renovate 44.85.0 → 44.86.0

package/dist/constants/error-messages.d.ts

@@ -34,10 +34,11 @@ declare const REPOSITORY_FORKED = "fork";
 declare const REPOSITORY_MIRRORED = "mirror";
 declare const REPOSITORY_NOT_FOUND = "not-found";
 declare const REPOSITORY_NO_PACKAGE_FILES = "no-package-files";
+declare const REPOSITORY_PENDING_DELETION = "pending-deletion";
 declare const REPOSITORY_RENAMED = "renamed";
 declare const REPOSITORY_UNINITIATED = "uninitiated";
 /** cause repo to be considered as disabled */
-declare const RepositoryErrors: readonly ["forbidden", "archived", "blocked", "cannot-fork", "disabled", "disabled-closed-onboarding", "disabled-by-config", "disabled-no-config", "empty", "fork-missing", "fork-mode-forked", "fork", "mirror", "not-found", "no-package-files", "renamed", "uninitiated"];
+declare const RepositoryErrors: readonly ["forbidden", "archived", "blocked", "cannot-fork", "disabled", "disabled-closed-onboarding", "disabled-by-config", "disabled-no-config", "empty", "fork-missing", "fork-mode-forked", "fork", "mirror", "not-found", "no-package-files", "pending-deletion", "renamed", "uninitiated"];
 declare const REPOSITORY_CHANGED = "repository-changed";
 declare const TEMPORARY_ERROR = "temporary-error";
 declare const NO_VULNERABILITY_ALERTS = "no-vulnerability-alerts";
@@ -58,5 +59,5 @@ declare const MISSING_API_CREDENTIALS = "missing-api-credentials";
 /** Logger not initialized */
 declare const LOGGER_NOT_INITIALIZED = "logger-not-initialized";
 //#endregion
-export { BUNDLER_INVALID_CREDENTIALS, CONFIG_GIT_URL_UNAVAILABLE, CONFIG_INHERIT_NOT_FOUND, CONFIG_INHERIT_PARSE_ERROR, CONFIG_PRESETS_INVALID, CONFIG_SECRETS_EXPOSED, CONFIG_SECRETS_INVALID, CONFIG_VALIDATION, CONFIG_VARIABLES_INVALID, ConfigErrors, EXTERNAL_HOST_ERROR, FILE_ACCESS_VIOLATION_ERROR, HOST_BLOCKED, HOST_DISABLED, IGNORABLE_HOST_ERROR, INVALID_PATH, LOGGER_NOT_INITIALIZED, MANAGER_LOCKFILE_ERROR, MISSING_API_CREDENTIALS, NO_VULNERABILITY_ALERTS, PAGE_NOT_FOUND_ERROR, PLATFORM_AUTHENTICATION_ERROR, PLATFORM_BAD_CREDENTIALS, PLATFORM_GPG_FAILED, PLATFORM_INTEGRATION_UNAUTHORIZED, PLATFORM_NOT_FOUND, PLATFORM_RATE_LIMIT_EXCEEDED, PLATFORM_UNKNOWN_ERROR, PR_ALREADY_IN_MERGE_QUEUE, PlatformErrors, REPOSITORY_ACCESS_FORBIDDEN, REPOSITORY_ARCHIVED, REPOSITORY_BLOCKED, REPOSITORY_CANNOT_FORK, REPOSITORY_CHANGED, REPOSITORY_CLOSED_ONBOARDING, REPOSITORY_DISABLED, REPOSITORY_DISABLED_BY_CONFIG, REPOSITORY_EMPTY, REPOSITORY_FORKED, REPOSITORY_FORK_MISSING, REPOSITORY_FORK_MODE_FORKED, REPOSITORY_MIRRORED, REPOSITORY_NOT_FOUND, REPOSITORY_NO_CONFIG, REPOSITORY_NO_PACKAGE_FILES, REPOSITORY_RENAMED, REPOSITORY_UNINITIATED, RepositoryErrors, SYSTEM_INSUFFICIENT_DISK_SPACE, SYSTEM_INSUFFICIENT_MEMORY, SystemErrors, TEMPORARY_ERROR, TemporaryErrors, UNKNOWN_ERROR, WORKER_FILE_UPDATE_FAILED };
+export { BUNDLER_INVALID_CREDENTIALS, CONFIG_GIT_URL_UNAVAILABLE, CONFIG_INHERIT_NOT_FOUND, CONFIG_INHERIT_PARSE_ERROR, CONFIG_PRESETS_INVALID, CONFIG_SECRETS_EXPOSED, CONFIG_SECRETS_INVALID, CONFIG_VALIDATION, CONFIG_VARIABLES_INVALID, ConfigErrors, EXTERNAL_HOST_ERROR, FILE_ACCESS_VIOLATION_ERROR, HOST_BLOCKED, HOST_DISABLED, IGNORABLE_HOST_ERROR, INVALID_PATH, LOGGER_NOT_INITIALIZED, MANAGER_LOCKFILE_ERROR, MISSING_API_CREDENTIALS, NO_VULNERABILITY_ALERTS, PAGE_NOT_FOUND_ERROR, PLATFORM_AUTHENTICATION_ERROR, PLATFORM_BAD_CREDENTIALS, PLATFORM_GPG_FAILED, PLATFORM_INTEGRATION_UNAUTHORIZED, PLATFORM_NOT_FOUND, PLATFORM_RATE_LIMIT_EXCEEDED, PLATFORM_UNKNOWN_ERROR, PR_ALREADY_IN_MERGE_QUEUE, PlatformErrors, REPOSITORY_ACCESS_FORBIDDEN, REPOSITORY_ARCHIVED, REPOSITORY_BLOCKED, REPOSITORY_CANNOT_FORK, REPOSITORY_CHANGED, REPOSITORY_CLOSED_ONBOARDING, REPOSITORY_DISABLED, REPOSITORY_DISABLED_BY_CONFIG, REPOSITORY_EMPTY, REPOSITORY_FORKED, REPOSITORY_FORK_MISSING, REPOSITORY_FORK_MODE_FORKED, REPOSITORY_MIRRORED, REPOSITORY_NOT_FOUND, REPOSITORY_NO_CONFIG, REPOSITORY_NO_PACKAGE_FILES, REPOSITORY_PENDING_DELETION, REPOSITORY_RENAMED, REPOSITORY_UNINITIATED, RepositoryErrors, SYSTEM_INSUFFICIENT_DISK_SPACE, SYSTEM_INSUFFICIENT_MEMORY, SystemErrors, TEMPORARY_ERROR, TemporaryErrors, UNKNOWN_ERROR, WORKER_FILE_UPDATE_FAILED };
 //# sourceMappingURL=error-messages.d.ts.map

package/dist/constants/error-messages.js

@@ -51,6 +51,7 @@ const REPOSITORY_FORKED = "fork";
 const REPOSITORY_MIRRORED = "mirror";
 const REPOSITORY_NOT_FOUND = "not-found";
 const REPOSITORY_NO_PACKAGE_FILES = "no-package-files";
+const REPOSITORY_PENDING_DELETION = "pending-deletion";
 const REPOSITORY_RENAMED = "renamed";
 const REPOSITORY_UNINITIATED = "uninitiated";
 /** cause repo to be considered as disabled */
@@ -70,6 +71,7 @@ const RepositoryErrors = [
 	REPOSITORY_MIRRORED,
 	REPOSITORY_NOT_FOUND,
 	REPOSITORY_NO_PACKAGE_FILES,
+	REPOSITORY_PENDING_DELETION,
 	REPOSITORY_RENAMED,
 	REPOSITORY_UNINITIATED
 ];
@@ -97,6 +99,6 @@ const MISSING_API_CREDENTIALS = "missing-api-credentials";
 /** Logger not initialized */
 const LOGGER_NOT_INITIALIZED = "logger-not-initialized";
 //#endregion
-export { BUNDLER_INVALID_CREDENTIALS, CONFIG_GIT_URL_UNAVAILABLE, CONFIG_INHERIT_NOT_FOUND, CONFIG_INHERIT_PARSE_ERROR, CONFIG_PRESETS_INVALID, CONFIG_SECRETS_EXPOSED, CONFIG_SECRETS_INVALID, CONFIG_VALIDATION, CONFIG_VARIABLES_INVALID, ConfigErrors, EXTERNAL_HOST_ERROR, FILE_ACCESS_VIOLATION_ERROR, HOST_BLOCKED, HOST_DISABLED, IGNORABLE_HOST_ERROR, INVALID_PATH, LOGGER_NOT_INITIALIZED, MANAGER_LOCKFILE_ERROR, MISSING_API_CREDENTIALS, NO_VULNERABILITY_ALERTS, PAGE_NOT_FOUND_ERROR, PLATFORM_AUTHENTICATION_ERROR, PLATFORM_BAD_CREDENTIALS, PLATFORM_GPG_FAILED, PLATFORM_INTEGRATION_UNAUTHORIZED, PLATFORM_NOT_FOUND, PLATFORM_RATE_LIMIT_EXCEEDED, PLATFORM_UNKNOWN_ERROR, PR_ALREADY_IN_MERGE_QUEUE, PlatformErrors, REPOSITORY_ACCESS_FORBIDDEN, REPOSITORY_ARCHIVED, REPOSITORY_BLOCKED, REPOSITORY_CANNOT_FORK, REPOSITORY_CHANGED, REPOSITORY_CLOSED_ONBOARDING, REPOSITORY_DISABLED, REPOSITORY_DISABLED_BY_CONFIG, REPOSITORY_EMPTY, REPOSITORY_FORKED, REPOSITORY_FORK_MISSING, REPOSITORY_FORK_MODE_FORKED, REPOSITORY_MIRRORED, REPOSITORY_NOT_FOUND, REPOSITORY_NO_CONFIG, REPOSITORY_NO_PACKAGE_FILES, REPOSITORY_RENAMED, REPOSITORY_UNINITIATED, RepositoryErrors, SYSTEM_INSUFFICIENT_DISK_SPACE, SYSTEM_INSUFFICIENT_MEMORY, SystemErrors, TEMPORARY_ERROR, TemporaryErrors, UNKNOWN_ERROR, WORKER_FILE_UPDATE_FAILED };
+export { BUNDLER_INVALID_CREDENTIALS, CONFIG_GIT_URL_UNAVAILABLE, CONFIG_INHERIT_NOT_FOUND, CONFIG_INHERIT_PARSE_ERROR, CONFIG_PRESETS_INVALID, CONFIG_SECRETS_EXPOSED, CONFIG_SECRETS_INVALID, CONFIG_VALIDATION, CONFIG_VARIABLES_INVALID, ConfigErrors, EXTERNAL_HOST_ERROR, FILE_ACCESS_VIOLATION_ERROR, HOST_BLOCKED, HOST_DISABLED, IGNORABLE_HOST_ERROR, INVALID_PATH, LOGGER_NOT_INITIALIZED, MANAGER_LOCKFILE_ERROR, MISSING_API_CREDENTIALS, NO_VULNERABILITY_ALERTS, PAGE_NOT_FOUND_ERROR, PLATFORM_AUTHENTICATION_ERROR, PLATFORM_BAD_CREDENTIALS, PLATFORM_GPG_FAILED, PLATFORM_INTEGRATION_UNAUTHORIZED, PLATFORM_NOT_FOUND, PLATFORM_RATE_LIMIT_EXCEEDED, PLATFORM_UNKNOWN_ERROR, PR_ALREADY_IN_MERGE_QUEUE, PlatformErrors, REPOSITORY_ACCESS_FORBIDDEN, REPOSITORY_ARCHIVED, REPOSITORY_BLOCKED, REPOSITORY_CANNOT_FORK, REPOSITORY_CHANGED, REPOSITORY_CLOSED_ONBOARDING, REPOSITORY_DISABLED, REPOSITORY_DISABLED_BY_CONFIG, REPOSITORY_EMPTY, REPOSITORY_FORKED, REPOSITORY_FORK_MISSING, REPOSITORY_FORK_MODE_FORKED, REPOSITORY_MIRRORED, REPOSITORY_NOT_FOUND, REPOSITORY_NO_CONFIG, REPOSITORY_NO_PACKAGE_FILES, REPOSITORY_PENDING_DELETION, REPOSITORY_RENAMED, REPOSITORY_UNINITIATED, RepositoryErrors, SYSTEM_INSUFFICIENT_DISK_SPACE, SYSTEM_INSUFFICIENT_MEMORY, SystemErrors, TEMPORARY_ERROR, TemporaryErrors, UNKNOWN_ERROR, WORKER_FILE_UPDATE_FAILED };
 
