n      return getAuthHeaders(http, registryHost, dockerRepository);\n    }\n    if (\n      apiCheckResponse.statusCode !== 401 ||\n      !isNonEmptyString(apiCheckResponse.headers['www-authenticate'])\n    ) {\n      logger.warn(\n        { apiCheckUrl, res: apiCheckResponse },\n        'Invalid registry response',\n      );\n      return undefined;\n    }\n\n    const rule = hostRules.find({\n      hostType: dockerDatasourceId,\n      url: apiCheckUrl,\n    });\n    const opts: HttpOptions = {};\n\n    if (ecrRegex.test(registryHost)) {\n      logger.once.debug(`hostRules: ecr auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ecr auth for Docker registry`,\n      );\n      const [, region] = coerceArray(ecrRegex.exec(registryHost));\n      const auth = await getECRAuthToken(region, rule);\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      }\n    } else if (\n      googleRegex.test(registryHost) &&\n      isUndefined(rule.username) &&\n      isUndefined(rule.password) &&\n      isUndefined(rule.token)\n    ) {\n      logger.once.debug(`hostRules: google auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using google auth for Docker registry`,\n      );\n      const auth = await getGoogleAuthToken();\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      } else {\n        logger.once.debug(\n          { registryHost, dockerRepository },\n          'Could not get Google access token, using no auth',\n        );\n      }\n    } else if (rule.username && rule.password) {\n      logger.once.debug(`hostRules: basic auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using basic auth for Docker registry`,\n      );\n      const auth = Buffer.from(`${rule.username}:${rule.password}`).toString(\n        'base64',\n      );\n      opts.headers = { authorization: `Basic ${auth}` };\n    } else if (rule.token) {\n      const authType = rule.authType ?? 'Bearer';\n      logger.once.debug(\n        `hostRules: ${authType} token auth for ${registryHost}`,\n      );\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ${authType} token for Docker registry`,\n      );\n      opts.headers = { authorization: `${authType} ${rule.token}` };\n    }\n\n    const challenges = parse(apiCheckResponse.headers['www-authenticate']);\n    const authenticateHeader = challenges.find(\n      (c): c is ParamsChallenge => c.scheme === BearerScheme,\n    );\n\n    // If realm isn't an url, we should directly use auth header\n    // Can happen when we get a Basic auth or some other auth type\n    // * WWW-Authenticate: Basic realm=\"Artifactory Realm\"\n    // * Www-Authenticate: Basic realm=\"https://123456789.dkr.ecr.eu-central-1.amazonaws.com/\",service=\"ecr.amazonaws.com\"\n    // * www-authenticate: Bearer realm=\"https://ghcr.io/token\",service=\"ghcr.io\",scope=\"repository:user/image:pull\"\n    // * www-authenticate: Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\"\n    // * www-authenticate: Bearer realm=\"https://codeberg.org/v2/token\",service=\"container_registry\",scope=\"*\",Basic realm=\"https://codeberg.org/v2\",service=\"container_registry\",scope=\"*\"\n    if (\n      !authenticateHeader ||\n      !isString(authenticateHeader.params?.realm) ||\n      parseUrl(authenticateHeader.params.realm) === null\n    ) {\n      logger.once.debug(`hostRules: testing direct auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository, authenticateHeader },\n        `Invalid realm, testing direct auth`,\n      );\n      return opts.headers ?? undefined;\n    }\n\n    // already guarded by above clause\n    const authUrl = parseUrl(`${authenticateHeader.params.realm}`)!;\n\n    // repo isn't known to server yet, so causing wrong scope `repository:user/image:pull`\n    if (\n      isString(authenticateHeader.params.scope) &&\n      !apiCheckUrl.endsWith('/v2/')\n    ) {\n      authUrl.searchParams.append('scope', authenticateHeader.params.scope);\n    } else {\n      authUrl.searchParams.append(\n        'scope',\n        `repository:${dockerRepository}:pull`,\n      );\n    }\n\n    if (isString(authenticateHeader.params.service)) {\n      authUrl.searchParams.append('service', authenticateHeader.params.service);\n    }\n\n    logger.trace(\n      { registryHost, dockerRepository, authUrl: authUrl.href },\n      `Obtaining docker registry token`,\n    );\n    opts.noAuth = true;\n    opts.cacheProvider = memCacheProvider;\n    const authResponse = (\n      await http.getJson(authUrl.href, opts, RegistryAuthToken)\n    ).body;\n\n    const token = authResponse.token ?? authResponse.access_token;\n    /* v8 ignore next -- TODO: add test */\n    if (!token) {\n      logger.warn('Failed to obtain docker registry token');\n      return undefined;\n    }\n    // sanitize token\n    addSecretForSanitizing(token);\n    return {\n      authorization: `Bearer ${token}`,\n    };\n  } catch (err) /* istanbul ignore next */ {\n    /* v8 ignore if -- quay.io errors are swallowed pending #9604, not reproduced in specs */\n    if (err.host === 'quay.io') {\n      // TODO: debug why quay throws errors (#9604)\n      return undefined;\n    }\n    /* v8 ignore if -- registry auth rejection is logged and swallowed, not mocked in specs */\n    if (err.statusCode === 401) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Unauthorized docker lookup',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    /* v8 ignore if -- registry permission rejection is logged and swallowed, not mocked in specs */\n    if (err.statusCode === 403) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Not allowed to access docker registry',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    if (err.name === 'RequestError' && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- Docker Hub rate limiting maps to ExternalHostError, not mocked in specs */\n    if (err.statusCode === 429 && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- registry server errors map to ExternalHostError, not mocked in specs */\n    if (err.statusCode >= 500 && err.statusCode < 600) {\n      throw new ExternalHostError(err);\n    }\n    if (err.message === PAGE_NOT_FOUND_ERROR) {\n      throw err;\n    }\n    /* v8 ignore if -- hostRules-disabled host is swallowed silently, not mocked in specs */\n    if (err.message === HOST_DISABLED) {\n      logger.trace({ registryHost, dockerRepository, err }, 'Host disabled');\n      return undefined;\n    }\n    logger.warn(\n      { registryHost, dockerRepository, err },\n      'Error obtaining docker token',\n    );\n    return undefined;\n  }\n}\n\nexport function getRegistryRepository(\n  packageName: string,\n  registryUrl: string,\n): RegistryRepository {\n  if (registryUrl !== DOCKER_HUB) {\n    const registryEndingWithSlash = ensureTrailingSlash(\n      registryUrl.replace(regEx(/^https?:\\/\\//), ''),\n    );\n    if (packageName.startsWith(registryEndingWithSlash)) {\n      let registryHost = trimTrailingSlash(registryUrl);\n      if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n        registryHost = `https://${registryHost}`;\n      }\n      let dockerRepository = packageName.replace(registryEndingWithSlash, '');\n      const fullUrl = `${registryHost}/${dockerRepository}`;\n      const parsedFullUrl = parseUrl(fullUrl);\n      if (!parsedFullUrl) {\n        return { registryHost, dockerRepository };\n      }\n      registryHost = parsedFullUrl.origin;\n      dockerRepository = parsedFullUrl.pathname.substring(1);\n      return {\n        registryHost,\n        dockerRepository,\n      };\n    }\n  }\n  let registryHost = registryUrl;\n  const split = packageName.split('/');\n  if (split.length > 1 && (split[0].includes('.') || split[0].includes(':'))) {\n    [registryHost] = split;\n    split.shift();\n  }\n  let dockerRepository = split.join('/');\n\n  if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n    registryHost = `https://${registryHost}`;\n  }\n\n  const { path, base } = coerceObject(\n    regEx(/^(?<base>https:\\/\\/[^/]+)\\/(?<path>.+)$/).exec(registryHost)?.groups,\n  );\n  if (base && path) {\n    registryHost = base;\n    dockerRepository = `${trimTrailingSlash(path)}/${dockerRepository}`;\n  }\n\n  registryHost = registryHost\n    .replace('https://docker.io', 'https://index.docker.io')\n    .replace('https://registry-1.docker.io', 'https://index.docker.io');\n\n  const opts = hostRules.find({\n    hostType: dockerDatasourceId,\n    url: registryHost,\n  });\n  if (opts?.insecureRegistry) {\n    registryHost = registryHost.replace('https', 'http');\n  }\n  if (registryHost.endsWith('.docker.io') && !dockerRepository.includes('/')) {\n    dockerRepository = `library/${dockerRepository}`;\n  }\n  return {\n    registryHost,\n    dockerRepository,\n  };\n}\n\nexport function extractDigestFromResponseBody(\n  manifestResponse: HttpResponse,\n): string {\n  return `sha256:${toSha256(manifestResponse.body)}`;\n}\n\nexport function findLatestStable(tags: string[]): string | null {\n  let stable: string | null = null;\n\n  for (const tag of tags) {\n    if (!dockerVersioning.isValid(tag) || !dockerVersioning.isStable(tag)) {\n      continue;\n    }\n\n    if (!stable || dockerVersioning.isGreaterThan(tag, stable)) {\n      stable = tag;\n    }\n  }\n\n  return stable;\n}\n\nconst chartRepo = regEx(/charts?|helm|helm-charts?/i);\n\nfunction isPossibleChartRepo(url: string): boolean {\n  if (detectPlatform(url) === null) {\n    return false;\n  }\n\n  const parsed = parseGitUrl(url);\n  return chartRepo.test(parsed.name);\n}\n\nexport function findHelmSourceUrl(release: OciHelmConfig): string | null {\n  if (release.home && isPossibleChartRepo(release.home)) {\n    return release.home;\n  }\n\n  if (!release.sources?.length) {\n    return null;\n  }\n\n  for (const url of release.sources) {\n    if (isPossibleChartRepo(url)) {\n      return url;\n    }\n  }\n\n  // fallback\n  return release.sources[0];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAqCA,MAAa,qBAAqB;AAElC,MAAa,gBAAgB;AAE7B,MAAa,cAAc;AAC3B,MAAa,eAAe,CAAC,aAAa,0BAA0B;AAEpE,MAAa,cAAc;AAE3B,MAAa,aAAa;AAE1B,SAAgB,aAAa,MAAuB;CAElD,OADc,MAAM,qBACT,CAAC,CAAC,KAAK,IAAI;AACxB;AAEA,eAAsB,eACpB,MACA,cACA,kBACA,cAAc,GAAG,aAAa,OACY;CAC1C,IAAI;EACF,MAAM,UAAU;GACd,iBAAiB;GACjB,QAAQ;GACR,eAAe;EACjB;EACA,MAAM,mBAAmB,YAAY,SAAS,MAAM,IAChD,MAAM,KAAK,IAAI,aAAa,OAAO,IAGnC,MAAM,KAAK,iBAAiB,aAAa,OAAO;EAEpD,IAAI,iBAAiB,eAAe,KAAK;GACvC,OAAO,MAAM,iCAAiC,aAAa;GAC3D,OAAO,CAAC;EACV;EACA,IAAI,iBAAiB,eAAe,KAAK;GACvC,OAAO,MAAM,kBAAkB,aAAa;GAE5C,MAAM,IAAI,MAAM,oBAAoB;EACtC;EAKA,IAAI,wBAAwB,gBAAgB,GAAG;GAC7C,OAAO,MACL,EAAE,YAAY,GACd,oFACF;GACA,OAAO,eAAe,MAAM,cAAc,gBAAgB;EAC5D;EACA,IACE,iBAAiB,eAAe,OAChC,CAAC,iBAAiB,iBAAiB,QAAQ,mBAAmB,GAC9D;GACA,OAAO,KACL;IAAE;IAAa,KAAK;GAAiB,GACrC,2BACF;GACA;EACF;EAEA,MAAM,OAAOA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;EACD,MAAM,OAAoB,CAAC;EAE3B,IAAI,SAAS,KAAK,YAAY,GAAG;GAC/B,OAAO,KAAK,MAAM,2BAA2B,cAAc;GAC3D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,oCACF;GACA,MAAM,GAAG,UAAU,YAAY,SAAS,KAAK,YAAY,CAAC;GAC1D,MAAM,OAAO,MAAM,gBAAgB,QAAQ,IAAI;GAC/C,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;EAEpD,OAAO,IACL,YAAY,KAAK,YAAY,KAC7B,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,KAAK,GACtB;GACA,OAAO,KAAK,MAAM,8BAA8B,cAAc;GAC9D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,MAAM,OAAO,MAAM,mBAAmB;GACtC,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;QAEhD,OAAO,KAAK,MACV;IAAE;IAAc;GAAiB,GACjC,kDACF;EAEJ,OAAO,IAAI,KAAK,YAAY,KAAK,UAAU;GACzC,OAAO,KAAK,MAAM,6BAA6B,cAAc;GAC7D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,sCACF;GAIA,KAAK,UAAU,EAAE,eAAe,SAHnB,OAAO,KAAK,GAAG,KAAK,SAAS,GAAG,KAAK,UAAU,CAAC,CAAC,SAC5D,QAE0C,IAAI;EAClD,OAAO,IAAI,KAAK,OAAO;GACrB,MAAM,WAAW,KAAK,YAAY;GAClC,OAAO,KAAK,MACV,cAAc,SAAS,kBAAkB,cAC3C;GACA,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,SAAS,SAAS,2BACpB;GACA,KAAK,UAAU,EAAE,eAAe,GAAG,SAAS,GAAG,KAAK,QAAQ;EAC9D;EAGA,MAAM,qBADa,MAAM,iBAAiB,QAAQ,mBACd,CAAC,CAAC,MACnC,MAA4B,EAAE,WAAW,YAC5C;EASA,IACE,CAAC,sBACD,CAAC,SAAS,mBAAmB,QAAQ,KAAK,KAC1C,SAAS,mBAAmB,OAAO,KAAK,MAAM,MAC9C;GACA,OAAO,KAAK,MAAM,sCAAsC,cAAc;GACtE,OAAO,MACL;IAAE;IAAc;IAAkB;GAAmB,GACrD,oCACF;GACA,OAAO,KAAK,WAAW,KAAA;EACzB;EAGA,MAAM,UAAU,SAAS,GAAG,mBAAmB,OAAO,OAAO;EAG7D,IACE,SAAS,mBAAmB,OAAO,KAAK,KACxC,CAAC,YAAY,SAAS,MAAM,GAE5B,QAAQ,aAAa,OAAO,SAAS,mBAAmB,OAAO,KAAK;OAEpE,QAAQ,aAAa,OACnB,SACA,cAAc,iBAAiB,MACjC;EAGF,IAAI,SAAS,mBAAmB,OAAO,OAAO,GAC5C,QAAQ,aAAa,OAAO,WAAW,mBAAmB,OAAO,OAAO;EAG1E,OAAO,MACL;GAAE;GAAc;GAAkB,SAAS,QAAQ;EAAK,GACxD,iCACF;EACA,KAAK,SAAS;EACd,KAAK,gBAAgB;EACrB,MAAM,gBACJ,MAAM,KAAK,QAAQ,QAAQ,MAAM,MAAM,iBAAiB,EAAA,CACxD;EAEF,MAAM,QAAQ,aAAa,SAAS,aAAa;;EAEjD,IAAI,CAAC,OAAO;GACV,OAAO,KAAK,wCAAwC;GACpD;EACF;EAEA,uBAAuB,KAAK;EAC5B,OAAO,EACL,eAAe,UAAU,QAC3B;CACF,SAAS,gCAAgC;;EAEvC,IAAI,IAAI,SAAS,WAEf;;EAGF,IAAI,IAAI,eAAe,KAAK;GAC1B,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,4BACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;;EAEA,IAAI,IAAI,eAAe,KAAK;GAC1B,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;EACA,IAAI,IAAI,SAAS,kBAAkB,aAAa,YAAY,GAC1D,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GACrD,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KAC5C,MAAM,IAAI,kBAAkB,GAAG;EAEjC,IAAI,IAAI,YAAA,kBACN,MAAM;;EAGR,IAAI,IAAI,YAAA,iBAA2B;GACjC,OAAO,MAAM;IAAE;IAAc;IAAkB;GAAI,GAAG,eAAe;GACrE;EACF;EACA,OAAO,KACL;GAAE;GAAc;GAAkB;EAAI,GACtC,8BACF;EACA;CACF;AACF;AAEA,SAAgB,sBACd,aACA,aACoB;CACpB,IAAI,gBAAA,2BAA4B;EAC9B,MAAM,0BAA0B,oBAC9B,YAAY,QAAQ,MAAM,cAAc,GAAG,EAAE,CAC/C;EACA,IAAI,YAAY,WAAW,uBAAuB,GAAG;GACnD,IAAI,eAAe,kBAAkB,WAAW;GAChD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;GAE5B,IAAI,mBAAmB,YAAY,QAAQ,yBAAyB,EAAE;GACtE,MAAM,UAAU,GAAG,aAAa,GAAG;GACnC,MAAM,gBAAgB,SAAS,OAAO;GACtC,IAAI,CAAC,eACH,OAAO;IAAE;IAAc;GAAiB;GAE1C,eAAe,cAAc;GAC7B,mBAAmB,cAAc,SAAS,UAAU,CAAC;GACrD,OAAO;IACL;IACA;GACF;EACF;CACF;CACA,IAAI,eAAe;CACnB,MAAM,QAAQ,YAAY,MAAM,GAAG;CACnC,IAAI,MAAM,SAAS,MAAM,MAAM,EAAE,CAAC,SAAS,GAAG,KAAK,MAAM,EAAE,CAAC,SAAS,GAAG,IAAI;EAC1E,CAAC,gBAAgB;EACjB,MAAM,MAAM;CACd;CACA,IAAI,mBAAmB,MAAM,KAAK,GAAG;CAErC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;CAG5B,MAAM,EAAE,MAAM,SAAS,aACrB,MAAM,yCAAyC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,MACvE;CACA,IAAI,QAAQ,MAAM;EAChB,eAAe;EACf,mBAAmB,GAAG,kBAAkB,IAAI,EAAE,GAAG;CACnD;CAEA,eAAe,aACZ,QAAQ,qBAAqB,yBAAyB,CAAC,CACvD,QAAQ,gCAAgC,yBAAyB;CAMpE,IAJaA,KAAe;EAC1B,UAAA;EACA,KAAK;CACP,CACO,CAAC,EAAE,kBACR,eAAe,aAAa,QAAQ,SAAS,MAAM;CAErD,IAAI,aAAa,SAAS,YAAY,KAAK,CAAC,iBAAiB,SAAS,GAAG,GACvE,mBAAmB,WAAW;CAEhC,OAAO;EACL;EACA;CACF;AACF;AAEA,SAAgB,8BACd,kBACQ;CACR,OAAO,UAAU,SAAS,iBAAiB,IAAI;AACjD;AAEA,SAAgB,iBAAiB,MAA+B;CAC9D,IAAI,SAAwB;CAE5B,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAACC,IAAiB,QAAQ,GAAG,KAAK,CAACA,IAAiB,SAAS,GAAG,GAClE;EAGF,IAAI,CAAC,UAAUA,IAAiB,cAAc,KAAK,MAAM,GACvD,SAAS;CAEb;CAEA,OAAO;AACT;AAEA,MAAM,YAAY,MAAM,4BAA4B;AAEpD,SAAS,oBAAoB,KAAsB;CACjD,IAAI,eAAe,GAAG,MAAM,MAC1B,OAAO;CAGT,MAAM,SAAS,YAAY,GAAG;CAC9B,OAAO,UAAU,KAAK,OAAO,IAAI;AACnC;AAEA,SAAgB,kBAAkB,SAAuC;CACvE,IAAI,QAAQ,QAAQ,oBAAoB,QAAQ,IAAI,GAClD,OAAO,QAAQ;CAGjB,IAAI,CAAC,QAAQ,SAAS,QACpB,OAAO;CAGT,KAAK,MAAM,OAAO,QAAQ,SACxB,IAAI,oBAAoB,GAAG,GACzB,OAAO;CAKX,OAAO,QAAQ,QAAQ;AACzB"}
+{"version":3,"file":"common.js","names":["hostRules.find","dockerVersioning"],"sources":["../../../../lib/modules/datasource/docker/common.ts"],"sourcesContent":["import { isNonEmptyString, isString, isUndefined } from '@sindresorhus/is';\nimport {\n  HOST_BLOCKED,\n  HOST_DISABLED,\n  PAGE_NOT_FOUND_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport { detectPlatform } from '../../../util/common.ts';\nimport { parseGitUrl } from '../../../util/git/url.ts';\nimport { toSha256 } from '../../../util/hash.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { memCacheProvider } from '../../../util/http/cache/memory-http-cache-provider.ts';\nimport type { Http } from '../../../util/http/index.ts';\nimport type {\n  HttpOptions,\n  HttpResponse,\n  OutgoingHttpHeaders,\n} from '../../../util/http/types.ts';\nimport { refusedHostMessage } from '../../../util/http/util.ts';\nimport type { ParamsChallenge } from '../../../util/http/www-authenticate.ts';\nimport { BearerScheme, parse } from '../../../util/http/www-authenticate.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { addSecretForSanitizing } from '../../../util/sanitize.ts';\nimport {\n  ensureTrailingSlash,\n  parseUrl,\n  trimTrailingSlash,\n} from '../../../util/url.ts';\nimport { api as dockerVersioning } from '../../versioning/docker/index.ts';\nimport { getGoogleAuthToken } from '../util.ts';\nimport { ecrRegex, getECRAuthToken, isECRMaxResultsResponse } from './ecr.ts';\nimport { googleRegex } from './google.ts';\nimport type { OciHelmConfig } from './schema.ts';\nimport { RegistryAuthToken } from './schema.ts';\nimport type { RegistryRepository } from './types.ts';\n\nexport const dockerDatasourceId = 'docker';\n\nexport const imageUrlLabel = 'org.opencontainers.image.url';\n\nexport const sourceLabel = 'org.opencontainers.image.source';\nexport const sourceLabels = [sourceLabel, 'org.label-schema.vcs-url'] as const;\n\nexport const gitRefLabel = 'org.opencontainers.image.revision';\n\nexport const DOCKER_HUB = 'https://index.docker.io';\n\nexport function isDockerHost(host: string): boolean {\n  const regex = regEx(/(?:^|\\.)docker\\.io$/);\n  return regex.test(host);\n}\n\nexport async function getAuthHeaders(\n  http: Http,\n  registryHost: string,\n  dockerRepository: string,\n  apiCheckUrl = `${registryHost}/v2/`,\n): Promise<OutgoingHttpHeaders | undefined> {\n  try {\n    const options = {\n      throwHttpErrors: false,\n      noAuth: true,\n      cacheProvider: memCacheProvider,\n    };\n    const apiCheckResponse = apiCheckUrl.endsWith('/v2/')\n      ? await http.get(apiCheckUrl, options)\n      : // use json request, as this will be cached for tags, so it returns json\n        // TODO: add cache test\n        await http.getJsonUnchecked(apiCheckUrl, options);\n\n    if (apiCheckResponse.statusCode === 200) {\n      logger.debug(`No registry auth required for ${apiCheckUrl}`);\n      return {};\n    }\n    if (apiCheckResponse.statusCode === 404) {\n      logger.debug(`Page Not Found ${apiCheckUrl}`);\n      // throw error up to be caught and potentially retried with library/ prefix\n      throw new Error(PAGE_NOT_FOUND_ERROR);\n    }\n    // Some ECR-compatible private registries (e.g. corporate Docker proxies) reject\n    // n>1000 with 405 even on the auth-probe request.  Fall back to probing the base\n    // /v2/ endpoint so getAuthHeaders can still obtain a valid token; the main fetch\n    // loop already retries with n=1000 when it encounters this same error.\n    if (isECRMaxResultsResponse(apiCheckResponse)) {\n      logger.debug(\n        { apiCheckUrl },\n        'Registry rejected n>1000 on auth probe; retrying auth check via base /v2/ endpoint',\n      );\n      return getAuthHeaders(http, registryHost, dockerRepository);\n    }\n    if (\n      apiCheckResponse.statusCode !== 401 ||\n      !isNonEmptyString(apiCheckResponse.headers['www-authenticate'])\n    ) {\n      logger.warn(\n        { apiCheckUrl, res: apiCheckResponse },\n        'Invalid registry response',\n      );\n      return undefined;\n    }\n\n    const rule = hostRules.find({\n      hostType: dockerDatasourceId,\n      url: apiCheckUrl,\n    });\n    const opts: HttpOptions = {};\n\n    if (ecrRegex.test(registryHost)) {\n      logger.once.debug(`hostRules: ecr auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ecr auth for Docker registry`,\n      );\n      const [, region] = coerceArray(ecrRegex.exec(registryHost));\n      const auth = await getECRAuthToken(region, rule);\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      }\n    } else if (\n      googleRegex.test(registryHost) &&\n      isUndefined(rule.username) &&\n      isUndefined(rule.password) &&\n      isUndefined(rule.token)\n    ) {\n      logger.once.debug(`hostRules: google auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using google auth for Docker registry`,\n      );\n      const auth = await getGoogleAuthToken();\n      if (auth) {\n        opts.headers = { authorization: `Basic ${auth}` };\n      } else {\n        logger.once.debug(\n          { registryHost, dockerRepository },\n          'Could not get Google access token, using no auth',\n        );\n      }\n    } else if (rule.username && rule.password) {\n      logger.once.debug(`hostRules: basic auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using basic auth for Docker registry`,\n      );\n      const auth = Buffer.from(`${rule.username}:${rule.password}`).toString(\n        'base64',\n      );\n      opts.headers = { authorization: `Basic ${auth}` };\n    } else if (rule.token) {\n      const authType = rule.authType ?? 'Bearer';\n      logger.once.debug(\n        `hostRules: ${authType} token auth for ${registryHost}`,\n      );\n      logger.trace(\n        { registryHost, dockerRepository },\n        `Using ${authType} token for Docker registry`,\n      );\n      opts.headers = { authorization: `${authType} ${rule.token}` };\n    }\n\n    const challenges = parse(apiCheckResponse.headers['www-authenticate']);\n    const authenticateHeader = challenges.find(\n      (c): c is ParamsChallenge => c.scheme === BearerScheme,\n    );\n\n    // If realm isn't an url, we should directly use auth header\n    // Can happen when we get a Basic auth or some other auth type\n    // * WWW-Authenticate: Basic realm=\"Artifactory Realm\"\n    // * Www-Authenticate: Basic realm=\"https://123456789.dkr.ecr.eu-central-1.amazonaws.com/\",service=\"ecr.amazonaws.com\"\n    // * www-authenticate: Bearer realm=\"https://ghcr.io/token\",service=\"ghcr.io\",scope=\"repository:user/image:pull\"\n    // * www-authenticate: Bearer realm=\"https://auth.docker.io/token\",service=\"registry.docker.io\"\n    // * www-authenticate: Bearer realm=\"https://codeberg.org/v2/token\",service=\"container_registry\",scope=\"*\",Basic realm=\"https://codeberg.org/v2\",service=\"container_registry\",scope=\"*\"\n    if (\n      !authenticateHeader ||\n      !isString(authenticateHeader.params?.realm) ||\n      parseUrl(authenticateHeader.params.realm) === null\n    ) {\n      logger.once.debug(`hostRules: testing direct auth for ${registryHost}`);\n      logger.trace(\n        { registryHost, dockerRepository, authenticateHeader },\n        `Invalid realm, testing direct auth`,\n      );\n      return opts.headers ?? undefined;\n    }\n\n    // already guarded by above clause\n    const authUrl = parseUrl(`${authenticateHeader.params.realm}`)!;\n\n    // repo isn't known to server yet, so causing wrong scope `repository:user/image:pull`\n    if (\n      isString(authenticateHeader.params.scope) &&\n      !apiCheckUrl.endsWith('/v2/')\n    ) {\n      authUrl.searchParams.append('scope', authenticateHeader.params.scope);\n    } else {\n      authUrl.searchParams.append(\n        'scope',\n        `repository:${dockerRepository}:pull`,\n      );\n    }\n\n    if (isString(authenticateHeader.params.service)) {\n      authUrl.searchParams.append('service', authenticateHeader.params.service);\n    }\n\n    logger.trace(\n      { registryHost, dockerRepository, authUrl: authUrl.href },\n      `Obtaining docker registry token`,\n    );\n    opts.noAuth = true;\n    opts.cacheProvider = memCacheProvider;\n    const authResponse = (\n      await http.getJson(authUrl.href, opts, RegistryAuthToken)\n    ).body;\n\n    const token = authResponse.token ?? authResponse.access_token;\n    /* v8 ignore next -- TODO: add test */\n    if (!token) {\n      logger.warn('Failed to obtain docker registry token');\n      return undefined;\n    }\n    // sanitize token\n    addSecretForSanitizing(token);\n    return {\n      authorization: `Bearer ${token}`,\n    };\n  } catch (err) /* istanbul ignore next */ {\n    /* v8 ignore if -- quay.io errors are swallowed pending #9604, not reproduced in specs */\n    if (err.host === 'quay.io') {\n      // TODO: debug why quay throws errors (#9604)\n      return undefined;\n    }\n    /* v8 ignore if -- registry auth rejection is logged and swallowed, not mocked in specs */\n    if (err.statusCode === 401) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Unauthorized docker lookup',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    /* v8 ignore if -- registry permission rejection is logged and swallowed, not mocked in specs */\n    if (err.statusCode === 403) {\n      logger.debug(\n        { registryHost, dockerRepository },\n        'Not allowed to access docker registry',\n      );\n      logger.debug({ err });\n      return undefined;\n    }\n    if (err.name === 'RequestError' && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- Docker Hub rate limiting maps to ExternalHostError, not mocked in specs */\n    if (err.statusCode === 429 && isDockerHost(registryHost)) {\n      throw new ExternalHostError(err);\n    }\n    /* v8 ignore if -- registry server errors map to ExternalHostError, not mocked in specs */\n    if (err.statusCode >= 500 && err.statusCode < 600) {\n      throw new ExternalHostError(err);\n    }\n    if (err.message === PAGE_NOT_FOUND_ERROR) {\n      throw err;\n    }\n    /* v8 ignore if -- hostRules-disabled host is swallowed silently, not mocked in specs */\n    if ([HOST_BLOCKED, HOST_DISABLED].includes(err.message)) {\n      logger.trace(\n        { registryHost, dockerRepository, err },\n        refusedHostMessage(err),\n      );\n      return undefined;\n    }\n    logger.warn(\n      { registryHost, dockerRepository, err },\n      'Error obtaining docker token',\n    );\n    return undefined;\n  }\n}\n\nexport function getRegistryRepository(\n  packageName: string,\n  registryUrl: string,\n): RegistryRepository {\n  if (registryUrl !== DOCKER_HUB) {\n    const registryEndingWithSlash = ensureTrailingSlash(\n      registryUrl.replace(regEx(/^https?:\\/\\//), ''),\n    );\n    if (packageName.startsWith(registryEndingWithSlash)) {\n      let registryHost = trimTrailingSlash(registryUrl);\n      if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n        registryHost = `https://${registryHost}`;\n      }\n      let dockerRepository = packageName.replace(registryEndingWithSlash, '');\n      const fullUrl = `${registryHost}/${dockerRepository}`;\n      const parsedFullUrl = parseUrl(fullUrl);\n      if (!parsedFullUrl) {\n        return { registryHost, dockerRepository };\n      }\n      registryHost = parsedFullUrl.origin;\n      dockerRepository = parsedFullUrl.pathname.substring(1);\n      return {\n        registryHost,\n        dockerRepository,\n      };\n    }\n  }\n  let registryHost = registryUrl;\n  const split = packageName.split('/');\n  if (split.length > 1 && (split[0].includes('.') || split[0].includes(':'))) {\n    [registryHost] = split;\n    split.shift();\n  }\n  let dockerRepository = split.join('/');\n\n  if (!regEx(/^https?:\\/\\//).test(registryHost)) {\n    registryHost = `https://${registryHost}`;\n  }\n\n  const { path, base } = coerceObject(\n    regEx(/^(?<base>https:\\/\\/[^/]+)\\/(?<path>.+)$/).exec(registryHost)?.groups,\n  );\n  if (base && path) {\n    registryHost = base;\n    dockerRepository = `${trimTrailingSlash(path)}/${dockerRepository}`;\n  }\n\n  registryHost = registryHost\n    .replace('https://docker.io', 'https://index.docker.io')\n    .replace('https://registry-1.docker.io', 'https://index.docker.io');\n\n  const opts = hostRules.find({\n    hostType: dockerDatasourceId,\n    url: registryHost,\n  });\n  if (opts?.insecureRegistry) {\n    registryHost = registryHost.replace('https', 'http');\n  }\n  if (registryHost.endsWith('.docker.io') && !dockerRepository.includes('/')) {\n    dockerRepository = `library/${dockerRepository}`;\n  }\n  return {\n    registryHost,\n    dockerRepository,\n  };\n}\n\nexport function extractDigestFromResponseBody(\n  manifestResponse: HttpResponse,\n): string {\n  return `sha256:${toSha256(manifestResponse.body)}`;\n}\n\nexport function findLatestStable(tags: string[]): string | null {\n  let stable: string | null = null;\n\n  for (const tag of tags) {\n    if (!dockerVersioning.isValid(tag) || !dockerVersioning.isStable(tag)) {\n      continue;\n    }\n\n    if (!stable || dockerVersioning.isGreaterThan(tag, stable)) {\n      stable = tag;\n    }\n  }\n\n  return stable;\n}\n\nconst chartRepo = regEx(/charts?|helm|helm-charts?/i);\n\nfunction isPossibleChartRepo(url: string): boolean {\n  if (detectPlatform(url) === null) {\n    return false;\n  }\n\n  const parsed = parseGitUrl(url);\n  return chartRepo.test(parsed.name);\n}\n\nexport function findHelmSourceUrl(release: OciHelmConfig): string | null {\n  if (release.home && isPossibleChartRepo(release.home)) {\n    return release.home;\n  }\n\n  if (!release.sources?.length) {\n    return null;\n  }\n\n  for (const url of release.sources) {\n    if (isPossibleChartRepo(url)) {\n      return url;\n    }\n  }\n\n  // fallback\n  return release.sources[0];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAuCA,MAAa,qBAAqB;AAElC,MAAa,gBAAgB;AAE7B,MAAa,cAAc;AAC3B,MAAa,eAAe,CAAC,aAAa,0BAA0B;AAEpE,MAAa,cAAc;AAE3B,MAAa,aAAa;AAE1B,SAAgB,aAAa,MAAuB;CAElD,OADc,MAAM,qBACT,CAAC,CAAC,KAAK,IAAI;AACxB;AAEA,eAAsB,eACpB,MACA,cACA,kBACA,cAAc,GAAG,aAAa,OACY;CAC1C,IAAI;EACF,MAAM,UAAU;GACd,iBAAiB;GACjB,QAAQ;GACR,eAAe;EACjB;EACA,MAAM,mBAAmB,YAAY,SAAS,MAAM,IAChD,MAAM,KAAK,IAAI,aAAa,OAAO,IAGnC,MAAM,KAAK,iBAAiB,aAAa,OAAO;EAEpD,IAAI,iBAAiB,eAAe,KAAK;GACvC,OAAO,MAAM,iCAAiC,aAAa;GAC3D,OAAO,CAAC;EACV;EACA,IAAI,iBAAiB,eAAe,KAAK;GACvC,OAAO,MAAM,kBAAkB,aAAa;GAE5C,MAAM,IAAI,MAAM,oBAAoB;EACtC;EAKA,IAAI,wBAAwB,gBAAgB,GAAG;GAC7C,OAAO,MACL,EAAE,YAAY,GACd,oFACF;GACA,OAAO,eAAe,MAAM,cAAc,gBAAgB;EAC5D;EACA,IACE,iBAAiB,eAAe,OAChC,CAAC,iBAAiB,iBAAiB,QAAQ,mBAAmB,GAC9D;GACA,OAAO,KACL;IAAE;IAAa,KAAK;GAAiB,GACrC,2BACF;GACA;EACF;EAEA,MAAM,OAAOA,KAAe;GAC1B,UAAU;GACV,KAAK;EACP,CAAC;EACD,MAAM,OAAoB,CAAC;EAE3B,IAAI,SAAS,KAAK,YAAY,GAAG;GAC/B,OAAO,KAAK,MAAM,2BAA2B,cAAc;GAC3D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,oCACF;GACA,MAAM,GAAG,UAAU,YAAY,SAAS,KAAK,YAAY,CAAC;GAC1D,MAAM,OAAO,MAAM,gBAAgB,QAAQ,IAAI;GAC/C,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;EAEpD,OAAO,IACL,YAAY,KAAK,YAAY,KAC7B,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,QAAQ,KACzB,YAAY,KAAK,KAAK,GACtB;GACA,OAAO,KAAK,MAAM,8BAA8B,cAAc;GAC9D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,MAAM,OAAO,MAAM,mBAAmB;GACtC,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;QAEhD,OAAO,KAAK,MACV;IAAE;IAAc;GAAiB,GACjC,kDACF;EAEJ,OAAO,IAAI,KAAK,YAAY,KAAK,UAAU;GACzC,OAAO,KAAK,MAAM,6BAA6B,cAAc;GAC7D,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,sCACF;GAIA,KAAK,UAAU,EAAE,eAAe,SAHnB,OAAO,KAAK,GAAG,KAAK,SAAS,GAAG,KAAK,UAAU,CAAC,CAAC,SAC5D,QAE0C,IAAI;EAClD,OAAO,IAAI,KAAK,OAAO;GACrB,MAAM,WAAW,KAAK,YAAY;GAClC,OAAO,KAAK,MACV,cAAc,SAAS,kBAAkB,cAC3C;GACA,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,SAAS,SAAS,2BACpB;GACA,KAAK,UAAU,EAAE,eAAe,GAAG,SAAS,GAAG,KAAK,QAAQ;EAC9D;EAGA,MAAM,qBADa,MAAM,iBAAiB,QAAQ,mBACd,CAAC,CAAC,MACnC,MAA4B,EAAE,WAAW,YAC5C;EASA,IACE,CAAC,sBACD,CAAC,SAAS,mBAAmB,QAAQ,KAAK,KAC1C,SAAS,mBAAmB,OAAO,KAAK,MAAM,MAC9C;GACA,OAAO,KAAK,MAAM,sCAAsC,cAAc;GACtE,OAAO,MACL;IAAE;IAAc;IAAkB;GAAmB,GACrD,oCACF;GACA,OAAO,KAAK,WAAW,KAAA;EACzB;EAGA,MAAM,UAAU,SAAS,GAAG,mBAAmB,OAAO,OAAO;EAG7D,IACE,SAAS,mBAAmB,OAAO,KAAK,KACxC,CAAC,YAAY,SAAS,MAAM,GAE5B,QAAQ,aAAa,OAAO,SAAS,mBAAmB,OAAO,KAAK;OAEpE,QAAQ,aAAa,OACnB,SACA,cAAc,iBAAiB,MACjC;EAGF,IAAI,SAAS,mBAAmB,OAAO,OAAO,GAC5C,QAAQ,aAAa,OAAO,WAAW,mBAAmB,OAAO,OAAO;EAG1E,OAAO,MACL;GAAE;GAAc;GAAkB,SAAS,QAAQ;EAAK,GACxD,iCACF;EACA,KAAK,SAAS;EACd,KAAK,gBAAgB;EACrB,MAAM,gBACJ,MAAM,KAAK,QAAQ,QAAQ,MAAM,MAAM,iBAAiB,EAAA,CACxD;EAEF,MAAM,QAAQ,aAAa,SAAS,aAAa;;EAEjD,IAAI,CAAC,OAAO;GACV,OAAO,KAAK,wCAAwC;GACpD;EACF;EAEA,uBAAuB,KAAK;EAC5B,OAAO,EACL,eAAe,UAAU,QAC3B;CACF,SAAS,gCAAgC;;EAEvC,IAAI,IAAI,SAAS,WAEf;;EAGF,IAAI,IAAI,eAAe,KAAK;GAC1B,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,4BACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;;EAEA,IAAI,IAAI,eAAe,KAAK;GAC1B,OAAO,MACL;IAAE;IAAc;GAAiB,GACjC,uCACF;GACA,OAAO,MAAM,EAAE,IAAI,CAAC;GACpB;EACF;EACA,IAAI,IAAI,SAAS,kBAAkB,aAAa,YAAY,GAC1D,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,IAAI,eAAe,OAAO,aAAa,YAAY,GACrD,MAAM,IAAI,kBAAkB,GAAG;;EAGjC,IAAI,IAAI,cAAc,OAAO,IAAI,aAAa,KAC5C,MAAM,IAAI,kBAAkB,GAAG;EAEjC,IAAI,IAAI,YAAA,kBACN,MAAM;;EAGR,IAAI,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,OAAO,GAAG;GACvD,OAAO,MACL;IAAE;IAAc;IAAkB;GAAI,GACtC,mBAAmB,GAAG,CACxB;GACA;EACF;EACA,OAAO,KACL;GAAE;GAAc;GAAkB;EAAI,GACtC,8BACF;EACA;CACF;AACF;AAEA,SAAgB,sBACd,aACA,aACoB;CACpB,IAAI,gBAAA,2BAA4B;EAC9B,MAAM,0BAA0B,oBAC9B,YAAY,QAAQ,MAAM,cAAc,GAAG,EAAE,CAC/C;EACA,IAAI,YAAY,WAAW,uBAAuB,GAAG;GACnD,IAAI,eAAe,kBAAkB,WAAW;GAChD,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;GAE5B,IAAI,mBAAmB,YAAY,QAAQ,yBAAyB,EAAE;GACtE,MAAM,UAAU,GAAG,aAAa,GAAG;GACnC,MAAM,gBAAgB,SAAS,OAAO;GACtC,IAAI,CAAC,eACH,OAAO;IAAE;IAAc;GAAiB;GAE1C,eAAe,cAAc;GAC7B,mBAAmB,cAAc,SAAS,UAAU,CAAC;GACrD,OAAO;IACL;IACA;GACF;EACF;CACF;CACA,IAAI,eAAe;CACnB,MAAM,QAAQ,YAAY,MAAM,GAAG;CACnC,IAAI,MAAM,SAAS,MAAM,MAAM,EAAE,CAAC,SAAS,GAAG,KAAK,MAAM,EAAE,CAAC,SAAS,GAAG,IAAI;EAC1E,CAAC,gBAAgB;EACjB,MAAM,MAAM;CACd;CACA,IAAI,mBAAmB,MAAM,KAAK,GAAG;CAErC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,KAAK,YAAY,GAC1C,eAAe,WAAW;CAG5B,MAAM,EAAE,MAAM,SAAS,aACrB,MAAM,yCAAyC,CAAC,CAAC,KAAK,YAAY,CAAC,EAAE,MACvE;CACA,IAAI,QAAQ,MAAM;EAChB,eAAe;EACf,mBAAmB,GAAG,kBAAkB,IAAI,EAAE,GAAG;CACnD;CAEA,eAAe,aACZ,QAAQ,qBAAqB,yBAAyB,CAAC,CACvD,QAAQ,gCAAgC,yBAAyB;CAMpE,IAJaA,KAAe;EAC1B,UAAA;EACA,KAAK;CACP,CACO,CAAC,EAAE,kBACR,eAAe,aAAa,QAAQ,SAAS,MAAM;CAErD,IAAI,aAAa,SAAS,YAAY,KAAK,CAAC,iBAAiB,SAAS,GAAG,GACvE,mBAAmB,WAAW;CAEhC,OAAO;EACL;EACA;CACF;AACF;AAEA,SAAgB,8BACd,kBACQ;CACR,OAAO,UAAU,SAAS,iBAAiB,IAAI;AACjD;AAEA,SAAgB,iBAAiB,MAA+B;CAC9D,IAAI,SAAwB;CAE5B,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,CAACC,IAAiB,QAAQ,GAAG,KAAK,CAACA,IAAiB,SAAS,GAAG,GAClE;EAGF,IAAI,CAAC,UAAUA,IAAiB,cAAc,KAAK,MAAM,GACvD,SAAS;CAEb;CAEA,OAAO;AACT;AAEA,MAAM,YAAY,MAAM,4BAA4B;AAEpD,SAAS,oBAAoB,KAAsB;CACjD,IAAI,eAAe,GAAG,MAAM,MAC1B,OAAO;CAGT,MAAM,SAAS,YAAY,GAAG;CAC9B,OAAO,UAAU,KAAK,OAAO,IAAI;AACnC;AAEA,SAAgB,kBAAkB,SAAuC;CACvE,IAAI,QAAQ,QAAQ,oBAAoB,QAAQ,IAAI,GAClD,OAAO,QAAQ;CAGjB,IAAI,CAAC,QAAQ,SAAS,QACpB,OAAO;CAGT,KAAK,MAAM,OAAO,QAAQ,SACxB,IAAI,oBAAoB,GAAG,GACzB,OAAO;CAKX,OAAO,QAAQ,QAAQ;AACzB"}

