renovate 44.85.1 → 44.86.0

package/dist/modules/manager/apm/artifacts.js

@@ -3,6 +3,7 @@ import { logger } from "../../../logger/index.js";
 import { deleteLocalFile, getSiblingFileName, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { exec } from "../../../util/exec/index.js";
 import { getRepoStatus } from "../../../util/git/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { isNonEmptyArray } from "@sindresorhus/is";
 //#region lib/modules/manager/apm/artifacts.ts
 async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileContent, config }) {
@@ -25,7 +26,7 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 			docker: {},
 			toolConstraints: [{
 				toolName: "apm",
-				constraint: config.constraints?.apm
+				constraint: await resolveToolConstraint(config, "apm")
 			}]
 		};
 		await exec("apm install", execOptions);

package/dist/modules/manager/apm/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/apm/artifacts.ts"],"sourcesContent":["import { isNonEmptyArray } from '@sindresorhus/is';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`apm.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!isNonEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('apm: no updated deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'apm.lock.yaml');\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('apm: no lock file found');\n    return null;\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      docker: {},\n      toolConstraints: [\n        { toolName: 'apm', constraint: config.constraints?.apm },\n      ],\n    };\n    await exec('apm install', execOptions);\n\n    // `apm install` regenerates the lockfile and re-deploys the harness\n    // directories (`.github/`, `.claude/`, ...) that APM consumers commit, so\n    // return every file it changed - not just the lockfile - or the committed\n    // instruction files go stale after a bump. `apm_modules/` is the gitignored\n    // cache, so it is not reported here.\n    const status = await getRepoStatus();\n    const res: UpdateArtifactsResult[] = [];\n    for (const path of [...status.modified, ...status.not_added]) {\n      // the manifest itself is committed as an updated package file\n      if (path === packageFileName) {\n        continue;\n      }\n      res.push({\n        file: { type: 'addition', path, contents: await readLocalFile(path) },\n      });\n    }\n    for (const path of status.deleted) {\n      res.push({ file: { type: 'deletion', path } });\n    }\n    if (!res.length) {\n      logger.debug('apm: no changed files after install');\n      return null;\n    }\n    return res;\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug({ err }, `Failed to update ${lockFileName}`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${err}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;AAcA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,gBAAgB,WAAW,KAAK,CAAC,uBAAuB;EAC3D,OAAO,MAAM,uCAAuC;EACpD,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,eAAe;CAExE,IAAI,CAAC,MADiC,cAAc,cAAc,MAAM,GAC1C;EAC5B,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IAAE,UAAU;IAAO,YAAY,OAAO,aAAa;GAAI,CACzD;EACF;EACA,MAAM,KAAK,eAAe,WAAW;EAOrC,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GAAG;GAE5D,IAAI,SAAS,iBACX;GAEF,IAAI,KAAK,EACP,MAAM;IAAE,MAAM;IAAY;IAAM,UAAU,MAAM,cAAc,IAAI;GAAE,EACtE,CAAC;EACH;EACA,KAAK,MAAM,QAAQ,OAAO,SACxB,IAAI,KAAK,EAAE,MAAM;GAAE,MAAM;GAAY;EAAK,EAAE,CAAC;EAE/C,IAAI,CAAC,IAAI,QAAQ;GACf,OAAO,MAAM,qCAAqC;GAClD,OAAO;EACT;EACA,OAAO;CACT,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,MAAM,EAAE,IAAI,GAAG,oBAAoB,cAAc;EACxD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG;EACb,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/apm/artifacts.ts"],"sourcesContent":["import { isNonEmptyArray } from '@sindresorhus/is';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`apm.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!isNonEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('apm: no updated deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'apm.lock.yaml');\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('apm: no lock file found');\n    return null;\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'apm',\n          constraint: await resolveToolConstraint(config, 'apm'),\n        },\n      ],\n    };\n    await exec('apm install', execOptions);\n\n    // `apm install` regenerates the lockfile and re-deploys the harness\n    // directories (`.github/`, `.claude/`, ...) that APM consumers commit, so\n    // return every file it changed - not just the lockfile - or the committed\n    // instruction files go stale after a bump. `apm_modules/` is the gitignored\n    // cache, so it is not reported here.\n    const status = await getRepoStatus();\n    const res: UpdateArtifactsResult[] = [];\n    for (const path of [...status.modified, ...status.not_added]) {\n      // the manifest itself is committed as an updated package file\n      if (path === packageFileName) {\n        continue;\n      }\n      res.push({\n        file: { type: 'addition', path, contents: await readLocalFile(path) },\n      });\n    }\n    for (const path of status.deleted) {\n      res.push({ file: { type: 'deletion', path } });\n    }\n    if (!res.length) {\n      logger.debug('apm: no changed files after install');\n      return null;\n    }\n    return res;\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.debug({ err }, `Failed to update ${lockFileName}`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${err}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;AAeA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,gBAAgB,WAAW,KAAK,CAAC,uBAAuB;EAC3D,OAAO,MAAM,uCAAuC;EACpD,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,eAAe;CAExE,IAAI,CAAC,MADiC,cAAc,cAAc,MAAM,GAC1C;EAC5B,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,sBAAsB,QAAQ,KAAK;GACvD,CACF;EACF;EACA,MAAM,KAAK,eAAe,WAAW;EAOrC,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,MAA+B,CAAC;EACtC,KAAK,MAAM,QAAQ,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GAAG;GAE5D,IAAI,SAAS,iBACX;GAEF,IAAI,KAAK,EACP,MAAM;IAAE,MAAM;IAAY;IAAM,UAAU,MAAM,cAAc,IAAI;GAAE,EACtE,CAAC;EACH;EACA,KAAK,MAAM,QAAQ,OAAO,SACxB,IAAI,KAAK,EAAE,MAAM;GAAE,MAAM;GAAY;EAAK,EAAE,CAAC;EAE/C,IAAI,CAAC,IAAI,QAAQ;GACf,OAAO,MAAM,qCAAqC;GAClD,OAAO;EACT;EACA,OAAO;CACT,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,MAAM,EAAE,IAAI,GAAG,oBAAoB,cAAc;EACxD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG;EACb,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/bazel-module/artifacts.js

@@ -1,5 +1,6 @@
 import { logger } from "../../../logger/index.js";
 import { getSiblingFileName, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { updateBazelLockfile } from "./lockfile.js";
 //#region lib/modules/manager/bazel-module/artifacts.ts
 async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileContent, config }) {
@@ -15,7 +16,7 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 		return null;
 	}
 	await writeLocalFile(packageFileName, newPackageFileContent);
-	return await updateBazelLockfile(lockFileName, packageFileName, isLockFileMaintenance, config.constraints?.bazelisk);
+	return await updateBazelLockfile(lockFileName, packageFileName, isLockFileMaintenance, await resolveToolConstraint(config, "bazelisk"));
 }
 //#endregion
 export { updateArtifacts };

package/dist/modules/manager/bazel-module/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazel-module/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { updateBazelLockfile } from './lockfile.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazel-module.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!updatedDeps.length && !isLockFileMaintenance) {\n    logger.debug('No updated bazel-module deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    packageFileName,\n    isLockFileMaintenance,\n    config.constraints?.bazelisk,\n  );\n}\n"],"mappings":";;;;AASA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,gCAAgC,gBAAgB,EAAE;CAC/D,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,YAAY,UAAU,CAAC,uBAAuB;EACjD,OAAO,MAAM,+CAA+C;EAC5D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAG5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,iBACA,uBACA,OAAO,aAAa,QACtB;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazel-module/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { updateBazelLockfile } from './lockfile.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazel-module.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (!updatedDeps.length && !isLockFileMaintenance) {\n    logger.debug('No updated bazel-module deps - returning null');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    packageFileName,\n    isLockFileMaintenance,\n    await resolveToolConstraint(config, 'bazelisk'),\n  );\n}\n"],"mappings":";;;;;AAUA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,gCAAgC,gBAAgB,EAAE;CAC/D,MAAM,EAAE,0BAA0B;CAElC,IAAI,CAAC,YAAY,UAAU,CAAC,uBAAuB;EACjD,OAAO,MAAM,+CAA+C;EAC5D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAG5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,iBACA,uBACA,MAAM,sBAAsB,QAAQ,UAAU,CAChD;AACF"}

package/dist/modules/manager/bazelisk/artifacts.js

@@ -1,5 +1,6 @@
 import { logger } from "../../../logger/index.js";
 import { getSiblingFileName, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { updateBazelLockfile } from "../bazel-module/lockfile.js";
 //#region lib/modules/manager/bazelisk/artifacts.ts
 async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileContent, config }) {
@@ -19,7 +20,7 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 		return null;
 	}
 	await writeLocalFile(packageFileName, newPackageFileContent);
-	return await updateBazelLockfile(lockFileName, moduleFileName, config.isLockFileMaintenance, config.constraints?.bazelisk);
+	return await updateBazelLockfile(lockFileName, moduleFileName, config.isLockFileMaintenance, await resolveToolConstraint(config, "bazelisk"));
 }
 //#endregion
 export { updateArtifacts };

package/dist/modules/manager/bazelisk/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazelisk/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { updateBazelLockfile } from '../bazel-module/lockfile.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazelisk.updateArtifacts(${packageFileName})`);\n\n  if (!updatedDeps.length && !config.isLockFileMaintenance) {\n    logger.debug('No updated bazelisk deps - returning null');\n    return null;\n  }\n\n  const moduleFileName = getSiblingFileName(packageFileName, 'MODULE.bazel');\n  const existingModuleContent = await readLocalFile(moduleFileName, 'utf8');\n  if (!existingModuleContent) {\n    logger.debug('No MODULE.bazel found - skipping artifact update');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    moduleFileName,\n    config.isLockFileMaintenance,\n    config.constraints?.bazelisk,\n  );\n}\n"],"mappings":";;;;AASA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,IAAI,CAAC,YAAY,UAAU,CAAC,OAAO,uBAAuB;EACxD,OAAO,MAAM,2CAA2C;EACxD,OAAO;CACT;CAEA,MAAM,iBAAiB,mBAAmB,iBAAiB,cAAc;CAEzE,IAAI,CAAC,MAD+B,cAAc,gBAAgB,MAAM,GAC5C;EAC1B,OAAO,MAAM,kDAAkD;EAC/D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAE5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,gBACA,OAAO,uBACP,OAAO,aAAa,QACtB;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bazelisk/artifacts.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { updateBazelLockfile } from '../bazel-module/lockfile.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`bazelisk.updateArtifacts(${packageFileName})`);\n\n  if (!updatedDeps.length && !config.isLockFileMaintenance) {\n    logger.debug('No updated bazelisk deps - returning null');\n    return null;\n  }\n\n  const moduleFileName = getSiblingFileName(packageFileName, 'MODULE.bazel');\n  const existingModuleContent = await readLocalFile(moduleFileName, 'utf8');\n  if (!existingModuleContent) {\n    logger.debug('No MODULE.bazel found - skipping artifact update');\n    return null;\n  }\n\n  const lockFileName = getSiblingFileName(packageFileName, 'MODULE.bazel.lock');\n  const existingLockContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockContent) {\n    logger.debug('No MODULE.bazel.lock found - skipping artifact update');\n    return null;\n  }\n\n  await writeLocalFile(packageFileName, newPackageFileContent);\n\n  return await updateBazelLockfile(\n    lockFileName,\n    moduleFileName,\n    config.isLockFileMaintenance,\n    await resolveToolConstraint(config, 'bazelisk'),\n  );\n}\n"],"mappings":";;;;;AAUA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,IAAI,CAAC,YAAY,UAAU,CAAC,OAAO,uBAAuB;EACxD,OAAO,MAAM,2CAA2C;EACxD,OAAO;CACT;CAEA,MAAM,iBAAiB,mBAAmB,iBAAiB,cAAc;CAEzE,IAAI,CAAC,MAD+B,cAAc,gBAAgB,MAAM,GAC5C;EAC1B,OAAO,MAAM,kDAAkD;EAC/D,OAAO;CACT;CAEA,MAAM,eAAe,mBAAmB,iBAAiB,mBAAmB;CAE5E,IAAI,CAAC,MAD6B,cAAc,cAAc,MAAM,GAC1C;EACxB,OAAO,MAAM,uDAAuD;EACpE,OAAO;CACT;CAEA,MAAM,eAAe,iBAAiB,qBAAqB;CAE3D,OAAO,MAAM,oBACX,cACA,gBACA,OAAO,uBACP,MAAM,sBAAsB,QAAQ,UAAU,CAChD;AACF"}