 //# sourceMappingURL=error-messages.js.map

package/dist/constants/error-messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-messages.js","names":[],"sources":["../../lib/constants/error-messages.ts"],"sourcesContent":["// System error\nexport const SYSTEM_INSUFFICIENT_DISK_SPACE = 'disk-space';\nexport const SYSTEM_INSUFFICIENT_MEMORY = 'out-of-memory';\n\nexport const SystemErrors = [\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  SYSTEM_INSUFFICIENT_MEMORY,\n] as const;\n\n// Platform Error\nexport const PLATFORM_AUTHENTICATION_ERROR = 'authentication-error';\nexport const PLATFORM_BAD_CREDENTIALS = 'bad-credentials';\nexport const PLATFORM_GPG_FAILED = 'gpg-failed';\nexport const PLATFORM_INTEGRATION_UNAUTHORIZED = 'integration-unauthorized';\nexport const PLATFORM_NOT_FOUND = 'platform-not-found';\nexport const PLATFORM_RATE_LIMIT_EXCEEDED = 'rate-limit-exceeded';\nexport const PLATFORM_UNKNOWN_ERROR = 'platform-unknown-error';\n\nexport const PlatformErrors = [\n  PLATFORM_AUTHENTICATION_ERROR,\n  PLATFORM_BAD_CREDENTIALS,\n  PLATFORM_GPG_FAILED,\n  PLATFORM_INTEGRATION_UNAUTHORIZED,\n  PLATFORM_NOT_FOUND,\n  PLATFORM_RATE_LIMIT_EXCEEDED,\n  PLATFORM_UNKNOWN_ERROR,\n] as const;\n\n// Config Error\nexport const CONFIG_VALIDATION = 'config-validation';\nexport const CONFIG_PRESETS_INVALID = 'config-presets-invalid';\nexport const CONFIG_SECRETS_EXPOSED = 'config-secrets-exposed';\nexport const CONFIG_SECRETS_INVALID = 'config-secrets-invalid';\nexport const CONFIG_VARIABLES_INVALID = 'config-variables-invalid';\nexport const CONFIG_GIT_URL_UNAVAILABLE = 'config-git-url-unavailable';\nexport const CONFIG_INHERIT_NOT_FOUND = 'config-inherit-not-found';\nexport const CONFIG_INHERIT_PARSE_ERROR = 'config-inherit-parse-error';\n\nexport const ConfigErrors = [\n  CONFIG_VALIDATION,\n  CONFIG_PRESETS_INVALID,\n  CONFIG_SECRETS_EXPOSED,\n  CONFIG_SECRETS_INVALID,\n  CONFIG_VARIABLES_INVALID,\n  CONFIG_GIT_URL_UNAVAILABLE,\n  CONFIG_INHERIT_NOT_FOUND,\n  CONFIG_INHERIT_PARSE_ERROR,\n] as const;\n\n// Repository Errors - causes repo to be considered as disabled\nexport const REPOSITORY_ACCESS_FORBIDDEN = 'forbidden';\nexport const REPOSITORY_ARCHIVED = 'archived';\nexport const REPOSITORY_BLOCKED = 'blocked';\nexport const REPOSITORY_CANNOT_FORK = 'cannot-fork';\nexport const REPOSITORY_DISABLED = 'disabled';\nexport const REPOSITORY_CLOSED_ONBOARDING = 'disabled-closed-onboarding';\nexport const REPOSITORY_DISABLED_BY_CONFIG = 'disabled-by-config';\nexport const REPOSITORY_NO_CONFIG = 'disabled-no-config';\nexport const REPOSITORY_EMPTY = 'empty';\nexport const REPOSITORY_FORK_MISSING = 'fork-missing';\nexport const REPOSITORY_FORK_MODE_FORKED = 'fork-mode-forked';\nexport const REPOSITORY_FORKED = 'fork';\nexport const REPOSITORY_MIRRORED = 'mirror';\nexport const REPOSITORY_NOT_FOUND = 'not-found';\nexport const REPOSITORY_NO_PACKAGE_FILES = 'no-package-files';\nexport const REPOSITORY_RENAMED = 'renamed';\nexport const REPOSITORY_UNINITIATED = 'uninitiated';\n\n/** cause repo to be considered as disabled */\nexport const RepositoryErrors = [\n  REPOSITORY_ACCESS_FORBIDDEN,\n  REPOSITORY_ARCHIVED,\n  REPOSITORY_BLOCKED,\n  REPOSITORY_CANNOT_FORK,\n  REPOSITORY_DISABLED,\n  REPOSITORY_CLOSED_ONBOARDING,\n  REPOSITORY_DISABLED_BY_CONFIG,\n  REPOSITORY_NO_CONFIG,\n  REPOSITORY_EMPTY,\n  REPOSITORY_FORK_MISSING,\n  REPOSITORY_FORK_MODE_FORKED,\n  REPOSITORY_FORKED,\n  REPOSITORY_MIRRORED,\n  REPOSITORY_NOT_FOUND,\n  REPOSITORY_NO_PACKAGE_FILES,\n  REPOSITORY_RENAMED,\n  REPOSITORY_UNINITIATED,\n] as const;\n\n// Temporary Error\nexport const REPOSITORY_CHANGED = 'repository-changed';\nexport const TEMPORARY_ERROR = 'temporary-error';\nexport const NO_VULNERABILITY_ALERTS = 'no-vulnerability-alerts';\n\nexport const TemporaryErrors = [\n  REPOSITORY_CHANGED,\n  TEMPORARY_ERROR,\n  NO_VULNERABILITY_ALERTS,\n] as const;\n\n// Manager Error\nexport const MANAGER_LOCKFILE_ERROR = 'lockfile-error';\nexport const FILE_ACCESS_VIOLATION_ERROR = 'file-access-violation-error';\n\n// Host error\nexport const EXTERNAL_HOST_ERROR = 'external-host-error';\nexport const IGNORABLE_HOST_ERROR = 'ignorable-host-error';\nexport const HOST_BLOCKED = 'host-blocked';\nexport const HOST_DISABLED = 'host-disabled';\n\n// Worker Error\nexport const WORKER_FILE_UPDATE_FAILED = 'update-failure';\n\n// PR Error\nexport const PR_ALREADY_IN_MERGE_QUEUE = 'pr-already-in-merge-queue';\n\n// Bundler Error\nexport const BUNDLER_INVALID_CREDENTIALS = 'bundler-credentials';\n\n// Unknown Error\nexport const UNKNOWN_ERROR = 'unknown-error';\n\n// PATH Error\nexport const INVALID_PATH = 'invalid-path';\n\n// PAGE NOT FOUND\nexport const PAGE_NOT_FOUND_ERROR = 'page-not-found';\n\n// Missing API required credentials\nexport const MISSING_API_CREDENTIALS = 'missing-api-credentials';\n\n/** Logger not initialized */\nexport const LOGGER_NOT_INITIALIZED = 'logger-not-initialized';\n"],"mappings":";AACA,MAAa,iCAAiC;AAC9C,MAAa,6BAA6B;AAE1C,MAAa,eAAe,CAC1B,gCACA,0BACF;AAGA,MAAa,gCAAgC;AAC7C,MAAa,2BAA2B;AACxC,MAAa,sBAAsB;AACnC,MAAa,oCAAoC;AACjD,MAAa,qBAAqB;AAClC,MAAa,+BAA+B;AAC5C,MAAa,yBAAyB;AAEtC,MAAa,iBAAiB;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,oBAAoB;AACjC,MAAa,yBAAyB;AACtC,MAAa,yBAAyB;AACtC,MAAa,yBAAyB;AACtC,MAAa,2BAA2B;AACxC,MAAa,6BAA6B;AAC1C,MAAa,2BAA2B;AACxC,MAAa,6BAA6B;AAE1C,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,8BAA8B;AAC3C,MAAa,sBAAsB;AACnC,MAAa,qBAAqB;AAClC,MAAa,yBAAyB;AACtC,MAAa,sBAAsB;AACnC,MAAa,+BAA+B;AAC5C,MAAa,gCAAgC;AAC7C,MAAa,uBAAuB;AACpC,MAAa,mBAAmB;AAChC,MAAa,0BAA0B;AACvC,MAAa,8BAA8B;AAC3C,MAAa,oBAAoB;AACjC,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;AAC3C,MAAa,qBAAqB;AAClC,MAAa,yBAAyB;;AAGtC,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,qBAAqB;AAClC,MAAa,kBAAkB;AAC/B,MAAa,0BAA0B;AAEvC,MAAa,kBAAkB;CAC7B;CACA;CACA;AACF;AAGA,MAAa,yBAAyB;AACtC,MAAa,8BAA8B;AAG3C,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AACpC,MAAa,eAAe;AAC5B,MAAa,gBAAgB;AAG7B,MAAa,4BAA4B;AAGzC,MAAa,4BAA4B;AAGzC,MAAa,8BAA8B;AAG3C,MAAa,gBAAgB;AAG7B,MAAa,eAAe;AAG5B,MAAa,uBAAuB;AAGpC,MAAa,0BAA0B;;AAGvC,MAAa,yBAAyB"}
+{"version":3,"file":"error-messages.js","names":[],"sources":["../../lib/constants/error-messages.ts"],"sourcesContent":["// System error\nexport const SYSTEM_INSUFFICIENT_DISK_SPACE = 'disk-space';\nexport const SYSTEM_INSUFFICIENT_MEMORY = 'out-of-memory';\n\nexport const SystemErrors = [\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  SYSTEM_INSUFFICIENT_MEMORY,\n] as const;\n\n// Platform Error\nexport const PLATFORM_AUTHENTICATION_ERROR = 'authentication-error';\nexport const PLATFORM_BAD_CREDENTIALS = 'bad-credentials';\nexport const PLATFORM_GPG_FAILED = 'gpg-failed';\nexport const PLATFORM_INTEGRATION_UNAUTHORIZED = 'integration-unauthorized';\nexport const PLATFORM_NOT_FOUND = 'platform-not-found';\nexport const PLATFORM_RATE_LIMIT_EXCEEDED = 'rate-limit-exceeded';\nexport const PLATFORM_UNKNOWN_ERROR = 'platform-unknown-error';\n\nexport const PlatformErrors = [\n  PLATFORM_AUTHENTICATION_ERROR,\n  PLATFORM_BAD_CREDENTIALS,\n  PLATFORM_GPG_FAILED,\n  PLATFORM_INTEGRATION_UNAUTHORIZED,\n  PLATFORM_NOT_FOUND,\n  PLATFORM_RATE_LIMIT_EXCEEDED,\n  PLATFORM_UNKNOWN_ERROR,\n] as const;\n\n// Config Error\nexport const CONFIG_VALIDATION = 'config-validation';\nexport const CONFIG_PRESETS_INVALID = 'config-presets-invalid';\nexport const CONFIG_SECRETS_EXPOSED = 'config-secrets-exposed';\nexport const CONFIG_SECRETS_INVALID = 'config-secrets-invalid';\nexport const CONFIG_VARIABLES_INVALID = 'config-variables-invalid';\nexport const CONFIG_GIT_URL_UNAVAILABLE = 'config-git-url-unavailable';\nexport const CONFIG_INHERIT_NOT_FOUND = 'config-inherit-not-found';\nexport const CONFIG_INHERIT_PARSE_ERROR = 'config-inherit-parse-error';\n\nexport const ConfigErrors = [\n  CONFIG_VALIDATION,\n  CONFIG_PRESETS_INVALID,\n  CONFIG_SECRETS_EXPOSED,\n  CONFIG_SECRETS_INVALID,\n  CONFIG_VARIABLES_INVALID,\n  CONFIG_GIT_URL_UNAVAILABLE,\n  CONFIG_INHERIT_NOT_FOUND,\n  CONFIG_INHERIT_PARSE_ERROR,\n] as const;\n\n// Repository Errors - causes repo to be considered as disabled\nexport const REPOSITORY_ACCESS_FORBIDDEN = 'forbidden';\nexport const REPOSITORY_ARCHIVED = 'archived';\nexport const REPOSITORY_BLOCKED = 'blocked';\nexport const REPOSITORY_CANNOT_FORK = 'cannot-fork';\nexport const REPOSITORY_DISABLED = 'disabled';\nexport const REPOSITORY_CLOSED_ONBOARDING = 'disabled-closed-onboarding';\nexport const REPOSITORY_DISABLED_BY_CONFIG = 'disabled-by-config';\nexport const REPOSITORY_NO_CONFIG = 'disabled-no-config';\nexport const REPOSITORY_EMPTY = 'empty';\nexport const REPOSITORY_FORK_MISSING = 'fork-missing';\nexport const REPOSITORY_FORK_MODE_FORKED = 'fork-mode-forked';\nexport const REPOSITORY_FORKED = 'fork';\nexport const REPOSITORY_MIRRORED = 'mirror';\nexport const REPOSITORY_NOT_FOUND = 'not-found';\nexport const REPOSITORY_NO_PACKAGE_FILES = 'no-package-files';\nexport const REPOSITORY_PENDING_DELETION = 'pending-deletion';\nexport const REPOSITORY_RENAMED = 'renamed';\nexport const REPOSITORY_UNINITIATED = 'uninitiated';\n\n/** cause repo to be considered as disabled */\nexport const RepositoryErrors = [\n  REPOSITORY_ACCESS_FORBIDDEN,\n  REPOSITORY_ARCHIVED,\n  REPOSITORY_BLOCKED,\n  REPOSITORY_CANNOT_FORK,\n  REPOSITORY_DISABLED,\n  REPOSITORY_CLOSED_ONBOARDING,\n  REPOSITORY_DISABLED_BY_CONFIG,\n  REPOSITORY_NO_CONFIG,\n  REPOSITORY_EMPTY,\n  REPOSITORY_FORK_MISSING,\n  REPOSITORY_FORK_MODE_FORKED,\n  REPOSITORY_FORKED,\n  REPOSITORY_MIRRORED,\n  REPOSITORY_NOT_FOUND,\n  REPOSITORY_NO_PACKAGE_FILES,\n  REPOSITORY_PENDING_DELETION,\n  REPOSITORY_RENAMED,\n  REPOSITORY_UNINITIATED,\n] as const;\n\n// Temporary Error\nexport const REPOSITORY_CHANGED = 'repository-changed';\nexport const TEMPORARY_ERROR = 'temporary-error';\nexport const NO_VULNERABILITY_ALERTS = 'no-vulnerability-alerts';\n\nexport const TemporaryErrors = [\n  REPOSITORY_CHANGED,\n  TEMPORARY_ERROR,\n  NO_VULNERABILITY_ALERTS,\n] as const;\n\n// Manager Error\nexport const MANAGER_LOCKFILE_ERROR = 'lockfile-error';\nexport const FILE_ACCESS_VIOLATION_ERROR = 'file-access-violation-error';\n\n// Host error\nexport const EXTERNAL_HOST_ERROR = 'external-host-error';\nexport const IGNORABLE_HOST_ERROR = 'ignorable-host-error';\nexport const HOST_BLOCKED = 'host-blocked';\nexport const HOST_DISABLED = 'host-disabled';\n\n// Worker Error\nexport const WORKER_FILE_UPDATE_FAILED = 'update-failure';\n\n// PR Error\nexport const PR_ALREADY_IN_MERGE_QUEUE = 'pr-already-in-merge-queue';\n\n// Bundler Error\nexport const BUNDLER_INVALID_CREDENTIALS = 'bundler-credentials';\n\n// Unknown Error\nexport const UNKNOWN_ERROR = 'unknown-error';\n\n// PATH Error\nexport const INVALID_PATH = 'invalid-path';\n\n// PAGE NOT FOUND\nexport const PAGE_NOT_FOUND_ERROR = 'page-not-found';\n\n// Missing API required credentials\nexport const MISSING_API_CREDENTIALS = 'missing-api-credentials';\n\n/** Logger not initialized */\nexport const LOGGER_NOT_INITIALIZED = 'logger-not-initialized';\n"],"mappings":";AACA,MAAa,iCAAiC;AAC9C,MAAa,6BAA6B;AAE1C,MAAa,eAAe,CAC1B,gCACA,0BACF;AAGA,MAAa,gCAAgC;AAC7C,MAAa,2BAA2B;AACxC,MAAa,sBAAsB;AACnC,MAAa,oCAAoC;AACjD,MAAa,qBAAqB;AAClC,MAAa,+BAA+B;AAC5C,MAAa,yBAAyB;AAEtC,MAAa,iBAAiB;CAC5B;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,oBAAoB;AACjC,MAAa,yBAAyB;AACtC,MAAa,yBAAyB;AACtC,MAAa,yBAAyB;AACtC,MAAa,2BAA2B;AACxC,MAAa,6BAA6B;AAC1C,MAAa,2BAA2B;AACxC,MAAa,6BAA6B;AAE1C,MAAa,eAAe;CAC1B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,8BAA8B;AAC3C,MAAa,sBAAsB;AACnC,MAAa,qBAAqB;AAClC,MAAa,yBAAyB;AACtC,MAAa,sBAAsB;AACnC,MAAa,+BAA+B;AAC5C,MAAa,gCAAgC;AAC7C,MAAa,uBAAuB;AACpC,MAAa,mBAAmB;AAChC,MAAa,0BAA0B;AACvC,MAAa,8BAA8B;AAC3C,MAAa,oBAAoB;AACjC,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AACpC,MAAa,8BAA8B;AAC3C,MAAa,8BAA8B;AAC3C,MAAa,qBAAqB;AAClC,MAAa,yBAAyB;;AAGtC,MAAa,mBAAmB;CAC9B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAGA,MAAa,qBAAqB;AAClC,MAAa,kBAAkB;AAC/B,MAAa,0BAA0B;AAEvC,MAAa,kBAAkB;CAC7B;CACA;CACA;AACF;AAGA,MAAa,yBAAyB;AACtC,MAAa,8BAA8B;AAG3C,MAAa,sBAAsB;AACnC,MAAa,uBAAuB;AACpC,MAAa,eAAe;AAC5B,MAAa,gBAAgB;AAG7B,MAAa,4BAA4B;AAGzC,MAAa,4BAA4B;AAGzC,MAAa,8BAA8B;AAG3C,MAAa,gBAAgB;AAG7B,MAAa,eAAe;AAG5B,MAAa,uBAAuB;AAGpC,MAAa,0BAA0B;;AAGvC,MAAa,yBAAyB"}

package/dist/modules/manager/apm/artifacts.js

@@ -3,6 +3,7 @@ import { logger } from "../../../logger/index.js";
 import { deleteLocalFile, getSiblingFileName, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { exec } from "../../../util/exec/index.js";
 import { getRepoStatus } from "../../../util/git/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { isNonEmptyArray } from "@sindresorhus/is";
 //#region lib/modules/manager/apm/artifacts.ts
 async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileContent, config }) {
@@ -25,7 +26,7 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 			docker: {},
 			toolConstraints: [{
 				toolName: "apm",
-				constraint: config.constraints?.apm
+				constraint: await resolveToolConstraint(config, "apm")
 			}]
 		};
 		await exec("apm install", execOptions);

package/dist/modules/manager/apm/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/apm/artifacts.ts"],"sourcesContent":["import { isNonEmptyArray } from '@sindresorhus/is';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`apm.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!isNonEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('apm: no updated deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'apm.lock.yaml');\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('apm: no lock file found');\n    return null;\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      docker: {},\n      toolConstraints: [\n        { toolName: 'apm', constraint: config.constraints?.apm },\n      ],\n    };\n    await exec('apm install', execOptions);\n\n    // `apm install` regenerates the lockfile and re-deploys the harness\n    // directories (`.github/`, `.claude/`, ...) that APM consumers commit, so\n    // return every file it changed - not just the lockfile - or the committed\n    // instruction files go stale after a bump. `apm_modules/` is the gitignored\n    // cache, so it is not reported here.\n    const status = await getRepoStatus();\n    const res: UpdateArtifactsResult[] = [];\n    for (const path of [...status.modified, ...status.not_added]) {\n      // the manifest itself is committed as an updated package file\n      if (path === packageFileName) {\n        continue;\n      }\n      res.push({\n        file: { type: 'addition', path, contents: await readLocalFile(path) },\n      });\n    }\n    for (const path of status.deleted) {\n      res.push({ file: { type: 'deletion', path } });\n    }\n    if (!res.length) {\n      logger.debug('apm: no changed files after install');\n      return null;\n    }\n    return res;\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug({ err }, `Failed to update ${lockFileName}`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${err}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;AAcA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,gBAAgB,WAAW,KAAK,CAAC,uBAAuB;EAC3D,OAAO,MAAM,uCAAuC;EACpD,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,eAAe;CAExE,IAAI,CAAC,MADiC,cAAc,cAAc,MAAM,GAC1C;EAC5B,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IAAE,UAAU;IAAO,YAAY,OAAO,aAAa;GAAI,CACzD;EACF;EACA,MAAM,KAAK,eAAe,WAAW;EAOrC,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GAAG;GAE5D,IAAI,SAAS,iBACX;GAEF,IAAI,KAAK,EACP,MAAM;IAAE,MAAM;IAAY;IAAM,UAAU,MAAM,cAAc,IAAI;GAAE,EACtE,CAAC;EACH;EACA,KAAK,MAAM,QAAQ,OAAO,SACxB,IAAI,KAAK,EAAE,MAAM;GAAE,MAAM;GAAY;EAAK,EAAE,CAAC;EAE/C,IAAI,CAAC,IAAI,QAAQ;GACf,OAAO,MAAM,qCAAqC;GAClD,OAAO;EACT;EACA,OAAO;CACT,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,MAAM,EAAE,IAAI,GAAG,oBAAoB,cAAc;EACxD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG;EACb,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/apm/artifacts.ts"],"sourcesContent":["import { isNonEmptyArray } from '@sindresorhus/is';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`apm.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!isNonEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('apm: no updated deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'apm.lock.yaml');\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('apm: no lock file found');\n    return null;\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'apm',\n          constraint: await resolveToolConstraint(config, 'apm'),\n        },\n      ],\n    };\n    await exec('apm install', execOptions);\n\n    // `apm install` regenerates the lockfile and re-deploys the harness\n    // directories (`.github/`, `.claude/`, ...) that APM consumers commit, so\n    // return every file it changed - not just the lockfile - or the committed\n    // instruction files go stale after a bump. `apm_modules/` is the gitignored\n    // cache, so it is not reported here.\n    const status = await getRepoStatus();\n    const res: UpdateArtifactsResult[] = [];\n    for (const path of [...status.modified, ...status.not_added]) {\n      // the manifest itself is committed as an updated package file\n      if (path === packageFileName) {\n        continue;\n      }\n      res.push({\n        file: { type: 'addition', path, contents: await readLocalFile(path) },\n      });\n    }\n    for (const path of status.deleted) {\n      res.push({ file: { type: 'deletion', path } });\n    }\n    if (!res.length) {\n      logger.debug('apm: no changed files after install');\n      return null;\n    }\n    return res;\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug({ err }, `Failed to update ${lockFileName}`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${err}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;AAeA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,gBAAgB,WAAW,KAAK,CAAC,uBAAuB;EAC3D,OAAO,MAAM,uCAAuC;EACpD,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,eAAe;CAExE,IAAI,CAAC,MADiC,cAAc,cAAc,MAAM,GAC1C;EAC5B,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,sBAAsB,QAAQ,KAAK;GACvD,CACF;EACF;EACA,MAAM,KAAK,eAAe,WAAW;EAOrC,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GAAG;GAE5D,IAAI,SAAS,iBACX;GAEF,IAAI,KAAK,EACP,MAAM;IAAE,MAAM;IAAY;IAAM,UAAU,MAAM,cAAc,IAAI;GAAE,EACtE,CAAC;EACH;EACA,KAAK,MAAM,QAAQ,OAAO,SACxB,IAAI,KAAK,EAAE,MAAM;GAAE,MAAM;GAAY;EAAK,EAAE,CAAC;EAE/C,IAAI,CAAC,IAAI,QAAQ;GACf,OAAO,MAAM,qCAAqC;GAClD,OAAO;EACT;EACA,OAAO;CACT,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,MAAM,EAAE,IAAI,GAAG,oBAAoB,cAAc;EACxD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG;EACb,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/bazel-module/artifacts.js