package/dist/modules/datasource/index.js

@@ -242,7 +242,7 @@ async function fetchReleases(config) {
 			[ATTR_RENOVATE_PACKAGE_NAME]: config.packageName
 		} });
 	} catch (err) {
-		if (err.message === "host-disabled" || err.err?.message === "host-disabled") return null;
+		if (["host-blocked", "host-disabled"].includes(err.message) || ["host-blocked", "host-disabled"].includes(err.err?.message)) return null;
 		if (err instanceof ExternalHostError) throw err;
 		logError(datasource.id, config.packageName, err);
 	}

package/dist/modules/datasource/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["datasources","packageCache.get","packageCache.set","versioning.get","memCache.get"],"sources":["../../../lib/modules/datasource/index.ts"],"sourcesContent":["import { ATTR_CODE_FUNCTION_NAME } from '@opentelemetry/semantic-conventions';\nimport {\n  isFunction,\n  isNonEmptyArray,\n  isString,\n  isTruthy,\n} from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { GlobalConfig } from '../../config/global.ts';\nimport { HOST_DISABLED } from '../../constants/error-messages.ts';\nimport { instrument } from '../../instrumentation/index.ts';\nimport {\n  ATTR_RENOVATE_DATASOURCE,\n  ATTR_RENOVATE_PACKAGE_NAME,\n  ATTR_RENOVATE_REGISTRY_URL,\n} from '../../instrumentation/types.ts';\nimport { logger } from '../../logger/index.ts';\nimport { ExternalHostError } from '../../types/errors/external-host-error.ts';\nimport { coerceArray } from '../../util/array.ts';\nimport * as memCache from '../../util/cache/memory/index.ts';\nimport * as packageCache from '../../util/cache/package/index.ts';\nimport type { PackageCacheNamespace } from '../../util/cache/package/types.ts';\nimport { clone } from '../../util/clone.ts';\nimport { filterMap } from '../../util/filter-map.ts';\nimport { AsyncResult, Result } from '../../util/result.ts';\nimport { DatasourceCacheStats } from '../../util/stats.ts';\nimport { safeStringify } from '../../util/stringify.ts';\nimport { trimTrailingSlash } from '../../util/url.ts';\nimport * as versioning from '../versioning/index.ts';\nimport datasources from './api.ts';\nimport {\n  applyConstraintsFiltering,\n  applyExtractVersion,\n  applyVersionCompatibility,\n  filterValidVersions,\n  getDatasourceFor,\n  sortAndRemoveDuplicates,\n} from './common.ts';\nimport { addMetaData } from './metadata.ts';\nimport { setNpmrc } from './npm/index.ts';\nimport { resolveRegistryUrl } from './npm/npmrc.ts';\nimport type {\n  DatasourceApi,\n  DigestConfig,\n  GetDigestInputConfig,\n  GetPkgReleasesConfig,\n  GetReleasesConfig,\n  ReleaseResult,\n} from './types.ts';\n\nexport { isGetPkgReleasesConfig } from './common.ts';\nexport * from './types.ts';\n\nexport function getDatasources(): Map<string, DatasourceApi> {\n  return datasources;\n}\nexport function getDatasourceList(): string[] {\n  return Array.from(datasources.keys());\n}\n\ntype GetReleasesInternalConfig = GetReleasesConfig & GetPkgReleasesConfig;\n\n// TODO: fix error Type\nfunction logError(datasource: string, packageName: string, err: any): void {\n  const { statusCode, code: errCode, url } = err;\n  if (statusCode === 404) {\n    logger.debug({ datasource, packageName, url }, 'Datasource 404');\n  } else if (statusCode === 401 || statusCode === 403) {\n    logger.debug({ datasource, packageName, url }, 'Datasource unauthorized');\n  } else if (errCode) {\n    logger.debug(\n      { datasource, packageName, url, errCode },\n      'Datasource connection error',\n    );\n  } else {\n    logger.debug({ datasource, packageName, err }, 'Datasource unknown error');\n  }\n}\n\nasync function getRegistryReleases(\n  datasource: DatasourceApi,\n  config: GetReleasesConfig,\n  registryUrl: string,\n): Promise<ReleaseResult | null> {\n  const cacheNamespace: PackageCacheNamespace = `datasource-releases-${datasource.id}`;\n  const cacheKey = `${registryUrl}:${config.packageName}`;\n\n  const cacheEnabled = !!datasource.caching; // tells if `isPrivate` flag is supported in datasource result\n  const cacheForced = GlobalConfig.get('cachePrivatePackages'); // tells if caching is forced via admin config\n\n  if (cacheEnabled || cacheForced) {\n    const cachedResult = await packageCache.get<ReleaseResult>(\n      cacheNamespace,\n      cacheKey,\n    );\n\n    if (cachedResult) {\n      logger.trace({ cacheKey }, 'Returning cached datasource response');\n      DatasourceCacheStats.hit(datasource.id, registryUrl, config.packageName);\n      return cachedResult;\n    }\n\n    DatasourceCacheStats.miss(datasource.id, registryUrl, config.packageName);\n  }\n\n  const res = await instrument(\n    'getReleases',\n    () => datasource.getReleases({ ...config, registryUrl }),\n    {\n      attributes: {\n        [ATTR_CODE_FUNCTION_NAME]: 'getReleases',\n        [ATTR_RENOVATE_DATASOURCE]: datasource.id,\n        [ATTR_RENOVATE_REGISTRY_URL]: registryUrl,\n        [ATTR_RENOVATE_PACKAGE_NAME]: config.packageName,\n      },\n    },\n  );\n  if (res?.releases.length) {\n    res.registryUrl ??= registryUrl;\n  }\n\n  if (!res) {\n    return null;\n  }\n\n  let cache = false;\n  if (cacheForced) {\n    cache = true;\n  } else if (cacheEnabled && !res.isPrivate) {\n    cache = true;\n  }\n\n  if (cache) {\n    logger.trace({ cacheKey }, 'Caching datasource response');\n    await packageCache.set(cacheNamespace, cacheKey, res, 15);\n    DatasourceCacheStats.set(datasource.id, registryUrl, config.packageName);\n  } else {\n    DatasourceCacheStats.skip(datasource.id, registryUrl, config.packageName);\n  }\n\n  return res;\n}\n\nfunction firstRegistry(\n  config: GetReleasesInternalConfig,\n  datasource: DatasourceApi,\n  registryUrls: string[],\n): Promise<ReleaseResult | null> {\n  if (registryUrls.length > 1) {\n    logger.warn(\n      {\n        datasource: datasource.id,\n        packageName: config.packageName,\n        registryUrls,\n      },\n      'Excess registryUrls found for datasource lookup - using first configured only',\n    );\n  }\n  const registryUrl = registryUrls[0];\n  return getRegistryReleases(datasource, config, registryUrl);\n}\n\nasync function huntRegistries(\n  config: GetReleasesInternalConfig,\n  datasource: DatasourceApi,\n  registryUrls: string[],\n): Promise<ReleaseResult | null> {\n  let res: ReleaseResult | null = null;\n  let caughtError: Error | undefined;\n  for (const registryUrl of registryUrls) {\n    try {\n      res = await getRegistryReleases(datasource, config, registryUrl);\n      if (res) {\n        break;\n      }\n    } catch (err) {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      // We'll always save the last-thrown error\n      caughtError = err;\n      logger.trace({ err }, 'datasource hunt failure');\n    }\n  }\n  if (res) {\n    return res;\n  }\n  if (caughtError) {\n    throw caughtError;\n  }\n  return null;\n}\n\nasync function mergeRegistries(\n  config: GetReleasesInternalConfig,\n  datasource: DatasourceApi,\n  registryUrls: string[],\n): Promise<ReleaseResult | null> {\n  let combinedRes: ReleaseResult | undefined;\n  let lastErr: Error | undefined;\n  let externalHostError: ExternalHostError | undefined;\n  let singleRegistry = true;\n  const releaseVersioning = versioning.get(config.versioning);\n  for (const registryUrl of registryUrls) {\n    try {\n      // Merging must not mutate responses shared by the package cache.\n      const res = clone(\n        await getRegistryReleases(datasource, config, registryUrl),\n      );\n      if (!res) {\n        continue;\n      }\n\n      if (!combinedRes) {\n        // This is the first registry, so we can just use it and continue\n        combinedRes = res;\n        continue;\n      }\n\n      if (singleRegistry) {\n        // This is the second registry\n        // We need to move the registryUrl from the package level to the release level\n        for (const release of coerceArray(combinedRes.releases)) {\n          release.registryUrl ??= combinedRes.registryUrl;\n        }\n        singleRegistry = false;\n      }\n\n      const releases = coerceArray(res.releases);\n      for (const release of releases) {\n        // We have more than one registry, so we need to move the registryUrl\n        // from the package level to the release level before merging\n        release.registryUrl ??= res.registryUrl;\n      }\n\n      combinedRes.releases.push(...releases);\n\n      // Merge the tags from the two results\n      let tags = combinedRes.tags;\n      if (tags) {\n        if (res.tags) {\n          // Both results had tags, so we need to compare them\n          for (const tag of ['release', 'latest']) {\n            const existingTag = combinedRes?.tags?.[tag];\n            const newTag = res.tags?.[tag];\n            if (isString(newTag) && releaseVersioning.isVersion(newTag)) {\n              if (\n                isString(existingTag) &&\n                releaseVersioning.isVersion(existingTag)\n              ) {\n                // We need to compare them\n                if (releaseVersioning.isGreaterThan(newTag, existingTag)) {\n                  // New tag is greater than the existing one\n                  tags[tag] = newTag;\n                }\n              } else {\n                // Existing tag was not present or not a version\n                // so we can just use the new one\n                tags[tag] = newTag;\n              }\n            }\n          }\n        }\n      } else {\n        // Existing results had no tags, so we can just use the new ones\n        tags = res.tags;\n      }\n      combinedRes = { ...res, ...combinedRes };\n      if (tags) {\n        combinedRes.tags = tags;\n      }\n      // Remove the registryUrl from the package level when more than one registry\n      delete combinedRes.registryUrl;\n    } catch (err) {\n      if (err instanceof ExternalHostError) {\n        // Don't abort the merge if another registry already returned releases;\n        // a single rate-limited registry shouldn't discard results we have\n        externalHostError = err;\n        logger.debug(\n          { err, registryUrl },\n          'datasource merge: external host error from registry; continuing so releases from other registries are not discarded',\n        );\n        continue;\n      }\n\n      lastErr = err;\n      logger.trace({ err }, 'datasource merge failure');\n    }\n  }\n\n  if (!combinedRes) {\n    if (externalHostError) {\n      throw externalHostError;\n    }\n\n    if (lastErr) {\n      throw lastErr;\n    }\n\n    return null;\n  }\n\n  const seenVersions = new Set<string>();\n  combinedRes.releases = filterMap(combinedRes.releases, (release) => {\n    if (seenVersions.has(release.version)) {\n      return null;\n    }\n    seenVersions.add(release.version);\n    return release;\n  });\n\n  return combinedRes;\n}\n\nfunction massageRegistryUrls(registryUrls: string[]): string[] {\n  return registryUrls.filter(isTruthy).map(trimTrailingSlash);\n}\n\nfunction resolveRegistryUrls(\n  datasource: DatasourceApi,\n  defaultRegistryUrls: string[] | undefined,\n  registryUrls: string[] | undefined | null,\n  additionalRegistryUrls: string[] | undefined,\n): string[] {\n  if (!datasource.customRegistrySupport) {\n    if (\n      isNonEmptyArray(registryUrls) ||\n      isNonEmptyArray(defaultRegistryUrls) ||\n      isNonEmptyArray(additionalRegistryUrls)\n    ) {\n      logger.warn(\n        {\n          datasource: datasource.id,\n          registryUrls,\n          defaultRegistryUrls,\n          additionalRegistryUrls,\n        },\n        'Custom registries are not allowed for this datasource and will be ignored',\n      );\n    }\n    return isFunction(datasource.defaultRegistryUrls)\n      ? datasource.defaultRegistryUrls()\n      : coerceArray(datasource.defaultRegistryUrls);\n  }\n  const customUrls = registryUrls?.filter(isTruthy);\n  let resolvedUrls: string[] = [];\n  if (isNonEmptyArray(customUrls)) {\n    resolvedUrls = [...customUrls];\n  } else if (isNonEmptyArray(defaultRegistryUrls)) {\n    resolvedUrls = [...defaultRegistryUrls];\n    resolvedUrls = resolvedUrls.concat(coerceArray(additionalRegistryUrls));\n  } else if (isFunction(datasource.defaultRegistryUrls)) {\n    resolvedUrls = [...datasource.defaultRegistryUrls()];\n    resolvedUrls = resolvedUrls.concat(coerceArray(additionalRegistryUrls));\n  } else if (isNonEmptyArray(datasource.defaultRegistryUrls)) {\n    resolvedUrls = [...datasource.defaultRegistryUrls];\n    resolvedUrls = resolvedUrls.concat(coerceArray(additionalRegistryUrls));\n  }\n  return massageRegistryUrls(resolvedUrls);\n}\n\nfunction applyReplacements(\n  config: GetReleasesInternalConfig,\n): Pick<ReleaseResult, 'replacementName' | 'replacementVersion'> | undefined {\n  if (config.replacementName && config.replacementVersion) {\n    return {\n      replacementName: config.replacementName,\n      replacementVersion: config.replacementVersion,\n    };\n  }\n  return undefined;\n}\n\nasync function fetchReleases(\n  config: GetReleasesInternalConfig,\n): Promise<ReleaseResult | null> {\n  const { datasource: datasourceName } = config;\n  let { registryUrls } = config;\n  // istanbul ignore if: need test\n  if (!datasourceName || getDatasourceFor(datasourceName) === undefined) {\n    logger.warn({ datasource: datasourceName }, 'Unknown datasource');\n    return null;\n  }\n  if (datasourceName === 'npm') {\n    if (isString(config.npmrc)) {\n      setNpmrc(config.npmrc);\n    }\n    if (!isNonEmptyArray(registryUrls)) {\n      registryUrls = [resolveRegistryUrl(config.packageName)];\n    }\n  }\n  const datasource = getDatasourceFor(datasourceName);\n  // istanbul ignore if: needs test\n  if (!datasource) {\n    logger.warn({ datasource: datasourceName }, 'Unknown datasource');\n    return null;\n  }\n  registryUrls = resolveRegistryUrls(\n    datasource,\n    config.defaultRegistryUrls,\n    registryUrls,\n    config.additionalRegistryUrls,\n  );\n  let dep: ReleaseResult | null = null;\n  const registryStrategy =\n    config.registryStrategy ?? datasource.registryStrategy ?? 'hunt';\n  try {\n    if (isNonEmptyArray(registryUrls)) {\n      if (registryStrategy === 'first') {\n        dep = await firstRegistry(config, datasource, registryUrls);\n      } else if (registryStrategy === 'hunt') {\n        dep = await huntRegistries(config, datasource, registryUrls);\n      } else if (registryStrategy === 'merge') {\n        dep = await mergeRegistries(config, datasource, registryUrls);\n      }\n    } else {\n      dep = await instrument(\n        'getReleases',\n        () => datasource.getReleases(config),\n        {\n          attributes: {\n            [ATTR_CODE_FUNCTION_NAME]: 'getReleases',\n            [ATTR_RENOVATE_DATASOURCE]: datasource.id,\n            [ATTR_RENOVATE_REGISTRY_URL]: config.registryUrl ?? '',\n            [ATTR_RENOVATE_PACKAGE_NAME]: config.packageName,\n          },\n        },\n      );\n    }\n  } catch (err) {\n    if (err.message === HOST_DISABLED || err.err?.message === HOST_DISABLED) {\n      return null;\n    }\n    if (err instanceof ExternalHostError) {\n      throw err;\n    }\n    logError(datasource.id, config.packageName, err);\n  }\n  if (!dep || dequal(dep, { releases: [] })) {\n    return null;\n  }\n  addMetaData(dep, datasourceName, config.packageName);\n  dep = { ...dep, ...applyReplacements(config) };\n  return dep;\n}\n\nfunction fetchCachedReleases(\n  config: GetReleasesInternalConfig,\n): Promise<ReleaseResult | null> {\n  const { datasource, packageName, registryUrls } = config;\n  const cacheKey = `datasource-mem:releases:${datasource}:${packageName}:${config.registryStrategy}:${safeStringify(\n    [registryUrls, config.defaultRegistryUrls, config.additionalRegistryUrls],\n  )}`;\n  // By returning a Promise and reusing it, we should only fetch each package at most once\n  const cachedResult = memCache.get<Promise<ReleaseResult | null>>(cacheKey);\n  // istanbul ignore if\n  if (cachedResult !== undefined) {\n    return cachedResult;\n  }\n  const promisedRes = fetchReleases(config);\n  memCache.set(cacheKey, promisedRes);\n  return promisedRes;\n}\n\nexport function getRawPkgReleases(\n  config: GetPkgReleasesConfig,\n): AsyncResult<\n  ReleaseResult,\n  Error | 'no-datasource' | 'no-package-name' | 'no-result'\n> {\n  if (!config.datasource) {\n    logger.warn('No datasource found');\n    return AsyncResult.err('no-datasource');\n  }\n\n  const packageName = config.packageName;\n  if (!packageName) {\n    logger.error({ config }, 'Datasource getReleases without packageName');\n    return AsyncResult.err('no-package-name');\n  }\n\n  return Result.wrapNullable(fetchCachedReleases(config), 'no-result' as const)\n    .catch((e) => {\n      if (e instanceof ExternalHostError) {\n        e.hostType = config.datasource;\n        e.packageName = packageName;\n      }\n      return Result.err(e);\n    })\n    .transform(clone);\n}\n\nexport function applyDatasourceFilters(\n  releaseResult: ReleaseResult,\n  config: GetPkgReleasesConfig,\n): ReleaseResult {\n  let res = releaseResult;\n  res = applyExtractVersion(res, config.extractVersion);\n  res = applyVersionCompatibility(\n    res,\n    config.versionCompatibility,\n    config.currentCompatibility,\n  );\n  res = filterValidVersions(res, config);\n  res = sortAndRemoveDuplicates(res, config);\n  res = applyConstraintsFiltering(res, config);\n  return res;\n}\n\nexport async function getPkgReleases(\n  config: GetPkgReleasesConfig,\n): Promise<ReleaseResult | null> {\n  const { val = null, err } = await getRawPkgReleases(config)\n    .transform((res) => applyDatasourceFilters(res, config))\n    .unwrap();\n\n  if (err instanceof Error) {\n    throw err;\n  }\n\n  return val;\n}\n\nexport function supportsDigests(datasource: string | undefined): boolean {\n  const ds = !!datasource && getDatasourceFor(datasource);\n  return !!ds && 'getDigest' in ds;\n}\n\nfunction getDigestConfig(\n  datasource: DatasourceApi,\n  config: GetDigestInputConfig,\n): DigestConfig {\n  const { lookupName, currentValue, currentDigest } = config;\n  const packageName = config.replacementName ?? config.packageName;\n  // Prefer registryUrl from getReleases() lookup if it has been passed\n  const registryUrl =\n    config.registryUrl ??\n    resolveRegistryUrls(\n      datasource,\n      config.defaultRegistryUrls,\n      config.registryUrls,\n      config.additionalRegistryUrls,\n    )[0];\n  return { lookupName, packageName, registryUrl, currentValue, currentDigest };\n}\n\nexport function getDigest(\n  config: GetDigestInputConfig,\n  value?: string,\n): Promise<string | null> {\n  const datasource = getDatasourceFor(config.datasource);\n  // istanbul ignore if: need test\n  if (!datasource || !('getDigest' in datasource)) {\n    return Promise.resolve(null);\n  }\n  const digestConfig = getDigestConfig(datasource, config);\n  return datasource.getDigest!(digestConfig, value);\n}\n\nexport function getDefaultConfig(\n  datasource: string,\n): Promise<Record<string, unknown>> {\n  const loadedDatasource = getDatasourceFor(datasource);\n  return Promise.resolve<Record<string, unknown>>(\n    loadedDatasource?.defaultConfig ?? Object.create({}),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,SAAgB,iBAA6C;CAC3D,OAAOA;AACT;AACA,SAAgB,oBAA8B;CAC5C,OAAO,MAAM,KAAKA,IAAY,KAAK,CAAC;AACtC;AAKA,SAAS,SAAS,YAAoB,aAAqB,KAAgB;CACzE,MAAM,EAAE,YAAY,MAAM,SAAS,QAAQ;CAC3C,IAAI,eAAe,KACjB,OAAO,MAAM;EAAE;EAAY;EAAa;CAAI,GAAG,gBAAgB;MAC1D,IAAI,eAAe,OAAO,eAAe,KAC9C,OAAO,MAAM;EAAE;EAAY;EAAa;CAAI,GAAG,yBAAyB;MACnE,IAAI,SACT,OAAO,MACL;EAAE;EAAY;EAAa;EAAK;CAAQ,GACxC,6BACF;MAEA,OAAO,MAAM;EAAE;EAAY;EAAa;CAAI,GAAG,0BAA0B;AAE7E;AAEA,eAAe,oBACb,YACA,QACA,aAC+B;CAC/B,MAAM,iBAAwC,uBAAuB,WAAW;CAChF,MAAM,WAAW,GAAG,YAAY,GAAG,OAAO;CAE1C,MAAM,eAAe,CAAC,CAAC,WAAW;CAClC,MAAM,cAAc,aAAa,IAAI,sBAAsB;CAE3D,IAAI,gBAAgB,aAAa;EAC/B,MAAM,eAAe,MAAMC,MACzB,gBACA,QACF;EAEA,IAAI,cAAc;GAChB,OAAO,MAAM,EAAE,SAAS,GAAG,sCAAsC;GACjE,qBAAqB,IAAI,WAAW,IAAI,aAAa,OAAO,WAAW;GACvE,OAAO;EACT;EAEA,qBAAqB,KAAK,WAAW,IAAI,aAAa,OAAO,WAAW;CAC1E;CAEA,MAAM,MAAM,MAAM,WAChB,qBACM,WAAW,YAAY;EAAE,GAAG;EAAQ;CAAY,CAAC,GACvD,EACE,YAAY;GACT,0BAA0B;GAC1B,2BAA2B,WAAW;GACtC,6BAA6B;GAC7B,6BAA6B,OAAO;CACvC,EACF,CACF;CACA,IAAI,KAAK,SAAS,QAChB,IAAI,gBAAgB;CAGtB,IAAI,CAAC,KACH,OAAO;CAGT,IAAI,QAAQ;CACZ,IAAI,aACF,QAAQ;MACH,IAAI,gBAAgB,CAAC,IAAI,WAC9B,QAAQ;CAGV,IAAI,OAAO;EACT,OAAO,MAAM,EAAE,SAAS,GAAG,6BAA6B;EACxD,MAAMC,MAAiB,gBAAgB,UAAU,KAAK,EAAE;EACxD,qBAAqB,IAAI,WAAW,IAAI,aAAa,OAAO,WAAW;CACzE,OACE,qBAAqB,KAAK,WAAW,IAAI,aAAa,OAAO,WAAW;CAG1E,OAAO;AACT;AAEA,SAAS,cACP,QACA,YACA,cAC+B;CAC/B,IAAI,aAAa,SAAS,GACxB,OAAO,KACL;EACE,YAAY,WAAW;EACvB,aAAa,OAAO;EACpB;CACF,GACA,+EACF;CAEF,MAAM,cAAc,aAAa;CACjC,OAAO,oBAAoB,YAAY,QAAQ,WAAW;AAC5D;AAEA,eAAe,eACb,QACA,YACA,cAC+B;CAC/B,IAAI,MAA4B;CAChC,IAAI;CACJ,KAAK,MAAM,eAAe,cACxB,IAAI;EACF,MAAM,MAAM,oBAAoB,YAAY,QAAQ,WAAW;EAC/D,IAAI,KACF;CAEJ,SAAS,KAAK;EACZ,IAAI,eAAe,mBACjB,MAAM;EAGR,cAAc;EACd,OAAO,MAAM,EAAE,IAAI,GAAG,yBAAyB;CACjD;CAEF,IAAI,KACF,OAAO;CAET,IAAI,aACF,MAAM;CAER,OAAO;AACT;AAEA,eAAe,gBACb,QACA,YACA,cAC+B;CAC/B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,iBAAiB;CACrB,MAAM,oBAAoBC,MAAe,OAAO,UAAU;CAC1D,KAAK,MAAM,eAAe,cACxB,IAAI;EAEF,MAAM,MAAM,MACV,MAAM,oBAAoB,YAAY,QAAQ,WAAW,CAC3D;EACA,IAAI,CAAC,KACH;EAGF,IAAI,CAAC,aAAa;GAEhB,cAAc;GACd;EACF;EAEA,IAAI,gBAAgB;GAGlB,KAAK,MAAM,WAAW,YAAY,YAAY,QAAQ,GACpD,QAAQ,gBAAgB,YAAY;GAEtC,iBAAiB;EACnB;EAEA,MAAM,WAAW,YAAY,IAAI,QAAQ;EACzC,KAAK,MAAM,WAAW,UAGpB,QAAQ,gBAAgB,IAAI;EAG9B,YAAY,SAAS,KAAK,GAAG,QAAQ;EAGrC,IAAI,OAAO,YAAY;EACvB,IAAI,MACE;OAAA,IAAI,MAEN,KAAK,MAAM,OAAO,CAAC,WAAW,QAAQ,GAAG;IACvC,MAAM,cAAc,aAAa,OAAO;IACxC,MAAM,SAAS,IAAI,OAAO;IAC1B,IAAI,SAAS,MAAM,KAAK,kBAAkB,UAAU,MAAM,GAAG;KAC3D,IACE,SAAS,WAAW,KACpB,kBAAkB,UAAU,WAAW,GAGnC;UAAA,kBAAkB,cAAc,QAAQ,WAAW,GAErD,KAAK,OAAO;KAAA,OAKd,KAAK,OAAO;IAEhB;GACF;SAIF,OAAO,IAAI;EAEb,cAAc;GAAE,GAAG;GAAK,GAAG;EAAY;EACvC,IAAI,MACF,YAAY,OAAO;EAGrB,OAAO,YAAY;CACrB,SAAS,KAAK;EACZ,IAAI,eAAe,mBAAmB;GAGpC,oBAAoB;GACpB,OAAO,MACL;IAAE;IAAK;GAAY,GACnB,qHACF;GACA;EACF;EAEA,UAAU;EACV,OAAO,MAAM,EAAE,IAAI,GAAG,0BAA0B;CAClD;CAGF,IAAI,CAAC,aAAa;EAChB,IAAI,mBACF,MAAM;EAGR,IAAI,SACF,MAAM;EAGR,OAAO;CACT;CAEA,MAAM,+BAAe,IAAI,IAAY;CACrC,YAAY,WAAW,UAAU,YAAY,WAAW,YAAY;EAClE,IAAI,aAAa,IAAI,QAAQ,OAAO,GAClC,OAAO;EAET,aAAa,IAAI,QAAQ,OAAO;EAChC,OAAO;CACT,CAAC;CAED,OAAO;AACT;AAEA,SAAS,oBAAoB,cAAkC;CAC7D,OAAO,aAAa,OAAO,QAAQ,CAAC,CAAC,IAAI,iBAAiB;AAC5D;AAEA,SAAS,oBACP,YACA,qBACA,cACA,wBACU;CACV,IAAI,CAAC,WAAW,uBAAuB;EACrC,IACE,gBAAgB,YAAY,KAC5B,gBAAgB,mBAAmB,KACnC,gBAAgB,sBAAsB,GAEtC,OAAO,KACL;GACE,YAAY,WAAW;GACvB;GACA;GACA;EACF,GACA,2EACF;EAEF,OAAO,WAAW,WAAW,mBAAmB,IAC5C,WAAW,oBAAoB,IAC/B,YAAY,WAAW,mBAAmB;CAChD;CACA,MAAM,aAAa,cAAc,OAAO,QAAQ;CAChD,IAAI,eAAyB,CAAC;CAC9B,IAAI,gBAAgB,UAAU,GAC5B,eAAe,CAAC,GAAG,UAAU;MACxB,IAAI,gBAAgB,mBAAmB,GAAG;EAC/C,eAAe,CAAC,GAAG,mBAAmB;EACtC,eAAe,aAAa,OAAO,YAAY,sBAAsB,CAAC;CACxE,OAAO,IAAI,WAAW,WAAW,mBAAmB,GAAG;EACrD,eAAe,CAAC,GAAG,WAAW,oBAAoB,CAAC;EACnD,eAAe,aAAa,OAAO,YAAY,sBAAsB,CAAC;CACxE,OAAO,IAAI,gBAAgB,WAAW,mBAAmB,GAAG;EAC1D,eAAe,CAAC,GAAG,WAAW,mBAAmB;EACjD,eAAe,aAAa,OAAO,YAAY,sBAAsB,CAAC;CACxE;CACA,OAAO,oBAAoB,YAAY;AACzC;AAEA,SAAS,kBACP,QAC2E;CAC3E,IAAI,OAAO,mBAAmB,OAAO,oBACnC,OAAO;EACL,iBAAiB,OAAO;EACxB,oBAAoB,OAAO;CAC7B;AAGJ;AAEA,eAAe,cACb,QAC+B;CAC/B,MAAM,EAAE,YAAY,mBAAmB;CACvC,IAAI,EAAE,iBAAiB;;CAEvB,IAAI,CAAC,kBAAkB,iBAAiB,cAAc,MAAM,KAAA,GAAW;EACrE,OAAO,KAAK,EAAE,YAAY,eAAe,GAAG,oBAAoB;EAChE,OAAO;CACT;CACA,IAAI,mBAAmB,OAAO;EAC5B,IAAI,SAAS,OAAO,KAAK,GACvB,SAAS,OAAO,KAAK;EAEvB,IAAI,CAAC,gBAAgB,YAAY,GAC/B,eAAe,CAAC,mBAAmB,OAAO,WAAW,CAAC;CAE1D;CACA,MAAM,aAAa,iBAAiB,cAAc;;CAElD,IAAI,CAAC,YAAY;EACf,OAAO,KAAK,EAAE,YAAY,eAAe,GAAG,oBAAoB;EAChE,OAAO;CACT;CACA,eAAe,oBACb,YACA,OAAO,qBACP,cACA,OAAO,sBACT;CACA,IAAI,MAA4B;CAChC,MAAM,mBACJ,OAAO,oBAAoB,WAAW,oBAAoB;CAC5D,IAAI;EACF,IAAI,gBAAgB,YAAY,GAAG;GACjC,IAAI,qBAAqB,SACvB,MAAM,MAAM,cAAc,QAAQ,YAAY,YAAY;QACrD,IAAI,qBAAqB,QAC9B,MAAM,MAAM,eAAe,QAAQ,YAAY,YAAY;QACtD,IAAI,qBAAqB,SAC9B,MAAM,MAAM,gBAAgB,QAAQ,YAAY,YAAY;EAEhE,OACE,MAAM,MAAM,WACV,qBACM,WAAW,YAAY,MAAM,GACnC,EACE,YAAY;IACT,0BAA0B;IAC1B,2BAA2B,WAAW;IACtC,6BAA6B,OAAO,eAAe;IACnD,6BAA6B,OAAO;EACvC,EACF,CACF;CAEJ,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBAA6B,IAAI,KAAK,YAAA,iBAC5C,OAAO;EAET,IAAI,eAAe,mBACjB,MAAM;EAER,SAAS,WAAW,IAAI,OAAO,aAAa,GAAG;CACjD;CACA,IAAI,CAAC,OAAO,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,GACtC,OAAO;CAET,YAAY,KAAK,gBAAgB,OAAO,WAAW;CACnD,MAAM;EAAE,GAAG;EAAK,GAAG,kBAAkB,MAAM;CAAE;CAC7C,OAAO;AACT;AAEA,SAAS,oBACP,QAC+B;CAC/B,MAAM,EAAE,YAAY,aAAa,iBAAiB;CAClD,MAAM,WAAW,2BAA2B,WAAW,GAAG,YAAY,GAAG,OAAO,iBAAiB,GAAG,cAClG;EAAC;EAAc,OAAO;EAAqB,OAAO;CAAsB,CAC1E;CAEA,MAAM,eAAeC,IAA4C,QAAQ;;CAEzE,IAAI,iBAAiB,KAAA,GACnB,OAAO;CAET,MAAM,cAAc,cAAc,MAAM;CACxC,IAAa,UAAU,WAAW;CAClC,OAAO;AACT;AAEA,SAAgB,kBACd,QAIA;CACA,IAAI,CAAC,OAAO,YAAY;EACtB,OAAO,KAAK,qBAAqB;EACjC,OAAO,YAAY,IAAI,eAAe;CACxC;CAEA,MAAM,cAAc,OAAO;CAC3B,IAAI,CAAC,aAAa;EAChB,OAAO,MAAM,EAAE,OAAO,GAAG,4CAA4C;EACrE,OAAO,YAAY,IAAI,iBAAiB;CAC1C;CAEA,OAAO,OAAO,aAAa,oBAAoB,MAAM,GAAG,WAAoB,CAAC,CAC1E,OAAO,MAAM;EACZ,IAAI,aAAa,mBAAmB;GAClC,EAAE,WAAW,OAAO;GACpB,EAAE,cAAc;EAClB;EACA,OAAO,OAAO,IAAI,CAAC;CACrB,CAAC,CAAC,CACD,UAAU,KAAK;AACpB;AAEA,SAAgB,uBACd,eACA,QACe;CACf,IAAI,MAAM;CACV,MAAM,oBAAoB,KAAK,OAAO,cAAc;CACpD,MAAM,0BACJ,KACA,OAAO,sBACP,OAAO,oBACT;CACA,MAAM,oBAAoB,KAAK,MAAM;CACrC,MAAM,wBAAwB,KAAK,MAAM;CACzC,MAAM,0BAA0B,KAAK,MAAM;CAC3C,OAAO;AACT;AAEA,eAAsB,eACpB,QAC+B;CAC/B,MAAM,EAAE,MAAM,MAAM,QAAQ,MAAM,kBAAkB,MAAM,CAAC,CACxD,WAAW,QAAQ,uBAAuB,KAAK,MAAM,CAAC,CAAC,CACvD,OAAO;CAEV,IAAI,eAAe,OACjB,MAAM;CAGR,OAAO;AACT;AAEA,SAAgB,gBAAgB,YAAyC;CACvE,MAAM,KAAK,CAAC,CAAC,cAAc,iBAAiB,UAAU;CACtD,OAAO,CAAC,CAAC,MAAM,eAAe;AAChC;AAEA,SAAS,gBACP,YACA,QACc;CACd,MAAM,EAAE,YAAY,cAAc,kBAAkB;CAWpD,OAAO;EAAE;EAAY,aAVD,OAAO,mBAAmB,OAAO;EAUnB,aAPhC,OAAO,eACP,oBACE,YACA,OAAO,qBACP,OAAO,cACP,OAAO,sBACT,CAAC,CAAC;EAC2C;EAAc;CAAc;AAC7E;AAEA,SAAgB,UACd,QACA,OACwB;CACxB,MAAM,aAAa,iBAAiB,OAAO,UAAU;;CAErD,IAAI,CAAC,cAAc,EAAE,eAAe,aAClC,OAAO,QAAQ,QAAQ,IAAI;CAE7B,MAAM,eAAe,gBAAgB,YAAY,MAAM;CACvD,OAAO,WAAW,UAAW,cAAc,KAAK;AAClD;AAEA,SAAgB,iBACd,YACkC;CAClC,MAAM,mBAAmB,iBAAiB,UAAU;CACpD,OAAO,QAAQ,QACb,kBAAkB,iBAAiB,OAAO,OAAO,CAAC,CAAC,CACrD;AACF"}