package/dist/modules/manager/bun/artifacts.js

@@ -3,6 +3,7 @@ import { GlobalConfig } from "../../../config/global.js";
 import { logger } from "../../../logger/index.js";
 import { deleteLocalFile, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { exec } from "../../../util/exec/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { processHostRules } from "../npm/post-update/rules.js";
 import { getNpmrcContent, resetNpmrcContent, updateNpmrcContent } from "../npm/utils.js";
 import { isEmptyArray } from "@sindresorhus/is";
@@ -40,7 +41,7 @@ async function updateArtifacts(updateArtifact) {
 			docker: {},
 			toolConstraints: [{
 				toolName: "bun",
-				constraint: updateArtifact?.config?.constraints?.bun
+				constraint: await resolveToolConstraint(config, "bun")
 			}]
 		};
 		await exec(cmd, execOptions);

package/dist/modules/manager/bun/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bun/artifacts.ts"],"sourcesContent":["import { isEmptyArray } from '@sindresorhus/is';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { processHostRules } from '../npm/post-update/rules.ts';\nimport {\n  getNpmrcContent,\n  resetNpmrcContent,\n  updateNpmrcContent,\n} from '../npm/utils.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bun.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (isEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('No updated bun deps - returning null');\n    return null;\n  }\n\n  // Find the first bun dependency in order to handle mixed manager updates,\n  // eventually falling back to the first lock file from config.\n  const lockFileName =\n    updatedDeps.find((dep) => dep.manager === 'bun')?.lockFiles?.[0] ??\n    config.lockFiles?.[0];\n\n  if (!lockFileName) {\n    logger.debug(`bun: No lock file found`);\n    return null;\n  }\n\n  const oldLockFileContent = await readLocalFile(lockFileName);\n  if (!oldLockFileContent) {\n    logger.debug(`No ${lockFileName} found`);\n    return null;\n  }\n\n  const pkgFileDir = upath.dirname(packageFileName);\n  const npmrcContent = await getNpmrcContent(pkgFileDir);\n  const { additionalNpmrcContent } = processHostRules();\n  await updateNpmrcContent(pkgFileDir, npmrcContent, additionalNpmrcContent);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    let cmd = 'bun install';\n\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      cmd += ' --ignore-scripts';\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'bun',\n          constraint: updateArtifact?.config?.constraints?.bun,\n        },\n      ],\n    };\n\n    await exec(cmd, execOptions);\n    await resetNpmrcContent(pkgFileDir, npmrcContent);\n\n    const newLockFileContent = await readLocalFile(lockFileName);\n    if (\n      !newLockFileContent ||\n      Buffer.compare(oldLockFileContent, newLockFileContent) === 0\n    ) {\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newLockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.warn({ lockfile: lockFileName, err }, `Failed to update lock file`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;AAoBA,eAAsB,gBACpB,gBACyC;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,aAAa,WAAW,KAAK,CAAC,uBAAuB;EACvD,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CAIA,MAAM,eACJ,YAAY,MAAM,QAAQ,IAAI,YAAY,KAAK,CAAC,EAAE,YAAY,MAC9D,OAAO,YAAY;CAErB,IAAI,CAAC,cAAc;EACjB,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,MAAM,qBAAqB,MAAM,cAAc,YAAY;CAC3D,IAAI,CAAC,oBAAoB;EACvB,OAAO,MAAM,MAAM,aAAa,OAAO;EACvC,OAAO;CACT;CAEA,MAAM,aAAa,MAAM,QAAQ,eAAe;CAChD,MAAM,eAAe,MAAM,gBAAgB,UAAU;CACrD,MAAM,EAAE,2BAA2B,iBAAiB;CACpD,MAAM,mBAAmB,YAAY,cAAc,sBAAsB;CAEzE,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,IAAI,MAAM;EAEV,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,OAAO;EAGT,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,gBAAgB,QAAQ,aAAa;GACnD,CACF;EACF;EAEA,MAAM,KAAK,KAAK,WAAW;EAC3B,MAAM,kBAAkB,YAAY,YAAY;EAEhD,MAAM,qBAAqB,MAAM,cAAc,YAAY;EAC3D,IACE,CAAC,sBACD,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,GAE3D,OAAO;EAET,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,KAAK;GAAE,UAAU;GAAc;EAAI,GAAG,4BAA4B;EACzE,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/bun/artifacts.ts"],"sourcesContent":["import { isEmptyArray } from '@sindresorhus/is';\nimport upath from 'upath';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { processHostRules } from '../npm/post-update/rules.ts';\nimport {\n  getNpmrcContent,\n  resetNpmrcContent,\n  updateNpmrcContent,\n} from '../npm/utils.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bun.updateArtifacts(${packageFileName})`);\n  const { isLockFileMaintenance } = config;\n\n  if (isEmptyArray(updatedDeps) && !isLockFileMaintenance) {\n    logger.debug('No updated bun deps - returning null');\n    return null;\n  }\n\n  // Find the first bun dependency in order to handle mixed manager updates,\n  // eventually falling back to the first lock file from config.\n  const lockFileName =\n    updatedDeps.find((dep) => dep.manager === 'bun')?.lockFiles?.[0] ??\n    config.lockFiles?.[0];\n\n  if (!lockFileName) {\n    logger.debug(`bun: No lock file found`);\n    return null;\n  }\n\n  const oldLockFileContent = await readLocalFile(lockFileName);\n  if (!oldLockFileContent) {\n    logger.debug(`No ${lockFileName} found`);\n    return null;\n  }\n\n  const pkgFileDir = upath.dirname(packageFileName);\n  const npmrcContent = await getNpmrcContent(pkgFileDir);\n  const { additionalNpmrcContent } = processHostRules();\n  await updateNpmrcContent(pkgFileDir, npmrcContent, additionalNpmrcContent);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    if (isLockFileMaintenance) {\n      await deleteLocalFile(lockFileName);\n    }\n\n    let cmd = 'bun install';\n\n    if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n      cmd += ' --ignore-scripts';\n    }\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'bun',\n          constraint: await resolveToolConstraint(config, 'bun'),\n        },\n      ],\n    };\n\n    await exec(cmd, execOptions);\n    await resetNpmrcContent(pkgFileDir, npmrcContent);\n\n    const newLockFileContent = await readLocalFile(lockFileName);\n    if (\n      !newLockFileContent ||\n      Buffer.compare(oldLockFileContent, newLockFileContent) === 0\n    ) {\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newLockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    logger.warn({ lockfile: lockFileName, err }, `Failed to update lock file`);\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;AAqBA,eAAsB,gBACpB,gBACyC;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,uBAAuB,gBAAgB,EAAE;CACtD,MAAM,EAAE,0BAA0B;CAElC,IAAI,aAAa,WAAW,KAAK,CAAC,uBAAuB;EACvD,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CAIA,MAAM,eACJ,YAAY,MAAM,QAAQ,IAAI,YAAY,KAAK,CAAC,EAAE,YAAY,MAC9D,OAAO,YAAY;CAErB,IAAI,CAAC,cAAc;EACjB,OAAO,MAAM,yBAAyB;EACtC,OAAO;CACT;CAEA,MAAM,qBAAqB,MAAM,cAAc,YAAY;CAC3D,IAAI,CAAC,oBAAoB;EACvB,OAAO,MAAM,MAAM,aAAa,OAAO;EACvC,OAAO;CACT;CAEA,MAAM,aAAa,MAAM,QAAQ,eAAe;CAChD,MAAM,eAAe,MAAM,gBAAgB,UAAU;CACrD,MAAM,EAAE,2BAA2B,iBAAiB;CACpD,MAAM,mBAAmB,YAAY,cAAc,sBAAsB;CAEzE,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,IAAI,uBACF,MAAM,gBAAgB,YAAY;EAGpC,IAAI,MAAM;EAEV,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,OAAO;EAGT,MAAM,cAA2B;GAC/B,SAAS;GACT,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,sBAAsB,QAAQ,KAAK;GACvD,CACF;EACF;EAEA,MAAM,KAAK,KAAK,WAAW;EAC3B,MAAM,kBAAkB,YAAY,YAAY;EAEhD,MAAM,qBAAqB,MAAM,cAAc,YAAY;EAC3D,IACE,CAAC,sBACD,OAAO,QAAQ,oBAAoB,kBAAkB,MAAM,GAE3D,OAAO;EAET,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,OAAO,KAAK;GAAE,UAAU;GAAc;EAAI,GAAG,4BAA4B;EACzE,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/bundler/artifacts.js

@@ -70,7 +70,7 @@ async function updateArtifacts(updateArtifact, recursionLimit = 10) {
 			...variables,
 			...buildBundleHostVariable(hostRule)
 		}), {});
-		const bundler = getBundlerConstraint(updateArtifact, existingLockFileContent);
+		const bundler = await getBundlerConstraint(updateArtifact, existingLockFileContent);
 		const preCommands = ["ruby --version"];
 		const execOptions = {
 			cwdFile: lockFileName,