@@ -1,5 +1,6 @@
 import { logger } from "../../../logger/index.js";
 import { getSiblingFileName, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { updateBazelLockfile } from "./lockfile.js";
 //#region lib/modules/manager/bazel-module/artifacts.ts
 async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileContent, config }) {
@@ -15,7 +16,7 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 		return null;
 	}
 	await writeLocalFile(packageFileName, newPackageFileContent);
-	return await updateBazelLockfile(lockFileName, packageFileName, isLockFileMaintenance, config.constraints?.bazelisk);
+	return await updateBazelLockfile(lockFileName, packageFileName, isLockFileMaintenance, await resolveToolConstraint(config, "bazelisk"));
 }
 //#endregion
 export { updateArtifacts };

package/dist/modules/manager/bazel-module/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazel-module/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { updateBazelLockfile } from './lockfile.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazel-module.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!updatedDeps.length && !isLockFileMaintenance) {\n    logger.debug('No updated bazel-module deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    packageFileName,\n    isLockFileMaintenance,\n    config.constraints?.bazelisk,\n  );\n}\n"],"mappings":";;;;AASA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,gCAAgC,gBAAgB,EAAE;CAC/D,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,YAAY,UAAU,CAAC,uBAAuB;EACjD,OAAO,MAAM,+CAA+C;EAC5D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAG5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,iBACA,uBACA,OAAO,aAAa,QACtB;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazel-module/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { updateBazelLockfile } from './lockfile.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazel-module.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!updatedDeps.length && !isLockFileMaintenance) {\n    logger.debug('No updated bazel-module deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    packageFileName,\n    isLockFileMaintenance,\n    await resolveToolConstraint(config, 'bazelisk'),\n  );\n}\n"],"mappings":";;;;;AAUA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,gCAAgC,gBAAgB,EAAE;CAC/D,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,YAAY,UAAU,CAAC,uBAAuB;EACjD,OAAO,MAAM,+CAA+C;EAC5D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAG5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,iBACA,uBACA,MAAM,sBAAsB,QAAQ,UAAU,CAChD;AACF"}

package/dist/modules/manager/bazelisk/artifacts.js

@@ -1,5 +1,6 @@
 import { logger } from "../../../logger/index.js";
 import { getSiblingFileName, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { updateBazelLockfile } from "../bazel-module/lockfile.js";
 //#region lib/modules/manager/bazelisk/artifacts.ts
 async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileContent, config }) {
@@ -19,7 +20,7 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 		return null;
 	}
 	await writeLocalFile(packageFileName, newPackageFileContent);
-	return await updateBazelLockfile(lockFileName, moduleFileName, config.isLockFileMaintenance, config.constraints?.bazelisk);
+	return await updateBazelLockfile(lockFileName, moduleFileName, config.isLockFileMaintenance, await resolveToolConstraint(config, "bazelisk"));
 }
 //#endregion
 export { updateArtifacts };

package/dist/modules/manager/bazelisk/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazelisk/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { updateBazelLockfile } from '../bazel-module/lockfile.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazelisk.updateArtifacts(${packageFileName})`);\n\n  if (!updatedDeps.length && !config.isLockFileMaintenance) {\n    logger.debug('No updated bazelisk deps - returning null');\n    return null;\n  }\n\n  const moduleFileName = getSiblingFileName(packageFileName, 'MODULE.bazel');\n  const existingModuleContent = await readLocalFile(moduleFileName, 'utf8');\n  if (!existingModuleContent) {\n    logger.debug('No MODULE.bazel found - skipping artifact update');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    moduleFileName,\n    config.isLockFileMaintenance,\n    config.constraints?.bazelisk,\n  );\n}\n"],"mappings":";;;;AASA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,IAAI,CAAC,YAAY,UAAU,CAAC,OAAO,uBAAuB;EACxD,OAAO,MAAM,2CAA2C;EACxD,OAAO;CACT;CAEA,MAAM,iBAAiB,mBAAmB,iBAAiB,cAAc;CAEzE,IAAI,CAAC,MAD+B,cAAc,gBAAgB,MAAM,GAC5C;EAC1B,OAAO,MAAM,kDAAkD;EAC/D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAE5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,gBACA,OAAO,uBACP,OAAO,aAAa,QACtB;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazelisk/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { updateBazelLockfile } from '../bazel-module/lockfile.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazelisk.updateArtifacts(${packageFileName})`);\n\n  if (!updatedDeps.length && !config.isLockFileMaintenance) {\n    logger.debug('No updated bazelisk deps - returning null');\n    return null;\n  }\n\n  const moduleFileName = getSiblingFileName(packageFileName, 'MODULE.bazel');\n  const existingModuleContent = await readLocalFile(moduleFileName, 'utf8');\n  if (!existingModuleContent) {\n    logger.debug('No MODULE.bazel found - skipping artifact update');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    moduleFileName,\n    config.isLockFileMaintenance,\n    await resolveToolConstraint(config, 'bazelisk'),\n  );\n}\n"],"mappings":";;;;;AAUA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,IAAI,CAAC,YAAY,UAAU,CAAC,OAAO,uBAAuB;EACxD,OAAO,MAAM,2CAA2C;EACxD,OAAO;CACT;CAEA,MAAM,iBAAiB,mBAAmB,iBAAiB,cAAc;CAEzE,IAAI,CAAC,MAD+B,cAAc,gBAAgB,MAAM,GAC5C;EAC1B,OAAO,MAAM,kDAAkD;EAC/D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAE5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,gBACA,OAAO,uBACP,MAAM,sBAAsB,QAAQ,UAAU,CAChD;AACF"}

package/dist/modules/manager/bun/artifacts.js

@@ -3,6 +3,7 @@ import { GlobalConfig } from "../../../config/global.js";
 import { logger } from "../../../logger/index.js";
 import { deleteLocalFile, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { exec } from "../../../util/exec/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { processHostRules } from "../npm/post-update/rules.js";
 import { getNpmrcContent, resetNpmrcContent, updateNpmrcContent } from "../npm/utils.js";
 import { isEmptyArray } from "@sindresorhus/is";
@@ -40,7 +41,7 @@ async function updateArtifacts(updateArtifact) {
 			docker: {},
 			toolConstraints: [{
 				toolName: "bun",
-				constraint: updateArtifact?.config?.constraints?.bun
+				constraint: await resolveToolConstraint(config, "bun")
 			}]
 		};
 		await exec(cmd, execOptions);

package/dist/modules/manager/bun/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bun/artifacts.ts"],"sourcesContent":["import { isEmptyArray } from '@sindresorhus/is';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { processHostRules } from '../npm/post-update/rules.ts';\nimport {\n  getNpmrcContent,\n  resetNpmrcContent,\n  updateNpmrcContent,\n} from '../npm/utils.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bun.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (isEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('No updated bun deps - returning null');\n    return null;\n  }\n\n  // Find the first bun dependency in order to handle mixed manager updates,\n  // eventually falling back to the first lock file from config.\n  const lockFileName =\n    updatedDeps.find((dep) => dep.manager === 'bun')?.lockFiles?.[0] ??\n    config.lockFiles?.[0];\n\n  if (!lockFileName) {\n    logger.debug(`bun: No lock file found`);\n    return null;\n  }\n\n  const oldLockFileContent = await readLocalFile(lockFileName);\n  if (!oldLockFileContent) {\n    logger.debug(`No ${lockFileName} found`);\n    return null;\n  }\n\n  const pkgFileDir = upath.dirname(packageFileName);\n  const npmrcContent = await getNpmrcContent(pkgFileDir);\n  const { additionalNpmrcContent } = processHostRules();\n  await updateNpmrcContent(pkgFileDir, npmrcContent, additionalNpmrcContent);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    let cmd = 'bun install';\n\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      cmd += ' --ignore-scripts';\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'bun',\n          constraint: updateArtifact?.config?.constraints?.bun,\n        },\n      ],\n    };\n\n    await exec(cmd, execOptions);\n    await resetNpmrcContent(pkgFileDir, npmrcContent);\n\n    const newLockFileContent = await readLocalFile(lockFileName);\n    if (\n      !newLockFileContent ||\n      Buffer.compare(oldLockFileContent, newLockFileContent) === 0\n    ) {\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newLockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.warn({ lockfile: lockFileName, err }, `Failed to update lock file`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;AAoBA,eAAsB,gBACpB,gBACyC;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,aAAa,WAAW,KAAK,CAAC,uBAAuB;EACvD,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CAIA,MAAM,eACJ,YAAY,MAAM,QAAQ,IAAI,YAAY,KAAK,CAAC,EAAE,YAAY,MAC9D,OAAO,YAAY;CAErB,IAAI,CAAC,cAAc;EACjB,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,MAAM,qBAAqB,MAAM,cAAc,YAAY;CAC3D,IAAI,CAAC,oBAAoB;EACvB,OAAO,MAAM,MAAM,aAAa,OAAO;EACvC,OAAO;CACT;CAEA,MAAM,aAAa,MAAM,QAAQ,eAAe;CAChD,MAAM,eAAe,MAAM,gBAAgB,UAAU;CACrD,MAAM,EAAE,2BAA2B,iBAAiB;CACpD,MAAM,mBAAmB,YAAY,cAAc,sBAAsB;CAEzE,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,IAAI,MAAM;EAEV,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,OAAO;EAGT,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,gBAAgB,QAAQ,aAAa;GACnD,CACF;EACF;EAEA,MAAM,KAAK,KAAK,WAAW;EAC3B,MAAM,kBAAkB,YAAY,YAAY;EAEhD,MAAM,qBAAqB,MAAM,cAAc,YAAY;EAC3D,IACE,CAAC,sBACD,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,GAE3D,OAAO;EAET,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,KAAK;GAAE,UAAU;GAAc;EAAI,GAAG,4BAA4B;EACzE,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bun/artifacts.ts"],"sourcesContent":["import { isEmptyArray } from '@sindresorhus/is';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { processHostRules } from '../npm/post-update/rules.ts';\nimport {\n  getNpmrcContent,\n  resetNpmrcContent,\n  updateNpmrcContent,\n} from '../npm/utils.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bun.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (isEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('No updated bun deps - returning null');\n    return null;\n  }\n\n  // Find the first bun dependency in order to handle mixed manager updates,\n  // eventually falling back to the first lock file from config.\n  const lockFileName =\n    updatedDeps.find((dep) => dep.manager === 'bun')?.lockFiles?.[0] ??\n    config.lockFiles?.[0];\n\n  if (!lockFileName) {\n    logger.debug(`bun: No lock file found`);\n    return null;\n  }\n\n  const oldLockFileContent = await readLocalFile(lockFileName);\n  if (!oldLockFileContent) {\n    logger.debug(`No ${lockFileName} found`);\n    return null;\n  }\n\n  const pkgFileDir = upath.dirname(packageFileName);\n  const npmrcContent = await getNpmrcContent(pkgFileDir);\n  const { additionalNpmrcContent } = processHostRules();\n  await updateNpmrcContent(pkgFileDir, npmrcContent, additionalNpmrcContent);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    let cmd = 'bun install';\n\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      cmd += ' --ignore-scripts';\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'bun',\n          constraint: await resolveToolConstraint(config, 'bun'),\n        },\n      ],\n    };\n\n    await exec(cmd, execOptions);\n    await resetNpmrcContent(pkgFileDir, npmrcContent);\n\n    const newLockFileContent = await readLocalFile(lockFileName);\n    if (\n      !newLockFileContent ||\n      Buffer.compare(oldLockFileContent, newLockFileContent) === 0\n    ) {\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newLockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.warn({ lockfile: lockFileName, err }, `Failed to update lock file`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;AAqBA,eAAsB,gBACpB,gBACyC;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,aAAa,WAAW,KAAK,CAAC,uBAAuB;EACvD,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CAIA,MAAM,eACJ,YAAY,MAAM,QAAQ,IAAI,YAAY,KAAK,CAAC,EAAE,YAAY,MAC9D,OAAO,YAAY;CAErB,IAAI,CAAC,cAAc;EACjB,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,MAAM,qBAAqB,MAAM,cAAc,YAAY;CAC3D,IAAI,CAAC,oBAAoB;EACvB,OAAO,MAAM,MAAM,aAAa,OAAO;EACvC,OAAO;CACT;CAEA,MAAM,aAAa,MAAM,QAAQ,eAAe;CAChD,MAAM,eAAe,MAAM,gBAAgB,UAAU;CACrD,MAAM,EAAE,2BAA2B,iBAAiB;CACpD,MAAM,mBAAmB,YAAY,cAAc,sBAAsB;CAEzE,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,IAAI,MAAM;EAEV,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,OAAO;EAGT,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,sBAAsB,QAAQ,KAAK;GACvD,CACF;EACF;EAEA,MAAM,KAAK,KAAK,WAAW;EAC3B,MAAM,kBAAkB,YAAY,YAAY;EAEhD,MAAM,qBAAqB,MAAM,cAAc,YAAY;EAC3D,IACE,CAAC,sBACD,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,GAE3D,OAAO;EAET,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,KAAK;GAAE,UAAU;GAAc;EAAI,GAAG,4BAA4B;EACzE,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/bundler/artifacts.js

@@ -70,7 +70,7 @@ async function updateArtifacts(updateArtifact, recursionLimit = 10) {
 			...variables,
 			...buildBundleHostVariable(hostRule)
 		}), {});
-		const bundler = getBundlerConstraint(updateArtifact, existingLockFileContent);
+		const bundler = await getBundlerConstraint(updateArtifact, existingLockFileContent);
 		const preCommands = ["ruby --version"];
 		const execOptions = {
 			cwdFile: lockFileName,