+{"version":3,"file":"index.js","names":["datasources","packageCache.get","packageCache.set","versioning.get","memCache.get"],"sources":["../../../lib/modules/datasource/index.ts"],"sourcesContent":["import { ATTR_CODE_FUNCTION_NAME } from '@opentelemetry/semantic-conventions';\nimport {\n  isFunction,\n  isNonEmptyArray,\n  isString,\n  isTruthy,\n} from '@sindresorhus/is';\nimport { dequal } from 'dequal';\nimport { GlobalConfig } from '../../config/global.ts';\nimport { HOST_BLOCKED, HOST_DISABLED } from '../../constants/error-messages.ts';\nimport { instrument } from '../../instrumentation/index.ts';\nimport {\n  ATTR_RENOVATE_DATASOURCE,\n  ATTR_RENOVATE_PACKAGE_NAME,\n  ATTR_RENOVATE_REGISTRY_URL,\n} from '../../instrumentation/types.ts';\nimport { logger } from '../../logger/index.ts';\nimport { ExternalHostError } from '../../types/errors/external-host-error.ts';\nimport { coerceArray } from '../../util/array.ts';\nimport * as memCache from '../../util/cache/memory/index.ts';\nimport * as packageCache from '../../util/cache/package/index.ts';\nimport type { PackageCacheNamespace } from '../../util/cache/package/types.ts';\nimport { clone } from '../../util/clone.ts';\nimport { filterMap } from '../../util/filter-map.ts';\nimport { AsyncResult, Result } from '../../util/result.ts';\nimport { DatasourceCacheStats } from '../../util/stats.ts';\nimport { safeStringify } from '../../util/stringify.ts';\nimport { trimTrailingSlash } from '../../util/url.ts';\nimport * as versioning from '../versioning/index.ts';\nimport datasources from './api.ts';\nimport {\n  applyConstraintsFiltering,\n  applyExtractVersion,\n  applyVersionCompatibility,\n  filterValidVersions,\n  getDatasourceFor,\n  sortAndRemoveDuplicates,\n} from './common.ts';\nimport { addMetaData } from './metadata.ts';\nimport { setNpmrc } from './npm/index.ts';\nimport { resolveRegistryUrl } from './npm/npmrc.ts';\nimport type {\n  DatasourceApi,\n  DigestConfig,\n  GetDigestInputConfig,\n  GetPkgReleasesConfig,\n  GetReleasesConfig,\n  ReleaseResult,\n} from './types.ts';\n\nexport { isGetPkgReleasesConfig } from './common.ts';\nexport * from './types.ts';\n\nexport function getDatasources(): Map<string, DatasourceApi> {\n  return datasources;\n}\nexport function getDatasourceList(): string[] {\n  return Array.from(datasources.keys());\n}\n\ntype GetReleasesInternalConfig = GetReleasesConfig & GetPkgReleasesConfig;\n\n// TODO: fix error Type\nfunction logError(datasource: string, packageName: string, err: any): void {\n  const { statusCode, code: errCode, url } = err;\n  if (statusCode === 404) {\n    logger.debug({ datasource, packageName, url }, 'Datasource 404');\n  } else if (statusCode === 401 || statusCode === 403) {\n    logger.debug({ datasource, packageName, url }, 'Datasource unauthorized');\n  } else if (errCode) {\n    logger.debug(\n      { datasource, packageName, url, errCode },\n      'Datasource connection error',\n    );\n  } else {\n    logger.debug({ datasource, packageName, err }, 'Datasource unknown error');\n  }\n}\n\nasync function getRegistryReleases(\n  datasource: DatasourceApi,\n  config: GetReleasesConfig,\n  registryUrl: string,\n): Promise<ReleaseResult | null> {\n  const cacheNamespace: PackageCacheNamespace = `datasource-releases-${datasource.id}`;\n  const cacheKey = `${registryUrl}:${config.packageName}`;\n\n  const cacheEnabled = !!datasource.caching; // tells if `isPrivate` flag is supported in datasource result\n  const cacheForced = GlobalConfig.get('cachePrivatePackages'); // tells if caching is forced via admin config\n\n  if (cacheEnabled || cacheForced) {\n    const cachedResult = await packageCache.get<ReleaseResult>(\n      cacheNamespace,\n      cacheKey,\n    );\n\n    if (cachedResult) {\n      logger.trace({ cacheKey }, 'Returning cached datasource response');\n      DatasourceCacheStats.hit(datasource.id, registryUrl, config.packageName);\n      return cachedResult;\n    }\n\n    DatasourceCacheStats.miss(datasource.id, registryUrl, config.packageName);\n  }\n\n  const res = await instrument(\n    'getReleases',\n    () => datasource.getReleases({ ...config, registryUrl }),\n    {\n      attributes: {\n        [ATTR_CODE_FUNCTION_NAME]: 'getReleases',\n        [ATTR_RENOVATE_DATASOURCE]: datasource.id,\n        [ATTR_RENOVATE_REGISTRY_URL]: registryUrl,\n        [ATTR_RENOVATE_PACKAGE_NAME]: config.packageName,\n      },\n    },\n  );\n  if (res?.releases.length) {\n    res.registryUrl ??= registryUrl;\n  }\n\n  if (!res) {\n    return null;\n  }\n\n  let cache = false;\n  if (cacheForced) {\n    cache = true;\n  } else if (cacheEnabled && !res.isPrivate) {\n    cache = true;\n  }\n\n  if (cache) {\n    logger.trace({ cacheKey }, 'Caching datasource response');\n    await packageCache.set(cacheNamespace, cacheKey, res, 15);\n    DatasourceCacheStats.set(datasource.id, registryUrl, config.packageName);\n  } else {\n    DatasourceCacheStats.skip(datasource.id, registryUrl, config.packageName);\n  }\n\n  return res;\n}\n\nfunction firstRegistry(\n  config: GetReleasesInternalConfig,\n  datasource: DatasourceApi,\n  registryUrls: string[],\n): Promise<ReleaseResult | null> {\n  if (registryUrls.length > 1) {\n    logger.warn(\n      {\n        datasource: datasource.id,\n        packageName: config.packageName,\n        registryUrls,\n      },\n      'Excess registryUrls found for datasource lookup - using first configured only',\n    );\n  }\n  const registryUrl = registryUrls[0];\n  return getRegistryReleases(datasource, config, registryUrl);\n}\n\nasync function huntRegistries(\n  config: GetReleasesInternalConfig,\n  datasource: DatasourceApi,\n  registryUrls: string[],\n): Promise<ReleaseResult | null> {\n  let res: ReleaseResult | null = null;\n  let caughtError: Error | undefined;\n  for (const registryUrl of registryUrls) {\n    try {\n      res = await getRegistryReleases(datasource, config, registryUrl);\n      if (res) {\n        break;\n      }\n    } catch (err) {\n      if (err instanceof ExternalHostError) {\n        throw err;\n      }\n      // We'll always save the last-thrown error\n      caughtError = err;\n      logger.trace({ err }, 'datasource hunt failure');\n    }\n  }\n  if (res) {\n    return res;\n  }\n  if (caughtError) {\n    throw caughtError;\n  }\n  return null;\n}\n\nasync function mergeRegistries(\n  config: GetReleasesInternalConfig,\n  datasource: DatasourceApi,\n  registryUrls: string[],\n): Promise<ReleaseResult | null> {\n  let combinedRes: ReleaseResult | undefined;\n  let lastErr: Error | undefined;\n  let externalHostError: ExternalHostError | undefined;\n  let singleRegistry = true;\n  const releaseVersioning = versioning.get(config.versioning);\n  for (const registryUrl of registryUrls) {\n    try {\n      // Merging must not mutate responses shared by the package cache.\n      const res = clone(\n        await getRegistryReleases(datasource, config, registryUrl),\n      );\n      if (!res) {\n        continue;\n      }\n\n      if (!combinedRes) {\n        // This is the first registry, so we can just use it and continue\n        combinedRes = res;\n        continue;\n      }\n\n      if (singleRegistry) {\n        // This is the second registry\n        // We need to move the registryUrl from the package level to the release level\n        for (const release of coerceArray(combinedRes.releases)) {\n          release.registryUrl ??= combinedRes.registryUrl;\n        }\n        singleRegistry = false;\n      }\n\n      const releases = coerceArray(res.releases);\n      for (const release of releases) {\n        // We have more than one registry, so we need to move the registryUrl\n        // from the package level to the release level before merging\n        release.registryUrl ??= res.registryUrl;\n      }\n\n      combinedRes.releases.push(...releases);\n\n      // Merge the tags from the two results\n      let tags = combinedRes.tags;\n      if (tags) {\n        if (res.tags) {\n          // Both results had tags, so we need to compare them\n          for (const tag of ['release', 'latest']) {\n            const existingTag = combinedRes?.tags?.[tag];\n            const newTag = res.tags?.[tag];\n            if (isString(newTag) && releaseVersioning.isVersion(newTag)) {\n              if (\n                isString(existingTag) &&\n                releaseVersioning.isVersion(existingTag)\n              ) {\n                // We need to compare them\n                if (releaseVersioning.isGreaterThan(newTag, existingTag)) {\n                  // New tag is greater than the existing one\n                  tags[tag] = newTag;\n                }\n              } else {\n                // Existing tag was not present or not a version\n                // so we can just use the new one\n                tags[tag] = newTag;\n              }\n            }\n          }\n        }\n      } else {\n        // Existing results had no tags, so we can just use the new ones\n        tags = res.tags;\n      }\n      combinedRes = { ...res, ...combinedRes };\n      if (tags) {\n        combinedRes.tags = tags;\n      }\n      // Remove the registryUrl from the package level when more than one registry\n      delete combinedRes.registryUrl;\n    } catch (err) {\n      if (err instanceof ExternalHostError) {\n        // Don't abort the merge if another registry already returned releases;\n        // a single rate-limited registry shouldn't discard results we have\n        externalHostError = err;\n        logger.debug(\n          { err, registryUrl },\n          'datasource merge: external host error from registry; continuing so releases from other registries are not discarded',\n        );\n        continue;\n      }\n\n      lastErr = err;\n      logger.trace({ err }, 'datasource merge failure');\n    }\n  }\n\n  if (!combinedRes) {\n    if (externalHostError) {\n      throw externalHostError;\n    }\n\n    if (lastErr) {\n      throw lastErr;\n    }\n\n    return null;\n  }\n\n  const seenVersions = new Set<string>();\n  combinedRes.releases = filterMap(combinedRes.releases, (release) => {\n    if (seenVersions.has(release.version)) {\n      return null;\n    }\n    seenVersions.add(release.version);\n    return release;\n  });\n\n  return combinedRes;\n}\n\nfunction massageRegistryUrls(registryUrls: string[]): string[] {\n  return registryUrls.filter(isTruthy).map(trimTrailingSlash);\n}\n\nfunction resolveRegistryUrls(\n  datasource: DatasourceApi,\n  defaultRegistryUrls: string[] | undefined,\n  registryUrls: string[] | undefined | null,\n  additionalRegistryUrls: string[] | undefined,\n): string[] {\n  if (!datasource.customRegistrySupport) {\n    if (\n      isNonEmptyArray(registryUrls) ||\n      isNonEmptyArray(defaultRegistryUrls) ||\n      isNonEmptyArray(additionalRegistryUrls)\n    ) {\n      logger.warn(\n        {\n          datasource: datasource.id,\n          registryUrls,\n          defaultRegistryUrls,\n          additionalRegistryUrls,\n        },\n        'Custom registries are not allowed for this datasource and will be ignored',\n      );\n    }\n    return isFunction(datasource.defaultRegistryUrls)\n      ? datasource.defaultRegistryUrls()\n      : coerceArray(datasource.defaultRegistryUrls);\n  }\n  const customUrls = registryUrls?.filter(isTruthy);\n  let resolvedUrls: string[] = [];\n  if (isNonEmptyArray(customUrls)) {\n    resolvedUrls = [...customUrls];\n  } else if (isNonEmptyArray(defaultRegistryUrls)) {\n    resolvedUrls = [...defaultRegistryUrls];\n    resolvedUrls = resolvedUrls.concat(coerceArray(additionalRegistryUrls));\n  } else if (isFunction(datasource.defaultRegistryUrls)) {\n    resolvedUrls = [...datasource.defaultRegistryUrls()];\n    resolvedUrls = resolvedUrls.concat(coerceArray(additionalRegistryUrls));\n  } else if (isNonEmptyArray(datasource.defaultRegistryUrls)) {\n    resolvedUrls = [...datasource.defaultRegistryUrls];\n    resolvedUrls = resolvedUrls.concat(coerceArray(additionalRegistryUrls));\n  }\n  return massageRegistryUrls(resolvedUrls);\n}\n\nfunction applyReplacements(\n  config: GetReleasesInternalConfig,\n): Pick<ReleaseResult, 'replacementName' | 'replacementVersion'> | undefined {\n  if (config.replacementName && config.replacementVersion) {\n    return {\n      replacementName: config.replacementName,\n      replacementVersion: config.replacementVersion,\n    };\n  }\n  return undefined;\n}\n\nasync function fetchReleases(\n  config: GetReleasesInternalConfig,\n): Promise<ReleaseResult | null> {\n  const { datasource: datasourceName } = config;\n  let { registryUrls } = config;\n  // istanbul ignore if: need test\n  if (!datasourceName || getDatasourceFor(datasourceName) === undefined) {\n    logger.warn({ datasource: datasourceName }, 'Unknown datasource');\n    return null;\n  }\n  if (datasourceName === 'npm') {\n    if (isString(config.npmrc)) {\n      setNpmrc(config.npmrc);\n    }\n    if (!isNonEmptyArray(registryUrls)) {\n      registryUrls = [resolveRegistryUrl(config.packageName)];\n    }\n  }\n  const datasource = getDatasourceFor(datasourceName);\n  // istanbul ignore if: needs test\n  if (!datasource) {\n    logger.warn({ datasource: datasourceName }, 'Unknown datasource');\n    return null;\n  }\n  registryUrls = resolveRegistryUrls(\n    datasource,\n    config.defaultRegistryUrls,\n    registryUrls,\n    config.additionalRegistryUrls,\n  );\n  let dep: ReleaseResult | null = null;\n  const registryStrategy =\n    config.registryStrategy ?? datasource.registryStrategy ?? 'hunt';\n  try {\n    if (isNonEmptyArray(registryUrls)) {\n      if (registryStrategy === 'first') {\n        dep = await firstRegistry(config, datasource, registryUrls);\n      } else if (registryStrategy === 'hunt') {\n        dep = await huntRegistries(config, datasource, registryUrls);\n      } else if (registryStrategy === 'merge') {\n        dep = await mergeRegistries(config, datasource, registryUrls);\n      }\n    } else {\n      dep = await instrument(\n        'getReleases',\n        () => datasource.getReleases(config),\n        {\n          attributes: {\n            [ATTR_CODE_FUNCTION_NAME]: 'getReleases',\n            [ATTR_RENOVATE_DATASOURCE]: datasource.id,\n            [ATTR_RENOVATE_REGISTRY_URL]: config.registryUrl ?? '',\n            [ATTR_RENOVATE_PACKAGE_NAME]: config.packageName,\n          },\n        },\n      );\n    }\n  } catch (err) {\n    if (\n      [HOST_BLOCKED, HOST_DISABLED].includes(err.message) ||\n      [HOST_BLOCKED, HOST_DISABLED].includes(err.err?.message)\n    ) {\n      return null;\n    }\n    if (err instanceof ExternalHostError) {\n      throw err;\n    }\n    logError(datasource.id, config.packageName, err);\n  }\n  if (!dep || dequal(dep, { releases: [] })) {\n    return null;\n  }\n  addMetaData(dep, datasourceName, config.packageName);\n  dep = { ...dep, ...applyReplacements(config) };\n  return dep;\n}\n\nfunction fetchCachedReleases(\n  config: GetReleasesInternalConfig,\n): Promise<ReleaseResult | null> {\n  const { datasource, packageName, registryUrls } = config;\n  const cacheKey = `datasource-mem:releases:${datasource}:${packageName}:${config.registryStrategy}:${safeStringify(\n    [registryUrls, config.defaultRegistryUrls, config.additionalRegistryUrls],\n  )}`;\n  // By returning a Promise and reusing it, we should only fetch each package at most once\n  const cachedResult = memCache.get<Promise<ReleaseResult | null>>(cacheKey);\n  // istanbul ignore if\n  if (cachedResult !== undefined) {\n    return cachedResult;\n  }\n  const promisedRes = fetchReleases(config);\n  memCache.set(cacheKey, promisedRes);\n  return promisedRes;\n}\n\nexport function getRawPkgReleases(\n  config: GetPkgReleasesConfig,\n): AsyncResult<\n  ReleaseResult,\n  Error | 'no-datasource' | 'no-package-name' | 'no-result'\n> {\n  if (!config.datasource) {\n    logger.warn('No datasource found');\n    return AsyncResult.err('no-datasource');\n  }\n\n  const packageName = config.packageName;\n  if (!packageName) {\n    logger.error({ config }, 'Datasource getReleases without packageName');\n    return AsyncResult.err('no-package-name');\n  }\n\n  return Result.wrapNullable(fetchCachedReleases(config), 'no-result' as const)\n    .catch((e) => {\n      if (e instanceof ExternalHostError) {\n        e.hostType = config.datasource;\n        e.packageName = packageName;\n      }\n      return Result.err(e);\n    })\n    .transform(clone);\n}\n\nexport function applyDatasourceFilters(\n  releaseResult: ReleaseResult,\n  config: GetPkgReleasesConfig,\n): ReleaseResult {\n  let res = releaseResult;\n  res = applyExtractVersion(res, config.extractVersion);\n  res = applyVersionCompatibility(\n    res,\n    config.versionCompatibility,\n    config.currentCompatibility,\n  );\n  res = filterValidVersions(res, config);\n  res = sortAndRemoveDuplicates(res, config);\n  res = applyConstraintsFiltering(res, config);\n  return res;\n}\n\nexport async function getPkgReleases(\n  config: GetPkgReleasesConfig,\n): Promise<ReleaseResult | null> {\n  const { val = null, err } = await getRawPkgReleases(config)\n    .transform((res) => applyDatasourceFilters(res, config))\n    .unwrap();\n\n  if (err instanceof Error) {\n    throw err;\n  }\n\n  return val;\n}\n\nexport function supportsDigests(datasource: string | undefined): boolean {\n  const ds = !!datasource && getDatasourceFor(datasource);\n  return !!ds && 'getDigest' in ds;\n}\n\nfunction getDigestConfig(\n  datasource: DatasourceApi,\n  config: GetDigestInputConfig,\n): DigestConfig {\n  const { lookupName, currentValue, currentDigest } = config;\n  const packageName = config.replacementName ?? config.packageName;\n  // Prefer registryUrl from getReleases() lookup if it has been passed\n  const registryUrl =\n    config.registryUrl ??\n    resolveRegistryUrls(\n      datasource,\n      config.defaultRegistryUrls,\n      config.registryUrls,\n      config.additionalRegistryUrls,\n    )[0];\n  return { lookupName, packageName, registryUrl, currentValue, currentDigest };\n}\n\nexport function getDigest(\n  config: GetDigestInputConfig,\n  value?: string,\n): Promise<string | null> {\n  const datasource = getDatasourceFor(config.datasource);\n  // istanbul ignore if: need test\n  if (!datasource || !('getDigest' in datasource)) {\n    return Promise.resolve(null);\n  }\n  const digestConfig = getDigestConfig(datasource, config);\n  return datasource.getDigest!(digestConfig, value);\n}\n\nexport function getDefaultConfig(\n  datasource: string,\n): Promise<Record<string, unknown>> {\n  const loadedDatasource = getDatasourceFor(datasource);\n  return Promise.resolve<Record<string, unknown>>(\n    loadedDatasource?.defaultConfig ?? Object.create({}),\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAqDA,SAAgB,iBAA6C;CAC3D,OAAOA;AACT;AACA,SAAgB,oBAA8B;CAC5C,OAAO,MAAM,KAAKA,IAAY,KAAK,CAAC;AACtC;AAKA,SAAS,SAAS,YAAoB,aAAqB,KAAgB;CACzE,MAAM,EAAE,YAAY,MAAM,SAAS,QAAQ;CAC3C,IAAI,eAAe,KACjB,OAAO,MAAM;EAAE;EAAY;EAAa;CAAI,GAAG,gBAAgB;MAC1D,IAAI,eAAe,OAAO,eAAe,KAC9C,OAAO,MAAM;EAAE;EAAY;EAAa;CAAI,GAAG,yBAAyB;MACnE,IAAI,SACT,OAAO,MACL;EAAE;EAAY;EAAa;EAAK;CAAQ,GACxC,6BACF;MAEA,OAAO,MAAM;EAAE;EAAY;EAAa;CAAI,GAAG,0BAA0B;AAE7E;AAEA,eAAe,oBACb,YACA,QACA,aAC+B;CAC/B,MAAM,iBAAwC,uBAAuB,WAAW;CAChF,MAAM,WAAW,GAAG,YAAY,GAAG,OAAO;CAE1C,MAAM,eAAe,CAAC,CAAC,WAAW;CAClC,MAAM,cAAc,aAAa,IAAI,sBAAsB;CAE3D,IAAI,gBAAgB,aAAa;EAC/B,MAAM,eAAe,MAAMC,MACzB,gBACA,QACF;EAEA,IAAI,cAAc;GAChB,OAAO,MAAM,EAAE,SAAS,GAAG,sCAAsC;GACjE,qBAAqB,IAAI,WAAW,IAAI,aAAa,OAAO,WAAW;GACvE,OAAO;EACT;EAEA,qBAAqB,KAAK,WAAW,IAAI,aAAa,OAAO,WAAW;CAC1E;CAEA,MAAM,MAAM,MAAM,WAChB,qBACM,WAAW,YAAY;EAAE,GAAG;EAAQ;CAAY,CAAC,GACvD,EACE,YAAY;GACT,0BAA0B;GAC1B,2BAA2B,WAAW;GACtC,6BAA6B;GAC7B,6BAA6B,OAAO;CACvC,EACF,CACF;CACA,IAAI,KAAK,SAAS,QAChB,IAAI,gBAAgB;CAGtB,IAAI,CAAC,KACH,OAAO;CAGT,IAAI,QAAQ;CACZ,IAAI,aACF,QAAQ;MACH,IAAI,gBAAgB,CAAC,IAAI,WAC9B,QAAQ;CAGV,IAAI,OAAO;EACT,OAAO,MAAM,EAAE,SAAS,GAAG,6BAA6B;EACxD,MAAMC,MAAiB,gBAAgB,UAAU,KAAK,EAAE;EACxD,qBAAqB,IAAI,WAAW,IAAI,aAAa,OAAO,WAAW;CACzE,OACE,qBAAqB,KAAK,WAAW,IAAI,aAAa,OAAO,WAAW;CAG1E,OAAO;AACT;AAEA,SAAS,cACP,QACA,YACA,cAC+B;CAC/B,IAAI,aAAa,SAAS,GACxB,OAAO,KACL;EACE,YAAY,WAAW;EACvB,aAAa,OAAO;EACpB;CACF,GACA,+EACF;CAEF,MAAM,cAAc,aAAa;CACjC,OAAO,oBAAoB,YAAY,QAAQ,WAAW;AAC5D;AAEA,eAAe,eACb,QACA,YACA,cAC+B;CAC/B,IAAI,MAA4B;CAChC,IAAI;CACJ,KAAK,MAAM,eAAe,cACxB,IAAI;EACF,MAAM,MAAM,oBAAoB,YAAY,QAAQ,WAAW;EAC/D,IAAI,KACF;CAEJ,SAAS,KAAK;EACZ,IAAI,eAAe,mBACjB,MAAM;EAGR,cAAc;EACd,OAAO,MAAM,EAAE,IAAI,GAAG,yBAAyB;CACjD;CAEF,IAAI,KACF,OAAO;CAET,IAAI,aACF,MAAM;CAER,OAAO;AACT;AAEA,eAAe,gBACb,QACA,YACA,cAC+B;CAC/B,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI,iBAAiB;CACrB,MAAM,oBAAoBC,MAAe,OAAO,UAAU;CAC1D,KAAK,MAAM,eAAe,cACxB,IAAI;EAEF,MAAM,MAAM,MACV,MAAM,oBAAoB,YAAY,QAAQ,WAAW,CAC3D;EACA,IAAI,CAAC,KACH;EAGF,IAAI,CAAC,aAAa;GAEhB,cAAc;GACd;EACF;EAEA,IAAI,gBAAgB;GAGlB,KAAK,MAAM,WAAW,YAAY,YAAY,QAAQ,GACpD,QAAQ,gBAAgB,YAAY;GAEtC,iBAAiB;EACnB;EAEA,MAAM,WAAW,YAAY,IAAI,QAAQ;EACzC,KAAK,MAAM,WAAW,UAGpB,QAAQ,gBAAgB,IAAI;EAG9B,YAAY,SAAS,KAAK,GAAG,QAAQ;EAGrC,IAAI,OAAO,YAAY;EACvB,IAAI,MACE;OAAA,IAAI,MAEN,KAAK,MAAM,OAAO,CAAC,WAAW,QAAQ,GAAG;IACvC,MAAM,cAAc,aAAa,OAAO;IACxC,MAAM,SAAS,IAAI,OAAO;IAC1B,IAAI,SAAS,MAAM,KAAK,kBAAkB,UAAU,MAAM,GAAG;KAC3D,IACE,SAAS,WAAW,KACpB,kBAAkB,UAAU,WAAW,GAGnC;UAAA,kBAAkB,cAAc,QAAQ,WAAW,GAErD,KAAK,OAAO;KAAA,OAKd,KAAK,OAAO;IAEhB;GACF;SAIF,OAAO,IAAI;EAEb,cAAc;GAAE,GAAG;GAAK,GAAG;EAAY;EACvC,IAAI,MACF,YAAY,OAAO;EAGrB,OAAO,YAAY;CACrB,SAAS,KAAK;EACZ,IAAI,eAAe,mBAAmB;GAGpC,oBAAoB;GACpB,OAAO,MACL;IAAE;IAAK;GAAY,GACnB,qHACF;GACA;EACF;EAEA,UAAU;EACV,OAAO,MAAM,EAAE,IAAI,GAAG,0BAA0B;CAClD;CAGF,IAAI,CAAC,aAAa;EAChB,IAAI,mBACF,MAAM;EAGR,IAAI,SACF,MAAM;EAGR,OAAO;CACT;CAEA,MAAM,+BAAe,IAAI,IAAY;CACrC,YAAY,WAAW,UAAU,YAAY,WAAW,YAAY;EAClE,IAAI,aAAa,IAAI,QAAQ,OAAO,GAClC,OAAO;EAET,aAAa,IAAI,QAAQ,OAAO;EAChC,OAAO;CACT,CAAC;CAED,OAAO;AACT;AAEA,SAAS,oBAAoB,cAAkC;CAC7D,OAAO,aAAa,OAAO,QAAQ,CAAC,CAAC,IAAI,iBAAiB;AAC5D;AAEA,SAAS,oBACP,YACA,qBACA,cACA,wBACU;CACV,IAAI,CAAC,WAAW,uBAAuB;EACrC,IACE,gBAAgB,YAAY,KAC5B,gBAAgB,mBAAmB,KACnC,gBAAgB,sBAAsB,GAEtC,OAAO,KACL;GACE,YAAY,WAAW;GACvB;GACA;GACA;EACF,GACA,2EACF;EAEF,OAAO,WAAW,WAAW,mBAAmB,IAC5C,WAAW,oBAAoB,IAC/B,YAAY,WAAW,mBAAmB;CAChD;CACA,MAAM,aAAa,cAAc,OAAO,QAAQ;CAChD,IAAI,eAAyB,CAAC;CAC9B,IAAI,gBAAgB,UAAU,GAC5B,eAAe,CAAC,GAAG,UAAU;MACxB,IAAI,gBAAgB,mBAAmB,GAAG;EAC/C,eAAe,CAAC,GAAG,mBAAmB;EACtC,eAAe,aAAa,OAAO,YAAY,sBAAsB,CAAC;CACxE,OAAO,IAAI,WAAW,WAAW,mBAAmB,GAAG;EACrD,eAAe,CAAC,GAAG,WAAW,oBAAoB,CAAC;EACnD,eAAe,aAAa,OAAO,YAAY,sBAAsB,CAAC;CACxE,OAAO,IAAI,gBAAgB,WAAW,mBAAmB,GAAG;EAC1D,eAAe,CAAC,GAAG,WAAW,mBAAmB;EACjD,eAAe,aAAa,OAAO,YAAY,sBAAsB,CAAC;CACxE;CACA,OAAO,oBAAoB,YAAY;AACzC;AAEA,SAAS,kBACP,QAC2E;CAC3E,IAAI,OAAO,mBAAmB,OAAO,oBACnC,OAAO;EACL,iBAAiB,OAAO;EACxB,oBAAoB,OAAO;CAC7B;AAGJ;AAEA,eAAe,cACb,QAC+B;CAC/B,MAAM,EAAE,YAAY,mBAAmB;CACvC,IAAI,EAAE,iBAAiB;;CAEvB,IAAI,CAAC,kBAAkB,iBAAiB,cAAc,MAAM,KAAA,GAAW;EACrE,OAAO,KAAK,EAAE,YAAY,eAAe,GAAG,oBAAoB;EAChE,OAAO;CACT;CACA,IAAI,mBAAmB,OAAO;EAC5B,IAAI,SAAS,OAAO,KAAK,GACvB,SAAS,OAAO,KAAK;EAEvB,IAAI,CAAC,gBAAgB,YAAY,GAC/B,eAAe,CAAC,mBAAmB,OAAO,WAAW,CAAC;CAE1D;CACA,MAAM,aAAa,iBAAiB,cAAc;;CAElD,IAAI,CAAC,YAAY;EACf,OAAO,KAAK,EAAE,YAAY,eAAe,GAAG,oBAAoB;EAChE,OAAO;CACT;CACA,eAAe,oBACb,YACA,OAAO,qBACP,cACA,OAAO,sBACT;CACA,IAAI,MAA4B;CAChC,MAAM,mBACJ,OAAO,oBAAoB,WAAW,oBAAoB;CAC5D,IAAI;EACF,IAAI,gBAAgB,YAAY,GAAG;GACjC,IAAI,qBAAqB,SACvB,MAAM,MAAM,cAAc,QAAQ,YAAY,YAAY;QACrD,IAAI,qBAAqB,QAC9B,MAAM,MAAM,eAAe,QAAQ,YAAY,YAAY;QACtD,IAAI,qBAAqB,SAC9B,MAAM,MAAM,gBAAgB,QAAQ,YAAY,YAAY;EAEhE,OACE,MAAM,MAAM,WACV,qBACM,WAAW,YAAY,MAAM,GACnC,EACE,YAAY;IACT,0BAA0B;IAC1B,2BAA2B,WAAW;IACtC,6BAA6B,OAAO,eAAe;IACnD,6BAA6B,OAAO;EACvC,EACF,CACF;CAEJ,SAAS,KAAK;EACZ,IACE,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,OAAO,KAClD,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,KAAK,OAAO,GAEvD,OAAO;EAET,IAAI,eAAe,mBACjB,MAAM;EAER,SAAS,WAAW,IAAI,OAAO,aAAa,GAAG;CACjD;CACA,IAAI,CAAC,OAAO,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC,GACtC,OAAO;CAET,YAAY,KAAK,gBAAgB,OAAO,WAAW;CACnD,MAAM;EAAE,GAAG;EAAK,GAAG,kBAAkB,MAAM;CAAE;CAC7C,OAAO;AACT;AAEA,SAAS,oBACP,QAC+B;CAC/B,MAAM,EAAE,YAAY,aAAa,iBAAiB;CAClD,MAAM,WAAW,2BAA2B,WAAW,GAAG,YAAY,GAAG,OAAO,iBAAiB,GAAG,cAClG;EAAC;EAAc,OAAO;EAAqB,OAAO;CAAsB,CAC1E;CAEA,MAAM,eAAeC,IAA4C,QAAQ;;CAEzE,IAAI,iBAAiB,KAAA,GACnB,OAAO;CAET,MAAM,cAAc,cAAc,MAAM;CACxC,IAAa,UAAU,WAAW;CAClC,OAAO;AACT;AAEA,SAAgB,kBACd,QAIA;CACA,IAAI,CAAC,OAAO,YAAY;EACtB,OAAO,KAAK,qBAAqB;EACjC,OAAO,YAAY,IAAI,eAAe;CACxC;CAEA,MAAM,cAAc,OAAO;CAC3B,IAAI,CAAC,aAAa;EAChB,OAAO,MAAM,EAAE,OAAO,GAAG,4CAA4C;EACrE,OAAO,YAAY,IAAI,iBAAiB;CAC1C;CAEA,OAAO,OAAO,aAAa,oBAAoB,MAAM,GAAG,WAAoB,CAAC,CAC1E,OAAO,MAAM;EACZ,IAAI,aAAa,mBAAmB;GAClC,EAAE,WAAW,OAAO;GACpB,EAAE,cAAc;EAClB;EACA,OAAO,OAAO,IAAI,CAAC;CACrB,CAAC,CAAC,CACD,UAAU,KAAK;AACpB;AAEA,SAAgB,uBACd,eACA,QACe;CACf,IAAI,MAAM;CACV,MAAM,oBAAoB,KAAK,OAAO,cAAc;CACpD,MAAM,0BACJ,KACA,OAAO,sBACP,OAAO,oBACT;CACA,MAAM,oBAAoB,KAAK,MAAM;CACrC,MAAM,wBAAwB,KAAK,MAAM;CACzC,MAAM,0BAA0B,KAAK,MAAM;CAC3C,OAAO;AACT;AAEA,eAAsB,eACpB,QAC+B;CAC/B,MAAM,EAAE,MAAM,MAAM,QAAQ,MAAM,kBAAkB,MAAM,CAAC,CACxD,WAAW,QAAQ,uBAAuB,KAAK,MAAM,CAAC,CAAC,CACvD,OAAO;CAEV,IAAI,eAAe,OACjB,MAAM;CAGR,OAAO;AACT;AAEA,SAAgB,gBAAgB,YAAyC;CACvE,MAAM,KAAK,CAAC,CAAC,cAAc,iBAAiB,UAAU;CACtD,OAAO,CAAC,CAAC,MAAM,eAAe;AAChC;AAEA,SAAS,gBACP,YACA,QACc;CACd,MAAM,EAAE,YAAY,cAAc,kBAAkB;CAWpD,OAAO;EAAE;EAAY,aAVD,OAAO,mBAAmB,OAAO;EAUnB,aAPhC,OAAO,eACP,oBACE,YACA,OAAO,qBACP,OAAO,cACP,OAAO,sBACT,CAAC,CAAC;EAC2C;EAAc;CAAc;AAC7E;AAEA,SAAgB,UACd,QACA,OACwB;CACxB,MAAM,aAAa,iBAAiB,OAAO,UAAU;;CAErD,IAAI,CAAC,cAAc,EAAE,eAAe,aAClC,OAAO,QAAQ,QAAQ,IAAI;CAE7B,MAAM,eAAe,gBAAgB,YAAY,MAAM;CACvD,OAAO,WAAW,UAAW,cAAc,KAAK;AAClD;AAEA,SAAgB,iBACd,YACkC;CAClC,MAAM,mBAAmB,iBAAiB,UAAU;CACpD,OAAO,QAAQ,QACb,kBAAkB,iBAAiB,OAAO,OAAO,CAAC,CAAC,CACrD;AACF"}