package/dist/modules/manager/bundler/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":["memCache.get"],"sources":["../../../../lib/modules/manager/bundler/artifacts.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport {\n  BUNDLER_INVALID_CREDENTIALS,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { HostRule } from '../../../types/index.ts';\nimport * as memCache from '../../../util/cache/memory/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  ensureCacheDir,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport {\n  getBundlerConstraint,\n  getLockFilePath,\n  getRubyConstraint,\n} from './common.ts';\nimport {\n  findAllAuthenticatable,\n  getAuthenticationHeaderValue,\n} from './host-rules.ts';\n\nconst hostConfigVariablePrefix = 'BUNDLE_';\n\nfunction buildBundleHostVariable(hostRule: HostRule): Record<string, string> {\n  // istanbul ignore if: doesn't happen in practice\n  if (!hostRule.resolvedHost) {\n    return {};\n  }\n  const varName = hostConfigVariablePrefix.concat(\n    hostRule.resolvedHost\n      .toUpperCase()\n      .split('.')\n      .join('__')\n      .split('-')\n      .join('___'),\n  );\n  return {\n    [varName]: `${getAuthenticationHeaderValue(hostRule)}`,\n  };\n}\n\nconst resolvedPkgRegex = regEx(\n  /(?<pkg>\\S+)(?:\\s*\\([^)]+\\)\\s*)? was resolved to/,\n);\n\nfunction getResolvedPackages(input: string): string[] {\n  const lines = input.split(newlineRegex);\n  const result: string[] = [];\n  for (const line of lines) {\n    const resolveMatchGroups = line.match(resolvedPkgRegex)?.groups;\n    if (resolveMatchGroups) {\n      const { pkg } = resolveMatchGroups;\n      result.push(pkg);\n    }\n  }\n\n  return [...new Set(result)];\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bundler.updateArtifacts(${packageFileName})`);\n  const existingError = memCache.get<string>('bundlerArtifactsError');\n  // istanbul ignore if\n  if (existingError) {\n    logger.debug('Aborting Bundler artifacts due to previous failed attempt');\n    throw new Error(existingError);\n  }\n  const lockFileName = await getLockFilePath(packageFileName);\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('No Gemfile.lock found');\n    return null;\n  }\n\n  const updatedDepNames: string[] = updatedDeps\n    .map(({ depName }) => depName)\n    .filter(isNonEmptyStringAndNotWhitespace);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    const commands: string[] = [];\n\n    if (config.isLockFileMaintenance) {\n      commands.push('bundler lock --update');\n    } else {\n      const bundlerUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('bundler');\n      if (bundlerUpgraded) {\n        commands.push('bundler lock --update --bundler');\n      }\n\n      const updateTypes = {\n        patch: '--patch ',\n        minor: '--minor ',\n        major: '',\n      };\n      for (const [updateType, updateArg] of Object.entries(updateTypes)) {\n        const deps = updatedDeps\n          .filter((dep) => (dep.updateType ?? 'major') === updateType)\n          .map((dep) => dep.depName)\n          .filter(isString)\n          .filter((dep) => dep !== 'ruby' && dep !== 'bundler');\n        let additionalArgs = '';\n        if (config.postUpdateOptions?.includes('bundlerConservative')) {\n          additionalArgs = '--conservative ';\n        }\n        if (deps.length) {\n          const cmd = `bundler lock ${updateArg}${additionalArgs}--update ${deps\n            .map(quote)\n            .join(' ')}`;\n          commands.push(cmd);\n        }\n      }\n\n      const rubyUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('ruby');\n      if (rubyUpgraded) {\n        commands.push('bundler lock');\n      }\n    }\n\n    const bundlerHostRules = findAllAuthenticatable({\n      hostType: 'rubygems',\n    });\n\n    const bundlerHostRulesVariables = bundlerHostRules.reduce(\n      (variables, hostRule) => ({\n        ...variables,\n        ...buildBundleHostVariable(hostRule),\n      }),\n      {} as Record<string, string>,\n    );\n\n    const bundler = getBundlerConstraint(\n      updateArtifact,\n      existingLockFileContent,\n    );\n    const preCommands = ['ruby --version'];\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv: {\n        ...bundlerHostRulesVariables,\n        GEM_HOME: await ensureCacheDir('bundler'),\n      },\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'ruby',\n          constraint: await getRubyConstraint(updateArtifact),\n        },\n        {\n          toolName: 'bundler',\n          constraint: bundler,\n        },\n      ],\n      preCommands,\n    };\n    await exec(commands, execOptions);\n\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated Gemfile.lock');\n    const lockFileContent = await readLocalFile(lockFileName);\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: lockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    const output = `${String(err.stdout)}\\n${String(err.stderr)}`;\n    if (\n      err.message.includes('fatal: Could not parse object') ||\n      output.includes('but that version could not be found')\n    ) {\n      return [\n        {\n          artifactError: {\n            fileName: lockFileName,\n            stderr: output,\n          },\n        },\n      ];\n    }\n    if (\n      err.stdout?.includes('Please supply credentials for this source') ||\n      err.stderr?.includes('Authentication is required') ||\n      err.stderr?.includes(\n        'Please make sure you have the correct access rights',\n      )\n    ) {\n      logger.debug(\n        { err },\n        'Gemfile.lock update failed due to missing credentials - skipping branch',\n      );\n      // Do not generate these PRs because we don't yet support Bundler authentication\n      memCache.set('bundlerArtifactsError', BUNDLER_INVALID_CREDENTIALS);\n      throw new Error(BUNDLER_INVALID_CREDENTIALS);\n    }\n    const resolveMatches: string[] = getResolvedPackages(output).filter(\n      (depName) => !updatedDepNames.includes(depName),\n    );\n    if (\n      recursionLimit > 0 &&\n      resolveMatches.length &&\n      !config.isLockFileMaintenance\n    ) {\n      logger.debug(\n        { resolveMatches, updatedDeps },\n        'Found new resolve matches - reattempting recursively',\n      );\n      const newUpdatedDeps = [\n        ...new Set([\n          ...updatedDeps,\n          ...resolveMatches.map((match) => ({ depName: match })),\n        ]),\n      ];\n      return updateArtifacts(\n        {\n          packageFileName,\n          updatedDeps: newUpdatedDeps,\n          newPackageFileContent,\n          config,\n        },\n        recursionLimit - 1,\n      );\n    }\n\n    logger.info({ err }, 'Gemfile.lock update failed due to an unknown reason');\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${String(err.stdout)}\\n${String(err.stderr)}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,2BAA2B;AAEjC,SAAS,wBAAwB,UAA4C;;CAE3E,IAAI,CAAC,SAAS,cACZ,OAAO,CAAC;CAUV,OAAO,GARS,yBAAyB,OACvC,SAAS,aACN,YAAY,CAAC,CACb,MAAM,GAAG,CAAC,CACV,KAAK,IAAI,CAAC,CACV,MAAM,GAAG,CAAC,CACV,KAAK,KAAK,CAGN,IAAI,GAAG,6BAA6B,QAAQ,IACrD;AACF;AAEA,MAAM,mBAAmB,MACvB,iDACF;AAEA,SAAS,oBAAoB,OAAyB;CACpD,MAAM,QAAQ,MAAM,MAAM,YAAY;CACtC,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,qBAAqB,KAAK,MAAM,gBAAgB,CAAC,EAAE;EACzD,IAAI,oBAAoB;GACtB,MAAM,EAAE,QAAQ;GAChB,OAAO,KAAK,GAAG;EACjB;CACF;CAEA,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,eAAsB,gBACpB,gBACA,iBAAiB,IACwB;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,2BAA2B,gBAAgB,EAAE;CAC1D,MAAM,gBAAgBA,IAAqB,uBAAuB;;CAElE,IAAI,eAAe;EACjB,OAAO,MAAM,2DAA2D;EACxE,MAAM,IAAI,MAAM,aAAa;CAC/B;CACA,MAAM,eAAe,MAAM,gBAAgB,eAAe;CAC1D,MAAM,0BAA0B,MAAM,cAAc,cAAc,MAAM;CACxE,IAAI,CAAC,yBAAyB;EAC5B,OAAO,MAAM,uBAAuB;EACpC,OAAO;CACT;CAEA,MAAM,kBAA4B,YAC/B,KAAK,EAAE,cAAc,OAAO,CAAC,CAC7B,OAAO,gCAAgC;CAE1C,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,MAAM,WAAqB,CAAC;EAE5B,IAAI,OAAO,uBACT,SAAS,KAAK,uBAAuB;OAChC;GAIL,IAHwB,YACrB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,SACM,GAChB,SAAS,KAAK,iCAAiC;GAQjD,KAAK,MAAM,CAAC,YAAY,cAAc,OAAO,QAAQ;IAJnD,OAAO;IACP,OAAO;IACP,OAAO;GAEsD,CAAC,GAAG;IACjE,MAAM,OAAO,YACV,QAAQ,SAAS,IAAI,cAAc,aAAa,UAAU,CAAC,CAC3D,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,OAAO,QAAQ,CAAC,CAChB,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;IACtD,IAAI,iBAAiB;IACrB,IAAI,OAAO,mBAAmB,SAAS,qBAAqB,GAC1D,iBAAiB;IAEnB,IAAI,KAAK,QAAQ;KACf,MAAM,MAAM,gBAAgB,YAAY,eAAe,WAAW,KAC/D,IAAI,KAAK,CAAC,CACV,KAAK,GAAG;KACX,SAAS,KAAK,GAAG;IACnB;GACF;GAKA,IAHqB,YAClB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,MACG,GACb,SAAS,KAAK,cAAc;EAEhC;EAMA,MAAM,4BAJmB,uBAAuB,EAC9C,UAAU,WACZ,CAEiD,CAAC,CAAC,QAChD,WAAW,cAAc;GACxB,GAAG;GACH,GAAG,wBAAwB,QAAQ;EACrC,IACA,CAAC,CACH;EAEA,MAAM,UAAU,qBACd,gBACA,uBACF;EACA,MAAM,cAAc,CAAC,gBAAgB;EAErC,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,GAAG;IACH,UAAU,MAAM,eAAe,SAAS;GAC1C;GACA,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,kBAAkB,cAAc;GACpD,GACA;IACE,UAAU;IACV,YAAY;GACd,CACF;GACA;EACF;EACA,MAAM,KAAK,UAAU,WAAW;EAGhC,IAAI,EAAC,MADgB,cAAc,EAAA,CACvB,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,gCAAgC;EAE7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MANc,cAAc,YAAY;EAOpD,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EAC1D,IACE,IAAI,QAAQ,SAAS,+BAA+B,KACpD,OAAO,SAAS,qCAAqC,GAErD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ;EACV,EACF,CACF;EAEF,IACE,IAAI,QAAQ,SAAS,2CAA2C,KAChE,IAAI,QAAQ,SAAS,4BAA4B,KACjD,IAAI,QAAQ,SACV,qDACF,GACA;GACA,OAAO,MACL,EAAE,IAAI,GACN,yEACF;GAEA,IAAa,yBAAyB,2BAA2B;GACjE,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,MAAM,iBAA2B,oBAAoB,MAAM,CAAC,CAAC,QAC1D,YAAY,CAAC,gBAAgB,SAAS,OAAO,CAChD;EACA,IACE,iBAAiB,KACjB,eAAe,UACf,CAAC,OAAO,uBACR;GACA,OAAO,MACL;IAAE;IAAgB;GAAY,GAC9B,sDACF;GAOA,OAAO,gBACL;IACE;IACA,aAAa,CARf,mBAAG,IAAI,IAAI,CACT,GAAG,aACH,GAAG,eAAe,KAAK,WAAW,EAAE,SAAS,MAAM,EAAE,CACvD,CAAC,CAK2B;IAC1B;IACA;GACF,GACA,iBAAiB,CACnB;EACF;EAEA,OAAO,KAAK,EAAE,IAAI,GAAG,qDAAqD;EAC1E,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EACrD,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":["memCache.get"],"sources":["../../../../lib/modules/manager/bundler/artifacts.ts"],"sourcesContent":["import { isNonEmptyStringAndNotWhitespace, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport {\n  BUNDLER_INVALID_CREDENTIALS,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { HostRule } from '../../../types/index.ts';\nimport * as memCache from '../../../util/cache/memory/index.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  ensureCacheDir,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport { newlineRegex, regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport {\n  getBundlerConstraint,\n  getLockFilePath,\n  getRubyConstraint,\n} from './common.ts';\nimport {\n  findAllAuthenticatable,\n  getAuthenticationHeaderValue,\n} from './host-rules.ts';\n\nconst hostConfigVariablePrefix = 'BUNDLE_';\n\nfunction buildBundleHostVariable(hostRule: HostRule): Record<string, string> {\n  // istanbul ignore if: doesn't happen in practice\n  if (!hostRule.resolvedHost) {\n    return {};\n  }\n  const varName = hostConfigVariablePrefix.concat(\n    hostRule.resolvedHost\n      .toUpperCase()\n      .split('.')\n      .join('__')\n      .split('-')\n      .join('___'),\n  );\n  return {\n    [varName]: `${getAuthenticationHeaderValue(hostRule)}`,\n  };\n}\n\nconst resolvedPkgRegex = regEx(\n  /(?<pkg>\\S+)(?:\\s*\\([^)]+\\)\\s*)? was resolved to/,\n);\n\nfunction getResolvedPackages(input: string): string[] {\n  const lines = input.split(newlineRegex);\n  const result: string[] = [];\n  for (const line of lines) {\n    const resolveMatchGroups = line.match(resolvedPkgRegex)?.groups;\n    if (resolveMatchGroups) {\n      const { pkg } = resolveMatchGroups;\n      result.push(pkg);\n    }\n  }\n\n  return [...new Set(result)];\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n  logger.debug(`bundler.updateArtifacts(${packageFileName})`);\n  const existingError = memCache.get<string>('bundlerArtifactsError');\n  // istanbul ignore if\n  if (existingError) {\n    logger.debug('Aborting Bundler artifacts due to previous failed attempt');\n    throw new Error(existingError);\n  }\n  const lockFileName = await getLockFilePath(packageFileName);\n  const existingLockFileContent = await readLocalFile(lockFileName, 'utf8');\n  if (!existingLockFileContent) {\n    logger.debug('No Gemfile.lock found');\n    return null;\n  }\n\n  const updatedDepNames: string[] = updatedDeps\n    .map(({ depName }) => depName)\n    .filter(isNonEmptyStringAndNotWhitespace);\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    const commands: string[] = [];\n\n    if (config.isLockFileMaintenance) {\n      commands.push('bundler lock --update');\n    } else {\n      const bundlerUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('bundler');\n      if (bundlerUpgraded) {\n        commands.push('bundler lock --update --bundler');\n      }\n\n      const updateTypes = {\n        patch: '--patch ',\n        minor: '--minor ',\n        major: '',\n      };\n      for (const [updateType, updateArg] of Object.entries(updateTypes)) {\n        const deps = updatedDeps\n          .filter((dep) => (dep.updateType ?? 'major') === updateType)\n          .map((dep) => dep.depName)\n          .filter(isString)\n          .filter((dep) => dep !== 'ruby' && dep !== 'bundler');\n        let additionalArgs = '';\n        if (config.postUpdateOptions?.includes('bundlerConservative')) {\n          additionalArgs = '--conservative ';\n        }\n        if (deps.length) {\n          const cmd = `bundler lock ${updateArg}${additionalArgs}--update ${deps\n            .map(quote)\n            .join(' ')}`;\n          commands.push(cmd);\n        }\n      }\n\n      const rubyUpgraded = updatedDeps\n        .map((dep) => dep.depName)\n        .includes('ruby');\n      if (rubyUpgraded) {\n        commands.push('bundler lock');\n      }\n    }\n\n    const bundlerHostRules = findAllAuthenticatable({\n      hostType: 'rubygems',\n    });\n\n    const bundlerHostRulesVariables = bundlerHostRules.reduce(\n      (variables, hostRule) => ({\n        ...variables,\n        ...buildBundleHostVariable(hostRule),\n      }),\n      {} as Record<string, string>,\n    );\n\n    const bundler = await getBundlerConstraint(\n      updateArtifact,\n      existingLockFileContent,\n    );\n    const preCommands = ['ruby --version'];\n\n    const execOptions: ExecOptions = {\n      cwdFile: lockFileName,\n      extraEnv: {\n        ...bundlerHostRulesVariables,\n        GEM_HOME: await ensureCacheDir('bundler'),\n      },\n      docker: {},\n      toolConstraints: [\n        {\n          toolName: 'ruby',\n          constraint: await getRubyConstraint(updateArtifact),\n        },\n        {\n          toolName: 'bundler',\n          constraint: bundler,\n        },\n      ],\n      preCommands,\n    };\n    await exec(commands, execOptions);\n\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated Gemfile.lock');\n    const lockFileContent = await readLocalFile(lockFileName);\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: lockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    const output = `${String(err.stdout)}\\n${String(err.stderr)}`;\n    if (\n      err.message.includes('fatal: Could not parse object') ||\n      output.includes('but that version could not be found')\n    ) {\n      return [\n        {\n          artifactError: {\n            fileName: lockFileName,\n            stderr: output,\n          },\n        },\n      ];\n    }\n    if (\n      err.stdout?.includes('Please supply credentials for this source') ||\n      err.stderr?.includes('Authentication is required') ||\n      err.stderr?.includes(\n        'Please make sure you have the correct access rights',\n      )\n    ) {\n      logger.debug(\n        { err },\n        'Gemfile.lock update failed due to missing credentials - skipping branch',\n      );\n      // Do not generate these PRs because we don't yet support Bundler authentication\n      memCache.set('bundlerArtifactsError', BUNDLER_INVALID_CREDENTIALS);\n      throw new Error(BUNDLER_INVALID_CREDENTIALS);\n    }\n    const resolveMatches: string[] = getResolvedPackages(output).filter(\n      (depName) => !updatedDepNames.includes(depName),\n    );\n    if (\n      recursionLimit > 0 &&\n      resolveMatches.length &&\n      !config.isLockFileMaintenance\n    ) {\n      logger.debug(\n        { resolveMatches, updatedDeps },\n        'Found new resolve matches - reattempting recursively',\n      );\n      const newUpdatedDeps = [\n        ...new Set([\n          ...updatedDeps,\n          ...resolveMatches.map((match) => ({ depName: match })),\n        ]),\n      ];\n      return updateArtifacts(\n        {\n          packageFileName,\n          updatedDeps: newUpdatedDeps,\n          newPackageFileContent,\n          config,\n        },\n        recursionLimit - 1,\n      );\n    }\n\n    logger.info({ err }, 'Gemfile.lock update failed due to an unknown reason');\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: `${String(err.stdout)}\\n${String(err.stderr)}`,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;AA6BA,MAAM,2BAA2B;AAEjC,SAAS,wBAAwB,UAA4C;;CAE3E,IAAI,CAAC,SAAS,cACZ,OAAO,CAAC;CAUV,OAAO,GARS,yBAAyB,OACvC,SAAS,aACN,YAAY,CAAC,CACb,MAAM,GAAG,CAAC,CACV,KAAK,IAAI,CAAC,CACV,MAAM,GAAG,CAAC,CACV,KAAK,KAAK,CAGN,IAAI,GAAG,6BAA6B,QAAQ,IACrD;AACF;AAEA,MAAM,mBAAmB,MACvB,iDACF;AAEA,SAAS,oBAAoB,OAAyB;CACpD,MAAM,QAAQ,MAAM,MAAM,YAAY;CACtC,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,QAAQ,OAAO;EACxB,MAAM,qBAAqB,KAAK,MAAM,gBAAgB,CAAC,EAAE;EACzD,IAAI,oBAAoB;GACtB,MAAM,EAAE,QAAQ;GAChB,OAAO,KAAK,GAAG;EACjB;CACF;CAEA,OAAO,CAAC,GAAG,IAAI,IAAI,MAAM,CAAC;AAC5B;AAEA,eAAsB,gBACpB,gBACA,iBAAiB,IACwB;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CACF,OAAO,MAAM,2BAA2B,gBAAgB,EAAE;CAC1D,MAAM,gBAAgBA,IAAqB,uBAAuB;;CAElE,IAAI,eAAe;EACjB,OAAO,MAAM,2DAA2D;EACxE,MAAM,IAAI,MAAM,aAAa;CAC/B;CACA,MAAM,eAAe,MAAM,gBAAgB,eAAe;CAC1D,MAAM,0BAA0B,MAAM,cAAc,cAAc,MAAM;CACxE,IAAI,CAAC,yBAAyB;EAC5B,OAAO,MAAM,uBAAuB;EACpC,OAAO;CACT;CAEA,MAAM,kBAA4B,YAC/B,KAAK,EAAE,cAAc,OAAO,CAAC,CAC7B,OAAO,gCAAgC;CAE1C,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,MAAM,WAAqB,CAAC;EAE5B,IAAI,OAAO,uBACT,SAAS,KAAK,uBAAuB;OAChC;GAIL,IAHwB,YACrB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,SACM,GAChB,SAAS,KAAK,iCAAiC;GAQjD,KAAK,MAAM,CAAC,YAAY,cAAc,OAAO,QAAQ;IAJnD,OAAO;IACP,OAAO;IACP,OAAO;GAEsD,CAAC,GAAG;IACjE,MAAM,OAAO,YACV,QAAQ,SAAS,IAAI,cAAc,aAAa,UAAU,CAAC,CAC3D,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,OAAO,QAAQ,CAAC,CAChB,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,SAAS;IACtD,IAAI,iBAAiB;IACrB,IAAI,OAAO,mBAAmB,SAAS,qBAAqB,GAC1D,iBAAiB;IAEnB,IAAI,KAAK,QAAQ;KACf,MAAM,MAAM,gBAAgB,YAAY,eAAe,WAAW,KAC/D,IAAI,KAAK,CAAC,CACV,KAAK,GAAG;KACX,SAAS,KAAK,GAAG;IACnB;GACF;GAKA,IAHqB,YAClB,KAAK,QAAQ,IAAI,OAAO,CAAC,CACzB,SAAS,MACG,GACb,SAAS,KAAK,cAAc;EAEhC;EAMA,MAAM,4BAJmB,uBAAuB,EAC9C,UAAU,WACZ,CAEiD,CAAC,CAAC,QAChD,WAAW,cAAc;GACxB,GAAG;GACH,GAAG,wBAAwB,QAAQ;EACrC,IACA,CAAC,CACH;EAEA,MAAM,UAAU,MAAM,qBACpB,gBACA,uBACF;EACA,MAAM,cAAc,CAAC,gBAAgB;EAErC,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,GAAG;IACH,UAAU,MAAM,eAAe,SAAS;GAC1C;GACA,QAAQ,CAAC;GACT,iBAAiB,CACf;IACE,UAAU;IACV,YAAY,MAAM,kBAAkB,cAAc;GACpD,GACA;IACE,UAAU;IACV,YAAY;GACd,CACF;GACA;EACF;EACA,MAAM,KAAK,UAAU,WAAW;EAGhC,IAAI,EAAC,MADgB,cAAc,EAAA,CACvB,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,gCAAgC;EAE7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MANc,cAAc,YAAY;EAOpD,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,MAAM,SAAS,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EAC1D,IACE,IAAI,QAAQ,SAAS,+BAA+B,KACpD,OAAO,SAAS,qCAAqC,GAErD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ;EACV,EACF,CACF;EAEF,IACE,IAAI,QAAQ,SAAS,2CAA2C,KAChE,IAAI,QAAQ,SAAS,4BAA4B,KACjD,IAAI,QAAQ,SACV,qDACF,GACA;GACA,OAAO,MACL,EAAE,IAAI,GACN,yEACF;GAEA,IAAa,yBAAyB,2BAA2B;GACjE,MAAM,IAAI,MAAM,2BAA2B;EAC7C;EACA,MAAM,iBAA2B,oBAAoB,MAAM,CAAC,CAAC,QAC1D,YAAY,CAAC,gBAAgB,SAAS,OAAO,CAChD;EACA,IACE,iBAAiB,KACjB,eAAe,UACf,CAAC,OAAO,uBACR;GACA,OAAO,MACL;IAAE;IAAgB;GAAY,GAC9B,sDACF;GAOA,OAAO,gBACL;IACE;IACA,aAAa,CARf,mBAAG,IAAI,IAAI,CACT,GAAG,aACH,GAAG,eAAe,KAAK,WAAW,EAAE,SAAS,MAAM,EAAE,CACvD,CAAC,CAK2B;IAC1B;IACA;GACF,GACA,iBAAiB,CACnB;EACF;EAEA,OAAO,KAAK,EAAE,IAAI,GAAG,qDAAqD;EAC1E,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,GAAG,OAAO,IAAI,MAAM,EAAE,IAAI,OAAO,IAAI,MAAM;EACrD,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/bundler/common.js