package/dist/modules/manager/bundler/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":["memCache.get"],"sources":["../../../../lib/modules/manager/bundler/artifacts.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport {\n  BUNDLER_INVALID_CREDENTIALS,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { HostRule } from '../../../types/index.ts';\nimport * as memCache from '../../../util/cache/memory/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  ensureCacheDir,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport {\n  getBundlerConstraint,\n  getLockFilePath,\n  getRubyConstraint,\n} from './common.ts';\nimport {\n  findAllAuthenticatable,\n  getAuthenticationHeaderValue,\n} from './host-rules.ts';\n\nconst hostConfigVariablePrefix = 'BUNDLE_';\n\nfunction buildBundleHostVariable(hostRule: HostRule): Record<string, string> {\n  // istanbul ignore if: doesn't happen in practice\n  if (!hostRule.resolvedHost) {\n    return {};\n  }\n  const varName = hostConfigVariablePrefix.concat(\n    hostRule.resolvedHost\n      .toUpperCase()\n      .split('.')\n      .join('__')\n      .split('-')\n      .join('___'),\n  );\n  return {\n    [varName]: `${getAuthenticationHeaderValue(hostRule)}`,\n  };\n}\n\nconst resolvedPkgRegex = regEx(\n  /(?<pkg>\\S+)(?:\\s*\\([^)]+\\)\\s*)? was resolved to/,\n);\n\nfunction getResolvedPackages(input: string): string[] {\n  const lines = input.split(newlineRegex);\n  const result: string[] = [];\n  for (const line of lines) {\n    const resolveMatchGroups = line.match(resolvedPkgRegex)?.groups;\n    if (resolveMatchGroups) {\n      const { pkg } = resolveMatchGroups;\n      result.push(pkg);\n    }\n  }\n\n  return [...new Set(result)];\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bundler.updateArtifacts(${packageFileName})`);\n  const existingError = memCache.get<string>('bundlerArtifactsError');\n  // istanbul ignore if\n  if (existingError) {\n    logger.debug('Aborting Bundler artifacts due to previous failed attempt');\n    throw new Error(existingError);\n  }\n  const lockFileName = await getLockFilePath(packageFileName);\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('No Gemfile.lock found');\n    return null;\n  }\n\n  const updatedDepNames: string[] = updatedDeps\n    .map(({ depName }) => depName)\n    .filter(isNonEmptyStringAndNotWhitespace);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    const commands: string[] = [];\n\n    if (config.isLockFileMaintenance) {\n      commands.push('bundler lock --update');\n    } else {\n      const bundlerUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('bundler');\n      if (bundlerUpgraded) {\n        commands.push('bundler lock --update --bundler');\n      }\n\n      const updateTypes = {\n        patch: '--patch ',\n        minor: '--minor ',\n        major: '',\n      };\n      for (const [updateType, updateArg] of Object.entries(updateTypes)) {\n        const deps = updatedDeps\n          .filter((dep) => (dep.updateType ?? 'major') === updateType)\n          .map((dep) => dep.depName)\n          .filter(isString)\n          .filter((dep) => dep !== 'ruby' && dep !== 'bundler');\n        let additionalArgs = '';\n        if (config.postUpdateOptions?.includes('bundlerConservative')) {\n          additionalArgs = '--conservative ';\n        }\n        if (deps.length) {\n          const cmd = `bundler lock ${updateArg}${additionalArgs}--update ${deps\n            .map(quote)\n            .join(' ')}`;\n          commands.push(cmd);\n        }\n      }\n\n      const rubyUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('ruby');\n      if (rubyUpgraded) {\n        commands.push('bundler lock');\n      }\n    }\n\n    const bundlerHostRules = findAllAuthenticatable({\n      hostType: 'rubygems',\n    });\n\n    const bundlerHostRulesVariables = bundlerHostRules.reduce(\n      (variables, hostRule) => ({\n        ...variables,\n        ...buildBundleHostVariable(hostRule),\n      }),\n      {} as Record<string, string>,\n    );\n\n    const bundler = getBundlerConstraint(\n      updateArtifact,\n      existingLockFileContent,\n    );\n    const preCommands = ['ruby --version'];\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv: {\n        ...bundlerHostRulesVariables,\n        GEM_HOME: await ensureCacheDir('bundler'),\n      },\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'ruby',\n          constraint: await getRubyConstraint(updateArtifact),\n        },\n        {\n          toolName: 'bundler',\n          constraint: bundler,\n        },\n      ],\n      preCommands,\n    };\n    await exec(commands, execOptions);\n\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated Gemfile.lock');\n    const lockFileContent = await readLocalFile(lockFileName);\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: lockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    const output = `${String(err.stdout)}\\n${String(err.stderr)}`;\n    if (\n      err.message.includes('fatal: Could not parse object') ||\n      output.includes('but that version could not be found')\n    ) {\n      return [\n        {\n          artifactError: {\n            fileName: lockFileName,\n            stderr: output,\n          },\n        },\n      ];\n    }\n    if (\n      err.stdout?.includes('Please supply credentials for this source') ||\n      err.stderr?.includes('Authentication is required') ||\n      err.stderr?.includes(\n        'Please make sure you have the correct access rights',\n      )\n    ) {\n      logger.debug(\n        { err },\n        'Gemfile.lock update failed due to missing credentials - skipping branch',\n      );\n      // Do not generate these PRs because we don't yet support Bundler authentication\n      memCache.set('bundlerArtifactsError', BUNDLER_INVALID_CREDENTIALS);\n      throw new Error(BUNDLER_INVALID_CREDENTIALS);\n    }\n    const resolveMatches: string[] = getResolvedPackages(output).filter(\n      (depName) => !updatedDepNames.includes(depName),\n    );\n    if (\n      recursionLimit > 0 &&\n      resolveMatches.length &&\n      !config.isLockFileMaintenance\n    ) {\n      logger.debug(\n        { resolveMatches, updatedDeps },\n        'Found new resolve matches - reattempting recursively',\n      );\n      const newUpdatedDeps = [\n        ...new Set([\n          ...updatedDeps,\n          ...resolveMatches.map((match) => ({ depName: match })),\n        ]),\n      ];\n      return updateArtifacts(\n        {\n          packageFileName,\n          updatedDeps: newUpdatedDeps,\n          newPackageFileContent,\n          config,\n        },\n        recursionLimit - 1,\n      );\n    }\n\n    logger.info({ err }, 'Gemfile.lock update failed due to an unknown reason');\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${String(err.stdout)}\\n${String(err.stderr)}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,2BAA2B;AAEjC,SAAS,wBAAwB,UAA4C;;CAE3E,IAAI,CAAC,SAAS,cACZ,OAAO,CAAC;CAUV,OAAO,GARS,yBAAyB,OACvC,SAAS,aACN,YAAY,CAAC,CACb,MAAM,GAAG,CAAC,CACV,KAAK,IAAI,CAAC,CACV,MAAM,GAAG,CAAC,CACV,KAAK,KAAK,CAGN,IAAI,GAAG,6BAA6B,QAAQ,IACrD;AACF;AAEA,MAAM,mBAAmB,MACvB,iDACF;AAEA,SAAS,oBAAoB,OAAyB;CACpD,MAAM,QAAQ,MAAM,MAAM,YAAY;CACtC,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,qBAAqB,KAAK,MAAM,gBAAgB,CAAC,EAAE;EACzD,IAAI,oBAAoB;GACtB,MAAM,EAAE,QAAQ;GAChB,OAAO,KAAK,GAAG;EACjB;CACF;CAEA,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,eAAsB,gBACpB,gBACA,iBAAiB,IACwB;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,2BAA2B,gBAAgB,EAAE;CAC1D,MAAM,gBAAgBA,IAAqB,uBAAuB;;CAElE,IAAI,eAAe;EACjB,OAAO,MAAM,2DAA2D;EACxE,MAAM,IAAI,MAAM,aAAa;CAC/B;CACA,MAAM,eAAe,MAAM,gBAAgB,eAAe;CAC1D,MAAM,0BAA0B,MAAM,cAAc,cAAc,MAAM;CACxE,IAAI,CAAC,yBAAyB;EAC5B,OAAO,MAAM,uBAAuB;EACpC,OAAO;CACT;CAEA,MAAM,kBAA4B,YAC/B,KAAK,EAAE,cAAc,OAAO,CAAC,CAC7B,OAAO,gCAAgC;CAE1C,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,MAAM,WAAqB,CAAC;EAE5B,IAAI,OAAO,uBACT,SAAS,KAAK,uBAAuB;OAChC;GAIL,IAHwB,YACrB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,SACM,GAChB,SAAS,KAAK,iCAAiC;GAQjD,KAAK,MAAM,CAAC,YAAY,cAAc,OAAO,QAAQ;IAJnD,OAAO;IACP,OAAO;IACP,OAAO;GAEsD,CAAC,GAAG;IACjE,MAAM,OAAO,YACV,QAAQ,SAAS,IAAI,cAAc,aAAa,UAAU,CAAC,CAC3D,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,OAAO,QAAQ,CAAC,CAChB,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;IACtD,IAAI,iBAAiB;IACrB,IAAI,OAAO,mBAAmB,SAAS,qBAAqB,GAC1D,iBAAiB;IAEnB,IAAI,KAAK,QAAQ;KACf,MAAM,MAAM,gBAAgB,YAAY,eAAe,WAAW,KAC/D,IAAI,KAAK,CAAC,CACV,KAAK,GAAG;KACX,SAAS,KAAK,GAAG;IACnB;GACF;GAKA,IAHqB,YAClB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,MACG,GACb,SAAS,KAAK,cAAc;EAEhC;EAMA,MAAM,4BAJmB,uBAAuB,EAC9C,UAAU,WACZ,CAEiD,CAAC,CAAC,QAChD,WAAW,cAAc;GACxB,GAAG;GACH,GAAG,wBAAwB,QAAQ;EACrC,IACA,CAAC,CACH;EAEA,MAAM,UAAU,qBACd,gBACA,uBACF;EACA,MAAM,cAAc,CAAC,gBAAgB;EAErC,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,GAAG;IACH,UAAU,MAAM,eAAe,SAAS;GAC1C;GACA,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,kBAAkB,cAAc;GACpD,GACA;IACE,UAAU;IACV,YAAY;GACd,CACF;GACA;EACF;EACA,MAAM,KAAK,UAAU,WAAW;EAGhC,IAAI,EAAC,MADgB,cAAc,EAAA,CACvB,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,gCAAgC;EAE7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MANc,cAAc,YAAY;EAOpD,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EAC1D,IACE,IAAI,QAAQ,SAAS,+BAA+B,KACpD,OAAO,SAAS,qCAAqC,GAErD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ;EACV,EACF,CACF;EAEF,IACE,IAAI,QAAQ,SAAS,2CAA2C,KAChE,IAAI,QAAQ,SAAS,4BAA4B,KACjD,IAAI,QAAQ,SACV,qDACF,GACA;GACA,OAAO,MACL,EAAE,IAAI,GACN,yEACF;GAEA,IAAa,yBAAyB,2BAA2B;GACjE,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,MAAM,iBAA2B,oBAAoB,MAAM,CAAC,CAAC,QAC1D,YAAY,CAAC,gBAAgB,SAAS,OAAO,CAChD;EACA,IACE,iBAAiB,KACjB,eAAe,UACf,CAAC,OAAO,uBACR;GACA,OAAO,MACL;IAAE;IAAgB;GAAY,GAC9B,sDACF;GAOA,OAAO,gBACL;IACE;IACA,aAAa,CARf,mBAAG,IAAI,IAAI,CACT,GAAG,aACH,GAAG,eAAe,KAAK,WAAW,EAAE,SAAS,MAAM,EAAE,CACvD,CAAC,CAK2B;IAC1B;IACA;GACF,GACA,iBAAiB,CACnB;EACF;EAEA,OAAO,KAAK,EAAE,IAAI,GAAG,qDAAqD;EAC1E,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EACrD,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":["memCache.get"],"sources":["../../../../lib/modules/manager/bundler/artifacts.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport {\n  BUNDLER_INVALID_CREDENTIALS,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { HostRule } from '../../../types/index.ts';\nimport * as memCache from '../../../util/cache/memory/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  ensureCacheDir,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport {\n  getBundlerConstraint,\n  getLockFilePath,\n  getRubyConstraint,\n} from './common.ts';\nimport {\n  findAllAuthenticatable,\n  getAuthenticationHeaderValue,\n} from './host-rules.ts';\n\nconst hostConfigVariablePrefix = 'BUNDLE_';\n\nfunction buildBundleHostVariable(hostRule: HostRule): Record<string, string> {\n  // istanbul ignore if: doesn't happen in practice\n  if (!hostRule.resolvedHost) {\n    return {};\n  }\n  const varName = hostConfigVariablePrefix.concat(\n    hostRule.resolvedHost\n      .toUpperCase()\n      .split('.')\n      .join('__')\n      .split('-')\n      .join('___'),\n  );\n  return {\n    [varName]: `${getAuthenticationHeaderValue(hostRule)}`,\n  };\n}\n\nconst resolvedPkgRegex = regEx(\n  /(?<pkg>\\S+)(?:\\s*\\([^)]+\\)\\s*)? was resolved to/,\n);\n\nfunction getResolvedPackages(input: string): string[] {\n  const lines = input.split(newlineRegex);\n  const result: string[] = [];\n  for (const line of lines) {\n    const resolveMatchGroups = line.match(resolvedPkgRegex)?.groups;\n    if (resolveMatchGroups) {\n      const { pkg } = resolveMatchGroups;\n      result.push(pkg);\n    }\n  }\n\n  return [...new Set(result)];\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bundler.updateArtifacts(${packageFileName})`);\n  const existingError = memCache.get<string>('bundlerArtifactsError');\n  // istanbul ignore if\n  if (existingError) {\n    logger.debug('Aborting Bundler artifacts due to previous failed attempt');\n    throw new Error(existingError);\n  }\n  const lockFileName = await getLockFilePath(packageFileName);\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('No Gemfile.lock found');\n    return null;\n  }\n\n  const updatedDepNames: string[] = updatedDeps\n    .map(({ depName }) => depName)\n    .filter(isNonEmptyStringAndNotWhitespace);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    const commands: string[] = [];\n\n    if (config.isLockFileMaintenance) {\n      commands.push('bundler lock --update');\n    } else {\n      const bundlerUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('bundler');\n      if (bundlerUpgraded) {\n        commands.push('bundler lock --update --bundler');\n      }\n\n      const updateTypes = {\n        patch: '--patch ',\n        minor: '--minor ',\n        major: '',\n      };\n      for (const [updateType, updateArg] of Object.entries(updateTypes)) {\n        const deps = updatedDeps\n          .filter((dep) => (dep.updateType ?? 'major') === updateType)\n          .map((dep) => dep.depName)\n          .filter(isString)\n          .filter((dep) => dep !== 'ruby' && dep !== 'bundler');\n        let additionalArgs = '';\n        if (config.postUpdateOptions?.includes('bundlerConservative')) {\n          additionalArgs = '--conservative ';\n        }\n        if (deps.length) {\n          const cmd = `bundler lock ${updateArg}${additionalArgs}--update ${deps\n            .map(quote)\n            .join(' ')}`;\n          commands.push(cmd);\n        }\n      }\n\n      const rubyUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('ruby');\n      if (rubyUpgraded) {\n        commands.push('bundler lock');\n      }\n    }\n\n    const bundlerHostRules = findAllAuthenticatable({\n      hostType: 'rubygems',\n    });\n\n    const bundlerHostRulesVariables = bundlerHostRules.reduce(\n      (variables, hostRule) => ({\n        ...variables,\n        ...buildBundleHostVariable(hostRule),\n      }),\n      {} as Record<string, string>,\n    );\n\n    const bundler = await getBundlerConstraint(\n      updateArtifact,\n      existingLockFileContent,\n    );\n    const preCommands = ['ruby --version'];\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv: {\n        ...bundlerHostRulesVariables,\n        GEM_HOME: await ensureCacheDir('bundler'),\n      },\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'ruby',\n          constraint: await getRubyConstraint(updateArtifact),\n        },\n        {\n          toolName: 'bundler',\n          constraint: bundler,\n        },\n      ],\n      preCommands,\n    };\n    await exec(commands, execOptions);\n\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated Gemfile.lock');\n    const lockFileContent = await readLocalFile(lockFileName);\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: lockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    const output = `${String(err.stdout)}\\n${String(err.stderr)}`;\n    if (\n      err.message.includes('fatal: Could not parse object') ||\n      output.includes('but that version could not be found')\n    ) {\n      return [\n        {\n          artifactError: {\n            fileName: lockFileName,\n            stderr: output,\n          },\n        },\n      ];\n    }\n    if (\n      err.stdout?.includes('Please supply credentials for this source') ||\n      err.stderr?.includes('Authentication is required') ||\n      err.stderr?.includes(\n        'Please make sure you have the correct access rights',\n      )\n    ) {\n      logger.debug(\n        { err },\n        'Gemfile.lock update failed due to missing credentials - skipping branch',\n      );\n      // Do not generate these PRs because we don't yet support Bundler authentication\n      memCache.set('bundlerArtifactsError', BUNDLER_INVALID_CREDENTIALS);\n      throw new Error(BUNDLER_INVALID_CREDENTIALS);\n    }\n    const resolveMatches: string[] = getResolvedPackages(output).filter(\n      (depName) => !updatedDepNames.includes(depName),\n    );\n    if (\n      recursionLimit > 0 &&\n      resolveMatches.length &&\n      !config.isLockFileMaintenance\n    ) {\n      logger.debug(\n        { resolveMatches, updatedDeps },\n        'Found new resolve matches - reattempting recursively',\n      );\n      const newUpdatedDeps = [\n        ...new Set([\n          ...updatedDeps,\n          ...resolveMatches.map((match) => ({ depName: match })),\n        ]),\n      ];\n      return updateArtifacts(\n        {\n          packageFileName,\n          updatedDeps: newUpdatedDeps,\n          newPackageFileContent,\n          config,\n        },\n        recursionLimit - 1,\n      );\n    }\n\n    logger.info({ err }, 'Gemfile.lock update failed due to an unknown reason');\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${String(err.stdout)}\\n${String(err.stderr)}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,2BAA2B;AAEjC,SAAS,wBAAwB,UAA4C;;CAE3E,IAAI,CAAC,SAAS,cACZ,OAAO,CAAC;CAUV,OAAO,GARS,yBAAyB,OACvC,SAAS,aACN,YAAY,CAAC,CACb,MAAM,GAAG,CAAC,CACV,KAAK,IAAI,CAAC,CACV,MAAM,GAAG,CAAC,CACV,KAAK,KAAK,CAGN,IAAI,GAAG,6BAA6B,QAAQ,IACrD;AACF;AAEA,MAAM,mBAAmB,MACvB,iDACF;AAEA,SAAS,oBAAoB,OAAyB;CACpD,MAAM,QAAQ,MAAM,MAAM,YAAY;CACtC,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,qBAAqB,KAAK,MAAM,gBAAgB,CAAC,EAAE;EACzD,IAAI,oBAAoB;GACtB,MAAM,EAAE,QAAQ;GAChB,OAAO,KAAK,GAAG;EACjB;CACF;CAEA,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,eAAsB,gBACpB,gBACA,iBAAiB,IACwB;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,2BAA2B,gBAAgB,EAAE;CAC1D,MAAM,gBAAgBA,IAAqB,uBAAuB;;CAElE,IAAI,eAAe;EACjB,OAAO,MAAM,2DAA2D;EACxE,MAAM,IAAI,MAAM,aAAa;CAC/B;CACA,MAAM,eAAe,MAAM,gBAAgB,eAAe;CAC1D,MAAM,0BAA0B,MAAM,cAAc,cAAc,MAAM;CACxE,IAAI,CAAC,yBAAyB;EAC5B,OAAO,MAAM,uBAAuB;EACpC,OAAO;CACT;CAEA,MAAM,kBAA4B,YAC/B,KAAK,EAAE,cAAc,OAAO,CAAC,CAC7B,OAAO,gCAAgC;CAE1C,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,MAAM,WAAqB,CAAC;EAE5B,IAAI,OAAO,uBACT,SAAS,KAAK,uBAAuB;OAChC;GAIL,IAHwB,YACrB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,SACM,GAChB,SAAS,KAAK,iCAAiC;GAQjD,KAAK,MAAM,CAAC,YAAY,cAAc,OAAO,QAAQ;IAJnD,OAAO;IACP,OAAO;IACP,OAAO;GAEsD,CAAC,GAAG;IACjE,MAAM,OAAO,YACV,QAAQ,SAAS,IAAI,cAAc,aAAa,UAAU,CAAC,CAC3D,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,OAAO,QAAQ,CAAC,CAChB,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;IACtD,IAAI,iBAAiB;IACrB,IAAI,OAAO,mBAAmB,SAAS,qBAAqB,GAC1D,iBAAiB;IAEnB,IAAI,KAAK,QAAQ;KACf,MAAM,MAAM,gBAAgB,YAAY,eAAe,WAAW,KAC/D,IAAI,KAAK,CAAC,CACV,KAAK,GAAG;KACX,SAAS,KAAK,GAAG;IACnB;GACF;GAKA,IAHqB,YAClB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,MACG,GACb,SAAS,KAAK,cAAc;EAEhC;EAMA,MAAM,4BAJmB,uBAAuB,EAC9C,UAAU,WACZ,CAEiD,CAAC,CAAC,QAChD,WAAW,cAAc;GACxB,GAAG;GACH,GAAG,wBAAwB,QAAQ;EACrC,IACA,CAAC,CACH;EAEA,MAAM,UAAU,MAAM,qBACpB,gBACA,uBACF;EACA,MAAM,cAAc,CAAC,gBAAgB;EAErC,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,GAAG;IACH,UAAU,MAAM,eAAe,SAAS;GAC1C;GACA,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,kBAAkB,cAAc;GACpD,GACA;IACE,UAAU;IACV,YAAY;GACd,CACF;GACA;EACF;EACA,MAAM,KAAK,UAAU,WAAW;EAGhC,IAAI,EAAC,MADgB,cAAc,EAAA,CACvB,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,gCAAgC;EAE7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MANc,cAAc,YAAY;EAOpD,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EAC1D,IACE,IAAI,QAAQ,SAAS,+BAA+B,KACpD,OAAO,SAAS,qCAAqC,GAErD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ;EACV,EACF,CACF;EAEF,IACE,IAAI,QAAQ,SAAS,2CAA2C,KAChE,IAAI,QAAQ,SAAS,4BAA4B,KACjD,IAAI,QAAQ,SACV,qDACF,GACA;GACA,OAAO,MACL,EAAE,IAAI,GACN,yEACF;GAEA,IAAa,yBAAyB,2BAA2B;GACjE,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,MAAM,iBAA2B,oBAAoB,MAAM,CAAC,CAAC,QAC1D,YAAY,CAAC,gBAAgB,SAAS,OAAO,CAChD;EACA,IACE,iBAAiB,KACjB,eAAe,UACf,CAAC,OAAO,uBACR;GACA,OAAO,MACL;IAAE;IAAgB;GAAY,GAC9B,sDACF;GAOA,OAAO,gBACL;IACE;IACA,aAAa,CARf,mBAAG,IAAI,IAAI,CACT,GAAG,aACH,GAAG,eAAe,KAAK,WAAW,EAAE,SAAS,MAAM,EAAE,CACvD,CAAC,CAK2B;IAC1B;IACA;GACF,GACA,iBAAiB,CACnB;EACF;EAEA,OAAO,KAAK,EAAE,IAAI,GAAG,qDAAqD;EAC1E,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EACrD,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/bundler/common.js