package/dist/modules/datasource/maven/util.js

@@ -6,6 +6,7 @@ import { ExternalHostError } from "../../../types/errors/external-host-error.js"
 import { get, getCacheType, set } from "../../../util/cache/package/index.js";
 import { RequestError } from "../../../util/http/got.js";
 import { Result } from "../../../util/result.js";
+import { refusedHostMessage } from "../../../util/http/util.js";
 import "../../../util/http/index.js";
 import { asTimestamp } from "../../../util/timestamp.js";
 import { isMavenCentral } from "./common.js";
@@ -94,8 +95,8 @@ async function downloadHttpProtocol(http, pkgUrl, opts = {}) {
 			err
 		});
 		const failedUrl = url;
-		if (err.message === "host-disabled") {
-			logger.trace({ failedUrl }, "Host disabled");
+		if (["host-blocked", "host-disabled"].includes(err.message)) {
+			logger.trace({ failedUrl }, refusedHostMessage(err));
 			return Result.err({ type: "host-disabled" });
 		}
 		if (isNotFoundError(err)) {

package/dist/modules/datasource/maven/util.js.map

@@ -1 +1 @@
-{"version":3,"file":"util.js","names":["packageCache.get","HttpError","packageCache.set","packageCache.getCacheType"],"sources":["../../../../lib/modules/datasource/maven/util.ts"],"sourcesContent":["import { Readable } from 'node:stream';\nimport { GetObjectCommand } from '@aws-sdk/client-s3';\nimport { XmlDocument } from 'xmldoc';\nimport { HOST_DISABLED } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport * as packageCache from '../../../util/cache/package/index.ts';\nimport { PackageHttpCacheProvider } from '../../../util/http/cache/package-http-cache-provider.ts';\nimport { type Http, HttpError } from '../../../util/http/index.ts';\nimport type { HttpOptions, HttpResponse } from '../../../util/http/types.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Result } from '../../../util/result.ts';\nimport { getS3Client, parseS3Url } from '../../../util/s3.ts';\nimport { streamToString } from '../../../util/streams.ts';\nimport { asTimestamp } from '../../../util/timestamp.ts';\nimport { ensureTrailingSlash, isHttpUrl } from '../../../util/url.ts';\nimport { getGoogleAuthToken } from '../util.ts';\nimport { isMavenCentral } from './common.ts';\nimport { CachedMavenXml } from './schema.ts';\nimport type {\n  DependencyInfo,\n  MavenDependency,\n  MavenFetchResult,\n  MavenFetchSuccess,\n} from './types.ts';\n\nfunction isTemporaryError(err: HttpError): boolean {\n  if (err.code === 'ECONNRESET') {\n    return true;\n  }\n\n  if (err.response) {\n    const status = err.response.statusCode;\n    return status === 429 || (status >= 500 && status < 600);\n  }\n\n  return false;\n}\n\nfunction isHostError(err: HttpError): boolean {\n  return err.code === 'ETIMEDOUT';\n}\n\nfunction isNotFoundError(err: HttpError): boolean {\n  return err.code === 'ENOTFOUND' || err.response?.statusCode === 404;\n}\n\nfunction isPermissionsIssue(err: HttpError): boolean {\n  const status = err.response?.statusCode;\n  return status === 401 || status === 403;\n}\n\nfunction isConnectionError(err: HttpError): boolean {\n  return (\n    err.code === 'EAI_AGAIN' ||\n    err.code === 'ERR_TLS_CERT_ALTNAME_INVALID' ||\n    err.code === 'ECONNREFUSED'\n  );\n}\n\nfunction isUnsupportedHostError(err: HttpError): boolean {\n  return err.name === 'UnsupportedProtocolError';\n}\n\nconst cacheProvider = new PackageHttpCacheProvider({\n  namespace: 'datasource-maven:cache-provider',\n  softTtlMinutes: 15,\n  checkAuthorizationHeader: true,\n  checkCacheControlHeader: false, // Maven doesn't respond with `cache-control` headers\n  writeSchema: CachedMavenXml,\n});\n\n// Release POMs and timestamped snapshot POMs are immutable once published, so we can cache them much longer than mutable metadata files.\nconst pomCacheProvider = new PackageHttpCacheProvider({\n  namespace: 'datasource-maven:pom-cache-provider',\n  softTtlMinutes: 60 * 24 * 28, // 28 days before we'll give it another check, just in case it's updated\n  checkAuthorizationHeader: true,\n  checkCacheControlHeader: false,\n  writeSchema: CachedMavenXml,\n});\n\nfunction selectCacheProvider(url: string): PackageHttpCacheProvider {\n  // Non-timestamped -SNAPSHOT.pom files are mutable; everything else ending in .pom (release POMs and timestamped snapshot POMs) is immutable.\n  if (url.endsWith('.pom') && !url.endsWith('-SNAPSHOT.pom')) {\n    return pomCacheProvider;\n  }\n  return cacheProvider;\n}\n\nconst METADATA_NOT_FOUND_NAMESPACE =\n  'datasource-maven:metadata-not-found' as const;\nconst METADATA_NOT_FOUND_TTL_MINUTES = 60 * 12; // 12 hours\n\n/** introduces jitter to make sure that a given repo's cache expiring doesn't lead to many requests leading to high traffic and/or rate limits */\nfunction getMetadataNotFoundTtl(): number {\n  const jitter = Math.floor(Math.random() * 60 * 2); // 0–120 minutes\n  return METADATA_NOT_FOUND_TTL_MINUTES + jitter;\n}\n\nfunction isMetadataUrl(url: string): boolean {\n  return url.endsWith('/maven-metadata.xml');\n}\n\nexport async function downloadHttpProtocol(\n  http: Http,\n  pkgUrl: URL | string,\n  opts: HttpOptions = {},\n): Promise<MavenFetchResult> {\n  const url = pkgUrl.toString();\n\n  if (isMetadataUrl(url)) {\n    const cacheHasNotFoundResponse = await packageCache.get<true>(\n      METADATA_NOT_FOUND_NAMESPACE,\n      url,\n    );\n    if (cacheHasNotFoundResponse) {\n      logger.trace(\n        { url },\n        'Returning cached 404 response for the metadata-metadata URL request',\n      );\n      return Result.err({ type: 'not-found' });\n    }\n  }\n\n  const fetchResult = await Result.wrap<HttpResponse>(\n    http.getText(url, { ...opts, cacheProvider: selectCacheProvider(url) }),\n  )\n    .transform((res): MavenFetchSuccess => {\n      const result: MavenFetchSuccess = { data: res.body };\n\n      if (!res.authorization) {\n        result.isCacheable = true;\n      }\n\n      const lastModified = asTimestamp(res?.headers?.['last-modified']);\n      if (lastModified) {\n        result.lastModified = lastModified;\n      }\n\n      return result;\n    })\n    .catch(async (err): Promise<MavenFetchResult> => {\n      /* v8 ignore next: never happens, needs for type narrowing */\n      if (!(err instanceof HttpError)) {\n        return Result.err({ type: 'unknown', err });\n      }\n\n      const failedUrl = url;\n      if (err.message === HOST_DISABLED) {\n        logger.trace({ failedUrl }, 'Host disabled');\n        return Result.err({ type: 'host-disabled' });\n      }\n\n      if (isNotFoundError(err)) {\n        logger.trace({ failedUrl }, `Url not found`);\n        if (isMetadataUrl(failedUrl)) {\n          await packageCache.set(\n            METADATA_NOT_FOUND_NAMESPACE,\n            failedUrl,\n            true,\n            getMetadataNotFoundTtl(),\n          );\n        }\n        return Result.err({ type: 'not-found' });\n      }\n\n      if (isHostError(err)) {\n        logger.debug(`Cannot connect to host ${failedUrl}`);\n        return Result.err({ type: 'host-error' });\n      }\n\n      if (isPermissionsIssue(err)) {\n        logger.debug(\n          `Dependency lookup unauthorized. Please add authentication with a hostRule for ${failedUrl}`,\n        );\n        return Result.err({ type: 'permission-issue' });\n      }\n\n      if (isTemporaryError(err)) {\n        logger.debug({ failedUrl, err }, 'Temporary error');\n\n        if (isMavenCentral(url)) {\n          const statusCode = err?.response?.statusCode;\n          if (statusCode === 429) {\n            if (packageCache.getCacheType() === 'redis') {\n              logger.once.warn(\n                { failedUrl },\n                'Maven Central rate limiting detected despite Redis caching.',\n              );\n            } else {\n              logger.once.warn(\n                { failedUrl },\n                'Maven Central rate limiting detected. Persistent caching required.',\n              );\n            }\n          }\n          return Result.err({ type: 'maven-central-temporary-error', err });\n        }\n        return Result.err({ type: 'temporary-error' });\n      }\n\n      if (isConnectionError(err)) {\n        logger.debug(`Connection refused to maven registry ${failedUrl}`);\n        return Result.err({ type: 'connection-error' });\n      }\n\n      if (isUnsupportedHostError(err)) {\n        logger.debug(`Unsupported host ${failedUrl}`);\n        return Result.err({ type: 'unsupported-host' });\n      }\n\n      logger.info({ failedUrl, err }, 'Unknown HTTP download error');\n      return Result.err({ type: 'unknown', err });\n    });\n\n  const { err } = fetchResult.unwrap();\n  if (err?.type === 'maven-central-temporary-error') {\n    throw new ExternalHostError(err.err);\n  }\n\n  return fetchResult;\n}\n\nexport async function downloadHttpContent(\n  http: Http,\n  pkgUrl: URL | string,\n  opts: HttpOptions = {},\n): Promise<string | null> {\n  const fetchResult = await downloadHttpProtocol(http, pkgUrl, opts);\n  return fetchResult.transform(({ data }) => data).unwrapOrNull();\n}\n\nfunction isS3NotFound(err: Error): boolean {\n  return err.message === 'NotFound' || err.message === 'NoSuchKey';\n}\n\nexport async function downloadS3Protocol(\n  pkgUrl: URL,\n): Promise<MavenFetchResult> {\n  logger.trace({ url: pkgUrl.toString() }, `Attempting to load S3 dependency`);\n\n  const s3Url = parseS3Url(pkgUrl);\n  if (!s3Url) {\n    return Result.err({ type: 'invalid-url' });\n  }\n\n  return await Result.wrap(() => {\n    const command = new GetObjectCommand(s3Url);\n    const client = getS3Client();\n    return client.send(command);\n  })\n    .transform(\n      async ({\n        Body,\n        LastModified,\n        DeleteMarker,\n      }): Promise<MavenFetchResult> => {\n        if (DeleteMarker) {\n          logger.trace(\n            { failedUrl: pkgUrl.toString() },\n            'Maven S3 lookup error: DeleteMarker encountered',\n          );\n          return Result.err({ type: 'not-found' });\n        }\n\n        if (!(Body instanceof Readable)) {\n          logger.debug(\n            { failedUrl: pkgUrl.toString() },\n            'Maven S3 lookup error: unsupported Body type',\n          );\n          return Result.err({ type: 'unsupported-format' });\n        }\n\n        const data = await streamToString(Body);\n        const result: MavenFetchSuccess = { data };\n\n        const lastModified = asTimestamp(LastModified);\n        if (lastModified) {\n          result.lastModified = lastModified;\n        }\n\n        return Result.ok(result);\n      },\n    )\n    .catch((err): MavenFetchResult => {\n      if (!(err instanceof Error)) {\n        return Result.err(err);\n      }\n\n      const failedUrl = pkgUrl.toString();\n\n      if (err.name === 'CredentialsProviderError') {\n        logger.debug(\n          { failedUrl },\n          'Maven S3 lookup error: credentials provider error, check \"AWS_ACCESS_KEY_ID\" and \"AWS_SECRET_ACCESS_KEY\" variables',\n        );\n        return Result.err({ type: 'credentials-error' });\n      }\n\n      if (err.message === 'Region is missing') {\n        logger.debug(\n          { failedUrl },\n          'Maven S3 lookup error: missing region, check \"AWS_REGION\" variable',\n        );\n        return Result.err({ type: 'missing-aws-region' });\n      }\n\n      if (isS3NotFound(err)) {\n        logger.trace({ failedUrl }, 'Maven S3 lookup error: object not found');\n        return Result.err({ type: 'not-found' });\n      }\n\n      logger.debug({ failedUrl, err }, 'Maven S3 lookup error: unknown error');\n      return Result.err({ type: 'unknown', err });\n    });\n}\n\nexport async function downloadArtifactRegistryProtocol(\n  http: Http,\n  pkgUrl: URL,\n): Promise<MavenFetchResult> {\n  const opts: HttpOptions = {};\n  const host = pkgUrl.host;\n  const path = pkgUrl.pathname;\n\n  logger.trace({ host, path }, `Using google auth for Maven repository`);\n  const auth = await getGoogleAuthToken();\n  if (auth) {\n    opts.headers = { authorization: `Basic ${auth}` };\n  } else {\n    logger.once.debug(\n      { host, path },\n      'Could not get Google access token, using no auth',\n    );\n  }\n\n  const url = pkgUrl.toString().replace('artifactregistry:', 'https:');\n\n  return downloadHttpProtocol(http, url, opts);\n}\n\nfunction containsPlaceholder(str: string): boolean {\n  return regEx(/\\${.*?}/g).test(str);\n}\n\nfunction removeKnownPlaceholders(str: string): string {\n  return str.replace(regEx(/\\/tree\\/\\${[^}]+}/), '');\n}\n\nexport function getMavenUrl(\n  dependency: MavenDependency,\n  repoUrl: string,\n  path: string,\n): URL {\n  return new URL(\n    `${dependency.dependencyUrl}/${path}`,\n    ensureTrailingSlash(repoUrl),\n  );\n}\n\nexport async function downloadMaven(\n  http: Http,\n  url: URL,\n): Promise<MavenFetchResult> {\n  const protocol = url.protocol;\n\n  let result: MavenFetchResult = Result.err({ type: 'unsupported-protocol' });\n\n  if (isHttpUrl(url)) {\n    result = await downloadHttpProtocol(http, url);\n  }\n\n  if (protocol === 'artifactregistry:') {\n    result = await downloadArtifactRegistryProtocol(http, url);\n  }\n\n  if (protocol === 's3:') {\n    result = await downloadS3Protocol(url);\n  }\n\n  return result.onError((err) => {\n    if (err.type === 'unsupported-protocol') {\n      logger.debug(\n        { url: url.toString() },\n        `Maven lookup error: unsupported protocol (${protocol})`,\n      );\n    }\n  });\n}\n\nexport async function downloadMavenXml(\n  http: Http,\n  url: URL,\n): Promise<MavenFetchResult<XmlDocument>> {\n  const rawResult = await downloadMaven(http, url);\n  return rawResult.transform((result): MavenFetchResult<XmlDocument> => {\n    try {\n      return Result.ok({\n        ...result,\n        data: new XmlDocument(result.data),\n      });\n    } catch (err) {\n      return Result.err({ type: 'xml-parse-error', err });\n    }\n  });\n}\n\nexport function getDependencyParts(packageName: string): MavenDependency {\n  const [group, name] = packageName.split(':');\n  const dependencyUrl = `${group.replace(regEx(/\\./g), '/')}/${name}`;\n  return {\n    display: packageName,\n    group,\n    name,\n    dependencyUrl,\n  };\n}\n\nfunction extractSnapshotVersion(metadata: XmlDocument): string | null {\n  // Parse the maven-metadata.xml for the snapshot version and determine\n  // the fixed version of the latest deployed snapshot.\n  // The metadata descriptor can be found at\n  // https://maven.apache.org/ref/3.3.3/maven-repository-metadata/repository-metadata.html\n  //\n  // Basically, we need to replace -SNAPSHOT with the artifact timestanp & build number,\n  // so for example 1.0.0-SNAPSHOT will become 1.0.0-<timestamp>-<buildNumber>\n  const version = metadata\n    .descendantWithPath('version')\n    ?.val?.replace('-SNAPSHOT', '');\n\n  const snapshot = metadata.descendantWithPath('versioning.snapshot');\n  const timestamp = snapshot?.childNamed('timestamp')?.val;\n  const build = snapshot?.childNamed('buildNumber')?.val;\n\n  // If we weren't able to parse out the required 3 version elements,\n  // return null because we can't determine the fixed version of the latest snapshot.\n  if (!version || !timestamp || !build) {\n    return null;\n  }\n  return `${version}-${timestamp}-${build}`;\n}\n\nasync function getSnapshotFullVersion(\n  http: Http,\n  version: string,\n  dependency: MavenDependency,\n  repoUrl: string,\n): Promise<string | null> {\n  // To determine what actual files are available for the snapshot, first we have to fetch and parse\n  // the metadata located at http://<repo>/<group>/<artifact>/<version-SNAPSHOT>/maven-metadata.xml\n  const metadataUrl = getMavenUrl(\n    dependency,\n    repoUrl,\n    `${version}/maven-metadata.xml`,\n  );\n\n  const metadataXmlResult = await downloadMavenXml(http, metadataUrl);\n\n  return metadataXmlResult\n    .transform(({ data }) =>\n      Result.wrapNullable(extractSnapshotVersion(data), {\n        type: 'snapshot-extract-error',\n      }),\n    )\n    .unwrapOrNull();\n}\n\nfunction isSnapshotVersion(version: string): boolean {\n  if (version.endsWith('-SNAPSHOT')) {\n    return true;\n  }\n  return false;\n}\n\nexport async function createUrlForDependencyPom(\n  http: Http,\n  version: string,\n  dependency: MavenDependency,\n  repoUrl: string,\n): Promise<string> {\n  if (isSnapshotVersion(version)) {\n    // By default, Maven snapshots are deployed to the repository with fixed file names.\n    // Resolve the full, actual pom file name for the version.\n    const fullVersion = await getSnapshotFullVersion(\n      http,\n      version,\n      dependency,\n      repoUrl,\n    );\n\n    // If we were able to resolve the version, use that, otherwise fall back to using -SNAPSHOT\n    if (fullVersion !