@@ -1,6 +1,7 @@
 import { regEx } from "../../../util/regex.js";
 import { logger } from "../../../logger/index.js";
 import { getSiblingFileName, localPathExists, readLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 //#region lib/modules/manager/bundler/common.ts
 const delimiters = ["\"", "'"];
 function extractRubyVersion(txt) {
@@ -9,14 +10,7 @@ function extractRubyVersion(txt) {
 	const quotedVersion = rubyMatch.groups.version;
 	return quotedVersion.substring(1, quotedVersion.length - 1);
 }
-async function getRubyConstraint(updateArtifact) {
-	const { packageFileName, config, newPackageFileContent } = updateArtifact;
-	const { constraints = {} } = config;
-	const { ruby } = constraints;
-	if (ruby) {
-		logger.debug("Using ruby constraint from config");
-		return ruby;
-	}
+async function getRubyConstraintFromFiles(packageFileName, newPackageFileContent) {
 	const rubyMatch = extractRubyVersion(newPackageFileContent);
 	if (rubyMatch) {
 		logger.debug("Using ruby version from gemfile");
@@ -39,14 +33,11 @@ async function getRubyConstraint(updateArtifact) {
 	}
 	return null;
 }
-function getBundlerConstraint(updateArtifact, existingLockFileContent) {
-	const { config } = updateArtifact;
-	const { constraints = {} } = config;
-	const { bundler } = constraints;
-	if (bundler) {
-		logger.debug("Using bundler constraint from config");
-		return bundler;
-	}
+async function getRubyConstraint(updateArtifact) {
+	const { packageFileName, config, newPackageFileContent } = updateArtifact;
+	return await resolveToolConstraint(config, "ruby", () => getRubyConstraintFromFiles(packageFileName, newPackageFileContent));
+}
+function getBundlerConstraintFromLockFile(existingLockFileContent) {
 	const bundledWith = regEx(/\nBUNDLED WITH\n\s+(?<version>.*?)(?:\n|$)/).exec(existingLockFileContent);
 	if (bundledWith) {
 		logger.debug("Using bundler version specified in lockfile");
@@ -54,6 +45,10 @@ function getBundlerConstraint(updateArtifact, existingLockFileContent) {
 	}
 	return null;
 }
+async function getBundlerConstraint(updateArtifact, existingLockFileContent) {
+	const { config } = updateArtifact;
+	return await resolveToolConstraint(config, "bundler", () => getBundlerConstraintFromLockFile(existingLockFileContent));
+}
 async function getLockFilePath(packageFilePath) {
 	const lockFilePath = await localPathExists(`${packageFilePath}.lock`) ? `${packageFilePath}.lock` : `Gemfile.lock`;
 	logger.debug(`Lockfile for ${packageFilePath} found in ${lockFilePath}`);