@@ -1,6 +1,7 @@
 import { regEx } from "../../../util/regex.js";
 import { logger } from "../../../logger/index.js";
 import { getSiblingFileName, localPathExists, readLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 //#region lib/modules/manager/bundler/common.ts
 const delimiters = ["\"", "'"];
 function extractRubyVersion(txt) {
@@ -9,14 +10,7 @@ function extractRubyVersion(txt) {
 	const quotedVersion = rubyMatch.groups.version;
 	return quotedVersion.substring(1, quotedVersion.length - 1);
 }
-async function getRubyConstraint(updateArtifact) {
-	const { packageFileName, config, newPackageFileContent } = updateArtifact;
-	const { constraints = {} } = config;
-	const { ruby } = constraints;
-	if (ruby) {
-		logger.debug("Using ruby constraint from config");
-		return ruby;
-	}
+async function getRubyConstraintFromFiles(packageFileName, newPackageFileContent) {
 	const rubyMatch = extractRubyVersion(newPackageFileContent);
 	if (rubyMatch) {
 		logger.debug("Using ruby version from gemfile");
@@ -39,14 +33,11 @@ async function getRubyConstraint(updateArtifact) {
 	}
 	return null;
 }
-function getBundlerConstraint(updateArtifact, existingLockFileContent) {
-	const { config } = updateArtifact;
-	const { constraints = {} } = config;
-	const { bundler } = constraints;
-	if (bundler) {
-		logger.debug("Using bundler constraint from config");
-		return bundler;
-	}
+async function getRubyConstraint(updateArtifact) {
+	const { packageFileName, config, newPackageFileContent } = updateArtifact;
+	return await resolveToolConstraint(config, "ruby", () => getRubyConstraintFromFiles(packageFileName, newPackageFileContent));
+}
+function getBundlerConstraintFromLockFile(existingLockFileContent) {
 	const bundledWith = regEx(/\nBUNDLED WITH\n\s+(?<version>.*?)(?:\n|$)/).exec(existingLockFileContent);
 	if (bundledWith) {
 		logger.debug("Using bundler version specified in lockfile");
@@ -54,6 +45,10 @@ function getBundlerConstraint(updateArtifact, existingLockFileContent) {
 	}
 	return null;
 }
+async function getBundlerConstraint(updateArtifact, existingLockFileContent) {
+	const { config } = updateArtifact;
+	return await resolveToolConstraint(config, "bundler", () => getBundlerConstraintFromLockFile(existingLockFileContent));
+}
 async function getLockFilePath(packageFilePath) {
 	const lockFilePath = await localPathExists(`${packageFilePath}.lock`) ? `${packageFilePath}.lock` : `Gemfile.lock`;
 	logger.debug(`Lockfile for ${packageFilePath} found in ${lockFilePath}`);

package/dist/modules/manager/bundler/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":[],"sources":["../../../../lib/modules/manager/bundler/common.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact } from '../types.ts';\n\nexport const delimiters = ['\"', \"'\"];\n\nexport function extractRubyVersion(txt: string): string | null {\n  const rubyMatch = regEx(/^ruby\\s+(?<version>\"[^\"]+\"|'[^']+')\\s*$/gm).exec(\n    txt,\n  );\n  if (!rubyMatch?.groups) {\n    return null;\n  }\n  const quotedVersion = rubyMatch.groups.version;\n  return quotedVersion.substring(1, quotedVersion.length - 1);\n}\n\nexport async function getRubyConstraint(\n  updateArtifact: UpdateArtifact,\n): Promise<string | null> {\n  const { packageFileName, config, newPackageFileContent } = updateArtifact;\n  const { constraints = {} } = config;\n  const { ruby } = constraints;\n\n  if (ruby) {\n    logger.debug('Using ruby constraint from config');\n    return ruby;\n  }\n  const rubyMatch = extractRubyVersion(newPackageFileContent);\n  if (rubyMatch) {\n    logger.debug('Using ruby version from gemfile');\n    return rubyMatch;\n  }\n  for (const file of ['.ruby-version', '.tool-versions']) {\n    const rubyVersion = (\n      await readLocalFile(getSiblingFileName(packageFileName, file), 'utf8')\n    )?.match(regEx(/^(?:ruby(?:-|\\s+))?(?<version>\\d[\\d.]*)/m))?.groups\n      ?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in ${file}`);\n      return rubyVersion;\n    }\n  }\n  const lockFile = await getLockFilePath(packageFileName);\n  if (lockFile) {\n    const rubyVersion = (await readLocalFile(lockFile, 'utf8'))?.match(\n      regEx(/^ {3}ruby (?<version>\\d[\\d.]*)(?:[a-z]|\\s|$)/m),\n    )?.groups?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in lock file`);\n      return rubyVersion;\n    }\n  }\n\n  return null;\n}\n\nexport function getBundlerConstraint(\n  updateArtifact: Pick<UpdateArtifact, 'config'>,\n  existingLockFileContent: string,\n): string | null {\n  const { config } = updateArtifact;\n  const { constraints = {} } = config;\n  const { bundler } = constraints;\n\n  if (bundler) {\n    logger.debug('Using bundler constraint from config');\n    return bundler;\n  }\n  const bundledWith = regEx(/\\nBUNDLED WITH\\n\\s+(?<version>.*?)(?:\\n|$)/).exec(\n    existingLockFileContent,\n  );\n  if (bundledWith) {\n    logger.debug('Using bundler version specified in lockfile');\n    return bundledWith.groups!.version;\n  }\n\n  return null;\n}\n\nexport async function getLockFilePath(\n  packageFilePath: string,\n): Promise<string> {\n  const lockFilePath = (await localPathExists(`${packageFilePath}.lock`))\n    ? `${packageFilePath}.lock`\n    : `Gemfile.lock`;\n  logger.debug(`Lockfile for ${packageFilePath} found in ${lockFilePath}`);\n  return lockFilePath;\n}\n"],"mappings":";;;;AASA,MAAa,aAAa,CAAC,MAAK,GAAG;AAEnC,SAAgB,mBAAmB,KAA4B;CAC7D,MAAM,YAAY,MAAM,2CAA2C,CAAC,CAAC,KACnE,GACF;CACA,IAAI,CAAC,WAAW,QACd,OAAO;CAET,MAAM,gBAAgB,UAAU,OAAO;CACvC,OAAO,cAAc,UAAU,GAAG,cAAc,SAAS,CAAC;AAC5D;AAEA,eAAsB,kBACpB,gBACwB;CACxB,MAAM,EAAE,iBAAiB,QAAQ,0BAA0B;CAC3D,MAAM,EAAE,cAAc,CAAC,MAAM;CAC7B,MAAM,EAAE,SAAS;CAEjB,IAAI,MAAM;EACR,OAAO,MAAM,mCAAmC;EAChD,OAAO;CACT;CACA,MAAM,YAAY,mBAAmB,qBAAqB;CAC1D,IAAI,WAAW;EACb,OAAO,MAAM,iCAAiC;EAC9C,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,CAAC,iBAAiB,gBAAgB,GAAG;EACtD,MAAM,eACJ,MAAM,cAAc,mBAAmB,iBAAiB,IAAI,GAAG,MAAM,EAAA,EACpE,MAAM,MAAM,0CAA0C,CAAC,CAAC,EAAE,QACzD;EACJ,IAAI,aAAa;GACf,OAAO,MAAM,mCAAmC,MAAM;GACtD,OAAO;EACT;CACF;CACA,MAAM,WAAW,MAAM,gBAAgB,eAAe;CACtD,IAAI,UAAU;EACZ,MAAM,eAAe,MAAM,cAAc,UAAU,MAAM,EAAA,EAAI,MAC3D,MAAM,+CAA+C,CACvD,CAAC,EAAE,QAAQ;EACX,IAAI,aAAa;GACf,OAAO,MAAM,2CAA2C;GACxD,OAAO;EACT;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,qBACd,gBACA,yBACe;CACf,MAAM,EAAE,WAAW;CACnB,MAAM,EAAE,cAAc,CAAC,MAAM;CAC7B,MAAM,EAAE,YAAY;CAEpB,IAAI,SAAS;EACX,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CACA,MAAM,cAAc,MAAM,4CAA4C,CAAC,CAAC,KACtE,uBACF;CACA,IAAI,aAAa;EACf,OAAO,MAAM,6CAA6C;EAC1D,OAAO,YAAY,OAAQ;CAC7B;CAEA,OAAO;AACT;AAEA,eAAsB,gBACpB,iBACiB;CACjB,MAAM,eAAgB,MAAM,gBAAgB,GAAG,gBAAgB,MAAM,IACjE,GAAG,gBAAgB,SACnB;CACJ,OAAO,MAAM,gBAAgB,gBAAgB,YAAY,cAAc;CACvE,OAAO;AACT"}
+{"version":3,"file":"common.js","names":[],"sources":["../../../../lib/modules/manager/bundler/common.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport const delimiters = ['\"', \"'\"];\n\nexport function extractRubyVersion(txt: string): string | null {\n  const rubyMatch = regEx(/^ruby\\s+(?<version>\"[^\"]+\"|'[^']+')\\s*$/gm).exec(\n    txt,\n  );\n  if (!rubyMatch?.groups) {\n    return null;\n  }\n  const quotedVersion = rubyMatch.groups.version;\n  return quotedVersion.substring(1, quotedVersion.length - 1);\n}\n\nasync function getRubyConstraintFromFiles(\n  packageFileName: string,\n  newPackageFileContent: string,\n): Promise<string | null> {\n  const rubyMatch = extractRubyVersion(newPackageFileContent);\n  if (rubyMatch) {\n    logger.debug('Using ruby version from gemfile');\n    return rubyMatch;\n  }\n  for (const file of ['.ruby-version', '.tool-versions']) {\n    const rubyVersion = (\n      await readLocalFile(getSiblingFileName(packageFileName, file), 'utf8')\n    )?.match(regEx(/^(?:ruby(?:-|\\s+))?(?<version>\\d[\\d.]*)/m))?.groups\n      ?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in ${file}`);\n      return rubyVersion;\n    }\n  }\n  const lockFile = await getLockFilePath(packageFileName);\n  if (lockFile) {\n    const rubyVersion = (await readLocalFile(lockFile, 'utf8'))?.match(\n      regEx(/^ {3}ruby (?<version>\\d[\\d.]*)(?:[a-z]|\\s|$)/m),\n    )?.groups?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in lock file`);\n      return rubyVersion;\n    }\n  }\n\n  return null;\n}\n\nexport async function getRubyConstraint(\n  updateArtifact: UpdateArtifact,\n): Promise<string | undefined> {\n  const { packageFileName, config, newPackageFileContent } = updateArtifact;\n  return await resolveToolConstraint(config, 'ruby', () =>\n    getRubyConstraintFromFiles(packageFileName, newPackageFileContent),\n  );\n}\n\nfunction getBundlerConstraintFromLockFile(\n  existingLockFileContent: string,\n): string | null {\n  const bundledWith = regEx(/\\nBUNDLED WITH\\n\\s+(?<version>.*?)(?:\\n|$)/).exec(\n    existingLockFileContent,\n  );\n  if (bundledWith) {\n    logger.debug('Using bundler version specified in lockfile');\n    return bundledWith.groups!.version;\n  }\n\n  return null;\n}\n\nexport async function getBundlerConstraint(\n  updateArtifact: Pick<UpdateArtifact, 'config'>,\n  existingLockFileContent: string,\n): Promise<string | undefined> {\n  const { config } = updateArtifact;\n  return await resolveToolConstraint(config, 'bundler', () =>\n    getBundlerConstraintFromLockFile(existingLockFileContent),\n  );\n}\n\nexport async function getLockFilePath(\n  packageFilePath: string,\n): Promise<string> {\n  const lockFilePath = (await localPathExists(`${packageFilePath}.lock`))\n    ? `${packageFilePath}.lock`\n    : `Gemfile.lock`;\n  logger.debug(`Lockfile for ${packageFilePath} found in ${lockFilePath}`);\n  return lockFilePath;\n}\n"],"mappings":";;;;;AAUA,MAAa,aAAa,CAAC,MAAK,GAAG;AAEnC,SAAgB,mBAAmB,KAA4B;CAC7D,MAAM,YAAY,MAAM,2CAA2C,CAAC,CAAC,KACnE,GACF;CACA,IAAI,CAAC,WAAW,QACd,OAAO;CAET,MAAM,gBAAgB,UAAU,OAAO;CACvC,OAAO,cAAc,UAAU,GAAG,cAAc,SAAS,CAAC;AAC5D;AAEA,eAAe,2BACb,iBACA,uBACwB;CACxB,MAAM,YAAY,mBAAmB,qBAAqB;CAC1D,IAAI,WAAW;EACb,OAAO,MAAM,iCAAiC;EAC9C,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,CAAC,iBAAiB,gBAAgB,GAAG;EACtD,MAAM,eACJ,MAAM,cAAc,mBAAmB,iBAAiB,IAAI,GAAG,MAAM,EAAA,EACpE,MAAM,MAAM,0CAA0C,CAAC,CAAC,EAAE,QACzD;EACJ,IAAI,aAAa;GACf,OAAO,MAAM,mCAAmC,MAAM;GACtD,OAAO;EACT;CACF;CACA,MAAM,WAAW,MAAM,gBAAgB,eAAe;CACtD,IAAI,UAAU;EACZ,MAAM,eAAe,MAAM,cAAc,UAAU,MAAM,EAAA,EAAI,MAC3D,MAAM,+CAA+C,CACvD,CAAC,EAAE,QAAQ;EACX,IAAI,aAAa;GACf,OAAO,MAAM,2CAA2C;GACxD,OAAO;EACT;CACF;CAEA,OAAO;AACT;AAEA,eAAsB,kBACpB,gBAC6B;CAC7B,MAAM,EAAE,iBAAiB,QAAQ,0BAA0B;CAC3D,OAAO,MAAM,sBAAsB,QAAQ,cACzC,2BAA2B,iBAAiB,qBAAqB,CACnE;AACF;AAEA,SAAS,iCACP,yBACe;CACf,MAAM,cAAc,MAAM,4CAA4C,CAAC,CAAC,KACtE,uBACF;CACA,IAAI,aAAa;EACf,OAAO,MAAM,6CAA6C;EAC1D,OAAO,YAAY,OAAQ;CAC7B;CAEA,OAAO;AACT;AAEA,eAAsB,qBACpB,gBACA,yBAC6B;CAC7B,MAAM,EAAE,WAAW;CACnB,OAAO,MAAM,sBAAsB,QAAQ,iBACzC,iCAAiC,uBAAuB,CAC1D;AACF;AAEA,eAAsB,gBACpB,iBACiB;CACjB,MAAM,eAAgB,MAAM,gBAAgB,GAAG,gBAAgB,MAAM,IACjE,GAAG,gBAAgB,SACnB;CACJ,OAAO,MAAM,gBAAgB,gBAAgB,YAAY,cAAc;CACvE,OAAO;AACT"}