== null) {\n      // TODO: types (#22198)\n      return `${version}/${dependency.name}-${fullVersion}.pom`;\n    }\n  }\n\n  // TODO: types (#22198)\n  return `${version}/${dependency.name}-${version}.pom`;\n}\n\nexport async function getDependencyInfo(\n  http: Http,\n  dependency: MavenDependency,\n  repoUrl: string,\n  version: string,\n  recursionLimit = 5,\n): Promise<DependencyInfo> {\n  const path = await createUrlForDependencyPom(\n    http,\n    version,\n    dependency,\n    repoUrl,\n  );\n\n  const pomUrl = getMavenUrl(dependency, repoUrl, path);\n  const pomXmlResult = await downloadMavenXml(http, pomUrl);\n  const dependencyInfoResult = await pomXmlResult.transform(\n    async ({ data: pomContent }) => {\n      const result: DependencyInfo = {};\n\n      const homepage = pomContent.valueWithPath('url');\n      if (homepage && !containsPlaceholder(homepage)) {\n        result.homepage = homepage;\n      }\n\n      const sourceUrl = pomContent.valueWithPath('scm.url');\n      if (\n        sourceUrl &&\n        !containsPlaceholder(removeKnownPlaceholders(sourceUrl))\n      ) {\n        result.sourceUrl = sourceUrl\n          .replace(regEx(/^scm:/), '')\n          .replace(regEx(/^git:/), '')\n          .replace(regEx(/^git@github.com:/), 'https://github.com/')\n          .replace(regEx(/^git@github.com\\//), 'https://github.com/');\n\n        if (result.sourceUrl.startsWith('//')) {\n          // most likely the result of us stripping scm:, git: etc\n          // going with prepending https: here which should result in potential information retrival\n          result.sourceUrl = `https:${result.sourceUrl}`;\n        }\n      }\n\n      const relocation = pomContent.descendantWithPath(\n        'distributionManagement.relocation',\n      );\n      if (relocation) {\n        const relocationGroup =\n          relocation.valueWithPath('groupId') ?? dependency.group;\n        const relocationName =\n          relocation.valueWithPath('artifactId') ?? dependency.name;\n        result.replacementName = `${relocationGroup}:${relocationName}`;\n        const relocationVersion = relocation.valueWithPath('version');\n        result.replacementVersion = relocationVersion ?? version;\n        const relocationMessage = relocation.valueWithPath('message');\n        if (relocationMessage) {\n          result.deprecationMessage = relocationMessage;\n        }\n      }\n\n      const groupId = pomContent.valueWithPath('groupId');\n      if (groupId) {\n        result.packageScope = groupId;\n      }\n\n      const parent = pomContent.childNamed('parent');\n      if (\n        recursionLimit > 0 &&\n        parent &&\n        (!result.sourceUrl || !result.homepage)\n      ) {\n        // if we found a parent and are missing some information\n        // trying to get the scm/homepage information from it\n        const [parentGroupId, parentArtifactId, parentVersion] = [\n          'groupId',\n          'artifactId',\n          'version',\n        ].map((k) => parent.valueWithPath(k)?.replace(regEx(/\\s+/g), ''));\n        if (parentGroupId && parentArtifactId && parentVersion) {\n          const parentDisplayId = `${parentGroupId}:${parentArtifactId}`;\n          const parentDependency = getDependencyParts(parentDisplayId);\n          const parentInformation = await getDependencyInfo(\n            http,\n            parentDependency,\n            repoUrl,\n            parentVersion,\n            recursionLimit - 1,\n          );\n          if (!result.sourceUrl && parentInformation.sourceUrl) {\n            result.sourceUrl = parentInformation.sourceUrl;\n          }\n          if (!result.homepage && parentInformation.homepage) {\n            result.homepage = parentInformation.homepage;\n          }\n        }\n      }\n\n      return result;\n    },\n  );\n\n  return dependencyInfoResult.unwrapOr({});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA0BA,SAAS,iBAAiB,KAAyB;CACjD,IAAI,IAAI,SAAS,cACf,OAAO;CAGT,IAAI,IAAI,UAAU;EAChB,MAAM,SAAS,IAAI,SAAS;EAC5B,OAAO,WAAW,OAAQ,UAAU,OAAO,SAAS;CACtD;CAEA,OAAO;AACT;AAEA,SAAS,YAAY,KAAyB;CAC5C,OAAO,IAAI,SAAS;AACtB;AAEA,SAAS,gBAAgB,KAAyB;CAChD,OAAO,IAAI,SAAS,eAAe,IAAI,UAAU,eAAe;AAClE;AAEA,SAAS,mBAAmB,KAAyB;CACnD,MAAM,SAAS,IAAI,UAAU;CAC7B,OAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,kBAAkB,KAAyB;CAClD,OACE,IAAI,SAAS,eACb,IAAI,SAAS,kCACb,IAAI,SAAS;AAEjB;AAEA,SAAS,uBAAuB,KAAyB;CACvD,OAAO,IAAI,SAAS;AACtB;AAEA,MAAM,gBAAgB,IAAI,yBAAyB;CACjD,WAAW;CACX,gBAAgB;CAChB,0BAA0B;CAC1B,yBAAyB;CACzB,aAAa;AACf,CAAC;AAGD,MAAM,mBAAmB,IAAI,yBAAyB;CACpD,WAAW;CACX,gBAAgB;CAChB,0BAA0B;CAC1B,yBAAyB;CACzB,aAAa;AACf,CAAC;AAED,SAAS,oBAAoB,KAAuC;CAElE,IAAI,IAAI,SAAS,MAAM,KAAK,CAAC,IAAI,SAAS,eAAe,GACvD,OAAO;CAET,OAAO;AACT;AAEA,MAAM,+BACJ;AACF,MAAM,iCAAiC;;AAGvC,SAAS,yBAAiC;CACxC,MAAM,SAAS,KAAK,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC;CAChD,OAAO,iCAAiC;AAC1C;AAEA,SAAS,cAAc,KAAsB;CAC3C,OAAO,IAAI,SAAS,qBAAqB;AAC3C;AAEA,eAAsB,qBACpB,MACA,QACA,OAAoB,CAAC,GACM;CAC3B,MAAM,MAAM,OAAO,SAAS;CAE5B,IAAI,cAAc,GAAG,GAKf;MAAA,MAJmCA,IACrC,8BACA,GACF,GAC8B;GAC5B,OAAO,MACL,EAAE,IAAI,GACN,qEACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;;CAGF,MAAM,cAAc,MAAM,OAAO,KAC/B,KAAK,QAAQ,KAAK;EAAE,GAAG;EAAM,eAAe,oBAAoB,GAAG;CAAE,CAAC,CACxE,CAAC,CACE,WAAW,QAA2B;EACrC,MAAM,SAA4B,EAAE,MAAM,IAAI,KAAK;EAEnD,IAAI,CAAC,IAAI,eACP,OAAO,cAAc;EAGvB,MAAM,eAAe,YAAY,KAAK,UAAU,gBAAgB;EAChE,IAAI,cACF,OAAO,eAAe;EAGxB,OAAO;CACT,CAAC,CAAC,CACD,MAAM,OAAO,QAAmC;;EAE/C,IAAI,EAAE,eAAeC,eACnB,OAAO,OAAO,IAAI;GAAE,MAAM;GAAW;EAAI,CAAC;EAG5C,MAAM,YAAY;EAClB,IAAI,IAAI,YAAA,iBAA2B;GACjC,OAAO,MAAM,EAAE,UAAU,GAAG,eAAe;GAC3C,OAAO,OAAO,IAAI,EAAE,MAAM,gBAAgB,CAAC;EAC7C;EAEA,IAAI,gBAAgB,GAAG,GAAG;GACxB,OAAO,MAAM,EAAE,UAAU,GAAG,eAAe;GAC3C,IAAI,cAAc,SAAS,GACzB,MAAMC,IACJ,8BACA,WACA,MACA,uBAAuB,CACzB;GAEF,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;EAEA,IAAI,YAAY,GAAG,GAAG;GACpB,OAAO,MAAM,0BAA0B,WAAW;GAClD,OAAO,OAAO,IAAI,EAAE,MAAM,aAAa,CAAC;EAC1C;EAEA,IAAI,mBAAmB,GAAG,GAAG;GAC3B,OAAO,MACL,iFAAiF,WACnF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,mBAAmB,CAAC;EAChD;EAEA,IAAI,iBAAiB,GAAG,GAAG;GACzB,OAAO,MAAM;IAAE;IAAW;GAAI,GAAG,iBAAiB;GAElD,IAAI,eAAe,GAAG,GAAG;IAEvB,IADmB,KAAK,UAAU,eACf,KAAK;KACtB,IAAIC,aAA0B,MAAM,SAClC,OAAO,KAAK,KACV,EAAE,UAAU,GACZ,6DACF;UAEA,OAAO,KAAK,KACV,EAAE,UAAU,GACZ,oEACF;IAEJ;IACA,OAAO,OAAO,IAAI;KAAE,MAAM;KAAiC;IAAI,CAAC;GAClE;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,kBAAkB,CAAC;EAC/C;EAEA,IAAI,kBAAkB,GAAG,GAAG;GAC1B,OAAO,MAAM,wCAAwC,WAAW;GAChE,OAAO,OAAO,IAAI,EAAE,MAAM,mBAAmB,CAAC;EAChD;EAEA,IAAI,uBAAuB,GAAG,GAAG;GAC/B,OAAO,MAAM,oBAAoB,WAAW;GAC5C,OAAO,OAAO,IAAI,EAAE,MAAM,mBAAmB,CAAC;EAChD;EAEA,OAAO,KAAK;GAAE;GAAW;EAAI,GAAG,6BAA6B;EAC7D,OAAO,OAAO,IAAI;GAAE,MAAM;GAAW;EAAI,CAAC;CAC5C,CAAC;CAEH,MAAM,EAAE,QAAQ,YAAY,OAAO;CACnC,IAAI,KAAK,SAAS,iCAChB,MAAM,IAAI,kBAAkB,IAAI,GAAG;CAGrC,OAAO;AACT;AAEA,eAAsB,oBACpB,MACA,QACA,OAAoB,CAAC,GACG;CAExB,QAAO,MADmB,qBAAqB,MAAM,QAAQ,IAAI,EAAA,CAC9C,WAAW,EAAE,WAAW,IAAI,CAAC,CAAC,aAAa;AAChE;AAEA,SAAS,aAAa,KAAqB;CACzC,OAAO,IAAI,YAAY,cAAc,IAAI,YAAY;AACvD;AAEA,eAAsB,mBACpB,QAC2B;CAC3B,OAAO,MAAM,EAAE,KAAK,OAAO,SAAS,EAAE,GAAG,kCAAkC;CAE3E,MAAM,QAAQ,WAAW,MAAM;CAC/B,IAAI,CAAC,OACH,OAAO,OAAO,IAAI,EAAE,MAAM,cAAc,CAAC;CAG3C,OAAO,MAAM,OAAO,WAAW;EAC7B,MAAM,UAAU,IAAI,iBAAiB,KAAK;EAE1C,OADe,YACH,CAAC,CAAC,KAAK,OAAO;CAC5B,CAAC,CAAC,CACC,UACC,OAAO,EACL,MACA,cACA,mBAC+B;EAC/B,IAAI,cAAc;GAChB,OAAO,MACL,EAAE,WAAW,OAAO,SAAS,EAAE,GAC/B,iDACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;EAEA,IAAI,EAAE,gBAAgB,WAAW;GAC/B,OAAO,MACL,EAAE,WAAW,OAAO,SAAS,EAAE,GAC/B,8CACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,qBAAqB,CAAC;EAClD;EAGA,MAAM,SAA4B,EAAE,MAAA,MADjB,eAAe,IAAI,EACG;EAEzC,MAAM,eAAe,YAAY,YAAY;EAC7C,IAAI,cACF,OAAO,eAAe;EAGxB,OAAO,OAAO,GAAG,MAAM;CACzB,CACF,CAAC,CACA,OAAO,QAA0B;EAChC,IAAI,EAAE,eAAe,QACnB,OAAO,OAAO,IAAI,GAAG;EAGvB,MAAM,YAAY,OAAO,SAAS;EAElC,IAAI,IAAI,SAAS,4BAA4B;GAC3C,OAAO,MACL,EAAE,UAAU,GACZ,wHACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,oBAAoB,CAAC;EACjD;EAEA,IAAI,IAAI,YAAY,qBAAqB;GACvC,OAAO,MACL,EAAE,UAAU,GACZ,sEACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,qBAAqB,CAAC;EAClD;EAEA,IAAI,aAAa,GAAG,GAAG;GACrB,OAAO,MAAM,EAAE,UAAU,GAAG,yCAAyC;GACrE,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;EAEA,OAAO,MAAM;GAAE;GAAW;EAAI,GAAG,sCAAsC;EACvE,OAAO,OAAO,IAAI;GAAE,MAAM;GAAW;EAAI,CAAC;CAC5C,CAAC;AACL;AAEA,eAAsB,iCACpB,MACA,QAC2B;CAC3B,MAAM,OAAoB,CAAC;CAC3B,MAAM,OAAO,OAAO;CACpB,MAAM,OAAO,OAAO;CAEpB,OAAO,MAAM;EAAE;EAAM;CAAK,GAAG,wCAAwC;CACrE,MAAM,OAAO,MAAM,mBAAmB;CACtC,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;MAEhD,OAAO,KAAK,MACV;EAAE;EAAM;CAAK,GACb,kDACF;CAKF,OAAO,qBAAqB,MAFhB,OAAO,SAAS,CAAC,CAAC,QAAQ,qBAAqB,QAEvB,GAAG,IAAI;AAC7C;AAEA,SAAS,oBAAoB,KAAsB;CACjD,OAAO,MAAM,UAAU,CAAC,CAAC,KAAK,GAAG;AACnC;AAEA,SAAS,wBAAwB,KAAqB;CACpD,OAAO,IAAI,QAAQ,MAAM,mBAAmB,GAAG,EAAE;AACnD;AAEA,SAAgB,YACd,YACA,SACA,MACK;CACL,OAAO,IAAI,IACT,GAAG,WAAW,cAAc,GAAG,QAC/B,oBAAoB,OAAO,CAC7B;AACF;AAEA,eAAsB,cACpB,MACA,KAC2B;CAC3B,MAAM,WAAW,IAAI;CAErB,IAAI,SAA2B,OAAO,IAAI,EAAE,MAAM,uBAAuB,CAAC;CAE1E,IAAI,UAAU,GAAG,GACf,SAAS,MAAM,qBAAqB,MAAM,GAAG;CAG/C,IAAI,aAAa,qBACf,SAAS,MAAM,iCAAiC,MAAM,GAAG;CAG3D,IAAI,aAAa,OACf,SAAS,MAAM,mBAAmB,GAAG;CAGvC,OAAO,OAAO,SAAS,QAAQ;EAC7B,IAAI,IAAI,SAAS,wBACf,OAAO,MACL,EAAE,KAAK,IAAI,SAAS,EAAE,GACtB,6CAA6C,SAAS,EACxD;CAEJ,CAAC;AACH;AAEA,eAAsB,iBACpB,MACA,KACwC;CAExC,QAAO,MADiB,cAAc,MAAM,GAAG,EAAA,CAC9B,WAAW,WAA0C;EACpE,IAAI;GACF,OAAO,OAAO,GAAG;IACf,GAAG;IACH,MAAM,IAAI,YAAY,OAAO,IAAI;GACnC,CAAC;EACH,SAAS,KAAK;GACZ,OAAO,OAAO,IAAI;IAAE,MAAM;IAAmB;GAAI,CAAC;EACpD;CACF,CAAC;AACH;AAEA,SAAgB,mBAAmB,aAAsC;CACvE,MAAM,CAAC,OAAO,QAAQ,YAAY,MAAM,GAAG;CAE3C,OAAO;EACL,SAAS;EACT;EACA;EACA,eAAA,GALuB,MAAM,QAAQ,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG;CAM7D;AACF;AAEA,SAAS,uBAAuB,UAAsC;CAQpE,MAAM,UAAU,SACb,mBAAmB,SAAS,CAAC,EAC5B,KAAK,QAAQ,aAAa,EAAE;CAEhC,MAAM,WAAW,SAAS,mBAAmB,qBAAqB;CAClE,MAAM,YAAY,UAAU,WAAW,WAAW,CAAC,EAAE;CACrD,MAAM,QAAQ,UAAU,WAAW,aAAa,CAAC,EAAE;CAInD,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,OAC7B,OAAO;CAET,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG;AACpC;AAEA,eAAe,uBACb,MACA,SACA,YACA,SACwB;CAWxB,QAAO,MAFyB,iBAAiB,MAN7B,YAClB,YACA,SACA,GAAG,QAAQ,oBAGoD,CAAC,EAAA,CAG/D,WAAW,EAAE,WACZ,OAAO,aAAa,uBAAuB,IAAI,GAAG,EAChD,MAAM,yBACR,CAAC,CACH,CAAC,CACA,aAAa;AAClB;AAEA,SAAS,kBAAkB,SAA0B;CACnD,IAAI,QAAQ,SAAS,WAAW,GAC9B,OAAO;CAET,OAAO;AACT;AAEA,eAAsB,0BACpB,MACA,SACA,YACA,SACiB;CACjB,IAAI,kBAAkB,OAAO,GAAG;EAG9B,MAAM,cAAc,MAAM,uBACxB,MACA,SACA,YACA,OACF;EAGA,IAAI,gBAAgB,MAElB,OAAO,GAAG,QAAQ,GAAG,WAAW,KAAK,GAAG,YAAY;CAExD;CAGA,OAAO,GAAG,QAAQ,GAAG,WAAW,KAAK,GAAG,QAAQ;AAClD;AAEA,eAAsB,kBACpB,MACA,YACA,SACA,SACA,iBAAiB,GACQ;CA+FzB,QAAO,OArF4B,MADR,iBAAiB,MAD7B,YAAY,YAAY,SAAS,MAP7B,0BACjB,MACA,SACA,YACA,OACF,CAGuD,CAAC,EAAA,CACR,UAC9C,OAAO,EAAE,MAAM,iBAAiB;EAC9B,MAAM,SAAyB,CAAC;EAEhC,MAAM,WAAW,WAAW,cAAc,KAAK;EAC/C,IAAI,YAAY,CAAC,oBAAoB,QAAQ,GAC3C,OAAO,WAAW;EAGpB,MAAM,YAAY,WAAW,cAAc,SAAS;EACpD,IACE,aACA,CAAC,oBAAoB,wBAAwB,SAAS,CAAC,GACvD;GACA,OAAO,YAAY,UAChB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,CACzD,QAAQ,MAAM,mBAAmB,GAAG,qBAAqB;GAE5D,IAAI,OAAO,UAAU,WAAW,IAAI,GAGlC,OAAO,YAAY,SAAS,OAAO;EAEvC;EAEA,MAAM,aAAa,WAAW,mBAC5B,mCACF;EACA,IAAI,YAAY;GAKd,OAAO,kBAAkB,GAHvB,WAAW,cAAc,SAAS,KAAK,WAAW,MAGR,GAD1C,WAAW,cAAc,YAAY,KAAK,WAAW;GAGvD,OAAO,qBADmB,WAAW,cAAc,SACP,KAAK;GACjD,MAAM,oBAAoB,WAAW,cAAc,SAAS;GAC5D,IAAI,mBACF,OAAO,qBAAqB;EAEhC;EAEA,MAAM,UAAU,WAAW,cAAc,SAAS;EAClD,IAAI,SACF,OAAO,eAAe;EAGxB,MAAM,SAAS,WAAW,WAAW,QAAQ;EAC7C,IACE,iBAAiB,KACjB,WACC,CAAC,OAAO,aAAa,CAAC,OAAO,WAC9B;GAGA,MAAM,CAAC,eAAe,kBAAkB,iBAAiB;IACvD;IACA;IACA;GACF,CAAC,CAAC,KAAK,MAAM,OAAO,cAAc,CAAC,CAAC,EAAE,QAAQ,MAAM,MAAM,GAAG,EAAE,CAAC;GAChE,IAAI,iBAAiB,oBAAoB,eAAe;IAGtD,MAAM,oBAAoB,MAAM,kBAC9B,MAFuB,mBAAmB,GADjB,cAAc,GAAG,kBAI3B,GACf,SACA,eACA,iBAAiB,CACnB;IACA,IAAI,CAAC,OAAO,aAAa,kBAAkB,WACzC,OAAO,YAAY,kBAAkB;IAEvC,IAAI,CAAC,OAAO,YAAY,kBAAkB,UACxC,OAAO,WAAW,kBAAkB;GAExC;EACF;EAEA,OAAO;CACT,CACF,EAAA,CAE4B,SAAS,CAAC,CAAC;AACzC"}
+{"version":3,"file":"util.js","names":["packageCache.get","HttpError","packageCache.set","packageCache.getCacheType"],"sources":["../../../../lib/modules/datasource/maven/util.ts"],"sourcesContent":["import { Readable } from 'node:stream';\nimport { GetObjectCommand } from '@aws-sdk/client-s3';\nimport { XmlDocument } from 'xmldoc';\nimport {\n  HOST_BLOCKED,\n  HOST_DISABLED,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport * as packageCache from '../../../util/cache/package/index.ts';\nimport { PackageHttpCacheProvider } from '../../../util/http/cache/package-http-cache-provider.ts';\nimport { type Http, HttpError } from '../../../util/http/index.ts';\nimport type { HttpOptions, HttpResponse } from '../../../util/http/types.ts';\nimport { refusedHostMessage } from '../../../util/http/util.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Result } from '../../../util/result.ts';\nimport { getS3Client, parseS3Url } from '../../../util/s3.ts';\nimport { streamToString } from '../../../util/streams.ts';\nimport { asTimestamp } from '../../../util/timestamp.ts';\nimport { ensureTrailingSlash, isHttpUrl } from '../../../util/url.ts';\nimport { getGoogleAuthToken } from '../util.ts';\nimport { isMavenCentral } from './common.ts';\nimport { CachedMavenXml } from './schema.ts';\nimport type {\n  DependencyInfo,\n  MavenDependency,\n  MavenFetchResult,\n  MavenFetchSuccess,\n} from './types.ts';\n\nfunction isTemporaryError(err: HttpError): boolean {\n  if (err.code === 'ECONNRESET') {\n    return true;\n  }\n\n  if (err.response) {\n    const status = err.response.statusCode;\n    return status === 429 || (status >= 500 && status < 600);\n  }\n\n  return false;\n}\n\nfunction isHostError(err: HttpError): boolean {\n  return err.code === 'ETIMEDOUT';\n}\n\nfunction isNotFoundError(err: HttpError): boolean {\n  return err.code === 'ENOTFOUND' || err.response?.statusCode === 404;\n}\n\nfunction isPermissionsIssue(err: HttpError): boolean {\n  const status = err.response?.statusCode;\n  return status === 401 || status === 403;\n}\n\nfunction isConnectionError(err: HttpError): boolean {\n  return (\n    err.code === 'EAI_AGAIN' ||\n    err.code === 'ERR_TLS_CERT_ALTNAME_INVALID' ||\n    err.code === 'ECONNREFUSED'\n  );\n}\n\nfunction isUnsupportedHostError(err: HttpError): boolean {\n  return err.name === 'UnsupportedProtocolError';\n}\n\nconst cacheProvider = new PackageHttpCacheProvider({\n  namespace: 'datasource-maven:cache-provider',\n  softTtlMinutes: 15,\n  checkAuthorizationHeader: true,\n  checkCacheControlHeader: false, // Maven doesn't respond with `cache-control` headers\n  writeSchema: CachedMavenXml,\n});\n\n// Release POMs and timestamped snapshot POMs are immutable once published, so we can cache them much longer than mutable metadata files.\nconst pomCacheProvider = new PackageHttpCacheProvider({\n  namespace: 'datasource-maven:pom-cache-provider',\n  softTtlMinutes: 60 * 24 * 28, // 28 days before we'll give it another check, just in case it's updated\n  checkAuthorizationHeader: true,\n  checkCacheControlHeader: false,\n  writeSchema: CachedMavenXml,\n});\n\nfunction selectCacheProvider(url: string): PackageHttpCacheProvider {\n  // Non-timestamped -SNAPSHOT.pom files are mutable; everything else ending in .pom (release POMs and timestamped snapshot POMs) is immutable.\n  if (url.endsWith('.pom') && !url.endsWith('-SNAPSHOT.pom')) {\n    return pomCacheProvider;\n  }\n  return cacheProvider;\n}\n\nconst METADATA_NOT_FOUND_NAMESPACE =\n  'datasource-maven:metadata-not-found' as const;\nconst METADATA_NOT_FOUND_TTL_MINUTES = 60 * 12; // 12 hours\n\n/** introduces jitter to make sure that a given repo's cache expiring doesn't lead to many requests leading to high traffic and/or rate limits */\nfunction getMetadataNotFoundTtl(): number {\n  const jitter = Math.floor(Math.random() * 60 * 2); // 0–120 minutes\n  return METADATA_NOT_FOUND_TTL_MINUTES + jitter;\n}\n\nfunction isMetadataUrl(url: string): boolean {\n  return url.endsWith('/maven-metadata.xml');\n}\n\nexport async function downloadHttpProtocol(\n  http: Http,\n  pkgUrl: URL | string,\n  opts: HttpOptions = {},\n): Promise<MavenFetchResult> {\n  const url = pkgUrl.toString();\n\n  if (isMetadataUrl(url)) {\n    const cacheHasNotFoundResponse = await packageCache.get<true>(\n      METADATA_NOT_FOUND_NAMESPACE,\n      url,\n    );\n    if (cacheHasNotFoundResponse) {\n      logger.trace(\n        { url },\n        'Returning cached 404 response for the metadata-metadata URL request',\n      );\n      return Result.err({ type: 'not-found' });\n    }\n  }\n\n  const fetchResult = await Result.wrap<HttpResponse>(\n    http.getText(url, { ...opts, cacheProvider: selectCacheProvider(url) }),\n  )\n    .transform((res): MavenFetchSuccess => {\n      const result: MavenFetchSuccess = { data: res.body };\n\n      if (!res.authorization) {\n        result.isCacheable = true;\n      }\n\n      const lastModified = asTimestamp(res?.headers?.['last-modified']);\n      if (lastModified) {\n        result.lastModified = lastModified;\n      }\n\n      return result;\n    })\n    .catch(async (err): Promise<MavenFetchResult> => {\n      /* v8 ignore next: never happens, needs for type narrowing */\n      if (!(err instanceof HttpError)) {\n        return Result.err({ type: 'unknown', err });\n      }\n\n      const failedUrl = url;\n      if ([HOST_BLOCKED, HOST_DISABLED].includes(err.message)) {\n        logger.trace({ failedUrl }, refusedHostMessage(err));\n        return Result.err({ type: 'host-disabled' });\n      }\n\n      if (isNotFoundError(err)) {\n        logger.trace({ failedUrl }, `Url not found`);\n        if (isMetadataUrl(failedUrl)) {\n          await packageCache.set(\n            METADATA_NOT_FOUND_NAMESPACE,\n            failedUrl,\n            true,\n            getMetadataNotFoundTtl(),\n          );\n        }\n        return Result.err({ type: 'not-found' });\n      }\n\n      if (isHostError(err)) {\n        logger.debug(`Cannot connect to host ${failedUrl}`);\n        return Result.err({ type: 'host-error' });\n      }\n\n      if (isPermissionsIssue(err)) {\n        logger.debug(\n          `Dependency lookup unauthorized. Please add authentication with a hostRule for ${failedUrl}`,\n        );\n        return Result.err({ type: 'permission-issue' });\n      }\n\n      if (isTemporaryError(err)) {\n        logger.debug({ failedUrl, err }, 'Temporary error');\n\n        if (isMavenCentral(url)) {\n          const statusCode = err?.response?.statusCode;\n          if (statusCode === 429) {\n            if (packageCache.getCacheType() === 'redis') {\n              logger.once.warn(\n                { failedUrl },\n                'Maven Central rate limiting detected despite Redis caching.',\n              );\n            } else {\n              logger.once.warn(\n                { failedUrl },\n                'Maven Central rate limiting detected. Persistent caching required.',\n              );\n            }\n          }\n          return Result.err({ type: 'maven-central-temporary-error', err });\n        }\n        return Result.err({ type: 'temporary-error' });\n      }\n\n      if (isConnectionError(err)) {\n        logger.debug(`Connection refused to maven registry ${failedUrl}`);\n        return Result.err({ type: 'connection-error' });\n      }\n\n      if (isUnsupportedHostError(err)) {\n        logger.debug(`Unsupported host ${failedUrl}`);\n        return Result.err({ type: 'unsupported-host' });\n      }\n\n      logger.info({ failedUrl, err }, 'Unknown HTTP download error');\n      return Result.err({ type: 'unknown', err });\n    });\n\n  const { err } = fetchResult.unwrap();\n  if (err?.type === 'maven-central-temporary-error') {\n    throw new ExternalHostError(err.err);\n  }\n\n  return fetchResult;\n}\n\nexport async function downloadHttpContent(\n  http: Http,\n  pkgUrl: URL | string,\n  opts: HttpOptions = {},\n): Promise<string | null> {\n  const fetchResult = await downloadHttpProtocol(http, pkgUrl, opts);\n  return fetchResult.transform(({ data }) => data).unwrapOrNull();\n}\n\nfunction isS3NotFound(err: Error): boolean {\n  return err.message === 'NotFound' || err.message === 'NoSuchKey';\n}\n\nexport async function downloadS3Protocol(\n  pkgUrl: URL,\n): Promise<MavenFetchResult> {\n  logger.trace({ url: pkgUrl.toString() }, `Attempting to load S3 dependency`);\n\n  const s3Url = parseS3Url(pkgUrl);\n  if (!s3Url) {\n    return Result.err({ type: 'invalid-url' });\n  }\n\n  return await Result.wrap(() => {\n    const command = new GetObjectCommand(s3Url);\n    const client = getS3Client();\n    return client.send(command);\n  })\n    .transform(\n      async ({\n        Body,\n        LastModified,\n        DeleteMarker,\n      }): Promise<MavenFetchResult> => {\n        if (DeleteMarker) {\n          logger.trace(\n            { failedUrl: pkgUrl.toString() },\n            'Maven S3 lookup error: DeleteMarker encountered',\n          );\n          return Result.err({ type: 'not-found' });\n        }\n\n        if (!