package/dist/modules/manager/bundler/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","names":[],"sources":["../../../../lib/modules/manager/bundler/common.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact } from '../types.ts';\n\nexport const delimiters = ['\"', \"'\"];\n\nexport function extractRubyVersion(txt: string): string | null {\n  const rubyMatch = regEx(/^ruby\\s+(?<version>\"[^\"]+\"|'[^']+')\\s*$/gm).exec(\n    txt,\n  );\n  if (!rubyMatch?.groups) {\n    return null;\n  }\n  const quotedVersion = rubyMatch.groups.version;\n  return quotedVersion.substring(1, quotedVersion.length - 1);\n}\n\nexport async function getRubyConstraint(\n  updateArtifact: UpdateArtifact,\n): Promise<string | null> {\n  const { packageFileName, config, newPackageFileContent } = updateArtifact;\n  const { constraints = {} } = config;\n  const { ruby } = constraints;\n\n  if (ruby) {\n    logger.debug('Using ruby constraint from config');\n    return ruby;\n  }\n  const rubyMatch = extractRubyVersion(newPackageFileContent);\n  if (rubyMatch) {\n    logger.debug('Using ruby version from gemfile');\n    return rubyMatch;\n  }\n  for (const file of ['.ruby-version', '.tool-versions']) {\n    const rubyVersion = (\n      await readLocalFile(getSiblingFileName(packageFileName, file), 'utf8')\n    )?.match(regEx(/^(?:ruby(?:-|\\s+))?(?<version>\\d[\\d.]*)/m))?.groups\n      ?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in ${file}`);\n      return rubyVersion;\n    }\n  }\n  const lockFile = await getLockFilePath(packageFileName);\n  if (lockFile) {\n    const rubyVersion = (await readLocalFile(lockFile, 'utf8'))?.match(\n      regEx(/^ {3}ruby (?<version>\\d[\\d.]*)(?:[a-z]|\\s|$)/m),\n    )?.groups?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in lock file`);\n      return rubyVersion;\n    }\n  }\n\n  return null;\n}\n\nexport function getBundlerConstraint(\n  updateArtifact: Pick<UpdateArtifact, 'config'>,\n  existingLockFileContent: string,\n): string | null {\n  const { config } = updateArtifact;\n  const { constraints = {} } = config;\n  const { bundler } = constraints;\n\n  if (bundler) {\n    logger.debug('Using bundler constraint from config');\n    return bundler;\n  }\n  const bundledWith = regEx(/\\nBUNDLED WITH\\n\\s+(?<version>.*?)(?:\\n|$)/).exec(\n    existingLockFileContent,\n  );\n  if (bundledWith) {\n    logger.debug('Using bundler version specified in lockfile');\n    return bundledWith.groups!.version;\n  }\n\n  return null;\n}\n\nexport async function getLockFilePath(\n  packageFilePath: string,\n): Promise<string> {\n  const lockFilePath = (await localPathExists(`${packageFilePath}.lock`))\n    ? `${packageFilePath}.lock`\n    : `Gemfile.lock`;\n  logger.debug(`Lockfile for ${packageFilePath} found in ${lockFilePath}`);\n  return lockFilePath;\n}\n"],"mappings":";;;;AASA,MAAa,aAAa,CAAC,MAAK,GAAG;AAEnC,SAAgB,mBAAmB,KAA4B;CAC7D,MAAM,YAAY,MAAM,2CAA2C,CAAC,CAAC,KACnE,GACF;CACA,IAAI,CAAC,WAAW,QACd,OAAO;CAET,MAAM,gBAAgB,UAAU,OAAO;CACvC,OAAO,cAAc,UAAU,GAAG,cAAc,SAAS,CAAC;AAC5D;AAEA,eAAsB,kBACpB,gBACwB;CACxB,MAAM,EAAE,iBAAiB,QAAQ,0BAA0B;CAC3D,MAAM,EAAE,cAAc,CAAC,MAAM;CAC7B,MAAM,EAAE,SAAS;CAEjB,IAAI,MAAM;EACR,OAAO,MAAM,mCAAmC;EAChD,OAAO;CACT;CACA,MAAM,YAAY,mBAAmB,qBAAqB;CAC1D,IAAI,WAAW;EACb,OAAO,MAAM,iCAAiC;EAC9C,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,CAAC,iBAAiB,gBAAgB,GAAG;EACtD,MAAM,eACJ,MAAM,cAAc,mBAAmB,iBAAiB,IAAI,GAAG,MAAM,EAAA,EACpE,MAAM,MAAM,0CAA0C,CAAC,CAAC,EAAE,QACzD;EACJ,IAAI,aAAa;GACf,OAAO,MAAM,mCAAmC,MAAM;GACtD,OAAO;EACT;CACF;CACA,MAAM,WAAW,MAAM,gBAAgB,eAAe;CACtD,IAAI,UAAU;EACZ,MAAM,eAAe,MAAM,cAAc,UAAU,MAAM,EAAA,EAAI,MAC3D,MAAM,+CAA+C,CACvD,CAAC,EAAE,QAAQ;EACX,IAAI,aAAa;GACf,OAAO,MAAM,2CAA2C;GACxD,OAAO;EACT;CACF;CAEA,OAAO;AACT;AAEA,SAAgB,qBACd,gBACA,yBACe;CACf,MAAM,EAAE,WAAW;CACnB,MAAM,EAAE,cAAc,CAAC,MAAM;CAC7B,MAAM,EAAE,YAAY;CAEpB,IAAI,SAAS;EACX,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CACA,MAAM,cAAc,MAAM,4CAA4C,CAAC,CAAC,KACtE,uBACF;CACA,IAAI,aAAa;EACf,OAAO,MAAM,6CAA6C;EAC1D,OAAO,YAAY,OAAQ;CAC7B;CAEA,OAAO;AACT;AAEA,eAAsB,gBACpB,iBACiB;CACjB,MAAM,eAAgB,MAAM,gBAAgB,GAAG,gBAAgB,MAAM,IACjE,GAAG,gBAAgB,SACnB;CACJ,OAAO,MAAM,gBAAgB,gBAAgB,YAAY,cAAc;CACvE,OAAO;AACT"}
+{"version":3,"file":"common.js","names":[],"sources":["../../../../lib/modules/manager/bundler/common.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport {\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n} from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport type { UpdateArtifact } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nexport const delimiters = ['\"', \"'\"];\n\nexport function extractRubyVersion(txt: string): string | null {\n  const rubyMatch = regEx(/^ruby\\s+(?<version>\"[^\"]+\"|'[^']+')\\s*$/gm).exec(\n    txt,\n  );\n  if (!rubyMatch?.groups) {\n    return null;\n  }\n  const quotedVersion = rubyMatch.groups.version;\n  return quotedVersion.substring(1, quotedVersion.length - 1);\n}\n\nasync function getRubyConstraintFromFiles(\n  packageFileName: string,\n  newPackageFileContent: string,\n): Promise<string | null> {\n  const rubyMatch = extractRubyVersion(newPackageFileContent);\n  if (rubyMatch) {\n    logger.debug('Using ruby version from gemfile');\n    return rubyMatch;\n  }\n  for (const file of ['.ruby-version', '.tool-versions']) {\n    const rubyVersion = (\n      await readLocalFile(getSiblingFileName(packageFileName, file), 'utf8')\n    )?.match(regEx(/^(?:ruby(?:-|\\s+))?(?<version>\\d[\\d.]*)/m))?.groups\n      ?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in ${file}`);\n      return rubyVersion;\n    }\n  }\n  const lockFile = await getLockFilePath(packageFileName);\n  if (lockFile) {\n    const rubyVersion = (await readLocalFile(lockFile, 'utf8'))?.match(\n      regEx(/^ {3}ruby (?<version>\\d[\\d.]*)(?:[a-z]|\\s|$)/m),\n    )?.groups?.version;\n    if (rubyVersion) {\n      logger.debug(`Using ruby version specified in lock file`);\n      return rubyVersion;\n    }\n  }\n\n  return null;\n}\n\nexport async function getRubyConstraint(\n  updateArtifact: UpdateArtifact,\n): Promise<string | undefined> {\n  const { packageFileName, config, newPackageFileContent } = updateArtifact;\n  return await resolveToolConstraint(config, 'ruby', () =>\n    getRubyConstraintFromFiles(packageFileName, newPackageFileContent),\n  );\n}\n\nfunction getBundlerConstraintFromLockFile(\n  existingLockFileContent: string,\n): string | null {\n  const bundledWith = regEx(/\\nBUNDLED WITH\\n\\s+(?<version>.*?)(?:\\n|$)/).exec(\n    existingLockFileContent,\n  );\n  if (bundledWith) {\n    logger.debug('Using bundler version specified in lockfile');\n    return bundledWith.groups!.version;\n  }\n\n  return null;\n}\n\nexport async function getBundlerConstraint(\n  updateArtifact: Pick<UpdateArtifact, 'config'>,\n  existingLockFileContent: string,\n): Promise<string | undefined> {\n  const { config } = updateArtifact;\n  return await resolveToolConstraint(config, 'bundler', () =>\n    getBundlerConstraintFromLockFile(existingLockFileContent),\n  );\n}\n\nexport async function getLockFilePath(\n  packageFilePath: string,\n): Promise<string> {\n  const lockFilePath = (await localPathExists(`${packageFilePath}.lock`))\n    ? `${packageFilePath}.lock`\n    : `Gemfile.lock`;\n  logger.debug(`Lockfile for ${packageFilePath} found in ${lockFilePath}`);\n  return lockFilePath;\n}\n"],"mappings":";;;;;AAUA,MAAa,aAAa,CAAC,MAAK,GAAG;AAEnC,SAAgB,mBAAmB,KAA4B;CAC7D,MAAM,YAAY,MAAM,2CAA2C,CAAC,CAAC,KACnE,GACF;CACA,IAAI,CAAC,WAAW,QACd,OAAO;CAET,MAAM,gBAAgB,UAAU,OAAO;CACvC,OAAO,cAAc,UAAU,GAAG,cAAc,SAAS,CAAC;AAC5D;AAEA,eAAe,2BACb,iBACA,uBACwB;CACxB,MAAM,YAAY,mBAAmB,qBAAqB;CAC1D,IAAI,WAAW;EACb,OAAO,MAAM,iCAAiC;EAC9C,OAAO;CACT;CACA,KAAK,MAAM,QAAQ,CAAC,iBAAiB,gBAAgB,GAAG;EACtD,MAAM,eACJ,MAAM,cAAc,mBAAmB,iBAAiB,IAAI,GAAG,MAAM,EAAA,EACpE,MAAM,MAAM,0CAA0C,CAAC,CAAC,EAAE,QACzD;EACJ,IAAI,aAAa;GACf,OAAO,MAAM,mCAAmC,MAAM;GACtD,OAAO;EACT;CACF;CACA,MAAM,WAAW,MAAM,gBAAgB,eAAe;CACtD,IAAI,UAAU;EACZ,MAAM,eAAe,MAAM,cAAc,UAAU,MAAM,EAAA,EAAI,MAC3D,MAAM,+CAA+C,CACvD,CAAC,EAAE,QAAQ;EACX,IAAI,aAAa;GACf,OAAO,MAAM,2CAA2C;GACxD,OAAO;EACT;CACF;CAEA,OAAO;AACT;AAEA,eAAsB,kBACpB,gBAC6B;CAC7B,MAAM,EAAE,iBAAiB,QAAQ,0BAA0B;CAC3D,OAAO,MAAM,sBAAsB,QAAQ,cACzC,2BAA2B,iBAAiB,qBAAqB,CACnE;AACF;AAEA,SAAS,iCACP,yBACe;CACf,MAAM,cAAc,MAAM,4CAA4C,CAAC,CAAC,KACtE,uBACF;CACA,IAAI,aAAa;EACf,OAAO,MAAM,6CAA6C;EAC1D,OAAO,YAAY,OAAQ;CAC7B;CAEA,OAAO;AACT;AAEA,eAAsB,qBACpB,gBACA,yBAC6B;CAC7B,MAAM,EAAE,WAAW;CACnB,OAAO,MAAM,sBAAsB,QAAQ,iBACzC,iCAAiC,uBAAuB,CAC1D;AACF;AAEA,eAAsB,gBACpB,iBACiB;CACjB,MAAM,eAAgB,MAAM,gBAAgB,GAAG,gBAAgB,MAAM,IACjE,GAAG,gBAAgB,SACnB;CACJ,OAAO,MAAM,gBAAgB,gBAAgB,YAAY,cAAc;CACvE,OAAO;AACT"}

package/dist/modules/manager/cargo/artifacts.js

@@ -4,6 +4,7 @@ import { coerceArray } from "../../../util/array.js";
 import { logger } from "../../../logger/index.js";
 import { findLocalSiblingOrParent, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { CrateDatasource } from "../../datasource/crate/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { withGitEnvironment } from "../../../util/git/exec.js";
 import { extractLockFileContentVersions } from "./locked-version.js";
 import { quote } from "shlex";
@@ -55,17 +56,18 @@ async function updateArtifactsImpl({ packageFileName, updatedDeps, newPackageFil
 			contents: existingLockFileContent
 		} }];
 	}
+	const rustConstraint = await resolveToolConstraint(config, "rust");
 	try {
 		await writeLocalFile(packageFileName, newPackageFileContent);
 		logger.debug(`Updating ${lockFileName}`);
-		if (isLockFileMaintenance) await cargoUpdate(packageFileName, true, config.constraints?.rust);
+		if (isLockFileMaintenance) await cargoUpdate(packageFileName, true, rustConstraint);
 		else {
 			const hasNonCrateDep = updatedDeps.some((dep) => dep.datasource !== CrateDatasource.id);
 			const crateDepWithoutLockedVersion = updatedDeps.find((dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id);
 			if (hasNonCrateDep || crateDepWithoutLockedVersion) {
 				if (crateDepWithoutLockedVersion) logger.warn({ dependency: crateDepWithoutLockedVersion.depName }, "Missing locked version for dependency");
-				await cargoUpdate(packageFileName, false, config.constraints?.rust);
-			} else await cargoUpdatePrecise(packageFileName, updatedDeps, config.constraints?.rust);
+				await cargoUpdate(packageFileName, false, rustConstraint);
+			} else await cargoUpdatePrecise(packageFileName, updatedDeps, rustConstraint);
 		}
 		logger.debug("Returning updated Cargo.lock");
 		const newCargoLockContent = await readLocalFile(lockFileName);