package/dist/modules/manager/cargo/artifacts.js

@@ -4,6 +4,7 @@ import { coerceArray } from "../../../util/array.js";
 import { logger } from "../../../logger/index.js";
 import { findLocalSiblingOrParent, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { CrateDatasource } from "../../datasource/crate/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { withGitEnvironment } from "../../../util/git/exec.js";
 import { extractLockFileContentVersions } from "./locked-version.js";
 import { quote } from "shlex";
@@ -55,17 +56,18 @@ async function updateArtifactsImpl({ packageFileName, updatedDeps, newPackageFil
 			contents: existingLockFileContent
 		} }];
 	}
+	const rustConstraint = await resolveToolConstraint(config, "rust");
 	try {
 		await writeLocalFile(packageFileName, newPackageFileContent);
 		logger.debug(`Updating ${lockFileName}`);
-		if (isLockFileMaintenance) await cargoUpdate(packageFileName, true, config.constraints?.rust);
+		if (isLockFileMaintenance) await cargoUpdate(packageFileName, true, rustConstraint);
 		else {
 			const hasNonCrateDep = updatedDeps.some((dep) => dep.datasource !== CrateDatasource.id);
 			const crateDepWithoutLockedVersion = updatedDeps.find((dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id);
 			if (hasNonCrateDep || crateDepWithoutLockedVersion) {
 				if (crateDepWithoutLockedVersion) logger.warn({ dependency: crateDepWithoutLockedVersion.depName }, "Missing locked version for dependency");
-				await cargoUpdate(packageFileName, false, config.constraints?.rust);
-			} else await cargoUpdatePrecise(packageFileName, updatedDeps, config.constraints?.rust);
+				await cargoUpdate(packageFileName, false, rustConstraint);
+			} else await cargoUpdatePrecise(packageFileName, updatedDeps, rustConstraint);
 		}
 		logger.debug("Returning updated Cargo.lock");
 		const newCargoLockContent = await readLocalFile(lockFileName);

package/dist/modules/manager/cargo/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/cargo/artifacts.ts"],"sourcesContent":["import { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../util/git/exec.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { CrateDatasource } from '../../datasource/crate/index.ts';\nimport type {\n  UpdateArtifact,\n  UpdateArtifactsResult,\n  Upgrade,\n} from '../types.ts';\nimport { extractLockFileContentVersions } from './locked-version.ts';\n\nconst gitExec = withGitEnvironment(['cargo']);\n\nasync function cargoUpdate(\n  manifestPath: string,\n  isLockFileMaintenance: boolean,\n  constraint: string | undefined,\n): Promise<void> {\n  let cmd = `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(\n    manifestPath,\n  )}`;\n  // If we're updating a specific crate, `cargo-update` requires `--workspace`\n  // for more information, see: https://github.com/renovatebot/renovate/issues/12332\n  if (!isLockFileMaintenance) {\n    cmd += ` --workspace`;\n  }\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n  await gitExec(cmd, execOptions);\n}\n\nasync function cargoUpdatePrecise(\n  manifestPath: string,\n  updatedDeps: Upgrade[],\n  constraint: string | undefined,\n): Promise<void> {\n  const cmds = [];\n\n  // First update individual dependencies to their `newVersion`. Necessary when\n  // using the `update-lockfile` rangeStrategy which doesn't touch Cargo.toml.\n  for (const dep of updatedDeps) {\n    // If the range is bumped in Cargo.toml, the old lockedVersion may no longer\n    // exist in Cargo's dependency graph, so let the --workspace update at the\n    // end re-resolve it instead.\n    if (dep.currentValue && dep.newValue && dep.currentValue !== dep.newValue) {\n      continue;\n    }\n\n    cmds.push(\n      `cargo update --config net.git-fetch-with-cli=true` +\n        ` --manifest-path ${quote(manifestPath)}` +\n        ` --package ${quote(`${dep.packageName}@${dep.lockedVersion}`)}` +\n        ` --precise ${quote(dep.newVersion!)}`,\n    );\n  }\n\n  // Then update all dependencies that have been bumped in `Cargo.toml`.\n  cmds.push(\n    `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(manifestPath)} --workspace`,\n  );\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n\n  await gitExec(cmds, execOptions);\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  return await updateArtifactsImpl(updateArtifact);\n}\n\nasync function updateArtifactsImpl(\n  {\n    packageFileName,\n    updatedDeps,\n    newPackageFileContent,\n    config,\n  }: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`cargo.updateArtifacts(${packageFileName})`);\n\n  // For standalone package crates, the `Cargo.lock` will be in the same\n  // directory as `Cargo.toml` (ie. a sibling). For cargo workspaces, it\n  // will be further up.\n  const lockFileName = await findLocalSiblingOrParent(\n    packageFileName,\n    'Cargo.lock',\n  );\n  const existingLockFileContent = lockFileName\n    ? await readLocalFile(lockFileName)\n    : null;\n  if (!existingLockFileContent || !lockFileName) {\n    logger.debug('No Cargo.lock found');\n    return null;\n  }\n\n  const { isLockFileMaintenance } = config;\n  if (!isLockFileMaintenance && !updatedDeps?.length) {\n    logger.debug('No more dependencies to update');\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: existingLockFileContent,\n        },\n      },\n    ];\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    logger.debug(`Updating ${lockFileName}`);\n\n    if (isLockFileMaintenance) {\n      await cargoUpdate(packageFileName, true, config.constraints?.rust);\n    } else {\n      const hasNonCrateDep = updatedDeps.some(\n        (dep) => dep.datasource !== CrateDatasource.id,\n      );\n      const crateDepWithoutLockedVersion = updatedDeps.find(\n        (dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id,\n      );\n      // Non-crate dependencies (like git ones) do not have locked versions.\n      // For crate dependencies, a locked version is expected.\n      // In both situations, perform a regular workspace lockfile update.\n      if (hasNonCrateDep || crateDepWithoutLockedVersion) {\n        if (crateDepWithoutLockedVersion) {\n          // Only warn when a crate dependency has no locked version\n          logger.warn(\n            { dependency: crateDepWithoutLockedVersion.depName },\n            'Missing locked version for dependency',\n          );\n        }\n        await cargoUpdate(packageFileName, false, config.constraints?.rust);\n      } else {\n        // If all dependencies have locked versions then update them precisely.\n        await cargoUpdatePrecise(\n          packageFileName,\n          updatedDeps,\n          config.constraints?.rust,\n        );\n      }\n    }\n\n    logger.debug('Returning updated Cargo.lock');\n    const newCargoLockContent = await readLocalFile(lockFileName);\n    if (existingLockFileContent === newCargoLockContent) {\n      logger.debug('Cargo.lock is unchanged');\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newCargoLockContent,\n        },\n      },\n    ];\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n\n    // Sometimes `cargo update` will fail when a preceding dependency update\n    // causes another dependency to update. In this case we can no longer\n    // reference the dependency by its old version, so we filter it out\n    // and retry recursively.\n    const newCargoLockContent = await readLocalFile(lockFileName, 'utf8');\n    if (\n      recursionLimit > 0 &&\n      newCargoLockContent &&\n      regEx(/error: package ID specification/).test(err.stderr)\n    ) {\n      const versions = extractLockFileContentVersions(newCargoLockContent);\n      const newUpdatedDeps = updatedDeps.filter(\n        (dep) =>\n          !coerceArray(versions?.get(dep.packageName!)).includes(\n            dep.newVersion!,\n          ),\n      );\n\n      if (newUpdatedDeps.length < updatedDeps.length) {\n        logger.debug(\n          'Dependency already up to date - reattempting recursively',\n        );\n        return updateArtifactsImpl(\n          {\n            packageFileName,\n            updatedDeps: newUpdatedDeps,\n            newPackageFileContent,\n            config,\n          },\n          recursionLimit - 1,\n        );\n      }\n    }\n\n    logger.debug({ err }, 'Failed to update Cargo lock file');\n\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;AAoBA,MAAM,UAAU,mBAAmB,CAAC,OAAO,CAAC;AAE5C,eAAe,YACb,cACA,uBACA,YACe;CACf,IAAI,MAAM,qEAAqE,MAC7E,YACF;CAGA,IAAI,CAAC,uBACH,OAAO;CAOT,MAAM,QAAQ,KAAK;EAHjB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAEvB,CAAC;AAChC;AAEA,eAAe,mBACb,cACA,aACA,YACe;CACf,MAAM,OAAO,CAAC;CAId,KAAK,MAAM,OAAO,aAAa;EAI7B,IAAI,IAAI,gBAAgB,IAAI,YAAY,IAAI,iBAAiB,IAAI,UAC/D;EAGF,KAAK,KACH,qEACsB,MAAM,YAAY,EAAA,aACxB,MAAM,GAAG,IAAI,YAAY,GAAG,IAAI,eAAe,EAAA,aAC/C,MAAM,IAAI,UAAW,GACvC;CACF;CAGA,KAAK,KACH,qEAAqE,MAAM,YAAY,EAAE,aAC3F;CAOA,MAAM,QAAQ,MAAM;EAJlB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAGtB,CAAC;AACjC;AAEA,eAAsB,gBACpB,gBACyC;CACzC,OAAO,MAAM,oBAAoB,cAAc;AACjD;AAEA,eAAe,oBACb,EACE,iBACA,aACA,uBACA,UAEF,iBAAiB,IACwB;CACzC,OAAO,MAAM,yBAAyB,gBAAgB,EAAE;CAKxD,MAAM,eAAe,MAAM,yBACzB,iBACA,YACF;CACA,MAAM,0BAA0B,eAC5B,MAAM,cAAc,YAAY,IAChC;CACJ,IAAI,CAAC,2BAA2B,CAAC,cAAc;EAC7C,OAAO,MAAM,qBAAqB;EAClC,OAAO;CACT;CAEA,MAAM,EAAE,0BAA0B;CAClC,IAAI,CAAC,yBAAyB,CAAC,aAAa,QAAQ;EAClD,OAAO,MAAM,gCAAgC;EAC7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,OAAO,MAAM,YAAY,cAAc;EAEvC,IAAI,uBACF,MAAM,YAAY,iBAAiB,MAAM,OAAO,aAAa,IAAI;OAC5D;GACL,MAAM,iBAAiB,YAAY,MAChC,QAAQ,IAAI,eAAe,gBAAgB,EAC9C;GACA,MAAM,+BAA+B,YAAY,MAC9C,QAAQ,CAAC,IAAI,iBAAiB,IAAI,eAAe,gBAAgB,EACpE;GAIA,IAAI,kBAAkB,8BAA8B;IAClD,IAAI,8BAEF,OAAO,KACL,EAAE,YAAY,6BAA6B,QAAQ,GACnD,uCACF;IAEF,MAAM,YAAY,iBAAiB,OAAO,OAAO,aAAa,IAAI;GACpE,OAEE,MAAM,mBACJ,iBACA,aACA,OAAO,aAAa,IACtB;EAEJ;EAEA,OAAO,MAAM,8BAA8B;EAC3C,MAAM,sBAAsB,MAAM,cAAc,YAAY;EAC5D,IAAI,4BAA4B,qBAAqB;GACnD,OAAO,MAAM,yBAAyB;GACtC,OAAO;EACT;EACA,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAOR,MAAM,sBAAsB,MAAM,cAAc,cAAc,MAAM;EACpE,IACE,iBAAiB,KACjB,uBACA,MAAM,iCAAiC,CAAC,CAAC,KAAK,IAAI,MAAM,GACxD;GACA,MAAM,WAAW,+BAA+B,mBAAmB;GACnE,MAAM,iBAAiB,YAAY,QAChC,QACC,CAAC,YAAY,UAAU,IAAI,IAAI,WAAY,CAAC,CAAC,CAAC,SAC5C,IAAI,UACN,CACJ;GAEA,IAAI,eAAe,SAAS,YAAY,QAAQ;IAC9C,OAAO,MACL,0DACF;IACA,OAAO,oBACL;KACE;KACA,aAAa;KACb;KACA;IACF,GACA,iBAAiB,CACnB;GACF;EACF;EAEA,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAExD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/cargo/artifacts.ts"],"sourcesContent":["import { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../util/git/exec.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { CrateDatasource } from '../../datasource/crate/index.ts';\nimport type {\n  UpdateArtifact,\n  UpdateArtifactsResult,\n  Upgrade,\n} from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { extractLockFileContentVersions } from './locked-version.ts';\n\nconst gitExec = withGitEnvironment(['cargo']);\n\nasync function cargoUpdate(\n  manifestPath: string,\n  isLockFileMaintenance: boolean,\n  constraint: string | undefined,\n): Promise<void> {\n  let cmd = `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(\n    manifestPath,\n  )}`;\n  // If we're updating a specific crate, `cargo-update` requires `--workspace`\n  // for more information, see: https://github.com/renovatebot/renovate/issues/12332\n  if (!isLockFileMaintenance) {\n    cmd += ` --workspace`;\n  }\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n  await gitExec(cmd, execOptions);\n}\n\nasync function cargoUpdatePrecise(\n  manifestPath: string,\n  updatedDeps: Upgrade[],\n  constraint: string | undefined,\n): Promise<void> {\n  const cmds = [];\n\n  // First update individual dependencies to their `newVersion`. Necessary when\n  // using the `update-lockfile` rangeStrategy which doesn't touch Cargo.toml.\n  for (const dep of updatedDeps) {\n    // If the range is bumped in Cargo.toml, the old lockedVersion may no longer\n    // exist in Cargo's dependency graph, so let the --workspace update at the\n    // end re-resolve it instead.\n    if (dep.currentValue && dep.newValue && dep.currentValue !== dep.newValue) {\n      continue;\n    }\n\n    cmds.push(\n      `cargo update --config net.git-fetch-with-cli=true` +\n        ` --manifest-path ${quote(manifestPath)}` +\n        ` --package ${quote(`${dep.packageName}@${dep.lockedVersion}`)}` +\n        ` --precise ${quote(dep.newVersion!)}`,\n    );\n  }\n\n  // Then update all dependencies that have been bumped in `Cargo.toml`.\n  cmds.push(\n    `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(manifestPath)} --workspace`,\n  );\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n\n  await gitExec(cmds, execOptions);\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  return await updateArtifactsImpl(updateArtifact);\n}\n\nasync function updateArtifactsImpl(\n  {\n    packageFileName,\n    updatedDeps,\n    newPackageFileContent,\n    config,\n  }: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`cargo.updateArtifacts(${packageFileName})`);\n\n  // For standalone package crates, the `Cargo.lock` will be in the same\n  // directory as `Cargo.toml` (ie. a sibling). For cargo workspaces, it\n  // will be further up.\n  const lockFileName = await findLocalSiblingOrParent(\n    packageFileName,\n    'Cargo.lock',\n  );\n  const existingLockFileContent = lockFileName\n    ? await readLocalFile(lockFileName)\n    : null;\n  if (!existingLockFileContent || !lockFileName) {\n    logger.debug('No Cargo.lock found');\n    return null;\n  }\n\n  const { isLockFileMaintenance } = config;\n  if (!isLockFileMaintenance && !updatedDeps?.length) {\n    logger.debug('No more dependencies to update');\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: existingLockFileContent,\n        },\n      },\n    ];\n  }\n\n  const rustConstraint = await resolveToolConstraint(config, 'rust');\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    logger.debug(`Updating ${lockFileName}`);\n\n    if (isLockFileMaintenance) {\n      await cargoUpdate(packageFileName, true, rustConstraint);\n    } else {\n      const hasNonCrateDep = updatedDeps.some(\n        (dep) => dep.datasource !== CrateDatasource.id,\n      );\n      const crateDepWithoutLockedVersion = updatedDeps.find(\n        (dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id,\n      );\n      // Non-crate dependencies (like git ones) do not have locked versions.\n      // For crate dependencies, a locked version is expected.\n      // In both situations, perform a regular workspace lockfile update.\n      if (hasNonCrateDep || crateDepWithoutLockedVersion) {\n        if (crateDepWithoutLockedVersion) {\n          // Only warn when a crate dependency has no locked version\n          logger.warn(\n            { dependency: crateDepWithoutLockedVersion.depName },\n            'Missing locked version for dependency',\n          );\n        }\n        await cargoUpdate(packageFileName, false, rustConstraint);\n      } else {\n        // If all dependencies have locked versions then update them precisely.\n        await cargoUpdatePrecise(packageFileName, updatedDeps, rustConstraint);\n      }\n    }\n\n    logger.debug('Returning updated Cargo.lock');\n    const newCargoLockContent = await readLocalFile(lockFileName);\n    if (existingLockFileContent === newCargoLockContent) {\n      logger.debug('Cargo.lock is unchanged');\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newCargoLockContent,\n        },\n      },\n    ];\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n\n    // Sometimes `cargo update` will fail when a preceding dependency update\n    // causes another dependency to update. In this case we can no longer\n    // reference the dependency by its old version, so we filter it out\n    // and retry recursively.\n    const newCargoLockContent = await readLocalFile(lockFileName, 'utf8');\n    if (\n      recursionLimit > 0 &&\n      newCargoLockContent &&\n      regEx(/error: package ID specification/).test(err.stderr)\n    ) {\n      const versions = extractLockFileContentVersions(newCargoLockContent);\n      const newUpdatedDeps = updatedDeps.filter(\n        (dep) =>\n          !coerceArray(versions?.get(dep.packageName!)).includes(\n            dep.newVersion!,\n          ),\n      );\n\n      if (newUpdatedDeps.length < updatedDeps.length) {\n        logger.debug(\n          'Dependency already up to date - reattempting recursively',\n        );\n        return updateArtifactsImpl(\n          {\n            packageFileName,\n            updatedDeps: newUpdatedDeps,\n            newPackageFileContent,\n            config,\n          },\n          recursionLimit - 1,\n        );\n      }\n    }\n\n    logger.debug({ err }, 'Failed to update Cargo lock file');\n\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;AAqBA,MAAM,UAAU,mBAAmB,CAAC,OAAO,CAAC;AAE5C,eAAe,YACb,cACA,uBACA,YACe;CACf,IAAI,MAAM,qEAAqE,MAC7E,YACF;CAGA,IAAI,CAAC,uBACH,OAAO;CAOT,MAAM,QAAQ,KAAK;EAHjB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAEvB,CAAC;AAChC;AAEA,eAAe,mBACb,cACA,aACA,YACe;CACf,MAAM,OAAO,CAAC;CAId,KAAK,MAAM,OAAO,aAAa;EAI7B,IAAI,IAAI,gBAAgB,IAAI,YAAY,IAAI,iBAAiB,IAAI,UAC/D;EAGF,KAAK,KACH,qEACsB,MAAM,YAAY,EAAA,aACxB,MAAM,GAAG,IAAI,YAAY,GAAG,IAAI,eAAe,EAAA,aAC/C,MAAM,IAAI,UAAW,GACvC;CACF;CAGA,KAAK,KACH,qEAAqE,MAAM,YAAY,EAAE,aAC3F;CAOA,MAAM,QAAQ,MAAM;EAJlB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAGtB,CAAC;AACjC;AAEA,eAAsB,gBACpB,gBACyC;CACzC,OAAO,MAAM,oBAAoB,cAAc;AACjD;AAEA,eAAe,oBACb,EACE,iBACA,aACA,uBACA,UAEF,iBAAiB,IACwB;CACzC,OAAO,MAAM,yBAAyB,gBAAgB,EAAE;CAKxD,MAAM,eAAe,MAAM,yBACzB,iBACA,YACF;CACA,MAAM,0BAA0B,eAC5B,MAAM,cAAc,YAAY,IAChC;CACJ,IAAI,CAAC,2BAA2B,CAAC,cAAc;EAC7C,OAAO,MAAM,qBAAqB;EAClC,OAAO;CACT;CAEA,MAAM,EAAE,0BAA0B;CAClC,IAAI,CAAC,yBAAyB,CAAC,aAAa,QAAQ;EAClD,OAAO,MAAM,gCAAgC;EAC7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF;CAEA,MAAM,iBAAiB,MAAM,sBAAsB,QAAQ,MAAM;CAEjE,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,OAAO,MAAM,YAAY,cAAc;EAEvC,IAAI,uBACF,MAAM,YAAY,iBAAiB,MAAM,cAAc;OAClD;GACL,MAAM,iBAAiB,YAAY,MAChC,QAAQ,IAAI,eAAe,gBAAgB,EAC9C;GACA,MAAM,+BAA+B,YAAY,MAC9C,QAAQ,CAAC,IAAI,iBAAiB,IAAI,eAAe,gBAAgB,EACpE;GAIA,IAAI,kBAAkB,8BAA8B;IAClD,IAAI,8BAEF,OAAO,KACL,EAAE,YAAY,6BAA6B,QAAQ,GACnD,uCACF;IAEF,MAAM,YAAY,iBAAiB,OAAO,cAAc;GAC1D,OAEE,MAAM,mBAAmB,iBAAiB,aAAa,cAAc;EAEzE;EAEA,OAAO,MAAM,8BAA8B;EAC3C,MAAM,sBAAsB,MAAM,cAAc,YAAY;EAC5D,IAAI,4BAA4B,qBAAqB;GACnD,OAAO,MAAM,yBAAyB;GACtC,OAAO;EACT;EACA,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAOR,MAAM,sBAAsB,MAAM,cAAc,cAAc,MAAM;EACpE,IACE,iBAAiB,KACjB,uBACA,MAAM,iCAAiC,CAAC,CAAC,KAAK,IAAI,MAAM,GACxD;GACA,MAAM,WAAW,+BAA+B,mBAAmB;GACnE,MAAM,iBAAiB,YAAY,QAChC,QACC,CAAC,YAAY,UAAU,IAAI,IAAI,WAAY,CAAC,CAAC,CAAC,SAC5C,IAAI,UACN,CACJ;GAEA,IAAI,eAAe,SAAS,YAAY,QAAQ;IAC9C,OAAO,MACL,0DACF;IACA,OAAO,oBACL;KACE;KACA,aAAa;KACb;KACA;IACF,GACA,iBAAiB,CACnB;GACF;EACF;EAEA,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAExD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/composer/artifacts.js