(Body instanceof Readable)) {\n          logger.debug(\n            { failedUrl: pkgUrl.toString() },\n            'Maven S3 lookup error: unsupported Body type',\n          );\n          return Result.err({ type: 'unsupported-format' });\n        }\n\n        const data = await streamToString(Body);\n        const result: MavenFetchSuccess = { data };\n\n        const lastModified = asTimestamp(LastModified);\n        if (lastModified) {\n          result.lastModified = lastModified;\n        }\n\n        return Result.ok(result);\n      },\n    )\n    .catch((err): MavenFetchResult => {\n      if (!(err instanceof Error)) {\n        return Result.err(err);\n      }\n\n      const failedUrl = pkgUrl.toString();\n\n      if (err.name === 'CredentialsProviderError') {\n        logger.debug(\n          { failedUrl },\n          'Maven S3 lookup error: credentials provider error, check \"AWS_ACCESS_KEY_ID\" and \"AWS_SECRET_ACCESS_KEY\" variables',\n        );\n        return Result.err({ type: 'credentials-error' });\n      }\n\n      if (err.message === 'Region is missing') {\n        logger.debug(\n          { failedUrl },\n          'Maven S3 lookup error: missing region, check \"AWS_REGION\" variable',\n        );\n        return Result.err({ type: 'missing-aws-region' });\n      }\n\n      if (isS3NotFound(err)) {\n        logger.trace({ failedUrl }, 'Maven S3 lookup error: object not found');\n        return Result.err({ type: 'not-found' });\n      }\n\n      logger.debug({ failedUrl, err }, 'Maven S3 lookup error: unknown error');\n      return Result.err({ type: 'unknown', err });\n    });\n}\n\nexport async function downloadArtifactRegistryProtocol(\n  http: Http,\n  pkgUrl: URL,\n): Promise<MavenFetchResult> {\n  const opts: HttpOptions = {};\n  const host = pkgUrl.host;\n  const path = pkgUrl.pathname;\n\n  logger.trace({ host, path }, `Using google auth for Maven repository`);\n  const auth = await getGoogleAuthToken();\n  if (auth) {\n    opts.headers = { authorization: `Basic ${auth}` };\n  } else {\n    logger.once.debug(\n      { host, path },\n      'Could not get Google access token, using no auth',\n    );\n  }\n\n  const url = pkgUrl.toString().replace('artifactregistry:', 'https:');\n\n  return downloadHttpProtocol(http, url, opts);\n}\n\nfunction containsPlaceholder(str: string): boolean {\n  return regEx(/\\${.*?}/g).test(str);\n}\n\nfunction removeKnownPlaceholders(str: string): string {\n  return str.replace(regEx(/\\/tree\\/\\${[^}]+}/), '');\n}\n\nexport function getMavenUrl(\n  dependency: MavenDependency,\n  repoUrl: string,\n  path: string,\n): URL {\n  return new URL(\n    `${dependency.dependencyUrl}/${path}`,\n    ensureTrailingSlash(repoUrl),\n  );\n}\n\nexport async function downloadMaven(\n  http: Http,\n  url: URL,\n): Promise<MavenFetchResult> {\n  const protocol = url.protocol;\n\n  let result: MavenFetchResult = Result.err({ type: 'unsupported-protocol' });\n\n  if (isHttpUrl(url)) {\n    result = await downloadHttpProtocol(http, url);\n  }\n\n  if (protocol === 'artifactregistry:') {\n    result = await downloadArtifactRegistryProtocol(http, url);\n  }\n\n  if (protocol === 's3:') {\n    result = await downloadS3Protocol(url);\n  }\n\n  return result.onError((err) => {\n    if (err.type === 'unsupported-protocol') {\n      logger.debug(\n        { url: url.toString() },\n        `Maven lookup error: unsupported protocol (${protocol})`,\n      );\n    }\n  });\n}\n\nexport async function downloadMavenXml(\n  http: Http,\n  url: URL,\n): Promise<MavenFetchResult<XmlDocument>> {\n  const rawResult = await downloadMaven(http, url);\n  return rawResult.transform((result): MavenFetchResult<XmlDocument> => {\n    try {\n      return Result.ok({\n        ...result,\n        data: new XmlDocument(result.data),\n      });\n    } catch (err) {\n      return Result.err({ type: 'xml-parse-error', err });\n    }\n  });\n}\n\nexport function getDependencyParts(packageName: string): MavenDependency {\n  const [group, name] = packageName.split(':');\n  const dependencyUrl = `${group.replace(regEx(/\\./g), '/')}/${name}`;\n  return {\n    display: packageName,\n    group,\n    name,\n    dependencyUrl,\n  };\n}\n\nfunction extractSnapshotVersion(metadata: XmlDocument): string | null {\n  // Parse the maven-metadata.xml for the snapshot version and determine\n  // the fixed version of the latest deployed snapshot.\n  // The metadata descriptor can be found at\n  // https://maven.apache.org/ref/3.3.3/maven-repository-metadata/repository-metadata.html\n  //\n  // Basically, we need to replace -SNAPSHOT with the artifact timestanp & build number,\n  // so for example 1.0.0-SNAPSHOT will become 1.0.0-<timestamp>-<buildNumber>\n  const version = metadata\n    .descendantWithPath('version')\n    ?.val?.replace('-SNAPSHOT', '');\n\n  const snapshot = metadata.descendantWithPath('versioning.snapshot');\n  const timestamp = snapshot?.childNamed('timestamp')?.val;\n  const build = snapshot?.childNamed('buildNumber')?.val;\n\n  // If we weren't able to parse out the required 3 version elements,\n  // return null because we can't determine the fixed version of the latest snapshot.\n  if (!version || !timestamp || !build) {\n    return null;\n  }\n  return `${version}-${timestamp}-${build}`;\n}\n\nasync function getSnapshotFullVersion(\n  http: Http,\n  version: string,\n  dependency: MavenDependency,\n  repoUrl: string,\n): Promise<string | null> {\n  // To determine what actual files are available for the snapshot, first we have to fetch and parse\n  // the metadata located at http://<repo>/<group>/<artifact>/<version-SNAPSHOT>/maven-metadata.xml\n  const metadataUrl = getMavenUrl(\n    dependency,\n    repoUrl,\n    `${version}/maven-metadata.xml`,\n  );\n\n  const metadataXmlResult = await downloadMavenXml(http, metadataUrl);\n\n  return metadataXmlResult\n    .transform(({ data }) =>\n      Result.wrapNullable(extractSnapshotVersion(data), {\n        type: 'snapshot-extract-error',\n      }),\n    )\n    .unwrapOrNull();\n}\n\nfunction isSnapshotVersion(version: string): boolean {\n  if (version.endsWith('-SNAPSHOT')) {\n    return true;\n  }\n  return false;\n}\n\nexport async function createUrlForDependencyPom(\n  http: Http,\n  version: string,\n  dependency: MavenDependency,\n  repoUrl: string,\n): Promise<string> {\n  if (isSnapshotVersion(version)) {\n    // By default, Maven snapshots are deployed to the repository with fixed file names.\n    // Resolve the full, actual pom file name for the version.\n    const fullVersion = await getSnapshotFullVersion(\n      http,\n      version,\n      dependency,\n      repoUrl,\n    );\n\n    // If we were able to resolve the version, use that, otherwise fall back to using -SNAPSHOT\n    if (fullVersion !== null) {\n      // TODO: types (#22198)\n      return `${version}/${dependency.name}-${fullVersion}.pom`;\n    }\n  }\n\n  // TODO: types (#22198)\n  return `${version}/${dependency.name}-${version}.pom`;\n}\n\nexport async function getDependencyInfo(\n  http: Http,\n  dependency: MavenDependency,\n  repoUrl: string,\n  version: string,\n  recursionLimit = 5,\n): Promise<DependencyInfo> {\n  const path = await createUrlForDependencyPom(\n    http,\n    version,\n    dependency,\n    repoUrl,\n  );\n\n  const pomUrl = getMavenUrl(dependency, repoUrl, path);\n  const pomXmlResult = await downloadMavenXml(http, pomUrl);\n  const dependencyInfoResult = await pomXmlResult.transform(\n    async ({ data: pomContent }) => {\n      const result: DependencyInfo = {};\n\n      const homepage = pomContent.valueWithPath('url');\n      if (homepage && !containsPlaceholder(homepage)) {\n        result.homepage = homepage;\n      }\n\n      const sourceUrl = pomContent.valueWithPath('scm.url');\n      if (\n        sourceUrl &&\n        !containsPlaceholder(removeKnownPlaceholders(sourceUrl))\n      ) {\n        result.sourceUrl = sourceUrl\n          .replace(regEx(/^scm:/), '')\n          .replace(regEx(/^git:/), '')\n          .replace(regEx(/^git@github.com:/), 'https://github.com/')\n          .replace(regEx(/^git@github.com\\//), 'https://github.com/');\n\n        if (result.sourceUrl.startsWith('//')) {\n          // most likely the result of us stripping scm:, git: etc\n          // going with prepending https: here which should result in potential information retrival\n          result.sourceUrl = `https:${result.sourceUrl}`;\n        }\n      }\n\n      const relocation = pomContent.descendantWithPath(\n        'distributionManagement.relocation',\n      );\n      if (relocation) {\n        const relocationGroup =\n          relocation.valueWithPath('groupId') ?? dependency.group;\n        const relocationName =\n          relocation.valueWithPath('artifactId') ?? dependency.name;\n        result.replacementName = `${relocationGroup}:${relocationName}`;\n        const relocationVersion = relocation.valueWithPath('version');\n        result.replacementVersion = relocationVersion ?? version;\n        const relocationMessage = relocation.valueWithPath('message');\n        if (relocationMessage) {\n          result.deprecationMessage = relocationMessage;\n        }\n      }\n\n      const groupId = pomContent.valueWithPath('groupId');\n      if (groupId) {\n        result.packageScope = groupId;\n      }\n\n      const parent = pomContent.childNamed('parent');\n      if (\n        recursionLimit > 0 &&\n        parent &&\n        (!result.sourceUrl || !result.homepage)\n      ) {\n        // if we found a parent and are missing some information\n        // trying to get the scm/homepage information from it\n        const [parentGroupId, parentArtifactId, parentVersion] = [\n          'groupId',\n          'artifactId',\n          'version',\n        ].map((k) => parent.valueWithPath(k)?.replace(regEx(/\\s+/g), ''));\n        if (parentGroupId && parentArtifactId && parentVersion) {\n          const parentDisplayId = `${parentGroupId}:${parentArtifactId}`;\n          const parentDependency = getDependencyParts(parentDisplayId);\n          const parentInformation = await getDependencyInfo(\n            http,\n            parentDependency,\n            repoUrl,\n            parentVersion,\n            recursionLimit - 1,\n          );\n          if (!result.sourceUrl && parentInformation.sourceUrl) {\n            result.sourceUrl = parentInformation.sourceUrl;\n          }\n          if (!result.homepage && parentInformation.homepage) {\n            result.homepage = parentInformation.homepage;\n          }\n        }\n      }\n\n      return result;\n    },\n  );\n\n  return dependencyInfoResult.unwrapOr({});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA8BA,SAAS,iBAAiB,KAAyB;CACjD,IAAI,IAAI,SAAS,cACf,OAAO;CAGT,IAAI,IAAI,UAAU;EAChB,MAAM,SAAS,IAAI,SAAS;EAC5B,OAAO,WAAW,OAAQ,UAAU,OAAO,SAAS;CACtD;CAEA,OAAO;AACT;AAEA,SAAS,YAAY,KAAyB;CAC5C,OAAO,IAAI,SAAS;AACtB;AAEA,SAAS,gBAAgB,KAAyB;CAChD,OAAO,IAAI,SAAS,eAAe,IAAI,UAAU,eAAe;AAClE;AAEA,SAAS,mBAAmB,KAAyB;CACnD,MAAM,SAAS,IAAI,UAAU;CAC7B,OAAO,WAAW,OAAO,WAAW;AACtC;AAEA,SAAS,kBAAkB,KAAyB;CAClD,OACE,IAAI,SAAS,eACb,IAAI,SAAS,kCACb,IAAI,SAAS;AAEjB;AAEA,SAAS,uBAAuB,KAAyB;CACvD,OAAO,IAAI,SAAS;AACtB;AAEA,MAAM,gBAAgB,IAAI,yBAAyB;CACjD,WAAW;CACX,gBAAgB;CAChB,0BAA0B;CAC1B,yBAAyB;CACzB,aAAa;AACf,CAAC;AAGD,MAAM,mBAAmB,IAAI,yBAAyB;CACpD,WAAW;CACX,gBAAgB;CAChB,0BAA0B;CAC1B,yBAAyB;CACzB,aAAa;AACf,CAAC;AAED,SAAS,oBAAoB,KAAuC;CAElE,IAAI,IAAI,SAAS,MAAM,KAAK,CAAC,IAAI,SAAS,eAAe,GACvD,OAAO;CAET,OAAO;AACT;AAEA,MAAM,+BACJ;AACF,MAAM,iCAAiC;;AAGvC,SAAS,yBAAiC;CACxC,MAAM,SAAS,KAAK,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC;CAChD,OAAO,iCAAiC;AAC1C;AAEA,SAAS,cAAc,KAAsB;CAC3C,OAAO,IAAI,SAAS,qBAAqB;AAC3C;AAEA,eAAsB,qBACpB,MACA,QACA,OAAoB,CAAC,GACM;CAC3B,MAAM,MAAM,OAAO,SAAS;CAE5B,IAAI,cAAc,GAAG,GAKf;MAAA,MAJmCA,IACrC,8BACA,GACF,GAC8B;GAC5B,OAAO,MACL,EAAE,IAAI,GACN,qEACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;;CAGF,MAAM,cAAc,MAAM,OAAO,KAC/B,KAAK,QAAQ,KAAK;EAAE,GAAG;EAAM,eAAe,oBAAoB,GAAG;CAAE,CAAC,CACxE,CAAC,CACE,WAAW,QAA2B;EACrC,MAAM,SAA4B,EAAE,MAAM,IAAI,KAAK;EAEnD,IAAI,CAAC,IAAI,eACP,OAAO,cAAc;EAGvB,MAAM,eAAe,YAAY,KAAK,UAAU,gBAAgB;EAChE,IAAI,cACF,OAAO,eAAe;EAGxB,OAAO;CACT,CAAC,CAAC,CACD,MAAM,OAAO,QAAmC;;EAE/C,IAAI,EAAE,eAAeC,eACnB,OAAO,OAAO,IAAI;GAAE,MAAM;GAAW;EAAI,CAAC;EAG5C,MAAM,YAAY;EAClB,IAAI,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,OAAO,GAAG;GACvD,OAAO,MAAM,EAAE,UAAU,GAAG,mBAAmB,GAAG,CAAC;GACnD,OAAO,OAAO,IAAI,EAAE,MAAM,gBAAgB,CAAC;EAC7C;EAEA,IAAI,gBAAgB,GAAG,GAAG;GACxB,OAAO,MAAM,EAAE,UAAU,GAAG,eAAe;GAC3C,IAAI,cAAc,SAAS,GACzB,MAAMC,IACJ,8BACA,WACA,MACA,uBAAuB,CACzB;GAEF,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;EAEA,IAAI,YAAY,GAAG,GAAG;GACpB,OAAO,MAAM,0BAA0B,WAAW;GAClD,OAAO,OAAO,IAAI,EAAE,MAAM,aAAa,CAAC;EAC1C;EAEA,IAAI,mBAAmB,GAAG,GAAG;GAC3B,OAAO,MACL,iFAAiF,WACnF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,mBAAmB,CAAC;EAChD;EAEA,IAAI,iBAAiB,GAAG,GAAG;GACzB,OAAO,MAAM;IAAE;IAAW;GAAI,GAAG,iBAAiB;GAElD,IAAI,eAAe,GAAG,GAAG;IAEvB,IADmB,KAAK,UAAU,eACf,KAAK;KACtB,IAAIC,aAA0B,MAAM,SAClC,OAAO,KAAK,KACV,EAAE,UAAU,GACZ,6DACF;UAEA,OAAO,KAAK,KACV,EAAE,UAAU,GACZ,oEACF;IAEJ;IACA,OAAO,OAAO,IAAI;KAAE,MAAM;KAAiC;IAAI,CAAC;GAClE;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,kBAAkB,CAAC;EAC/C;EAEA,IAAI,kBAAkB,GAAG,GAAG;GAC1B,OAAO,MAAM,wCAAwC,WAAW;GAChE,OAAO,OAAO,IAAI,EAAE,MAAM,mBAAmB,CAAC;EAChD;EAEA,IAAI,uBAAuB,GAAG,GAAG;GAC/B,OAAO,MAAM,oBAAoB,WAAW;GAC5C,OAAO,OAAO,IAAI,EAAE,MAAM,mBAAmB,CAAC;EAChD;EAEA,OAAO,KAAK;GAAE;GAAW;EAAI,GAAG,6BAA6B;EAC7D,OAAO,OAAO,IAAI;GAAE,MAAM;GAAW;EAAI,CAAC;CAC5C,CAAC;CAEH,MAAM,EAAE,QAAQ,YAAY,OAAO;CACnC,IAAI,KAAK,SAAS,iCAChB,MAAM,IAAI,kBAAkB,IAAI,GAAG;CAGrC,OAAO;AACT;AAEA,eAAsB,oBACpB,MACA,QACA,OAAoB,CAAC,GACG;CAExB,QAAO,MADmB,qBAAqB,MAAM,QAAQ,IAAI,EAAA,CAC9C,WAAW,EAAE,WAAW,IAAI,CAAC,CAAC,aAAa;AAChE;AAEA,SAAS,aAAa,KAAqB;CACzC,OAAO,IAAI,YAAY,cAAc,IAAI,YAAY;AACvD;AAEA,eAAsB,mBACpB,QAC2B;CAC3B,OAAO,MAAM,EAAE,KAAK,OAAO,SAAS,EAAE,GAAG,kCAAkC;CAE3E,MAAM,QAAQ,WAAW,MAAM;CAC/B,IAAI,CAAC,OACH,OAAO,OAAO,IAAI,EAAE,MAAM,cAAc,CAAC;CAG3C,OAAO,MAAM,OAAO,WAAW;EAC7B,MAAM,UAAU,IAAI,iBAAiB,KAAK;EAE1C,OADe,YACH,CAAC,CAAC,KAAK,OAAO;CAC5B,CAAC,CAAC,CACC,UACC,OAAO,EACL,MACA,cACA,mBAC+B;EAC/B,IAAI,cAAc;GAChB,OAAO,MACL,EAAE,WAAW,OAAO,SAAS,EAAE,GAC/B,iDACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;EAEA,IAAI,EAAE,gBAAgB,WAAW;GAC/B,OAAO,MACL,EAAE,WAAW,OAAO,SAAS,EAAE,GAC/B,8CACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,qBAAqB,CAAC;EAClD;EAGA,MAAM,SAA4B,EAAE,MAAA,MADjB,eAAe,IAAI,EACG;EAEzC,MAAM,eAAe,YAAY,YAAY;EAC7C,IAAI,cACF,OAAO,eAAe;EAGxB,OAAO,OAAO,GAAG,MAAM;CACzB,CACF,CAAC,CACA,OAAO,QAA0B;EAChC,IAAI,EAAE,eAAe,QACnB,OAAO,OAAO,IAAI,GAAG;EAGvB,MAAM,YAAY,OAAO,SAAS;EAElC,IAAI,IAAI,SAAS,4BAA4B;GAC3C,OAAO,MACL,EAAE,UAAU,GACZ,wHACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,oBAAoB,CAAC;EACjD;EAEA,IAAI,IAAI,YAAY,qBAAqB;GACvC,OAAO,MACL,EAAE,UAAU,GACZ,sEACF;GACA,OAAO,OAAO,IAAI,EAAE,MAAM,qBAAqB,CAAC;EAClD;EAEA,IAAI,aAAa,GAAG,GAAG;GACrB,OAAO,MAAM,EAAE,UAAU,GAAG,yCAAyC;GACrE,OAAO,OAAO,IAAI,EAAE,MAAM,YAAY,CAAC;EACzC;EAEA,OAAO,MAAM;GAAE;GAAW;EAAI,GAAG,sCAAsC;EACvE,OAAO,OAAO,IAAI;GAAE,MAAM;GAAW;EAAI,CAAC;CAC5C,CAAC;AACL;AAEA,eAAsB,iCACpB,MACA,QAC2B;CAC3B,MAAM,OAAoB,CAAC;CAC3B,MAAM,OAAO,OAAO;CACpB,MAAM,OAAO,OAAO;CAEpB,OAAO,MAAM;EAAE;EAAM;CAAK,GAAG,wCAAwC;CACrE,MAAM,OAAO,MAAM,mBAAmB;CACtC,IAAI,MACF,KAAK,UAAU,EAAE,eAAe,SAAS,OAAO;MAEhD,OAAO,KAAK,MACV;EAAE;EAAM;CAAK,GACb,kDACF;CAKF,OAAO,qBAAqB,MAFhB,OAAO,SAAS,CAAC,CAAC,QAAQ,qBAAqB,QAEvB,GAAG,IAAI;AAC7C;AAEA,SAAS,oBAAoB,KAAsB;CACjD,OAAO,MAAM,UAAU,CAAC,CAAC,KAAK,GAAG;AACnC;AAEA,SAAS,wBAAwB,KAAqB;CACpD,OAAO,IAAI,QAAQ,MAAM,mBAAmB,GAAG,EAAE;AACnD;AAEA,SAAgB,YACd,YACA,SACA,MACK;CACL,OAAO,IAAI,IACT,GAAG,WAAW,cAAc,GAAG,QAC/B,oBAAoB,OAAO,CAC7B;AACF;AAEA,eAAsB,cACpB,MACA,KAC2B;CAC3B,MAAM,WAAW,IAAI;CAErB,IAAI,SAA2B,OAAO,IAAI,EAAE,MAAM,uBAAuB,CAAC;CAE1E,IAAI,UAAU,GAAG,GACf,SAAS,MAAM,qBAAqB,MAAM,GAAG;CAG/C,IAAI,aAAa,qBACf,SAAS,MAAM,iCAAiC,MAAM,GAAG;CAG3D,IAAI,aAAa,OACf,SAAS,MAAM,mBAAmB,GAAG;CAGvC,OAAO,OAAO,SAAS,QAAQ;EAC7B,IAAI,IAAI,SAAS,wBACf,OAAO,MACL,EAAE,KAAK,IAAI,SAAS,EAAE,GACtB,6CAA6C,SAAS,EACxD;CAEJ,CAAC;AACH;AAEA,eAAsB,iBACpB,MACA,KACwC;CAExC,QAAO,MADiB,cAAc,MAAM,GAAG,EAAA,CAC9B,WAAW,WAA0C;EACpE,IAAI;GACF,OAAO,OAAO,GAAG;IACf,GAAG;IACH,MAAM,IAAI,YAAY,OAAO,IAAI;GACnC,CAAC;EACH,SAAS,KAAK;GACZ,OAAO,OAAO,IAAI;IAAE,MAAM;IAAmB;GAAI,CAAC;EACpD;CACF,CAAC;AACH;AAEA,SAAgB,mBAAmB,aAAsC;CACvE,MAAM,CAAC,OAAO,QAAQ,YAAY,MAAM,GAAG;CAE3C,OAAO;EACL,SAAS;EACT;EACA;EACA,eAAA,GALuB,MAAM,QAAQ,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG;CAM7D;AACF;AAEA,SAAS,uBAAuB,UAAsC;CAQpE,MAAM,UAAU,SACb,mBAAmB,SAAS,CAAC,EAC5B,KAAK,QAAQ,aAAa,EAAE;CAEhC,MAAM,WAAW,SAAS,mBAAmB,qBAAqB;CAClE,MAAM,YAAY,UAAU,WAAW,WAAW,CAAC,EAAE;CACrD,MAAM,QAAQ,UAAU,WAAW,aAAa,CAAC,EAAE;CAInD,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,OAC7B,OAAO;CAET,OAAO,GAAG,QAAQ,GAAG,UAAU,GAAG;AACpC;AAEA,eAAe,uBACb,MACA,SACA,YACA,SACwB;CAWxB,QAAO,MAFyB,iBAAiB,MAN7B,YAClB,YACA,SACA,GAAG,QAAQ,oBAGoD,CAAC,EAAA,CAG/D,WAAW,EAAE,WACZ,OAAO,aAAa,uBAAuB,IAAI,GAAG,EAChD,MAAM,yBACR,CAAC,CACH,CAAC,CACA,aAAa;AAClB;AAEA,SAAS,kBAAkB,SAA0B;CACnD,IAAI,QAAQ,SAAS,WAAW,GAC9B,OAAO;CAET,OAAO;AACT;AAEA,eAAsB,0BACpB,MACA,SACA,YACA,SACiB;CACjB,IAAI,kBAAkB,OAAO,GAAG;EAG9B,MAAM,cAAc,MAAM,uBACxB,MACA,SACA,YACA,OACF;EAGA,IAAI,gBAAgB,MAElB,OAAO,GAAG,QAAQ,GAAG,WAAW,KAAK,GAAG,YAAY;CAExD;CAGA,OAAO,GAAG,QAAQ,GAAG,WAAW,KAAK,GAAG,QAAQ;AAClD;AAEA,eAAsB,kBACpB,MACA,YACA,SACA,SACA,iBAAiB,GACQ;CA+FzB,QAAO,OArF4B,MADR,iBAAiB,MAD7B,YAAY,YAAY,SAAS,MAP7B,0BACjB,MACA,SACA,YACA,OACF,CAGuD,CAAC,EAAA,CACR,UAC9C,OAAO,EAAE,MAAM,iBAAiB;EAC9B,MAAM,SAAyB,CAAC;EAEhC,MAAM,WAAW,WAAW,cAAc,KAAK;EAC/C,IAAI,YAAY,CAAC,oBAAoB,QAAQ,GAC3C,OAAO,WAAW;EAGpB,MAAM,YAAY,WAAW,cAAc,SAAS;EACpD,IACE,aACA,CAAC,oBAAoB,wBAAwB,SAAS,CAAC,GACvD;GACA,OAAO,YAAY,UAChB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,CACzD,QAAQ,MAAM,mBAAmB,GAAG,qBAAqB;GAE5D,IAAI,OAAO,UAAU,WAAW,IAAI,GAGlC,OAAO,YAAY,SAAS,OAAO;EAEvC;EAEA,MAAM,aAAa,WAAW,mBAC5B,mCACF;EACA,IAAI,YAAY;GAKd,OAAO,kBAAkB,GAHvB,WAAW,cAAc,SAAS,KAAK,WAAW,MAGR,GAD1C,WAAW,cAAc,YAAY,KAAK,WAAW;GAGvD,OAAO,qBADmB,WAAW,cAAc,SACP,KAAK;GACjD,MAAM,oBAAoB,WAAW,cAAc,SAAS;GAC5D,IAAI,mBACF,OAAO,qBAAqB;EAEhC;EAEA,MAAM,UAAU,WAAW,cAAc,SAAS;EAClD,IAAI,SACF,OAAO,eAAe;EAGxB,MAAM,SAAS,WAAW,WAAW,QAAQ;EAC7C,IACE,iBAAiB,KACjB,WACC,CAAC,OAAO,aAAa,CAAC,OAAO,WAC9B;GAGA,MAAM,CAAC,eAAe,kBAAkB,iBAAiB;IACvD;IACA;IACA;GACF,CAAC,CAAC,KAAK,MAAM,OAAO,cAAc,CAAC,CAAC,EAAE,QAAQ,MAAM,MAAM,GAAG,EAAE,CAAC;GAChE,IAAI,iBAAiB,oBAAoB,eAAe;IAGtD,MAAM,oBAAoB,MAAM,kBAC9B,MAFuB,mBAAmB,GADjB,cAAc,GAAG,kBAI3B,GACf,SACA,eACA,iBAAiB,CACnB;IACA,IAAI,CAAC,OAAO,aAAa,kBAAkB,WACzC,OAAO,YAAY,kBAAkB;IAEvC,IAAI,CAAC,OAAO,YAAY,kBAAkB,UACxC,OAAO,WAAW,kBAAkB;GAExC;EACF;EAEA,OAAO;CACT,CACF,EAAA,CAE4B,SAAS,CAAC,CAAC;AACzC"}