package/dist/modules/manager/cargo/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/cargo/artifacts.ts"],"sourcesContent":["import { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../util/git/exec.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { CrateDatasource } from '../../datasource/crate/index.ts';\nimport type {\n  UpdateArtifact,\n  UpdateArtifactsResult,\n  Upgrade,\n} from '../types.ts';\nimport { extractLockFileContentVersions } from './locked-version.ts';\n\nconst gitExec = withGitEnvironment(['cargo']);\n\nasync function cargoUpdate(\n  manifestPath: string,\n  isLockFileMaintenance: boolean,\n  constraint: string | undefined,\n): Promise<void> {\n  let cmd = `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(\n    manifestPath,\n  )}`;\n  // If we're updating a specific crate, `cargo-update` requires `--workspace`\n  // for more information, see: https://github.com/renovatebot/renovate/issues/12332\n  if (!isLockFileMaintenance) {\n    cmd += ` --workspace`;\n  }\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n  await gitExec(cmd, execOptions);\n}\n\nasync function cargoUpdatePrecise(\n  manifestPath: string,\n  updatedDeps: Upgrade[],\n  constraint: string | undefined,\n): Promise<void> {\n  const cmds = [];\n\n  // First update individual dependencies to their `newVersion`. Necessary when\n  // using the `update-lockfile` rangeStrategy which doesn't touch Cargo.toml.\n  for (const dep of updatedDeps) {\n    // If the range is bumped in Cargo.toml, the old lockedVersion may no longer\n    // exist in Cargo's dependency graph, so let the --workspace update at the\n    // end re-resolve it instead.\n    if (dep.currentValue && dep.newValue && dep.currentValue !== dep.newValue) {\n      continue;\n    }\n\n    cmds.push(\n      `cargo update --config net.git-fetch-with-cli=true` +\n        ` --manifest-path ${quote(manifestPath)}` +\n        ` --package ${quote(`${dep.packageName}@${dep.lockedVersion}`)}` +\n        ` --precise ${quote(dep.newVersion!)}`,\n    );\n  }\n\n  // Then update all dependencies that have been bumped in `Cargo.toml`.\n  cmds.push(\n    `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(manifestPath)} --workspace`,\n  );\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n\n  await gitExec(cmds, execOptions);\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  return await updateArtifactsImpl(updateArtifact);\n}\n\nasync function updateArtifactsImpl(\n  {\n    packageFileName,\n    updatedDeps,\n    newPackageFileContent,\n    config,\n  }: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`cargo.updateArtifacts(${packageFileName})`);\n\n  // For standalone package crates, the `Cargo.lock` will be in the same\n  // directory as `Cargo.toml` (ie. a sibling). For cargo workspaces, it\n  // will be further up.\n  const lockFileName = await findLocalSiblingOrParent(\n    packageFileName,\n    'Cargo.lock',\n  );\n  const existingLockFileContent = lockFileName\n    ? await readLocalFile(lockFileName)\n    : null;\n  if (!existingLockFileContent || !lockFileName) {\n    logger.debug('No Cargo.lock found');\n    return null;\n  }\n\n  const { isLockFileMaintenance } = config;\n  if (!isLockFileMaintenance && !updatedDeps?.length) {\n    logger.debug('No more dependencies to update');\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: existingLockFileContent,\n        },\n      },\n    ];\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    logger.debug(`Updating ${lockFileName}`);\n\n    if (isLockFileMaintenance) {\n      await cargoUpdate(packageFileName, true, config.constraints?.rust);\n    } else {\n      const hasNonCrateDep = updatedDeps.some(\n        (dep) => dep.datasource !== CrateDatasource.id,\n      );\n      const crateDepWithoutLockedVersion = updatedDeps.find(\n        (dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id,\n      );\n      // Non-crate dependencies (like git ones) do not have locked versions.\n      // For crate dependencies, a locked version is expected.\n      // In both situations, perform a regular workspace lockfile update.\n      if (hasNonCrateDep || crateDepWithoutLockedVersion) {\n        if (crateDepWithoutLockedVersion) {\n          // Only warn when a crate dependency has no locked version\n          logger.warn(\n            { dependency: crateDepWithoutLockedVersion.depName },\n            'Missing locked version for dependency',\n          );\n        }\n        await cargoUpdate(packageFileName, false, config.constraints?.rust);\n      } else {\n        // If all dependencies have locked versions then update them precisely.\n        await cargoUpdatePrecise(\n          packageFileName,\n          updatedDeps,\n          config.constraints?.rust,\n        );\n      }\n    }\n\n    logger.debug('Returning updated Cargo.lock');\n    const newCargoLockContent = await readLocalFile(lockFileName);\n    if (existingLockFileContent === newCargoLockContent) {\n      logger.debug('Cargo.lock is unchanged');\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newCargoLockContent,\n        },\n      },\n    ];\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n\n    // Sometimes `cargo update` will fail when a preceding dependency update\n    // causes another dependency to update. In this case we can no longer\n    // reference the dependency by its old version, so we filter it out\n    // and retry recursively.\n    const newCargoLockContent = await readLocalFile(lockFileName, 'utf8');\n    if (\n      recursionLimit > 0 &&\n      newCargoLockContent &&\n      regEx(/error: package ID specification/).test(err.stderr)\n    ) {\n      const versions = extractLockFileContentVersions(newCargoLockContent);\n      const newUpdatedDeps = updatedDeps.filter(\n        (dep) =>\n          !coerceArray(versions?.get(dep.packageName!)).includes(\n            dep.newVersion!,\n          ),\n      );\n\n      if (newUpdatedDeps.length < updatedDeps.length) {\n        logger.debug(\n          'Dependency already up to date - reattempting recursively',\n        );\n        return updateArtifactsImpl(\n          {\n            packageFileName,\n            updatedDeps: newUpdatedDeps,\n            newPackageFileContent,\n            config,\n          },\n          recursionLimit - 1,\n        );\n      }\n    }\n\n    logger.debug({ err }, 'Failed to update Cargo lock file');\n\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;AAoBA,MAAM,UAAU,mBAAmB,CAAC,OAAO,CAAC;AAE5C,eAAe,YACb,cACA,uBACA,YACe;CACf,IAAI,MAAM,qEAAqE,MAC7E,YACF;CAGA,IAAI,CAAC,uBACH,OAAO;CAOT,MAAM,QAAQ,KAAK;EAHjB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAEvB,CAAC;AAChC;AAEA,eAAe,mBACb,cACA,aACA,YACe;CACf,MAAM,OAAO,CAAC;CAId,KAAK,MAAM,OAAO,aAAa;EAI7B,IAAI,IAAI,gBAAgB,IAAI,YAAY,IAAI,iBAAiB,IAAI,UAC/D;EAGF,KAAK,KACH,qEACsB,MAAM,YAAY,EAAA,aACxB,MAAM,GAAG,IAAI,YAAY,GAAG,IAAI,eAAe,EAAA,aAC/C,MAAM,IAAI,UAAW,GACvC;CACF;CAGA,KAAK,KACH,qEAAqE,MAAM,YAAY,EAAE,aAC3F;CAOA,MAAM,QAAQ,MAAM;EAJlB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAGtB,CAAC;AACjC;AAEA,eAAsB,gBACpB,gBACyC;CACzC,OAAO,MAAM,oBAAoB,cAAc;AACjD;AAEA,eAAe,oBACb,EACE,iBACA,aACA,uBACA,UAEF,iBAAiB,IACwB;CACzC,OAAO,MAAM,yBAAyB,gBAAgB,EAAE;CAKxD,MAAM,eAAe,MAAM,yBACzB,iBACA,YACF;CACA,MAAM,0BAA0B,eAC5B,MAAM,cAAc,YAAY,IAChC;CACJ,IAAI,CAAC,2BAA2B,CAAC,cAAc;EAC7C,OAAO,MAAM,qBAAqB;EAClC,OAAO;CACT;CAEA,MAAM,EAAE,0BAA0B;CAClC,IAAI,CAAC,yBAAyB,CAAC,aAAa,QAAQ;EAClD,OAAO,MAAM,gCAAgC;EAC7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,OAAO,MAAM,YAAY,cAAc;EAEvC,IAAI,uBACF,MAAM,YAAY,iBAAiB,MAAM,OAAO,aAAa,IAAI;OAC5D;GACL,MAAM,iBAAiB,YAAY,MAChC,QAAQ,IAAI,eAAe,gBAAgB,EAC9C;GACA,MAAM,+BAA+B,YAAY,MAC9C,QAAQ,CAAC,IAAI,iBAAiB,IAAI,eAAe,gBAAgB,EACpE;GAIA,IAAI,kBAAkB,8BAA8B;IAClD,IAAI,8BAEF,OAAO,KACL,EAAE,YAAY,6BAA6B,QAAQ,GACnD,uCACF;IAEF,MAAM,YAAY,iBAAiB,OAAO,OAAO,aAAa,IAAI;GACpE,OAEE,MAAM,mBACJ,iBACA,aACA,OAAO,aAAa,IACtB;EAEJ;EAEA,OAAO,MAAM,8BAA8B;EAC3C,MAAM,sBAAsB,MAAM,cAAc,YAAY;EAC5D,IAAI,4BAA4B,qBAAqB;GACnD,OAAO,MAAM,yBAAyB;GACtC,OAAO;EACT;EACA,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAOR,MAAM,sBAAsB,MAAM,cAAc,cAAc,MAAM;EACpE,IACE,iBAAiB,KACjB,uBACA,MAAM,iCAAiC,CAAC,CAAC,KAAK,IAAI,MAAM,GACxD;GACA,MAAM,WAAW,+BAA+B,mBAAmB;GACnE,MAAM,iBAAiB,YAAY,QAChC,QACC,CAAC,YAAY,UAAU,IAAI,IAAI,WAAY,CAAC,CAAC,CAAC,SAC5C,IAAI,UACN,CACJ;GAEA,IAAI,eAAe,SAAS,YAAY,QAAQ;IAC9C,OAAO,MACL,0DACF;IACA,OAAO,oBACL;KACE;KACA,aAAa;KACb;KACA;IACF,GACA,iBAAiB,CACnB;GACF;EACF;EAEA,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAExD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/cargo/artifacts.ts"],"sourcesContent":["import { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../util/git/exec.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { CrateDatasource } from '../../datasource/crate/index.ts';\nimport type {\n  UpdateArtifact,\n  UpdateArtifactsResult,\n  Upgrade,\n} from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { extractLockFileContentVersions } from './locked-version.ts';\n\nconst gitExec = withGitEnvironment(['cargo']);\n\nasync function cargoUpdate(\n  manifestPath: string,\n  isLockFileMaintenance: boolean,\n  constraint: string | undefined,\n): Promise<void> {\n  let cmd = `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(\n    manifestPath,\n  )}`;\n  // If we're updating a specific crate, `cargo-update` requires `--workspace`\n  // for more information, see: https://github.com/renovatebot/renovate/issues/12332\n  if (!isLockFileMaintenance) {\n    cmd += ` --workspace`;\n  }\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n  await gitExec(cmd, execOptions);\n}\n\nasync function cargoUpdatePrecise(\n  manifestPath: string,\n  updatedDeps: Upgrade[],\n  constraint: string | undefined,\n): Promise<void> {\n  const cmds = [];\n\n  // First update individual dependencies to their `newVersion`. Necessary when\n  // using the `update-lockfile` rangeStrategy which doesn't touch Cargo.toml.\n  for (const dep of updatedDeps) {\n    // If the range is bumped in Cargo.toml, the old lockedVersion may no longer\n    // exist in Cargo's dependency graph, so let the --workspace update at the\n    // end re-resolve it instead.\n    if (dep.currentValue && dep.newValue && dep.currentValue !== dep.newValue) {\n      continue;\n    }\n\n    cmds.push(\n      `cargo update --config net.git-fetch-with-cli=true` +\n        ` --manifest-path ${quote(manifestPath)}` +\n        ` --package ${quote(`${dep.packageName}@${dep.lockedVersion}`)}` +\n        ` --precise ${quote(dep.newVersion!)}`,\n    );\n  }\n\n  // Then update all dependencies that have been bumped in `Cargo.toml`.\n  cmds.push(\n    `cargo update --config net.git-fetch-with-cli=true --manifest-path ${quote(manifestPath)} --workspace`,\n  );\n\n  const execOptions: ExecOptions = {\n    docker: {},\n    toolConstraints: [{ toolName: 'rust', constraint }],\n  };\n\n  await gitExec(cmds, execOptions);\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  return await updateArtifactsImpl(updateArtifact);\n}\n\nasync function updateArtifactsImpl(\n  {\n    packageFileName,\n    updatedDeps,\n    newPackageFileContent,\n    config,\n  }: UpdateArtifact,\n  recursionLimit = 10,\n): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`cargo.updateArtifacts(${packageFileName})`);\n\n  // For standalone package crates, the `Cargo.lock` will be in the same\n  // directory as `Cargo.toml` (ie. a sibling). For cargo workspaces, it\n  // will be further up.\n  const lockFileName = await findLocalSiblingOrParent(\n    packageFileName,\n    'Cargo.lock',\n  );\n  const existingLockFileContent = lockFileName\n    ? await readLocalFile(lockFileName)\n    : null;\n  if (!existingLockFileContent || !lockFileName) {\n    logger.debug('No Cargo.lock found');\n    return null;\n  }\n\n  const { isLockFileMaintenance } = config;\n  if (!isLockFileMaintenance && !updatedDeps?.length) {\n    logger.debug('No more dependencies to update');\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: existingLockFileContent,\n        },\n      },\n    ];\n  }\n\n  const rustConstraint = await resolveToolConstraint(config, 'rust');\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n    logger.debug(`Updating ${lockFileName}`);\n\n    if (isLockFileMaintenance) {\n      await cargoUpdate(packageFileName, true, rustConstraint);\n    } else {\n      const hasNonCrateDep = updatedDeps.some(\n        (dep) => dep.datasource !== CrateDatasource.id,\n      );\n      const crateDepWithoutLockedVersion = updatedDeps.find(\n        (dep) => !dep.lockedVersion && dep.datasource === CrateDatasource.id,\n      );\n      // Non-crate dependencies (like git ones) do not have locked versions.\n      // For crate dependencies, a locked version is expected.\n      // In both situations, perform a regular workspace lockfile update.\n      if (hasNonCrateDep || crateDepWithoutLockedVersion) {\n        if (crateDepWithoutLockedVersion) {\n          // Only warn when a crate dependency has no locked version\n          logger.warn(\n            { dependency: crateDepWithoutLockedVersion.depName },\n            'Missing locked version for dependency',\n          );\n        }\n        await cargoUpdate(packageFileName, false, rustConstraint);\n      } else {\n        // If all dependencies have locked versions then update them precisely.\n        await cargoUpdatePrecise(packageFileName, updatedDeps, rustConstraint);\n      }\n    }\n\n    logger.debug('Returning updated Cargo.lock');\n    const newCargoLockContent = await readLocalFile(lockFileName);\n    if (existingLockFileContent === newCargoLockContent) {\n      logger.debug('Cargo.lock is unchanged');\n      return null;\n    }\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newCargoLockContent,\n        },\n      },\n    ];\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n\n    // Sometimes `cargo update` will fail when a preceding dependency update\n    // causes another dependency to update. In this case we can no longer\n    // reference the dependency by its old version, so we filter it out\n    // and retry recursively.\n    const newCargoLockContent = await readLocalFile(lockFileName, 'utf8');\n    if (\n      recursionLimit > 0 &&\n      newCargoLockContent &&\n      regEx(/error: package ID specification/).test(err.stderr)\n    ) {\n      const versions = extractLockFileContentVersions(newCargoLockContent);\n      const newUpdatedDeps = updatedDeps.filter(\n        (dep) =>\n          !coerceArray(versions?.get(dep.packageName!)).includes(\n            dep.newVersion!,\n          ),\n      );\n\n      if (newUpdatedDeps.length < updatedDeps.length) {\n        logger.debug(\n          'Dependency already up to date - reattempting recursively',\n        );\n        return updateArtifactsImpl(\n          {\n            packageFileName,\n            updatedDeps: newUpdatedDeps,\n            newPackageFileContent,\n            config,\n          },\n          recursionLimit - 1,\n        );\n      }\n    }\n\n    logger.debug({ err }, 'Failed to update Cargo lock file');\n\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;AAqBA,MAAM,UAAU,mBAAmB,CAAC,OAAO,CAAC;AAE5C,eAAe,YACb,cACA,uBACA,YACe;CACf,IAAI,MAAM,qEAAqE,MAC7E,YACF;CAGA,IAAI,CAAC,uBACH,OAAO;CAOT,MAAM,QAAQ,KAAK;EAHjB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAEvB,CAAC;AAChC;AAEA,eAAe,mBACb,cACA,aACA,YACe;CACf,MAAM,OAAO,CAAC;CAId,KAAK,MAAM,OAAO,aAAa;EAI7B,IAAI,IAAI,gBAAgB,IAAI,YAAY,IAAI,iBAAiB,IAAI,UAC/D;EAGF,KAAK,KACH,qEACsB,MAAM,YAAY,EAAA,aACxB,MAAM,GAAG,IAAI,YAAY,GAAG,IAAI,eAAe,EAAA,aAC/C,MAAM,IAAI,UAAW,GACvC;CACF;CAGA,KAAK,KACH,qEAAqE,MAAM,YAAY,EAAE,aAC3F;CAOA,MAAM,QAAQ,MAAM;EAJlB,QAAQ,CAAC;EACT,iBAAiB,CAAC;GAAE,UAAU;GAAQ;EAAW,CAAC;CAGtB,CAAC;AACjC;AAEA,eAAsB,gBACpB,gBACyC;CACzC,OAAO,MAAM,oBAAoB,cAAc;AACjD;AAEA,eAAe,oBACb,EACE,iBACA,aACA,uBACA,UAEF,iBAAiB,IACwB;CACzC,OAAO,MAAM,yBAAyB,gBAAgB,EAAE;CAKxD,MAAM,eAAe,MAAM,yBACzB,iBACA,YACF;CACA,MAAM,0BAA0B,eAC5B,MAAM,cAAc,YAAY,IAChC;CACJ,IAAI,CAAC,2BAA2B,CAAC,cAAc;EAC7C,OAAO,MAAM,qBAAqB;EAClC,OAAO;CACT;CAEA,MAAM,EAAE,0BAA0B;CAClC,IAAI,CAAC,yBAAyB,CAAC,aAAa,QAAQ;EAClD,OAAO,MAAM,gCAAgC;EAC7C,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF;CAEA,MAAM,iBAAiB,MAAM,sBAAsB,QAAQ,MAAM;CAEjE,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAC3D,OAAO,MAAM,YAAY,cAAc;EAEvC,IAAI,uBACF,MAAM,YAAY,iBAAiB,MAAM,cAAc;OAClD;GACL,MAAM,iBAAiB,YAAY,MAChC,QAAQ,IAAI,eAAe,gBAAgB,EAC9C;GACA,MAAM,+BAA+B,YAAY,MAC9C,QAAQ,CAAC,IAAI,iBAAiB,IAAI,eAAe,gBAAgB,EACpE;GAIA,IAAI,kBAAkB,8BAA8B;IAClD,IAAI,8BAEF,OAAO,KACL,EAAE,YAAY,6BAA6B,QAAQ,GACnD,uCACF;IAEF,MAAM,YAAY,iBAAiB,OAAO,cAAc;GAC1D,OAEE,MAAM,mBAAmB,iBAAiB,aAAa,cAAc;EAEzE;EAEA,OAAO,MAAM,8BAA8B;EAC3C,MAAM,sBAAsB,MAAM,cAAc,YAAY;EAC5D,IAAI,4BAA4B,qBAAqB;GACnD,OAAO,MAAM,yBAAyB;GACtC,OAAO;EACT;EACA,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAOR,MAAM,sBAAsB,MAAM,cAAc,cAAc,MAAM;EACpE,IACE,iBAAiB,KACjB,uBACA,MAAM,iCAAiC,CAAC,CAAC,KAAK,IAAI,MAAM,GACxD;GACA,MAAM,WAAW,+BAA+B,mBAAmB;GACnE,MAAM,iBAAiB,YAAY,QAChC,QACC,CAAC,YAAY,UAAU,IAAI,IAAI,WAAY,CAAC,CAAC,CAAC,SAC5C,IAAI,UACN,CACJ;GAEA,IAAI,eAAe,SAAS,YAAY,QAAQ;IAC9C,OAAO,MACL,0DACF;IACA,OAAO,oBACL;KACE;KACA,aAAa;KACb;KACA;IACF,GACA,iBAAiB,CACnB;GACF;EACF;EAEA,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAExD,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/composer/artifacts.js