@@ -7,13 +7,15 @@ import { logger } from "../../../logger/index.js";
 import { find, findAll } from "../../../util/host-rules.js";
 import { deleteLocalFile, ensureCacheDir, ensureLocalDir, getSiblingFileName, localPathExists, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { Json } from "../../../util/schema-utils/index.js";
+import { Lazy } from "../../../util/lazy.js";
 import { exec } from "../../../util/exec/index.js";
 import { getRepoStatus } from "../../../util/git/index.js";
 import { GitTagsDatasource } from "../../datasource/git-tags/index.js";
 import { PackagistDatasource } from "../../datasource/packagist/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { findGithubToken, takePersonalAccessTokenIfPossible } from "../../../util/check-token.js";
 import { Lockfile, PackageFile } from "./schema.js";
-import { extractConstraints, getComposerArguments, getComposerUpdateArguments, getPhpConstraint, isArtifactAuthEnabled, requireComposerDependencyInstallation } from "./utils.js";
+import { extractConstraints, getComposerArguments, getComposerUpdateArguments, isArtifactAuthEnabled, requireComposerDependencyInstallation } from "./utils.js";
 import { isEmptyObject, isString } from "@sindresorhus/is";
 import { z } from "zod/v4";
 import { quote } from "shlex";
@@ -69,17 +71,14 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 	await ensureLocalDir(vendorDir);
 	try {
 		await writeLocalFile(packageFileName, newPackageFileContent);
-		const constraints = {
-			...extractConstraints(file, lockfile),
-			...config.constraints
-		};
+		const fileConstraints = new Lazy(() => extractConstraints(file, lockfile));
 		const composerToolConstraint = {
 			toolName: "composer",
-			constraint: constraints.composer
+			constraint: await resolveToolConstraint(config, "composer", () => fileConstraints.getValue().composer)
 		};
 		const phpToolConstraint = {
 			toolName: "php",
-			constraint: getPhpConstraint(constraints)
+			constraint: await resolveToolConstraint(config, "php", () => fileConstraints.getValue().php)
 		};
 		const execOptions = {
 			cwdFile: packageFileName,