package/dist/modules/datasource/npm/get.js

@@ -108,7 +108,7 @@ async function getDependency(http, registryUrl, packageName) {
 		return dep;
 	} catch (err) {
 		const actualError = err instanceof ExternalHostError ? err.err : err;
-		if (actualError.message === "host-disabled" || [
+		if (actualError.message === "host-blocked" || actualError.message === "host-disabled" || [
 			401,
 			402,
 			403,

package/dist/modules/datasource/npm/get.js.map

@@ -1 +1 @@
-{"version":3,"file":"get.js","names":["hostRules.find"],"sources":["../../../../lib/modules/datasource/npm/get.ts"],"sourcesContent":["import { isNonEmptyString, isString } from '@sindresorhus/is';\nimport { z } from 'zod/v4';\nimport { HOST_DISABLED } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { PackageHttpCacheProvider } from '../../../util/http/cache/package-http-cache-provider.ts';\nimport type { Http } from '../../../util/http/index.ts';\nimport type { HttpOptions } from '../../../util/http/types.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { DeepNullish } from '../../../util/schema-utils/index.ts';\nimport { asTimestamp } from '../../../util/timestamp.ts';\nimport { joinUrlParts } from '../../../util/url.ts';\nimport type { Release, ReleaseResult } from '../types.ts';\nimport { defaultRegistryUrl } from './common.ts';\nimport { CachedPackument, NpmResponse } from './schema.ts';\n\nconst SHORT_REPO_REGEX = regEx(\n  /^(?:(?<platform>bitbucket|github|gitlab):)?(?<shortRepo>[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+)$/,\n);\n\nconst platformMapping: Record<string, string> = {\n  bitbucket: 'https://bitbucket.org/',\n  github: 'https://github.com/',\n  gitlab: 'https://gitlab.com/',\n};\n\ninterface PackageSource {\n  sourceUrl: string | null;\n  sourceDirectory: string | null;\n}\n\nconst PackageSource = z\n  .union([\n    z\n      .string()\n      .nonempty()\n      .transform((repository): PackageSource => {\n        let sourceUrl: string | null = null;\n        const sourceDirectory = null;\n        const shortMatch = repository.match(SHORT_REPO_REGEX);\n        if (shortMatch?.groups) {\n          const { platform = 'github', shortRepo } = shortMatch.groups;\n          sourceUrl = platformMapping[platform] + shortRepo;\n        } else {\n          sourceUrl = repository;\n        }\n        return { sourceUrl, sourceDirectory };\n      }),\n    DeepNullish(\n      z.object({\n        url: z.string().nonempty().optional(),\n        directory: z.string().nonempty().optional(),\n      }),\n    ).transform(({ url, directory }) => {\n      const res: PackageSource = { sourceUrl: null, sourceDirectory: null };\n\n      if (url) {\n        res.sourceUrl = url;\n      }\n\n      if (directory) {\n        res.sourceDirectory = directory;\n      }\n\n      return res;\n    }),\n  ])\n  .catch({ sourceUrl: null, sourceDirectory: null });\n\nexport async function getDependency(\n  http: Http,\n  registryUrl: string,\n  packageName: string,\n): Promise<ReleaseResult | null> {\n  logger.trace(`npm.getDependency(${packageName})`);\n\n  const packageUrl = joinUrlParts(registryUrl, packageName.replace('/', '%2F'));\n\n  try {\n    const cacheProvider = new PackageHttpCacheProvider({\n      namespace: 'datasource-npm:cache-provider',\n      checkAuthorizationHeader: false, // We don't rely on whether user token is provided or not\n      checkCacheControlHeader: true,\n      writeSchema: CachedPackument,\n    });\n    const options: HttpOptions = { cacheProvider };\n\n    // set abortOnError for registry.npmjs.org if no hostRule with explicit abortOnError exists\n    if (\n      registryUrl === defaultRegistryUrl &&\n      hostRules.find({ url: defaultRegistryUrl })?.abortOnError === undefined\n    ) {\n      logger.trace(\n        { packageName, registry: defaultRegistryUrl },\n        'setting abortOnError hostRule for well known host',\n      );\n      hostRules.add({\n        matchHost: defaultRegistryUrl,\n        abortOnError: true,\n      });\n    }\n\n    const resp = await http.getJson(packageUrl, options, NpmResponse);\n    const { body: res } = resp;\n    if (!res.versions || !Object.keys(res.versions).length) {\n      // Registry returned a 200 OK but with no versions\n      logger.debug(`No versions returned for npm dependency ${packageName}`);\n      return null;\n    }\n\n    const latestVersion = res.versions[res['dist-tags']?.latest ?? ''];\n    res.repository ??= latestVersion?.repository;\n    res.homepage ??= latestVersion?.homepage;\n\n    const { sourceUrl, sourceDirectory } = PackageSource.parse(res.repository);\n\n    // Simplify response before caching and returning\n    const dep: ReleaseResult = {\n      homepage: res.homepage,\n      releases: [],\n      tags: res['dist-tags'],\n      registryUrl,\n    };\n\n    if (sourceUrl) {\n      dep.sourceUrl = sourceUrl;\n    }\n\n    if (sourceDirectory) {\n      dep.sourceDirectory = sourceDirectory;\n    }\n\n    if (latestVersion?.deprecated) {\n      dep.deprecationMessage = `On registry \\`${registryUrl}\\`, the \"latest\" version of dependency \\`${packageName}\\` has the following deprecation notice:\\n\\n\\`${latestVersion.deprecated}\\`\\n\\nMarking the latest version of an npm package as deprecated results in the entire package being considered deprecated, so contact the package author you think this is a mistake.`;\n    }\n    dep.releases = Object.keys(res.versions).map((version) => {\n      const release: Release = {\n        version,\n        gitRef: res.versions?.[version].gitHead,\n        dependencies: res.versions?.[version].dependencies,\n        devDependencies: res.versions?.[version].devDependencies,\n        attestation: isString(res.versions?.[version].dist?.attestations?.url),\n      };\n      const releaseTimestamp = asTimestamp(res.time?.[version]);\n      if (releaseTimestamp) {\n        release.releaseTimestamp = releaseTimestamp;\n      }\n      if (res.versions?.[version].deprecated) {\n        release.isDeprecated = true;\n      }\n      const nodeConstraint = res.versions?.[version].engines?.node;\n      if (isNonEmptyString(nodeConstraint)) {\n        release.constraints = { node: [nodeConstraint] };\n      }\n      const source = PackageSource.parse(res.versions?.[version].repository);\n      if (source.sourceUrl && source.sourceUrl !== dep.sourceUrl) {\n        release.sourceUrl = source.sourceUrl;\n      }\n      if (\n        source.sourceDirectory &&\n        source.sourceDirectory !== dep.sourceDirectory\n      ) {\n        release.sourceDirectory = source.sourceDirectory;\n      }\n      if (dep.deprecationMessage) {\n        release.isDeprecated = true;\n      }\n      return release;\n    });\n\n    const isPublic = resp.headers?.['cache-control']\n      ?.toLocaleLowerCase()\n      ?.split(regEx(/\\s*,\\s*/))\n      ?.includes('public');\n    if (!isPublic) {\n      dep.isPrivate = true;\n    }\n\n    logger.trace({ dep }, 'dep');\n    return dep;\n  } catch (err) {\n    const actualError = err instanceof ExternalHostError ? err.err : err;\n    const ignoredStatusCodes = [401, 402, 403, 404];\n    const ignoredResponseCodes = ['ENOTFOUND'];\n    if (\n      actualError.message === HOST_DISABLED ||\n      ignoredStatusCodes.includes(actualError.statusCode) ||\n      ignoredResponseCodes.includes(actualError.code)\n    ) {\n      return null;\n    }\n\n    if (err instanceof ExternalHostError) {\n      if (actualError.name === 'ParseError' && actualError.body) {\n        actualError.body = 'err.body deleted by Renovate';\n        err.err = actualError;\n      }\n      throw err;\n    }\n    logger.debug({ err, packageName, registryUrl }, 'Unknown npm lookup error');\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAiBA,MAAM,mBAAmB,MACvB,4FACF;AAEA,MAAM,kBAA0C;CAC9C,WAAW;CACX,QAAQ;CACR,QAAQ;AACV;AAOA,MAAM,gBAAgB,EACnB,MAAM,CACL,EACG,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,eAA8B;CACxC,IAAI,YAA2B;CAC/B,MAAM,kBAAkB;CACxB,MAAM,aAAa,WAAW,MAAM,gBAAgB;CACpD,IAAI,YAAY,QAAQ;EACtB,MAAM,EAAE,WAAW,UAAU,cAAc,WAAW;EACtD,YAAY,gBAAgB,YAAY;CAC1C,OACE,YAAY;CAEd,OAAO;EAAE;EAAW;CAAgB;AACtC,CAAC,GACH,YACE,EAAE,OAAO;CACP,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAC5C,CAAC,CACH,CAAC,CAAC,WAAW,EAAE,KAAK,gBAAgB;CAClC,MAAM,MAAqB;EAAE,WAAW;EAAM,iBAAiB;CAAK;CAEpE,IAAI,KACF,IAAI,YAAY;CAGlB,IAAI,WACF,IAAI,kBAAkB;CAGxB,OAAO;AACT,CAAC,CACH,CAAC,CAAC,CACD,MAAM;CAAE,WAAW;CAAM,iBAAiB;AAAK,CAAC;AAEnD,eAAsB,cACpB,MACA,aACA,aAC+B;CAC/B,OAAO,MAAM,qBAAqB,YAAY,EAAE;CAEhD,MAAM,aAAa,aAAa,aAAa,YAAY,QAAQ,KAAK,KAAK,CAAC;CAE5E,IAAI;EAOF,MAAM,UAAuB,EAAE,eAAA,IANL,yBAAyB;GACjD,WAAW;GACX,0BAA0B;GAC1B,yBAAyB;GACzB,aAAa;EACf,CAC2C,EAAE;EAG7C,IACE,gBAAA,gCACAA,KAAe,EAAE,KAAA,6BAAwB,CAAC,CAAC,EAAE,iBAAiB,KAAA,GAC9D;GACA,OAAO,MACL;IAAE;IAAa,UAAU;GAAmB,GAC5C,mDACF;GACA,IAAc;IACZ,WAAW;IACX,cAAc;GAChB,CAAC;EACH;EAEA,MAAM,OAAO,MAAM,KAAK,QAAQ,YAAY,SAAS,WAAW;EAChE,MAAM,EAAE,MAAM,QAAQ;EACtB,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,QAAQ;GAEtD,OAAO,MAAM,2CAA2C,aAAa;GACrE,OAAO;EACT;EAEA,MAAM,gBAAgB,IAAI,SAAS,IAAI,YAAY,EAAE,UAAU;EAC/D,IAAI,eAAe,eAAe;EAClC,IAAI,aAAa,eAAe;EAEhC,MAAM,EAAE,WAAW,oBAAoB,cAAc,MAAM,IAAI,UAAU;EAGzE,MAAM,MAAqB;GACzB,UAAU,IAAI;GACd,UAAU,CAAC;GACX,MAAM,IAAI;GACV;EACF;EAEA,IAAI,WACF,IAAI,YAAY;EAGlB,IAAI,iBACF,IAAI,kBAAkB;EAGxB,IAAI,eAAe,YACjB,IAAI,qBAAqB,iBAAiB,YAAY,2CAA2C,YAAY,gDAAgD,cAAc,WAAW;EAExL,IAAI,WAAW,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,YAAY;GACxD,MAAM,UAAmB;IACvB;IACA,QAAQ,IAAI,WAAW,QAAQ,CAAC;IAChC,cAAc,IAAI,WAAW,QAAQ,CAAC;IACtC,iBAAiB,IAAI,WAAW,QAAQ,CAAC;IACzC,aAAa,SAAS,IAAI,WAAW,QAAQ,CAAC,MAAM,cAAc,GAAG;GACvE;GACA,MAAM,mBAAmB,YAAY,IAAI,OAAO,QAAQ;GACxD,IAAI,kBACF,QAAQ,mBAAmB;GAE7B,IAAI,IAAI,WAAW,QAAQ,CAAC,YAC1B,QAAQ,eAAe;GAEzB,MAAM,iBAAiB,IAAI,WAAW,QAAQ,CAAC,SAAS;GACxD,IAAI,iBAAiB,cAAc,GACjC,QAAQ,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;GAEjD,MAAM,SAAS,cAAc,MAAM,IAAI,WAAW,QAAQ,CAAC,UAAU;GACrE,IAAI,OAAO,aAAa,OAAO,cAAc,IAAI,WAC/C,QAAQ,YAAY,OAAO;GAE7B,IACE,OAAO,mBACP,OAAO,oBAAoB,IAAI,iBAE/B,QAAQ,kBAAkB,OAAO;GAEnC,IAAI,IAAI,oBACN,QAAQ,eAAe;GAEzB,OAAO;EACT,CAAC;EAMD,IAAI,CAJa,KAAK,UAAU,gBAAgB,EAC5C,kBAAkB,CAAC,EACnB,MAAM,MAAM,SAAS,CAAC,CAAC,EACvB,SAAS,QAAQ,GAEnB,IAAI,YAAY;EAGlB,OAAO,MAAM,EAAE,IAAI,GAAG,KAAK;EAC3B,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,cAAc,eAAe,oBAAoB,IAAI,MAAM;EAGjE,IACE,YAAY,YAAA,mBACZ;GAJ0B;GAAK;GAAK;GAAK;EAIxB,CAAC,CAAC,SAAS,YAAY,UAAU,KAClD,CAJ4B,WAIT,CAAC,CAAC,SAAS,YAAY,IAAI,GAE9C,OAAO;EAGT,IAAI,eAAe,mBAAmB;GACpC,IAAI,YAAY,SAAS,gBAAgB,YAAY,MAAM;IACzD,YAAY,OAAO;IACnB,IAAI,MAAM;GACZ;GACA,MAAM;EACR;EACA,OAAO,MAAM;GAAE;GAAK;GAAa;EAAY,GAAG,0BAA0B;EAC1E,OAAO;CACT;AACF"}
+{"version":3,"file":"get.js","names":["hostRules.find"],"sources":["../../../../lib/modules/datasource/npm/get.ts"],"sourcesContent":["import { isNonEmptyString, isString } from '@sindresorhus/is';\nimport { z } from 'zod/v4';\nimport {\n  HOST_BLOCKED,\n  HOST_DISABLED,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { PackageHttpCacheProvider } from '../../../util/http/cache/package-http-cache-provider.ts';\nimport type { Http } from '../../../util/http/index.ts';\nimport type { HttpOptions } from '../../../util/http/types.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { DeepNullish } from '../../../util/schema-utils/index.ts';\nimport { asTimestamp } from '../../../util/timestamp.ts';\nimport { joinUrlParts } from '../../../util/url.ts';\nimport type { Release, ReleaseResult } from '../types.ts';\nimport { defaultRegistryUrl } from './common.ts';\nimport { CachedPackument, NpmResponse } from './schema.ts';\n\nconst SHORT_REPO_REGEX = regEx(\n  /^(?:(?<platform>bitbucket|github|gitlab):)?(?<shortRepo>[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+)$/,\n);\n\nconst platformMapping: Record<string, string> = {\n  bitbucket: 'https://bitbucket.org/',\n  github: 'https://github.com/',\n  gitlab: 'https://gitlab.com/',\n};\n\ninterface PackageSource {\n  sourceUrl: string | null;\n  sourceDirectory: string | null;\n}\n\nconst PackageSource = z\n  .union([\n    z\n      .string()\n      .nonempty()\n      .transform((repository): PackageSource => {\n        let sourceUrl: string | null = null;\n        const sourceDirectory = null;\n        const shortMatch = repository.match(SHORT_REPO_REGEX);\n        if (shortMatch?.groups) {\n          const { platform = 'github', shortRepo } = shortMatch.groups;\n          sourceUrl = platformMapping[platform] + shortRepo;\n        } else {\n          sourceUrl = repository;\n        }\n        return { sourceUrl, sourceDirectory };\n      }),\n    DeepNullish(\n      z.object({\n        url: z.string().nonempty().optional(),\n        directory: z.string().nonempty().optional(),\n      }),\n    ).transform(({ url, directory }) => {\n      const res: PackageSource = { sourceUrl: null, sourceDirectory: null };\n\n      if (url) {\n        res.sourceUrl = url;\n      }\n\n      if (directory) {\n        res.sourceDirectory = directory;\n      }\n\n      return res;\n    }),\n  ])\n  .catch({ sourceUrl: null, sourceDirectory: null });\n\nexport async function getDependency(\n  http: Http,\n  registryUrl: string,\n  packageName: string,\n): Promise<ReleaseResult | null> {\n  logger.trace(`npm.getDependency(${packageName})`);\n\n  const packageUrl = joinUrlParts(registryUrl, packageName.replace('/', '%2F'));\n\n  try {\n    const cacheProvider = new PackageHttpCacheProvider({\n      namespace: 'datasource-npm:cache-provider',\n      checkAuthorizationHeader: false, // We don't rely on whether user token is provided or not\n      checkCacheControlHeader: true,\n      writeSchema: CachedPackument,\n    });\n    const options: HttpOptions = { cacheProvider };\n\n    // set abortOnError for registry.npmjs.org if no hostRule with explicit abortOnError exists\n    if (\n      registryUrl === defaultRegistryUrl &&\n      hostRules.find({ url: defaultRegistryUrl })?.abortOnError === undefined\n    ) {\n      logger.trace(\n        { packageName, registry: defaultRegistryUrl },\n        'setting abortOnError hostRule for well known host',\n      );\n      hostRules.add({\n        matchHost: defaultRegistryUrl,\n        abortOnError: true,\n      });\n    }\n\n    const resp = await http.getJson(packageUrl, options, NpmResponse);\n    const { body: res } = resp;\n    if (!res.versions || !Object.keys(res.versions).length) {\n      // Registry returned a 200 OK but with no versions\n      logger.debug(`No versions returned for npm dependency ${packageName}`);\n      return null;\n    }\n\n    const latestVersion = res.versions[res['dist-tags']?.latest ?? ''];\n    res.repository ??= latestVersion?.repository;\n    res.homepage ??= latestVersion?.homepage;\n\n    const { sourceUrl, sourceDirectory } = PackageSource.parse(res.repository);\n\n    // Simplify response before caching and returning\n    const dep: ReleaseResult = {\n      homepage: res.homepage,\n      releases: [],\n      tags: res['dist-tags'],\n      registryUrl,\n    };\n\n    if (sourceUrl) {\n      dep.sourceUrl = sourceUrl;\n    }\n\n    if (sourceDirectory) {\n      dep.sourceDirectory = sourceDirectory;\n    }\n\n    if (latestVersion?.deprecated) {\n      dep.deprecationMessage = `On registry \\`${registryUrl}\\`, the \"latest\" version of dependency \\`${packageName}\\` has the following deprecation notice:\\n\\n\\`${latestVersion.deprecated}\\`\\n\\nMarking the latest version of an npm package as deprecated results in the entire package being considered deprecated, so contact the package author you think this is a mistake.`;\n    }\n    dep.releases = Object.keys(res.versions).map((version) => {\n      const release: Release = {\n        version,\n        gitRef: res.versions?.[version].gitHead,\n        dependencies: res.versions?.[version].dependencies,\n        devDependencies: res.versions?.[version].devDependencies,\n        attestation: isString(res.versions?.[version].dist?.attestations?.url),\n      };\n      const releaseTimestamp = asTimestamp(res.time?.[version]);\n      if (releaseTimestamp) {\n        release.releaseTimestamp = releaseTimestamp;\n      }\n      if (res.versions?.[version].deprecated) {\n        release.isDeprecated = true;\n      }\n      const nodeConstraint = res.versions?.[version].engines?.node;\n      if (isNonEmptyString(nodeConstraint)) {\n        release.constraints = { node: [nodeConstraint] };\n      }\n      const source = PackageSource.parse(res.versions?.[version].repository);\n      if (source.sourceUrl && source.sourceUrl !== dep.sourceUrl) {\n        release.sourceUrl = source.sourceUrl;\n      }\n      if (\n        source.sourceDirectory &&\n        source.sourceDirectory !== dep.sourceDirectory\n      ) {\n        release.sourceDirectory = source.sourceDirectory;\n      }\n      if (dep.deprecationMessage) {\n        release.isDeprecated = true;\n      }\n      return release;\n    });\n\n    const isPublic = resp.headers?.['cache-control']\n      ?.toLocaleLowerCase()\n      ?.split(regEx(/\\s*,\\s*/))\n      ?.includes('public');\n    if (!isPublic) {\n      dep.isPrivate = true;\n    }\n\n    logger.trace({ dep }, 'dep');\n    return dep;\n  } catch (err) {\n    const actualError = err instanceof ExternalHostError ? err.err : err;\n    const ignoredStatusCodes = [401, 402, 403, 404];\n    const ignoredResponseCodes = ['ENOTFOUND'];\n    if (\n      actualError.message === HOST_BLOCKED ||\n      actualError.message === HOST_DISABLED ||\n      ignoredStatusCodes.includes(actualError.statusCode) ||\n      ignoredResponseCodes.includes(actualError.code)\n    ) {\n      return null;\n    }\n\n    if (err instanceof ExternalHostError) {\n      if (actualError.name === 'ParseError' && actualError.body) {\n        actualError.body = 'err.body deleted by Renovate';\n        err.err = actualError;\n      }\n      throw err;\n    }\n    logger.debug({ err, packageName, registryUrl }, 'Unknown npm lookup error');\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,MAAM,mBAAmB,MACvB,4FACF;AAEA,MAAM,kBAA0C;CAC9C,WAAW;CACX,QAAQ;CACR,QAAQ;AACV;AAOA,MAAM,gBAAgB,EACnB,MAAM,CACL,EACG,OAAO,CAAC,CACR,SAAS,CAAC,CACV,WAAW,eAA8B;CACxC,IAAI,YAA2B;CAC/B,MAAM,kBAAkB;CACxB,MAAM,aAAa,WAAW,MAAM,gBAAgB;CACpD,IAAI,YAAY,QAAQ;EACtB,MAAM,EAAE,WAAW,UAAU,cAAc,WAAW;EACtD,YAAY,gBAAgB,YAAY;CAC1C,OACE,YAAY;CAEd,OAAO;EAAE;EAAW;CAAgB;AACtC,CAAC,GACH,YACE,EAAE,OAAO;CACP,KAAK,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;CACpC,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS;AAC5C,CAAC,CACH,CAAC,CAAC,WAAW,EAAE,KAAK,gBAAgB;CAClC,MAAM,MAAqB;EAAE,WAAW;EAAM,iBAAiB;CAAK;CAEpE,IAAI,KACF,IAAI,YAAY;CAGlB,IAAI,WACF,IAAI,kBAAkB;CAGxB,OAAO;AACT,CAAC,CACH,CAAC,CAAC,CACD,MAAM;CAAE,WAAW;CAAM,iBAAiB;AAAK,CAAC;AAEnD,eAAsB,cACpB,MACA,aACA,aAC+B;CAC/B,OAAO,MAAM,qBAAqB,YAAY,EAAE;CAEhD,MAAM,aAAa,aAAa,aAAa,YAAY,QAAQ,KAAK,KAAK,CAAC;CAE5E,IAAI;EAOF,MAAM,UAAuB,EAAE,eAAA,IANL,yBAAyB;GACjD,WAAW;GACX,0BAA0B;GAC1B,yBAAyB;GACzB,aAAa;EACf,CAC2C,EAAE;EAG7C,IACE,gBAAA,gCACAA,KAAe,EAAE,KAAA,6BAAwB,CAAC,CAAC,EAAE,iBAAiB,KAAA,GAC9D;GACA,OAAO,MACL;IAAE;IAAa,UAAU;GAAmB,GAC5C,mDACF;GACA,IAAc;IACZ,WAAW;IACX,cAAc;GAChB,CAAC;EACH;EAEA,MAAM,OAAO,MAAM,KAAK,QAAQ,YAAY,SAAS,WAAW;EAChE,MAAM,EAAE,MAAM,QAAQ;EACtB,IAAI,CAAC,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,QAAQ;GAEtD,OAAO,MAAM,2CAA2C,aAAa;GACrE,OAAO;EACT;EAEA,MAAM,gBAAgB,IAAI,SAAS,IAAI,YAAY,EAAE,UAAU;EAC/D,IAAI,eAAe,eAAe;EAClC,IAAI,aAAa,eAAe;EAEhC,MAAM,EAAE,WAAW,oBAAoB,cAAc,MAAM,IAAI,UAAU;EAGzE,MAAM,MAAqB;GACzB,UAAU,IAAI;GACd,UAAU,CAAC;GACX,MAAM,IAAI;GACV;EACF;EAEA,IAAI,WACF,IAAI,YAAY;EAGlB,IAAI,iBACF,IAAI,kBAAkB;EAGxB,IAAI,eAAe,YACjB,IAAI,qBAAqB,iBAAiB,YAAY,2CAA2C,YAAY,gDAAgD,cAAc,WAAW;EAExL,IAAI,WAAW,OAAO,KAAK,IAAI,QAAQ,CAAC,CAAC,KAAK,YAAY;GACxD,MAAM,UAAmB;IACvB;IACA,QAAQ,IAAI,WAAW,QAAQ,CAAC;IAChC,cAAc,IAAI,WAAW,QAAQ,CAAC;IACtC,iBAAiB,IAAI,WAAW,QAAQ,CAAC;IACzC,aAAa,SAAS,IAAI,WAAW,QAAQ,CAAC,MAAM,cAAc,GAAG;GACvE;GACA,MAAM,mBAAmB,YAAY,IAAI,OAAO,QAAQ;GACxD,IAAI,kBACF,QAAQ,mBAAmB;GAE7B,IAAI,IAAI,WAAW,QAAQ,CAAC,YAC1B,QAAQ,eAAe;GAEzB,MAAM,iBAAiB,IAAI,WAAW,QAAQ,CAAC,SAAS;GACxD,IAAI,iBAAiB,cAAc,GACjC,QAAQ,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE;GAEjD,MAAM,SAAS,cAAc,MAAM,IAAI,WAAW,QAAQ,CAAC,UAAU;GACrE,IAAI,OAAO,aAAa,OAAO,cAAc,IAAI,WAC/C,QAAQ,YAAY,OAAO;GAE7B,IACE,OAAO,mBACP,OAAO,oBAAoB,IAAI,iBAE/B,QAAQ,kBAAkB,OAAO;GAEnC,IAAI,IAAI,oBACN,QAAQ,eAAe;GAEzB,OAAO;EACT,CAAC;EAMD,IAAI,CAJa,KAAK,UAAU,gBAAgB,EAC5C,kBAAkB,CAAC,EACnB,MAAM,MAAM,SAAS,CAAC,CAAC,EACvB,SAAS,QAAQ,GAEnB,IAAI,YAAY;EAGlB,OAAO,MAAM,EAAE,IAAI,GAAG,KAAK;EAC3B,OAAO;CACT,SAAS,KAAK;EACZ,MAAM,cAAc,eAAe,oBAAoB,IAAI,MAAM;EAGjE,IACE,YAAY,YAAA,kBACZ,YAAY,YAAA,mBACZ;GAL0B;GAAK;GAAK;GAAK;EAKxB,CAAC,CAAC,SAAS,YAAY,UAAU,KAClD,CAL4B,WAKT,CAAC,CAAC,SAAS,YAAY,IAAI,GAE9C,OAAO;EAGT,IAAI,eAAe,mBAAmB;GACpC,IAAI,YAAY,SAAS,gBAAgB,YAAY,MAAM;IACzD,YAAY,OAAO;IACnB,IAAI,MAAM;GACZ;GACA,MAAM;EACR;EACA,OAAO,MAAM;GAAE;GAAK;GAAa;EAAY,GAAG,0BAA0B;EAC1E,OAAO;CACT;AACF"}

package/dist/modules/datasource/pod/index.js

@@ -3,6 +3,7 @@ import { newlineRegex, regEx } from "../../../util/regex.js";
 import { logger } from "../../../logger/index.js";
 import { ExternalHostError } from "../../../types/errors/external-host-error.js";
 import { withCache } from "../../../util/cache/package/with-cache.js";
+import { refusedHostMessage } from "../../../util/http/util.js";
 import { Datasource } from "../datasource.js";
 import { GithubHttp } from "../../../util/http/github.js";
 import { massageGithubUrl } from "../metadata.js";
@@ -35,7 +36,7 @@ function handleError(packageName, err) {
 	}
 	if (statusCode === 401) logger.debug(errorData, "Authorization error");
 	else if (statusCode === 404) logger.debug(errorData, "Package lookup error");
-	else if (err.message === "host-disabled") logger.trace(errorData, "Host disabled");
+	else if (["host-blocked", "host-disabled"].includes(err.message)) logger.trace(errorData, refusedHostMessage(err));
 	else logger.warn(errorData, "CocoaPods lookup failure: Unknown error");
 }
 function isDefaultRepo(url) {