@@ -7,13 +7,15 @@ import { logger } from "../../../logger/index.js";
 import { find, findAll } from "../../../util/host-rules.js";
 import { deleteLocalFile, ensureCacheDir, ensureLocalDir, getSiblingFileName, localPathExists, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
 import { Json } from "../../../util/schema-utils/index.js";
+import { Lazy } from "../../../util/lazy.js";
 import { exec } from "../../../util/exec/index.js";
 import { getRepoStatus } from "../../../util/git/index.js";
 import { GitTagsDatasource } from "../../datasource/git-tags/index.js";
 import { PackagistDatasource } from "../../datasource/packagist/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { findGithubToken, takePersonalAccessTokenIfPossible } from "../../../util/check-token.js";
 import { Lockfile, PackageFile } from "./schema.js";
-import { extractConstraints, getComposerArguments, getComposerUpdateArguments, getPhpConstraint, isArtifactAuthEnabled, requireComposerDependencyInstallation } from "./utils.js";
+import { extractConstraints, getComposerArguments, getComposerUpdateArguments, isArtifactAuthEnabled, requireComposerDependencyInstallation } from "./utils.js";
 import { isEmptyObject, isString } from "@sindresorhus/is";
 import { z } from "zod/v4";
 import { quote } from "shlex";
@@ -69,17 +71,14 @@ async function updateArtifacts({ packageFileName, updatedDeps, newPackageFileCon
 	await ensureLocalDir(vendorDir);
 	try {
 		await writeLocalFile(packageFileName, newPackageFileContent);
-		const constraints = {
-			...extractConstraints(file, lockfile),
-			...config.constraints
-		};
+		const fileConstraints = new Lazy(() => extractConstraints(file, lockfile));
 		const composerToolConstraint = {
 			toolName: "composer",
-			constraint: constraints.composer
+			constraint: await resolveToolConstraint(config, "composer", () => fileConstraints.getValue().composer)
 		};
 		const phpToolConstraint = {
 			toolName: "php",
-			constraint: getPhpConstraint(constraints)
+			constraint: await resolveToolConstraint(config, "php", () => fileConstraints.getValue().php)
 		};
 		const execOptions = {
 			cwdFile: packageFileName,