package/dist/modules/manager/composer/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":["hostRules.find","hostRules.findAll"],"sources":["../../../../lib/modules/manager/composer/artifacts.ts"],"sourcesContent":["import { isEmptyObject, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { z } from 'zod/v4';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport {\n  findGithubToken,\n  takePersonalAccessTokenIfPossible,\n} from '../../../util/check-token.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type {\n  CommandWithOptions,\n  ExecOptions,\n  ToolConstraint,\n} from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  ensureCacheDir,\n  ensureLocalDir,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Json } from '../../../util/schema-utils/index.ts';\nimport { coerceString } from '../../../util/string.ts';\nimport { GitTagsDatasource } from '../../datasource/git-tags/index.ts';\nimport { PackagistDatasource } from '../../datasource/packagist/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { Lockfile, PackageFile } from './schema.ts';\nimport type { AuthJson } from './types.ts';\nimport {\n  extractConstraints,\n  getComposerArguments,\n  getComposerUpdateArguments,\n  getPhpConstraint,\n  isArtifactAuthEnabled,\n  requireComposerDependencyInstallation,\n} from './utils.ts';\n\nfunction getAuthJson(): string | null {\n  const authJson: AuthJson = {};\n\n  const githubHostRule = hostRules.find({\n    hostType: 'github',\n    url: 'https://api.github.com/',\n  });\n\n  const gitTagsHostRule = hostRules.find({\n    hostType: GitTagsDatasource.id,\n    url: 'https://github.com',\n  });\n\n  const selectedGithubToken = takePersonalAccessTokenIfPossible(\n    isArtifactAuthEnabled(githubHostRule)\n      ? findGithubToken(githubHostRule)\n      : undefined,\n    isArtifactAuthEnabled(gitTagsHostRule)\n      ? findGithubToken(gitTagsHostRule)\n      : undefined,\n  );\n\n  if (selectedGithubToken) {\n    authJson['github-oauth'] = {\n      'github.com': selectedGithubToken,\n    };\n  }\n\n  for (const gitlabHostRule of hostRules.findAll({ hostType: 'gitlab' })) {\n    if (!isArtifactAuthEnabled(gitlabHostRule)) {\n      continue;\n    }\n\n    if (gitlabHostRule?.token) {\n      const host = coerceString(gitlabHostRule.resolvedHost, 'gitlab.com');\n      authJson['gitlab-token'] = coerceObject(authJson['gitlab-token']);\n      authJson['gitlab-token'][host] = gitlabHostRule.token;\n      // https://getcomposer.org/doc/articles/authentication-for-private-packages.md#gitlab-token\n      authJson['gitlab-domains'] = [\n        host,\n        ...coerceArray(authJson['gitlab-domains']),\n      ];\n    }\n  }\n\n  for (const packagistHostRule of hostRules.findAll({\n    hostType: PackagistDatasource.id,\n  })) {\n    if (!isArtifactAuthEnabled(packagistHostRule)) {\n      continue;\n    }\n\n    const { resolvedHost, username, password, token } = packagistHostRule;\n    if (resolvedHost && username && password) {\n      authJson['http-basic'] = coerceObject(authJson['http-basic']);\n      authJson['http-basic'][resolvedHost] = { username, password };\n    } else if (resolvedHost && token) {\n      authJson.bearer = coerceObject(authJson.bearer);\n      authJson.bearer[resolvedHost] = token;\n    }\n  }\n\n  return isEmptyObject(authJson) ? null : JSON.stringify(authJson);\n}\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`composer.updateArtifacts(${packageFileName})`);\n\n  const file = Json.pipe(PackageFile).parse(newPackageFileContent);\n\n  const lockFileName = packageFileName.replace(regEx(/\\.json$/), '.lock');\n  const lockfile = await z\n    .string()\n    .transform((f) => readLocalFile(f, 'utf8'))\n    .pipe(Json)\n    .pipe(Lockfile)\n    .nullable()\n    .catch(null)\n    .parseAsync(lockFileName);\n  if (!lockfile) {\n    logger.debug('Composer: unable to read lockfile');\n    return null;\n  }\n\n  const vendorDir = getSiblingFileName(packageFileName, 'vendor');\n  const commitVendorFiles = await localPathExists(vendorDir);\n  await ensureLocalDir(vendorDir);\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    const constraints = {\n      ...extractConstraints(file, lockfile),\n      ...config.constraints,\n    };\n\n    const composerToolConstraint: ToolConstraint = {\n      toolName: 'composer',\n      constraint: constraints.composer,\n    };\n\n    const phpToolConstraint: ToolConstraint = {\n      toolName: 'php',\n      constraint: getPhpConstraint(constraints),\n    };\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      extraEnv: {\n        COMPOSER_CACHE_DIR: await ensureCacheDir('composer'),\n        COMPOSER_AUTH: getAuthJson(),\n      },\n      toolConstraints: [phpToolConstraint, composerToolConstraint],\n      docker: {},\n    };\n\n    const commands: (string | CommandWithOptions)[] = [];\n\n    // Determine whether install is required before update\n    if (requireComposerDependencyInstallation(lockfile)) {\n      const preCmd = 'composer';\n      const preArgs = `install${getComposerArguments(config, composerToolConstraint)}`;\n      logger.trace({ preCmd, preArgs }, 'composer pre-update command');\n      commands.push('git stash -- composer.json');\n      commands.push(`${preCmd} ${preArgs}`);\n      commands.push({ command: ['git', 'stash', 'pop'], ignoreFailure: true });\n    }\n\n    if (config.isLockFileMaintenance) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      await deleteLocalFile(lockFileName);\n    }\n\n    const cmd = 'composer';\n    let args: string;\n    if (config.isLockFileMaintenance) {\n      args = 'update';\n    } else {\n      args =\n        (\n          'update ' +\n          updatedDeps\n            .map((dep) =>\n              dep.newVersion\n                ? quote(`${dep.depName}:${dep.newVersion}`)\n                : quote(dep.depName!),\n            )\n            .filter(isString)\n            .map((dep) => quote(dep))\n            .join(' ')\n        ).trim() +\n        (config.postUpdateOptions?.includes('composerWithAll')\n          ? ' --with-all-dependencies'\n          : ' --with-dependencies');\n    }\n    args += getComposerUpdateArguments(config, composerToolConstraint);\n    logger.trace({ cmd, args }, 'composer command');\n    commands.push(`${cmd} ${args}`);\n\n    await exec(commands, execOptions);\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated composer.lock');\n    const res: UpdateArtifactsResult[] = [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: await readLocalFile(lockFileName),\n        },\n      },\n    ];\n\n    if (!commitVendorFiles) {\n      return res;\n    }\n\n    logger.debug(`Committing vendor files in ${vendorDir}`);\n    for (const f of [...status.modified, ...status.not_added]) {\n      if (f.startsWith(vendorDir)) {\n        res.push({\n          file: {\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          },\n        });\n      }\n    }\n    for (const f of status.deleted) {\n      res.push({\n        file: {\n          type: 'deletion',\n          path: f,\n        },\n      });\n    }\n\n    return res;\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    if (\n      err.message?.includes(\n        'Your requirements could not be resolved to an installable set of packages.',\n      )\n    ) {\n      logger.info('Composer requirements cannot be resolved');\n    } else if (err.message?.includes('write error (disk full?)')) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    } else {\n      logger.debug({ err }, 'Failed to generate composer.lock');\n    }\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgDA,SAAS,cAA6B;CACpC,MAAM,WAAqB,CAAC;CAE5B,MAAM,iBAAiBA,KAAe;EACpC,UAAU;EACV,KAAK;CACP,CAAC;CAED,MAAM,kBAAkBA,KAAe;EACrC,UAAU,kBAAkB;EAC5B,KAAK;CACP,CAAC;CAED,MAAM,sBAAsB,kCAC1B,sBAAsB,cAAc,IAChC,gBAAgB,cAAc,IAC9B,KAAA,GACJ,sBAAsB,eAAe,IACjC,gBAAgB,eAAe,IAC/B,KAAA,CACN;CAEA,IAAI,qBACF,SAAS,kBAAkB,EACzB,cAAc,oBAChB;CAGF,KAAK,MAAM,kBAAkBC,QAAkB,EAAE,UAAU,SAAS,CAAC,GAAG;EACtE,IAAI,CAAC,sBAAsB,cAAc,GACvC;EAGF,IAAI,gBAAgB,OAAO;GACzB,MAAM,OAAO,aAAa,eAAe,cAAc,YAAY;GACnE,SAAS,kBAAkB,aAAa,SAAS,eAAe;GAChE,SAAS,eAAe,CAAC,QAAQ,eAAe;GAEhD,SAAS,oBAAoB,CAC3B,MACA,GAAG,YAAY,SAAS,iBAAiB,CAC3C;EACF;CACF;CAEA,KAAK,MAAM,qBAAqBA,QAAkB,EAChD,UAAU,oBAAoB,GAChC,CAAC,GAAG;EACF,IAAI,CAAC,sBAAsB,iBAAiB,GAC1C;EAGF,MAAM,EAAE,cAAc,UAAU,UAAU,UAAU;EACpD,IAAI,gBAAgB,YAAY,UAAU;GACxC,SAAS,gBAAgB,aAAa,SAAS,aAAa;GAC5D,SAAS,aAAa,CAAC,gBAAgB;IAAE;IAAU;GAAS;EAC9D,OAAO,IAAI,gBAAgB,OAAO;GAChC,SAAS,SAAS,aAAa,SAAS,MAAM;GAC9C,SAAS,OAAO,gBAAgB;EAClC;CACF;CAEA,OAAO,cAAc,QAAQ,IAAI,OAAO,KAAK,UAAU,QAAQ;AACjE;AAEA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,qBAAqB;CAE/D,MAAM,eAAe,gBAAgB,QAAQ,MAAM,SAAS,GAAG,OAAO;CACtE,MAAM,WAAW,MAAM,EACpB,OAAO,CAAC,CACR,WAAW,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAC1C,KAAK,IAAI,CAAC,CACV,KAAK,QAAQ,CAAC,CACd,SAAS,CAAC,CACV,MAAM,IAAI,CAAC,CACX,WAAW,YAAY;CAC1B,IAAI,CAAC,UAAU;EACb,OAAO,MAAM,mCAAmC;EAChD,OAAO;CACT;CAEA,MAAM,YAAY,mBAAmB,iBAAiB,QAAQ;CAC9D,MAAM,oBAAoB,MAAM,gBAAgB,SAAS;CACzD,MAAM,eAAe,SAAS;CAC9B,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,MAAM,cAAc;GAClB,GAAG,mBAAmB,MAAM,QAAQ;GACpC,GAAG,OAAO;EACZ;EAEA,MAAM,yBAAyC;GAC7C,UAAU;GACV,YAAY,YAAY;EAC1B;EAEA,MAAM,oBAAoC;GACxC,UAAU;GACV,YAAY,iBAAiB,WAAW;EAC1C;EAEA,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,oBAAoB,MAAM,eAAe,UAAU;IACnD,eAAe,YAAY;GAC7B;GACA,iBAAiB,CAAC,mBAAmB,sBAAsB;GAC3D,QAAQ,CAAC;EACX;EAEA,MAAM,WAA4C,CAAC;EAGnD,IAAI,sCAAsC,QAAQ,GAAG;GACnD,MAAM,SAAS;GACf,MAAM,UAAU,UAAU,qBAAqB,QAAQ,sBAAsB;GAC7E,OAAO,MAAM;IAAE;IAAQ;GAAQ,GAAG,6BAA6B;GAC/D,SAAS,KAAK,4BAA4B;GAC1C,SAAS,KAAK,GAAG,OAAO,GAAG,SAAS;GACpC,SAAS,KAAK;IAAE,SAAS;KAAC;KAAO;KAAS;IAAK;IAAG,eAAe;GAAK,CAAC;EACzE;EAEA,IAAI,OAAO,uBAAuB;GAChC,OAAO,MACL,YAAY,aAAa,4CAC3B;GACA,MAAM,gBAAgB,YAAY;EACpC;EAEA,MAAM,MAAM;EACZ,IAAI;EACJ,IAAI,OAAO,uBACT,OAAO;OAEP,QAEI,YACA,YACG,KAAK,QACJ,IAAI,aACA,MAAM,GAAG,IAAI,QAAQ,GAAG,IAAI,YAAY,IACxC,MAAM,IAAI,OAAQ,CACxB,CAAC,CACA,OAAO,QAAQ,CAAC,CAChB,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,CACxB,KAAK,GAAG,EAAA,CACX,KAAK,KACN,OAAO,mBAAmB,SAAS,iBAAiB,IACjD,6BACA;EAER,QAAQ,2BAA2B,QAAQ,sBAAsB;EACjE,OAAO,MAAM;GAAE;GAAK;EAAK,GAAG,kBAAkB;EAC9C,SAAS,KAAK,GAAG,IAAI,GAAG,MAAM;EAE9B,MAAM,KAAK,UAAU,WAAW;EAChC,MAAM,SAAS,MAAM,cAAc;EACnC,IAAI,CAAC,OAAO,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,iCAAiC;EAC9C,MAAM,MAA+B,CACnC,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,YAAY;EAC5C,EACF,CACF;EAEA,IAAI,CAAC,mBACH,OAAO;EAGT,OAAO,MAAM,8BAA8B,WAAW;EACtD,KAAK,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GACtD,IAAI,EAAE,WAAW,SAAS,GACxB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,CAAC;EACjC,EACF,CAAC;EAGL,KAAK,MAAM,KAAK,OAAO,SACrB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;EACR,EACF,CAAC;EAGH,OAAO;CACT,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,IACE,IAAI,SAAS,SACX,4EACF,GAEA,OAAO,KAAK,0CAA0C;OACjD,IAAI,IAAI,SAAS,SAAS,0BAA0B,GACzD,MAAM,IAAI,MAAM,8BAA8B;OAE9C,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAE1D,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":["hostRules.find","hostRules.findAll"],"sources":["../../../../lib/modules/manager/composer/artifacts.ts"],"sourcesContent":["import { isEmptyObject, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { z } from 'zod/v4';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport {\n  findGithubToken,\n  takePersonalAccessTokenIfPossible,\n} from '../../../util/check-token.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type {\n  CommandWithOptions,\n  ExecOptions,\n  ToolConstraint,\n} from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  ensureCacheDir,\n  ensureLocalDir,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { Lazy } from '../../../util/lazy.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Json } from '../../../util/schema-utils/index.ts';\nimport { coerceString } from '../../../util/string.ts';\nimport { GitTagsDatasource } from '../../datasource/git-tags/index.ts';\nimport { PackagistDatasource } from '../../datasource/packagist/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { Lockfile, PackageFile } from './schema.ts';\nimport type { AuthJson } from './types.ts';\nimport {\n  extractConstraints,\n  getComposerArguments,\n  getComposerUpdateArguments,\n  isArtifactAuthEnabled,\n  requireComposerDependencyInstallation,\n} from './utils.ts';\n\nfunction getAuthJson(): string | null {\n  const authJson: AuthJson = {};\n\n  const githubHostRule = hostRules.find({\n    hostType: 'github',\n    url: 'https://api.github.com/',\n  });\n\n  const gitTagsHostRule = hostRules.find({\n    hostType: GitTagsDatasource.id,\n    url: 'https://github.com',\n  });\n\n  const selectedGithubToken = takePersonalAccessTokenIfPossible(\n    isArtifactAuthEnabled(githubHostRule)\n      ? findGithubToken(githubHostRule)\n      : undefined,\n    isArtifactAuthEnabled(gitTagsHostRule)\n      ? findGithubToken(gitTagsHostRule)\n      : undefined,\n  );\n\n  if (selectedGithubToken) {\n    authJson['github-oauth'] = {\n      'github.com': selectedGithubToken,\n    };\n  }\n\n  for (const gitlabHostRule of hostRules.findAll({ hostType: 'gitlab' })) {\n    if (!isArtifactAuthEnabled(gitlabHostRule)) {\n      continue;\n    }\n\n    if (gitlabHostRule?.token) {\n      const host = coerceString(gitlabHostRule.resolvedHost, 'gitlab.com');\n      authJson['gitlab-token'] = coerceObject(authJson['gitlab-token']);\n      authJson['gitlab-token'][host] = gitlabHostRule.token;\n      // https://getcomposer.org/doc/articles/authentication-for-private-packages.md#gitlab-token\n      authJson['gitlab-domains'] = [\n        host,\n        ...coerceArray(authJson['gitlab-domains']),\n      ];\n    }\n  }\n\n  for (const packagistHostRule of hostRules.findAll({\n    hostType: PackagistDatasource.id,\n  })) {\n    if (!isArtifactAuthEnabled(packagistHostRule)) {\n      continue;\n    }\n\n    const { resolvedHost, username, password, token } = packagistHostRule;\n    if (resolvedHost && username && password) {\n      authJson['http-basic'] = coerceObject(authJson['http-basic']);\n      authJson['http-basic'][resolvedHost] = { username, password };\n    } else if (resolvedHost && token) {\n      authJson.bearer = coerceObject(authJson.bearer);\n      authJson.bearer[resolvedHost] = token;\n    }\n  }\n\n  return isEmptyObject(authJson) ? null : JSON.stringify(authJson);\n}\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`composer.updateArtifacts(${packageFileName})`);\n\n  const file = Json.pipe(PackageFile).parse(newPackageFileContent);\n\n  const lockFileName = packageFileName.replace(regEx(/\\.json$/), '.lock');\n  const lockfile = await z\n    .string()\n    .transform((f) => readLocalFile(f, 'utf8'))\n    .pipe(Json)\n    .pipe(Lockfile)\n    .nullable()\n    .catch(null)\n    .parseAsync(lockFileName);\n  if (!lockfile) {\n    logger.debug('Composer: unable to read lockfile');\n    return null;\n  }\n\n  const vendorDir = getSiblingFileName(packageFileName, 'vendor');\n  const commitVendorFiles = await localPathExists(vendorDir);\n  await ensureLocalDir(vendorDir);\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    // `extractConstraints()` re-reads the updated package file, so its values win\n    // over what extraction saw on the base branch. It only runs when a user\n    // constraint is missing for at least one of the tools.\n    const fileConstraints = new Lazy(() => extractConstraints(file, lockfile));\n\n    const composerToolConstraint: ToolConstraint = {\n      toolName: 'composer',\n      constraint: await resolveToolConstraint(\n        config,\n        'composer',\n        () => fileConstraints.getValue().composer,\n      ),\n    };\n\n    const phpToolConstraint: ToolConstraint = {\n      toolName: 'php',\n      constraint: await resolveToolConstraint(\n        config,\n        'php',\n        () => fileConstraints.getValue().php,\n      ),\n    };\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      extraEnv: {\n        COMPOSER_CACHE_DIR: await ensureCacheDir('composer'),\n        COMPOSER_AUTH: getAuthJson(),\n      },\n      toolConstraints: [phpToolConstraint, composerToolConstraint],\n      docker: {},\n    };\n\n    const commands: (string | CommandWithOptions)[] = [];\n\n    // Determine whether install is required before update\n    if (requireComposerDependencyInstallation(lockfile)) {\n      const preCmd = 'composer';\n      const preArgs = `install${getComposerArguments(config, composerToolConstraint)}`;\n      logger.trace({ preCmd, preArgs }, 'composer pre-update command');\n      commands.push('git stash -- composer.json');\n      commands.push(`${preCmd} ${preArgs}`);\n      commands.push({ command: ['git', 'stash', 'pop'], ignoreFailure: true });\n    }\n\n    if (config.isLockFileMaintenance) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      await deleteLocalFile(lockFileName);\n    }\n\n    const cmd = 'composer';\n    let args: string;\n    if (config.isLockFileMaintenance) {\n      args = 'update';\n    } else {\n      args =\n        (\n          'update ' +\n          updatedDeps\n            .map((dep) =>\n              dep.newVersion\n                ? quote(`${dep.depName}:${dep.newVersion}`)\n                : quote(dep.depName!),\n            )\n            .filter(isString)\n            .map((dep) => quote(dep))\n            .join(' ')\n        ).trim() +\n        (config.postUpdateOptions?.includes('composerWithAll')\n          ? ' --with-all-dependencies'\n          : ' --with-dependencies');\n    }\n    args += getComposerUpdateArguments(config, composerToolConstraint);\n    logger.trace({ cmd, args }, 'composer command');\n    commands.push(`${cmd} ${args}`);\n\n    await exec(commands, execOptions);\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated composer.lock');\n    const res: UpdateArtifactsResult[] = [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: await readLocalFile(lockFileName),\n        },\n      },\n    ];\n\n    if (!commitVendorFiles) {\n      return res;\n    }\n\n    logger.debug(`Committing vendor files in ${vendorDir}`);\n    for (const f of [...status.modified, ...status.not_added]) {\n      if (f.startsWith(vendorDir)) {\n        res.push({\n          file: {\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          },\n        });\n      }\n    }\n    for (const f of status.deleted) {\n      res.push({\n        file: {\n          type: 'deletion',\n          path: f,\n        },\n      });\n    }\n\n    return res;\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    if (\n      err.message?.includes(\n        'Your requirements could not be resolved to an installable set of packages.',\n      )\n    ) {\n      logger.info('Composer requirements cannot be resolved');\n    } else if (err.message?.includes('write error (disk full?)')) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    } else {\n      logger.debug({ err }, 'Failed to generate composer.lock');\n    }\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiDA,SAAS,cAA6B;CACpC,MAAM,WAAqB,CAAC;CAE5B,MAAM,iBAAiBA,KAAe;EACpC,UAAU;EACV,KAAK;CACP,CAAC;CAED,MAAM,kBAAkBA,KAAe;EACrC,UAAU,kBAAkB;EAC5B,KAAK;CACP,CAAC;CAED,MAAM,sBAAsB,kCAC1B,sBAAsB,cAAc,IAChC,gBAAgB,cAAc,IAC9B,KAAA,GACJ,sBAAsB,eAAe,IACjC,gBAAgB,eAAe,IAC/B,KAAA,CACN;CAEA,IAAI,qBACF,SAAS,kBAAkB,EACzB,cAAc,oBAChB;CAGF,KAAK,MAAM,kBAAkBC,QAAkB,EAAE,UAAU,SAAS,CAAC,GAAG;EACtE,IAAI,CAAC,sBAAsB,cAAc,GACvC;EAGF,IAAI,gBAAgB,OAAO;GACzB,MAAM,OAAO,aAAa,eAAe,cAAc,YAAY;GACnE,SAAS,kBAAkB,aAAa,SAAS,eAAe;GAChE,SAAS,eAAe,CAAC,QAAQ,eAAe;GAEhD,SAAS,oBAAoB,CAC3B,MACA,GAAG,YAAY,SAAS,iBAAiB,CAC3C;EACF;CACF;CAEA,KAAK,MAAM,qBAAqBA,QAAkB,EAChD,UAAU,oBAAoB,GAChC,CAAC,GAAG;EACF,IAAI,CAAC,sBAAsB,iBAAiB,GAC1C;EAGF,MAAM,EAAE,cAAc,UAAU,UAAU,UAAU;EACpD,IAAI,gBAAgB,YAAY,UAAU;GACxC,SAAS,gBAAgB,aAAa,SAAS,aAAa;GAC5D,SAAS,aAAa,CAAC,gBAAgB;IAAE;IAAU;GAAS;EAC9D,OAAO,IAAI,gBAAgB,OAAO;GAChC,SAAS,SAAS,aAAa,SAAS,MAAM;GAC9C,SAAS,OAAO,gBAAgB;EAClC;CACF;CAEA,OAAO,cAAc,QAAQ,IAAI,OAAO,KAAK,UAAU,QAAQ;AACjE;AAEA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,qBAAqB;CAE/D,MAAM,eAAe,gBAAgB,QAAQ,MAAM,SAAS,GAAG,OAAO;CACtE,MAAM,WAAW,MAAM,EACpB,OAAO,CAAC,CACR,WAAW,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAC1C,KAAK,IAAI,CAAC,CACV,KAAK,QAAQ,CAAC,CACd,SAAS,CAAC,CACV,MAAM,IAAI,CAAC,CACX,WAAW,YAAY;CAC1B,IAAI,CAAC,UAAU;EACb,OAAO,MAAM,mCAAmC;EAChD,OAAO;CACT;CAEA,MAAM,YAAY,mBAAmB,iBAAiB,QAAQ;CAC9D,MAAM,oBAAoB,MAAM,gBAAgB,SAAS;CACzD,MAAM,eAAe,SAAS;CAC9B,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAK3D,MAAM,kBAAkB,IAAI,WAAW,mBAAmB,MAAM,QAAQ,CAAC;EAEzE,MAAM,yBAAyC;GAC7C,UAAU;GACV,YAAY,MAAM,sBAChB,QACA,kBACM,gBAAgB,SAAS,CAAC,CAAC,QACnC;EACF;EAEA,MAAM,oBAAoC;GACxC,UAAU;GACV,YAAY,MAAM,sBAChB,QACA,aACM,gBAAgB,SAAS,CAAC,CAAC,GACnC;EACF;EAEA,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,oBAAoB,MAAM,eAAe,UAAU;IACnD,eAAe,YAAY;GAC7B;GACA,iBAAiB,CAAC,mBAAmB,sBAAsB;GAC3D,QAAQ,CAAC;EACX;EAEA,MAAM,WAA4C,CAAC;EAGnD,IAAI,sCAAsC,QAAQ,GAAG;GACnD,MAAM,SAAS;GACf,MAAM,UAAU,UAAU,qBAAqB,QAAQ,sBAAsB;GAC7E,OAAO,MAAM;IAAE;IAAQ;GAAQ,GAAG,6BAA6B;GAC/D,SAAS,KAAK,4BAA4B;GAC1C,SAAS,KAAK,GAAG,OAAO,GAAG,SAAS;GACpC,SAAS,KAAK;IAAE,SAAS;KAAC;KAAO;KAAS;IAAK;IAAG,eAAe;GAAK,CAAC;EACzE;EAEA,IAAI,OAAO,uBAAuB;GAChC,OAAO,MACL,YAAY,aAAa,4CAC3B;GACA,MAAM,gBAAgB,YAAY;EACpC;EAEA,MAAM,MAAM;EACZ,IAAI;EACJ,IAAI,OAAO,uBACT,OAAO;OAEP,QAEI,YACA,YACG,KAAK,QACJ,IAAI,aACA,MAAM,GAAG,IAAI,QAAQ,GAAG,IAAI,YAAY,IACxC,MAAM,IAAI,OAAQ,CACxB,CAAC,CACA,OAAO,QAAQ,CAAC,CAChB,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,CACxB,KAAK,GAAG,EAAA,CACX,KAAK,KACN,OAAO,mBAAmB,SAAS,iBAAiB,IACjD,6BACA;EAER,QAAQ,2BAA2B,QAAQ,sBAAsB;EACjE,OAAO,MAAM;GAAE;GAAK;EAAK,GAAG,kBAAkB;EAC9C,SAAS,KAAK,GAAG,IAAI,GAAG,MAAM;EAE9B,MAAM,KAAK,UAAU,WAAW;EAChC,MAAM,SAAS,MAAM,cAAc;EACnC,IAAI,CAAC,OAAO,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,iCAAiC;EAC9C,MAAM,MAA+B,CACnC,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,YAAY;EAC5C,EACF,CACF;EAEA,IAAI,CAAC,mBACH,OAAO;EAGT,OAAO,MAAM,8BAA8B,WAAW;EACtD,KAAK,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GACtD,IAAI,EAAE,WAAW,SAAS,GACxB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,CAAC;EACjC,EACF,CAAC;EAGL,KAAK,MAAM,KAAK,OAAO,SACrB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;EACR,EACF,CAAC;EAGH,OAAO;CACT,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,IACE,IAAI,SAAS,SACX,4EACF,GAEA,OAAO,KAAK,0CAA0C;OACjD,IAAI,IAAI,SAAS,SAAS,0BAA0B,GACzD,MAAM,IAAI,MAAM,8BAA8B;OAE9C,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAE1D,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}