package/dist/modules/datasource/pod/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../lib/modules/datasource/pod/index.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport { HOST_DISABLED } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { withCache } from '../../../util/cache/package/with-cache.ts';\nimport { GithubHttp } from '../../../util/http/github.ts';\nimport type { HttpError } from '../../../util/http/index.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport { Datasource } from '../datasource.ts';\nimport { massageGithubUrl } from '../metadata.ts';\nimport type { GetReleasesConfig, ReleaseResult } from '../types.ts';\n\ntype URLFormatOptions =\n  | 'withShardWithSpec'\n  | 'withShardWithoutSpec'\n  | 'withSpecsWithoutShard'\n  | 'withoutSpecsWithoutShard';\n\nfunction shardParts(packageName: string): string[] {\n  return crypto\n    .createHash('md5')\n    .update(packageName)\n    .digest('hex')\n    .slice(0, 3)\n    .split('');\n}\n\nconst githubRegex = regEx(\n  /(?<hostURL>^https:\\/\\/[a-zA-Z0-9-.]+)\\/(?<account>[^/]+)\\/(?<repo>[^/]+?)(?:\\.git|\\/.*)?$/,\n);\n\nfunction releasesGithubUrl(\n  packageName: string,\n  opts: {\n    hostURL: string;\n    account: string;\n    repo: string;\n    useShard: boolean;\n    useSpecs: boolean;\n  },\n): string {\n  const { hostURL, account, repo, useShard, useSpecs } = opts;\n  const prefix =\n    hostURL && hostURL !== 'https://github.com'\n      ? `${hostURL}/api/v3/repos`\n      : 'https://api.github.com/repos';\n  const shard = shardParts(packageName).join('/');\n  // `Specs` in the pods repo URL is a new requirement for legacy support also allow pod repo URL without `Specs`\n  const packageNamePath = useSpecs ? `Specs/${packageName}` : packageName;\n  const shardPath = useSpecs\n    ? `Specs/${shard}/${packageName}`\n    : `${shard}/${packageName}`;\n  const suffix = useShard ? shardPath : packageNamePath;\n  return `${prefix}/${account}/${repo}/contents/${suffix}`;\n}\n\nfunction handleError(packageName: string, err: HttpError): void {\n  const errorData = { packageName, err };\n\n  const statusCode = err.response?.statusCode ?? 0;\n  if (statusCode === 429 || (statusCode >= 500 && statusCode < 600)) {\n    logger.warn({ packageName, err }, `CocoaPods registry failure`);\n    throw new ExternalHostError(err);\n  }\n\n  if (statusCode === 401) {\n    logger.debug(errorData, 'Authorization error');\n  } else if (statusCode === 404) {\n    logger.debug(errorData, 'Package lookup error');\n  } else if (err.message === HOST_DISABLED) {\n    logger.trace(errorData, 'Host disabled');\n  } else {\n    logger.warn(errorData, 'CocoaPods lookup failure: Unknown error');\n  }\n}\n\nfunction isDefaultRepo(url: string): boolean {\n  const match = githubRegex.exec(url);\n  if (match?.groups) {\n    const { account, repo } = match.groups;\n    return (\n      account.toLowerCase() === 'cocoapods' && repo.toLowerCase() === 'specs'\n    ); // https://github.com/CocoaPods/Specs.git\n  }\n  return false;\n}\n\nfunction releasesCDNUrl(packageName: string, registryUrl: string): string {\n  const shard = shardParts(packageName).join('_');\n  return `${registryUrl}/all_pods_versions_${shard}.txt`;\n}\n\nexport class PodDatasource extends Datasource {\n  static readonly id = 'pod';\n\n  override readonly defaultRegistryUrls = ['https://cdn.cocoapods.org'];\n\n  override readonly registryStrategy = 'hunt';\n\n  githubHttp: GithubHttp;\n\n  constructor() {\n    super(PodDatasource.id);\n    this.githubHttp = new GithubHttp(PodDatasource.id);\n  }\n\n  private async requestCDN(\n    url: string,\n    packageName: string,\n  ): Promise<string | null> {\n    try {\n      const resp = await this.http.getText(url);\n      if (resp?.body) {\n        return resp.body;\n      }\n    } catch (err) {\n      handleError(packageName, err);\n    }\n\n    return null;\n  }\n\n  private async requestGithub<T = unknown>(\n    url: string,\n    packageName: string,\n  ): Promise<T | null> {\n    try {\n      const resp = await this.githubHttp.getJsonUnchecked<T>(url);\n      if (resp?.body) {\n        return resp.body;\n      }\n    } catch (err) {\n      handleError(packageName, err);\n    }\n\n    return null;\n  }\n\n  private async getReleasesFromGithub(\n    packageName: string,\n    opts: { hostURL: string; account: string; repo: string },\n    useShard = true,\n    useSpecs = true,\n    urlFormatOptions: URLFormatOptions = 'withShardWithSpec',\n  ): Promise<ReleaseResult | null> {\n    const url = releasesGithubUrl(packageName, { ...opts, useShard, useSpecs });\n    const resp = await this.requestGithub<{ name: string }[]>(url, packageName);\n    if (resp) {\n      const releases = resp.map(({ name }) => ({ version: name }));\n      return { releases };\n    }\n\n    // support different url formats\n    switch (urlFormatOptions) {\n      case 'withShardWithSpec':\n        return this.getReleasesFromGithub(\n          packageName,\n          opts,\n          true,\n          false,\n          'withShardWithoutSpec',\n        );\n      case 'withShardWithoutSpec':\n        return this.getReleasesFromGithub(\n          packageName,\n          opts,\n          false,\n          true,\n          'withSpecsWithoutShard',\n        );\n      case 'withSpecsWithoutShard':\n        return this.getReleasesFromGithub(\n          packageName,\n          opts,\n          false,\n          false,\n          'withoutSpecsWithoutShard',\n        );\n      case 'withoutSpecsWithoutShard':\n      default:\n        return null;\n    }\n  }\n\n  private async getReleasesFromCDN(\n    packageName: string,\n    registryUrl: string,\n  ): Promise<ReleaseResult | null> {\n    const url = releasesCDNUrl(packageName, registryUrl);\n    const resp = await this.requestCDN(url, packageName);\n    if (resp) {\n      const lines = resp.split(newlineRegex);\n      for (const line of lines) {\n        const [name, ...versions] = line.split('/');\n        if (name === packageName.replace(regEx(/\\/.*$/), '')) {\n          const releases = versions.map((version) => ({ version }));\n          return { releases };\n        }\n      }\n    }\n    return null;\n  }\n\n  private async _getReleases({\n    packageName,\n    registryUrl,\n  }: GetReleasesConfig): Promise<ReleaseResult | null> {\n    /* v8 ignore next -- should never happen */\n    if (!registryUrl) {\n      return null;\n    }\n\n    const podName = packageName.replace(regEx(/\\/.*$/), '');\n    let baseUrl = registryUrl.replace(regEx(/\\/+$/), '');\n    // In order to not abuse github API limits, query CDN instead\n    if (isDefaultRepo(baseUrl)) {\n      [baseUrl] = this.defaultRegistryUrls;\n    }\n\n    let result: ReleaseResult | null = null;\n    const match = githubRegex.exec(baseUrl);\n    // We would ideally have a reliable way to differentiate between\n    // a CDN URL and a Github URL, but we'll start with detecting Artifactory\n    if (match?.groups && !baseUrl.includes('/api/pods/')) {\n      baseUrl = massageGithubUrl(baseUrl);\n      const { hostURL, account, repo } = match.groups;\n      const opts = { hostURL, account, repo };\n      result = await this.getReleasesFromGithub(podName, opts);\n    } else {\n      result = await this.getReleasesFromCDN(podName, baseUrl);\n    }\n\n    return result;\n  }\n\n  getReleases(config: GetReleasesConfig): Promise<ReleaseResult | null> {\n    return withCache(\n      {\n        ttlMinutes: 30,\n        namespace: `datasource-${PodDatasource.id}`,\n        // TODO: types (#22198)\n        key: `${config.registryUrl}:${config.packageName}`,\n        fallback: true,\n      },\n      () => this._getReleases(config),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;AAkBA,SAAS,WAAW,aAA+B;CACjD,OAAO,OACJ,WAAW,KAAK,CAAC,CACjB,OAAO,WAAW,CAAC,CACnB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,CAAC,CAAC,CACX,MAAM,EAAE;AACb;AAEA,MAAM,cAAc,MAClB,2FACF;AAEA,SAAS,kBACP,aACA,MAOQ;CACR,MAAM,EAAE,SAAS,SAAS,MAAM,UAAU,aAAa;CACvD,MAAM,SACJ,WAAW,YAAY,uBACnB,GAAG,QAAQ,iBACX;CACN,MAAM,QAAQ,WAAW,WAAW,CAAC,CAAC,KAAK,GAAG;CAE9C,MAAM,kBAAkB,WAAW,SAAS,gBAAgB;CAC5D,MAAM,YAAY,WACd,SAAS,MAAM,GAAG,gBAClB,GAAG,MAAM,GAAG;CAEhB,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,YADrB,WAAW,YAAY;AAExC;AAEA,SAAS,YAAY,aAAqB,KAAsB;CAC9D,MAAM,YAAY;EAAE;EAAa;CAAI;CAErC,MAAM,aAAa,IAAI,UAAU,cAAc;CAC/C,IAAI,eAAe,OAAQ,cAAc,OAAO,aAAa,KAAM;EACjE,OAAO,KAAK;GAAE;GAAa;EAAI,GAAG,4BAA4B;EAC9D,MAAM,IAAI,kBAAkB,GAAG;CACjC;CAEA,IAAI,eAAe,KACjB,OAAO,MAAM,WAAW,qBAAqB;MACxC,IAAI,eAAe,KACxB,OAAO,MAAM,WAAW,sBAAsB;MACzC,IAAI,IAAI,YAAA,iBACb,OAAO,MAAM,WAAW,eAAe;MAEvC,OAAO,KAAK,WAAW,yCAAyC;AAEpE;AAEA,SAAS,cAAc,KAAsB;CAC3C,MAAM,QAAQ,YAAY,KAAK,GAAG;CAClC,IAAI,OAAO,QAAQ;EACjB,MAAM,EAAE,SAAS,SAAS,MAAM;EAChC,OACE,QAAQ,YAAY,MAAM,eAAe,KAAK,YAAY,MAAM;CAEpE;CACA,OAAO;AACT;AAEA,SAAS,eAAe,aAAqB,aAA6B;CAExE,OAAO,GAAG,YAAY,qBADR,WAAW,WAAW,CAAC,CAAC,KAAK,GACI,EAAE;AACnD;AAEA,IAAa,gBAAb,MAAa,sBAAsB,WAAW;CAC5C,OAAgB,KAAK;CAErB,sBAAwC,CAAC,2BAA2B;CAEpE,mBAAqC;CAErC;CAEA,cAAc;EACZ,MAAM,cAAc,EAAE;EACtB,KAAK,aAAa,IAAI,WAAW,cAAc,EAAE;CACnD;CAEA,MAAc,WACZ,KACA,aACwB;EACxB,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,KAAK,QAAQ,GAAG;GACxC,IAAI,MAAM,MACR,OAAO,KAAK;EAEhB,SAAS,KAAK;GACZ,YAAY,aAAa,GAAG;EAC9B;EAEA,OAAO;CACT;CAEA,MAAc,cACZ,KACA,aACmB;EACnB,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,WAAW,iBAAoB,GAAG;GAC1D,IAAI,MAAM,MACR,OAAO,KAAK;EAEhB,SAAS,KAAK;GACZ,YAAY,aAAa,GAAG;EAC9B;EAEA,OAAO;CACT;CAEA,MAAc,sBACZ,aACA,MACA,WAAW,MACX,WAAW,MACX,mBAAqC,qBACN;EAC/B,MAAM,MAAM,kBAAkB,aAAa;GAAE,GAAG;GAAM;GAAU;EAAS,CAAC;EAC1E,MAAM,OAAO,MAAM,KAAK,cAAkC,KAAK,WAAW;EAC1E,IAAI,MAEF,OAAO,EAAE,UADQ,KAAK,KAAK,EAAE,YAAY,EAAE,SAAS,KAAK,EACzC,EAAE;EAIpB,QAAQ,kBAAR;GACE,KAAK,qBACH,OAAO,KAAK,sBACV,aACA,MACA,MACA,OACA,sBACF;GACF,KAAK,wBACH,OAAO,KAAK,sBACV,aACA,MACA,OACA,MACA,uBACF;GACF,KAAK,yBACH,OAAO,KAAK,sBACV,aACA,MACA,OACA,OACA,0BACF;GAEF,SACE,OAAO;EACX;CACF;CAEA,MAAc,mBACZ,aACA,aAC+B;EAC/B,MAAM,MAAM,eAAe,aAAa,WAAW;EACnD,MAAM,OAAO,MAAM,KAAK,WAAW,KAAK,WAAW;EACnD,IAAI,MAAM;GACR,MAAM,QAAQ,KAAK,MAAM,YAAY;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,CAAC,MAAM,GAAG,YAAY,KAAK,MAAM,GAAG;IAC1C,IAAI,SAAS,YAAY,QAAQ,MAAM,OAAO,GAAG,EAAE,GAEjD,OAAO,EAAE,UADQ,SAAS,KAAK,aAAa,EAAE,QAAQ,EACtC,EAAE;GAEtB;EACF;EACA,OAAO;CACT;CAEA,MAAc,aAAa,EACzB,aACA,eACmD;;EAEnD,IAAI,CAAC,aACH,OAAO;EAGT,MAAM,UAAU,YAAY,QAAQ,MAAM,OAAO,GAAG,EAAE;EACtD,IAAI,UAAU,YAAY,QAAQ,MAAM,MAAM,GAAG,EAAE;EAEnD,IAAI,cAAc,OAAO,GACvB,CAAC,WAAW,KAAK;EAGnB,IAAI,SAA+B;EACnC,MAAM,QAAQ,YAAY,KAAK,OAAO;EAGtC,IAAI,OAAO,UAAU,CAAC,QAAQ,SAAS,YAAY,GAAG;GACpD,UAAU,iBAAiB,OAAO;GAClC,MAAM,EAAE,SAAS,SAAS,SAAS,MAAM;GACzC,MAAM,OAAO;IAAE;IAAS;IAAS;GAAK;GACtC,SAAS,MAAM,KAAK,sBAAsB,SAAS,IAAI;EACzD,OACE,SAAS,MAAM,KAAK,mBAAmB,SAAS,OAAO;EAGzD,OAAO;CACT;CAEA,YAAY,QAA0D;EACpE,OAAO,UACL;GACE,YAAY;GACZ,WAAW,cAAc,cAAc;GAEvC,KAAK,GAAG,OAAO,YAAY,GAAG,OAAO;GACrC,UAAU;EACZ,SACM,KAAK,aAAa,MAAM,CAChC;CACF;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../lib/modules/datasource/pod/index.ts"],"sourcesContent":["import crypto from 'node:crypto';\nimport {\n  HOST_BLOCKED,\n  HOST_DISABLED,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { ExternalHostError } from '../../../types/errors/external-host-error.ts';\nimport { withCache } from '../../../util/cache/package/with-cache.ts';\nimport { GithubHttp } from '../../../util/http/github.ts';\nimport type { HttpError } from '../../../util/http/index.ts';\nimport { refusedHostMessage } from '../../../util/http/util.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport { Datasource } from '../datasource.ts';\nimport { massageGithubUrl } from '../metadata.ts';\nimport type { GetReleasesConfig, ReleaseResult } from '../types.ts';\n\ntype URLFormatOptions =\n  | 'withShardWithSpec'\n  | 'withShardWithoutSpec'\n  | 'withSpecsWithoutShard'\n  | 'withoutSpecsWithoutShard';\n\nfunction shardParts(packageName: string): string[] {\n  return crypto\n    .createHash('md5')\n    .update(packageName)\n    .digest('hex')\n    .slice(0, 3)\n    .split('');\n}\n\nconst githubRegex = regEx(\n  /(?<hostURL>^https:\\/\\/[a-zA-Z0-9-.]+)\\/(?<account>[^/]+)\\/(?<repo>[^/]+?)(?:\\.git|\\/.*)?$/,\n);\n\nfunction releasesGithubUrl(\n  packageName: string,\n  opts: {\n    hostURL: string;\n    account: string;\n    repo: string;\n    useShard: boolean;\n    useSpecs: boolean;\n  },\n): string {\n  const { hostURL, account, repo, useShard, useSpecs } = opts;\n  const prefix =\n    hostURL && hostURL !== 'https://github.com'\n      ? `${hostURL}/api/v3/repos`\n      : 'https://api.github.com/repos';\n  const shard = shardParts(packageName).join('/');\n  // `Specs` in the pods repo URL is a new requirement for legacy support also allow pod repo URL without `Specs`\n  const packageNamePath = useSpecs ? `Specs/${packageName}` : packageName;\n  const shardPath = useSpecs\n    ? `Specs/${shard}/${packageName}`\n    : `${shard}/${packageName}`;\n  const suffix = useShard ? shardPath : packageNamePath;\n  return `${prefix}/${account}/${repo}/contents/${suffix}`;\n}\n\nfunction handleError(packageName: string, err: HttpError): void {\n  const errorData = { packageName, err };\n\n  const statusCode = err.response?.statusCode ?? 0;\n  if (statusCode === 429 || (statusCode >= 500 && statusCode < 600)) {\n    logger.warn({ packageName, err }, `CocoaPods registry failure`);\n    throw new ExternalHostError(err);\n  }\n\n  if (statusCode === 401) {\n    logger.debug(errorData, 'Authorization error');\n  } else if (statusCode === 404) {\n    logger.debug(errorData, 'Package lookup error');\n  } else if ([HOST_BLOCKED, HOST_DISABLED].includes(err.message)) {\n    logger.trace(errorData, refusedHostMessage(err));\n  } else {\n    logger.warn(errorData, 'CocoaPods lookup failure: Unknown error');\n  }\n}\n\nfunction isDefaultRepo(url: string): boolean {\n  const match = githubRegex.exec(url);\n  if (match?.groups) {\n    const { account, repo } = match.groups;\n    return (\n      account.toLowerCase() === 'cocoapods' && repo.toLowerCase() === 'specs'\n    ); // https://github.com/CocoaPods/Specs.git\n  }\n  return false;\n}\n\nfunction releasesCDNUrl(packageName: string, registryUrl: string): string {\n  const shard = shardParts(packageName).join('_');\n  return `${registryUrl}/all_pods_versions_${shard}.txt`;\n}\n\nexport class PodDatasource extends Datasource {\n  static readonly id = 'pod';\n\n  override readonly defaultRegistryUrls = ['https://cdn.cocoapods.org'];\n\n  override readonly registryStrategy = 'hunt';\n\n  githubHttp: GithubHttp;\n\n  constructor() {\n    super(PodDatasource.id);\n    this.githubHttp = new GithubHttp(PodDatasource.id);\n  }\n\n  private async requestCDN(\n    url: string,\n    packageName: string,\n  ): Promise<string | null> {\n    try {\n      const resp = await this.http.getText(url);\n      if (resp?.body) {\n        return resp.body;\n      }\n    } catch (err) {\n      handleError(packageName, err);\n    }\n\n    return null;\n  }\n\n  private async requestGithub<T = unknown>(\n    url: string,\n    packageName: string,\n  ): Promise<T | null> {\n    try {\n      const resp = await this.githubHttp.getJsonUnchecked<T>(url);\n      if (resp?.body) {\n        return resp.body;\n      }\n    } catch (err) {\n      handleError(packageName, err);\n    }\n\n    return null;\n  }\n\n  private async getReleasesFromGithub(\n    packageName: string,\n    opts: { hostURL: string; account: string; repo: string },\n    useShard = true,\n    useSpecs = true,\n    urlFormatOptions: URLFormatOptions = 'withShardWithSpec',\n  ): Promise<ReleaseResult | null> {\n    const url = releasesGithubUrl(packageName, { ...opts, useShard, useSpecs });\n    const resp = await this.requestGithub<{ name: string }[]>(url, packageName);\n    if (resp) {\n      const releases = resp.map(({ name }) => ({ version: name }));\n      return { releases };\n    }\n\n    // support different url formats\n    switch (urlFormatOptions) {\n      case 'withShardWithSpec':\n        return this.getReleasesFromGithub(\n          packageName,\n          opts,\n          true,\n          false,\n          'withShardWithoutSpec',\n        );\n      case 'withShardWithoutSpec':\n        return this.getReleasesFromGithub(\n          packageName,\n          opts,\n          false,\n          true,\n          'withSpecsWithoutShard',\n        );\n      case 'withSpecsWithoutShard':\n        return this.getReleasesFromGithub(\n          packageName,\n          opts,\n          false,\n          false,\n          'withoutSpecsWithoutShard',\n        );\n      case 'withoutSpecsWithoutShard':\n      default:\n        return null;\n    }\n  }\n\n  private async getReleasesFromCDN(\n    packageName: string,\n    registryUrl: string,\n  ): Promise<ReleaseResult | null> {\n    const url = releasesCDNUrl(packageName, registryUrl);\n    const resp = await this.requestCDN(url, packageName);\n    if (resp) {\n      const lines = resp.split(newlineRegex);\n      for (const line of lines) {\n        const [name, ...versions] = line.split('/');\n        if (name === packageName.replace(regEx(/\\/.*$/), '')) {\n          const releases = versions.map((version) => ({ version }));\n          return { releases };\n        }\n      }\n    }\n    return null;\n  }\n\n  private async _getReleases({\n    packageName,\n    registryUrl,\n  }: GetReleasesConfig): Promise<ReleaseResult | null> {\n    /* v8 ignore next -- should never happen */\n    if (!registryUrl) {\n      return null;\n    }\n\n    const podName = packageName.replace(regEx(/\\/.*$/), '');\n    let baseUrl = registryUrl.replace(regEx(/\\/+$/), '');\n    // In order to not abuse github API limits, query CDN instead\n    if (isDefaultRepo(baseUrl)) {\n      [baseUrl] = this.defaultRegistryUrls;\n    }\n\n    let result: ReleaseResult | null = null;\n    const match = githubRegex.exec(baseUrl);\n    // We would ideally have a reliable way to differentiate between\n    // a CDN URL and a Github URL, but we'll start with detecting Artifactory\n    if (match?.groups && !baseUrl.includes('/api/pods/')) {\n      baseUrl = massageGithubUrl(baseUrl);\n      const { hostURL, account, repo } = match.groups;\n      const opts = { hostURL, account, repo };\n      result = await this.getReleasesFromGithub(podName, opts);\n    } else {\n      result = await this.getReleasesFromCDN(podName, baseUrl);\n    }\n\n    return result;\n  }\n\n  getReleases(config: GetReleasesConfig): Promise<ReleaseResult | null> {\n    return withCache(\n      {\n        ttlMinutes: 30,\n        namespace: `datasource-${PodDatasource.id}`,\n        // TODO: types (#22198)\n        key: `${config.registryUrl}:${config.packageName}`,\n        fallback: true,\n      },\n      () => this._getReleases(config),\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;;AAsBA,SAAS,WAAW,aAA+B;CACjD,OAAO,OACJ,WAAW,KAAK,CAAC,CACjB,OAAO,WAAW,CAAC,CACnB,OAAO,KAAK,CAAC,CACb,MAAM,GAAG,CAAC,CAAC,CACX,MAAM,EAAE;AACb;AAEA,MAAM,cAAc,MAClB,2FACF;AAEA,SAAS,kBACP,aACA,MAOQ;CACR,MAAM,EAAE,SAAS,SAAS,MAAM,UAAU,aAAa;CACvD,MAAM,SACJ,WAAW,YAAY,uBACnB,GAAG,QAAQ,iBACX;CACN,MAAM,QAAQ,WAAW,WAAW,CAAC,CAAC,KAAK,GAAG;CAE9C,MAAM,kBAAkB,WAAW,SAAS,gBAAgB;CAC5D,MAAM,YAAY,WACd,SAAS,MAAM,GAAG,gBAClB,GAAG,MAAM,GAAG;CAEhB,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,YADrB,WAAW,YAAY;AAExC;AAEA,SAAS,YAAY,aAAqB,KAAsB;CAC9D,MAAM,YAAY;EAAE;EAAa;CAAI;CAErC,MAAM,aAAa,IAAI,UAAU,cAAc;CAC/C,IAAI,eAAe,OAAQ,cAAc,OAAO,aAAa,KAAM;EACjE,OAAO,KAAK;GAAE;GAAa;EAAI,GAAG,4BAA4B;EAC9D,MAAM,IAAI,kBAAkB,GAAG;CACjC;CAEA,IAAI,eAAe,KACjB,OAAO,MAAM,WAAW,qBAAqB;MACxC,IAAI,eAAe,KACxB,OAAO,MAAM,WAAW,sBAAsB;MACzC,IAAI,CAAA,gBAAA,eAA4B,CAAC,CAAC,SAAS,IAAI,OAAO,GAC3D,OAAO,MAAM,WAAW,mBAAmB,GAAG,CAAC;MAE/C,OAAO,KAAK,WAAW,yCAAyC;AAEpE;AAEA,SAAS,cAAc,KAAsB;CAC3C,MAAM,QAAQ,YAAY,KAAK,GAAG;CAClC,IAAI,OAAO,QAAQ;EACjB,MAAM,EAAE,SAAS,SAAS,MAAM;EAChC,OACE,QAAQ,YAAY,MAAM,eAAe,KAAK,YAAY,MAAM;CAEpE;CACA,OAAO;AACT;AAEA,SAAS,eAAe,aAAqB,aAA6B;CAExE,OAAO,GAAG,YAAY,qBADR,WAAW,WAAW,CAAC,CAAC,KAAK,GACI,EAAE;AACnD;AAEA,IAAa,gBAAb,MAAa,sBAAsB,WAAW;CAC5C,OAAgB,KAAK;CAErB,sBAAwC,CAAC,2BAA2B;CAEpE,mBAAqC;CAErC;CAEA,cAAc;EACZ,MAAM,cAAc,EAAE;EACtB,KAAK,aAAa,IAAI,WAAW,cAAc,EAAE;CACnD;CAEA,MAAc,WACZ,KACA,aACwB;EACxB,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,KAAK,QAAQ,GAAG;GACxC,IAAI,MAAM,MACR,OAAO,KAAK;EAEhB,SAAS,KAAK;GACZ,YAAY,aAAa,GAAG;EAC9B;EAEA,OAAO;CACT;CAEA,MAAc,cACZ,KACA,aACmB;EACnB,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,WAAW,iBAAoB,GAAG;GAC1D,IAAI,MAAM,MACR,OAAO,KAAK;EAEhB,SAAS,KAAK;GACZ,YAAY,aAAa,GAAG;EAC9B;EAEA,OAAO;CACT;CAEA,MAAc,sBACZ,aACA,MACA,WAAW,MACX,WAAW,MACX,mBAAqC,qBACN;EAC/B,MAAM,MAAM,kBAAkB,aAAa;GAAE,GAAG;GAAM;GAAU;EAAS,CAAC;EAC1E,MAAM,OAAO,MAAM,KAAK,cAAkC,KAAK,WAAW;EAC1E,IAAI,MAEF,OAAO,EAAE,UADQ,KAAK,KAAK,EAAE,YAAY,EAAE,SAAS,KAAK,EACzC,EAAE;EAIpB,QAAQ,kBAAR;GACE,KAAK,qBACH,OAAO,KAAK,sBACV,aACA,MACA,MACA,OACA,sBACF;GACF,KAAK,wBACH,OAAO,KAAK,sBACV,aACA,MACA,OACA,MACA,uBACF;GACF,KAAK,yBACH,OAAO,KAAK,sBACV,aACA,MACA,OACA,OACA,0BACF;GAEF,SACE,OAAO;EACX;CACF;CAEA,MAAc,mBACZ,aACA,aAC+B;EAC/B,MAAM,MAAM,eAAe,aAAa,WAAW;EACnD,MAAM,OAAO,MAAM,KAAK,WAAW,KAAK,WAAW;EACnD,IAAI,MAAM;GACR,MAAM,QAAQ,KAAK,MAAM,YAAY;GACrC,KAAK,MAAM,QAAQ,OAAO;IACxB,MAAM,CAAC,MAAM,GAAG,YAAY,KAAK,MAAM,GAAG;IAC1C,IAAI,SAAS,YAAY,QAAQ,MAAM,OAAO,GAAG,EAAE,GAEjD,OAAO,EAAE,UADQ,SAAS,KAAK,aAAa,EAAE,QAAQ,EACtC,EAAE;GAEtB;EACF;EACA,OAAO;CACT;CAEA,MAAc,aAAa,EACzB,aACA,eACmD;;EAEnD,IAAI,CAAC,aACH,OAAO;EAGT,MAAM,UAAU,YAAY,QAAQ,MAAM,OAAO,GAAG,EAAE;EACtD,IAAI,UAAU,YAAY,QAAQ,MAAM,MAAM,GAAG,EAAE;EAEnD,IAAI,cAAc,OAAO,GACvB,CAAC,WAAW,KAAK;EAGnB,IAAI,SAA+B;EACnC,MAAM,QAAQ,YAAY,KAAK,OAAO;EAGtC,IAAI,OAAO,UAAU,CAAC,QAAQ,SAAS,YAAY,GAAG;GACpD,UAAU,iBAAiB,OAAO;GAClC,MAAM,EAAE,SAAS,SAAS,SAAS,MAAM;GACzC,MAAM,OAAO;IAAE;IAAS;IAAS;GAAK;GACtC,SAAS,MAAM,KAAK,sBAAsB,SAAS,IAAI;EACzD,OACE,SAAS,MAAM,KAAK,mBAAmB,SAAS,OAAO;EAGzD,OAAO;CACT;CAEA,YAAY,QAA0D;EACpE,OAAO,UACL;GACE,YAAY;GACZ,WAAW,cAAc,cAAc;GAEvC,KAAK,GAAG,OAAO,YAAY,GAAG,OAAO;GACrC,UAAU;EACZ,SACM,KAAK,aAAa,MAAM,CAChC;CACF;AACF"}

package/dist/modules/datasource/repology/index.js

@@ -3,6 +3,7 @@ import { logger } from "../../../logger/index.js";
 import { getQueryString, joinUrlParts } from "../../../util/url.js";
 import { ExternalHostError } from "../../../types/errors/external-host-error.js";
 import { withCache } from "../../../util/cache/package/with-cache.js";
+import { refusedHostMessage } from "../../../util/http/util.js";
 import { Datasource } from "../datasource.js";
 import { RepologyPackages } from "./schema.js";
 import { isNonEmptyArray } from "@sindresorhus/is";
@@ -97,10 +98,10 @@ var RepologyDatasource = class RepologyDatasource extends Datasource {
 			if (!pkg) return null;
 			return { releases: pkg.map((item) => ({ version: item.origversion ?? item.version })) };
 		} catch (err) {
-			if (err.message === "host-disabled") logger.trace({
+			if (["host-blocked", "host-disabled"].includes(err.message)) logger.trace({
 				packageName,
 				err
-			}, "Host disabled");
+			}, refusedHostMessage(err));
 			else logger.once.warn({
 				packageName,
 				err