package/dist/modules/manager/composer/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":["hostRules.find","hostRules.findAll"],"sources":["../../../../lib/modules/manager/composer/artifacts.ts"],"sourcesContent":["import { isEmptyObject, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { z } from 'zod/v4';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport {\n  findGithubToken,\n  takePersonalAccessTokenIfPossible,\n} from '../../../util/check-token.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type {\n  CommandWithOptions,\n  ExecOptions,\n  ToolConstraint,\n} from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  ensureCacheDir,\n  ensureLocalDir,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Json } from '../../../util/schema-utils/index.ts';\nimport { coerceString } from '../../../util/string.ts';\nimport { GitTagsDatasource } from '../../datasource/git-tags/index.ts';\nimport { PackagistDatasource } from '../../datasource/packagist/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { Lockfile, PackageFile } from './schema.ts';\nimport type { AuthJson } from './types.ts';\nimport {\n  extractConstraints,\n  getComposerArguments,\n  getComposerUpdateArguments,\n  getPhpConstraint,\n  isArtifactAuthEnabled,\n  requireComposerDependencyInstallation,\n} from './utils.ts';\n\nfunction getAuthJson(): string | null {\n  const authJson: AuthJson = {};\n\n  const githubHostRule = hostRules.find({\n    hostType: 'github',\n    url: 'https://api.github.com/',\n  });\n\n  const gitTagsHostRule = hostRules.find({\n    hostType: GitTagsDatasource.id,\n    url: 'https://github.com',\n  });\n\n  const selectedGithubToken = takePersonalAccessTokenIfPossible(\n    isArtifactAuthEnabled(githubHostRule)\n      ? findGithubToken(githubHostRule)\n      : undefined,\n    isArtifactAuthEnabled(gitTagsHostRule)\n      ? findGithubToken(gitTagsHostRule)\n      : undefined,\n  );\n\n  if (selectedGithubToken) {\n    authJson['github-oauth'] = {\n      'github.com': selectedGithubToken,\n    };\n  }\n\n  for (const gitlabHostRule of hostRules.findAll({ hostType: 'gitlab' })) {\n    if (!isArtifactAuthEnabled(gitlabHostRule)) {\n      continue;\n    }\n\n    if (gitlabHostRule?.token) {\n      const host = coerceString(gitlabHostRule.resolvedHost, 'gitlab.com');\n      authJson['gitlab-token'] = coerceObject(authJson['gitlab-token']);\n      authJson['gitlab-token'][host] = gitlabHostRule.token;\n      // https://getcomposer.org/doc/articles/authentication-for-private-packages.md#gitlab-token\n      authJson['gitlab-domains'] = [\n        host,\n        ...coerceArray(authJson['gitlab-domains']),\n      ];\n    }\n  }\n\n  for (const packagistHostRule of hostRules.findAll({\n    hostType: PackagistDatasource.id,\n  })) {\n    if (!isArtifactAuthEnabled(packagistHostRule)) {\n      continue;\n    }\n\n    const { resolvedHost, username, password, token } = packagistHostRule;\n    if (resolvedHost && username && password) {\n      authJson['http-basic'] = coerceObject(authJson['http-basic']);\n      authJson['http-basic'][resolvedHost] = { username, password };\n    } else if (resolvedHost && token) {\n      authJson.bearer = coerceObject(authJson.bearer);\n      authJson.bearer[resolvedHost] = token;\n    }\n  }\n\n  return isEmptyObject(authJson) ? null : JSON.stringify(authJson);\n}\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`composer.updateArtifacts(${packageFileName})`);\n\n  const file = Json.pipe(PackageFile).parse(newPackageFileContent);\n\n  const lockFileName = packageFileName.replace(regEx(/\\.json$/), '.lock');\n  const lockfile = await z\n    .string()\n    .transform((f) => readLocalFile(f, 'utf8'))\n    .pipe(Json)\n    .pipe(Lockfile)\n    .nullable()\n    .catch(null)\n    .parseAsync(lockFileName);\n  if (!lockfile) {\n    logger.debug('Composer: unable to read lockfile');\n    return null;\n  }\n\n  const vendorDir = getSiblingFileName(packageFileName, 'vendor');\n  const commitVendorFiles = await localPathExists(vendorDir);\n  await ensureLocalDir(vendorDir);\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    const constraints = {\n      ...extractConstraints(file, lockfile),\n      ...config.constraints,\n    };\n\n    const composerToolConstraint: ToolConstraint = {\n      toolName: 'composer',\n      constraint: constraints.composer,\n    };\n\n    const phpToolConstraint: ToolConstraint = {\n      toolName: 'php',\n      constraint: getPhpConstraint(constraints),\n    };\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      extraEnv: {\n        COMPOSER_CACHE_DIR: await ensureCacheDir('composer'),\n        COMPOSER_AUTH: getAuthJson(),\n      },\n      toolConstraints: [phpToolConstraint, composerToolConstraint],\n      docker: {},\n    };\n\n    const commands: (string | CommandWithOptions)[] = [];\n\n    // Determine whether install is required before update\n    if (requireComposerDependencyInstallation(lockfile)) {\n      const preCmd = 'composer';\n      const preArgs = `install${getComposerArguments(config, composerToolConstraint)}`;\n      logger.trace({ preCmd, preArgs }, 'composer pre-update command');\n      commands.push('git stash -- composer.json');\n      commands.push(`${preCmd} ${preArgs}`);\n      commands.push({ command: ['git', 'stash', 'pop'], ignoreFailure: true });\n    }\n\n    if (config.isLockFileMaintenance) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      await deleteLocalFile(lockFileName);\n    }\n\n    const cmd = 'composer';\n    let args: string;\n    if (config.isLockFileMaintenance) {\n      args = 'update';\n    } else {\n      args =\n        (\n          'update ' +\n          updatedDeps\n            .map((dep) =>\n              dep.newVersion\n                ? quote(`${dep.depName}:${dep.newVersion}`)\n                : quote(dep.depName!),\n            )\n            .filter(isString)\n            .map((dep) => quote(dep))\n            .join(' ')\n        ).trim() +\n        (config.postUpdateOptions?.includes('composerWithAll')\n          ? ' --with-all-dependencies'\n          : ' --with-dependencies');\n    }\n    args += getComposerUpdateArguments(config, composerToolConstraint);\n    logger.trace({ cmd, args }, 'composer command');\n    commands.push(`${cmd} ${args}`);\n\n    await exec(commands, execOptions);\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated composer.lock');\n    const res: UpdateArtifactsResult[] = [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: await readLocalFile(lockFileName),\n        },\n      },\n    ];\n\n    if (!commitVendorFiles) {\n      return res;\n    }\n\n    logger.debug(`Committing vendor files in ${vendorDir}`);\n    for (const f of [...status.modified, ...status.not_added]) {\n      if (f.startsWith(vendorDir)) {\n        res.push({\n          file: {\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          },\n        });\n      }\n    }\n    for (const f of status.deleted) {\n      res.push({\n        file: {\n          type: 'deletion',\n          path: f,\n        },\n      });\n    }\n\n    return res;\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    if (\n      err.message?.includes(\n        'Your requirements could not be resolved to an installable set of packages.',\n      )\n    ) {\n      logger.info('Composer requirements cannot be resolved');\n    } else if (err.message?.includes('write error (disk full?)')) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    } else {\n      logger.debug({ err }, 'Failed to generate composer.lock');\n    }\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAgDA,SAAS,cAA6B;CACpC,MAAM,WAAqB,CAAC;CAE5B,MAAM,iBAAiBA,KAAe;EACpC,UAAU;EACV,KAAK;CACP,CAAC;CAED,MAAM,kBAAkBA,KAAe;EACrC,UAAU,kBAAkB;EAC5B,KAAK;CACP,CAAC;CAED,MAAM,sBAAsB,kCAC1B,sBAAsB,cAAc,IAChC,gBAAgB,cAAc,IAC9B,KAAA,GACJ,sBAAsB,eAAe,IACjC,gBAAgB,eAAe,IAC/B,KAAA,CACN;CAEA,IAAI,qBACF,SAAS,kBAAkB,EACzB,cAAc,oBAChB;CAGF,KAAK,MAAM,kBAAkBC,QAAkB,EAAE,UAAU,SAAS,CAAC,GAAG;EACtE,IAAI,CAAC,sBAAsB,cAAc,GACvC;EAGF,IAAI,gBAAgB,OAAO;GACzB,MAAM,OAAO,aAAa,eAAe,cAAc,YAAY;GACnE,SAAS,kBAAkB,aAAa,SAAS,eAAe;GAChE,SAAS,eAAe,CAAC,QAAQ,eAAe;GAEhD,SAAS,oBAAoB,CAC3B,MACA,GAAG,YAAY,SAAS,iBAAiB,CAC3C;EACF;CACF;CAEA,KAAK,MAAM,qBAAqBA,QAAkB,EAChD,UAAU,oBAAoB,GAChC,CAAC,GAAG;EACF,IAAI,CAAC,sBAAsB,iBAAiB,GAC1C;EAGF,MAAM,EAAE,cAAc,UAAU,UAAU,UAAU;EACpD,IAAI,gBAAgB,YAAY,UAAU;GACxC,SAAS,gBAAgB,aAAa,SAAS,aAAa;GAC5D,SAAS,aAAa,CAAC,gBAAgB;IAAE;IAAU;GAAS;EAC9D,OAAO,IAAI,gBAAgB,OAAO;GAChC,SAAS,SAAS,aAAa,SAAS,MAAM;GAC9C,SAAS,OAAO,gBAAgB;EAClC;CACF;CAEA,OAAO,cAAc,QAAQ,IAAI,OAAO,KAAK,UAAU,QAAQ;AACjE;AAEA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,qBAAqB;CAE/D,MAAM,eAAe,gBAAgB,QAAQ,MAAM,SAAS,GAAG,OAAO;CACtE,MAAM,WAAW,MAAM,EACpB,OAAO,CAAC,CACR,WAAW,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAC1C,KAAK,IAAI,CAAC,CACV,KAAK,QAAQ,CAAC,CACd,SAAS,CAAC,CACV,MAAM,IAAI,CAAC,CACX,WAAW,YAAY;CAC1B,IAAI,CAAC,UAAU;EACb,OAAO,MAAM,mCAAmC;EAChD,OAAO;CACT;CAEA,MAAM,YAAY,mBAAmB,iBAAiB,QAAQ;CAC9D,MAAM,oBAAoB,MAAM,gBAAgB,SAAS;CACzD,MAAM,eAAe,SAAS;CAC9B,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,MAAM,cAAc;GAClB,GAAG,mBAAmB,MAAM,QAAQ;GACpC,GAAG,OAAO;EACZ;EAEA,MAAM,yBAAyC;GAC7C,UAAU;GACV,YAAY,YAAY;EAC1B;EAEA,MAAM,oBAAoC;GACxC,UAAU;GACV,YAAY,iBAAiB,WAAW;EAC1C;EAEA,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,oBAAoB,MAAM,eAAe,UAAU;IACnD,eAAe,YAAY;GAC7B;GACA,iBAAiB,CAAC,mBAAmB,sBAAsB;GAC3D,QAAQ,CAAC;EACX;EAEA,MAAM,WAA4C,CAAC;EAGnD,IAAI,sCAAsC,QAAQ,GAAG;GACnD,MAAM,SAAS;GACf,MAAM,UAAU,UAAU,qBAAqB,QAAQ,sBAAsB;GAC7E,OAAO,MAAM;IAAE;IAAQ;GAAQ,GAAG,6BAA6B;GAC/D,SAAS,KAAK,4BAA4B;GAC1C,SAAS,KAAK,GAAG,OAAO,GAAG,SAAS;GACpC,SAAS,KAAK;IAAE,SAAS;KAAC;KAAO;KAAS;IAAK;IAAG,eAAe;GAAK,CAAC;EACzE;EAEA,IAAI,OAAO,uBAAuB;GAChC,OAAO,MACL,YAAY,aAAa,4CAC3B;GACA,MAAM,gBAAgB,YAAY;EACpC;EAEA,MAAM,MAAM;EACZ,IAAI;EACJ,IAAI,OAAO,uBACT,OAAO;OAEP,QAEI,YACA,YACG,KAAK,QACJ,IAAI,aACA,MAAM,GAAG,IAAI,QAAQ,GAAG,IAAI,YAAY,IACxC,MAAM,IAAI,OAAQ,CACxB,CAAC,CACA,OAAO,QAAQ,CAAC,CAChB,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,CACxB,KAAK,GAAG,EAAA,CACX,KAAK,KACN,OAAO,mBAAmB,SAAS,iBAAiB,IACjD,6BACA;EAER,QAAQ,2BAA2B,QAAQ,sBAAsB;EACjE,OAAO,MAAM;GAAE;GAAK;EAAK,GAAG,kBAAkB;EAC9C,SAAS,KAAK,GAAG,IAAI,GAAG,MAAM;EAE9B,MAAM,KAAK,UAAU,WAAW;EAChC,MAAM,SAAS,MAAM,cAAc;EACnC,IAAI,CAAC,OAAO,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,iCAAiC;EAC9C,MAAM,MAA+B,CACnC,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,YAAY;EAC5C,EACF,CACF;EAEA,IAAI,CAAC,mBACH,OAAO;EAGT,OAAO,MAAM,8BAA8B,WAAW;EACtD,KAAK,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GACtD,IAAI,EAAE,WAAW,SAAS,GACxB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,CAAC;EACjC,EACF,CAAC;EAGL,KAAK,MAAM,KAAK,OAAO,SACrB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;EACR,EACF,CAAC;EAGH,OAAO;CACT,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,IACE,IAAI,SAAS,SACX,4EACF,GAEA,OAAO,KAAK,0CAA0C;OACjD,IAAI,IAAI,SAAS,SAAS,0BAA0B,GACzD,MAAM,IAAI,MAAM,8BAA8B;OAE9C,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAE1D,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":["hostRules.find","hostRules.findAll"],"sources":["../../../../lib/modules/manager/composer/artifacts.ts"],"sourcesContent":["import { isEmptyObject, isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { z } from 'zod/v4';\nimport {\n  SYSTEM_INSUFFICIENT_DISK_SPACE,\n  TEMPORARY_ERROR,\n} from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport { coerceArray } from '../../../util/array.ts';\nimport {\n  findGithubToken,\n  takePersonalAccessTokenIfPossible,\n} from '../../../util/check-token.ts';\nimport { exec } from '../../../util/exec/index.ts';\nimport type {\n  CommandWithOptions,\n  ExecOptions,\n  ToolConstraint,\n} from '../../../util/exec/types.ts';\nimport {\n  deleteLocalFile,\n  ensureCacheDir,\n  ensureLocalDir,\n  getSiblingFileName,\n  localPathExists,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { getRepoStatus } from '../../../util/git/index.ts';\nimport * as hostRules from '../../../util/host-rules.ts';\nimport { Lazy } from '../../../util/lazy.ts';\nimport { coerceObject } from '../../../util/object.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Json } from '../../../util/schema-utils/index.ts';\nimport { coerceString } from '../../../util/string.ts';\nimport { GitTagsDatasource } from '../../datasource/git-tags/index.ts';\nimport { PackagistDatasource } from '../../datasource/packagist/index.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\nimport { Lockfile, PackageFile } from './schema.ts';\nimport type { AuthJson } from './types.ts';\nimport {\n  extractConstraints,\n  getComposerArguments,\n  getComposerUpdateArguments,\n  isArtifactAuthEnabled,\n  requireComposerDependencyInstallation,\n} from './utils.ts';\n\nfunction getAuthJson(): string | null {\n  const authJson: AuthJson = {};\n\n  const githubHostRule = hostRules.find({\n    hostType: 'github',\n    url: 'https://api.github.com/',\n  });\n\n  const gitTagsHostRule = hostRules.find({\n    hostType: GitTagsDatasource.id,\n    url: 'https://github.com',\n  });\n\n  const selectedGithubToken = takePersonalAccessTokenIfPossible(\n    isArtifactAuthEnabled(githubHostRule)\n      ? findGithubToken(githubHostRule)\n      : undefined,\n    isArtifactAuthEnabled(gitTagsHostRule)\n      ? findGithubToken(gitTagsHostRule)\n      : undefined,\n  );\n\n  if (selectedGithubToken) {\n    authJson['github-oauth'] = {\n      'github.com': selectedGithubToken,\n    };\n  }\n\n  for (const gitlabHostRule of hostRules.findAll({ hostType: 'gitlab' })) {\n    if (!isArtifactAuthEnabled(gitlabHostRule)) {\n      continue;\n    }\n\n    if (gitlabHostRule?.token) {\n      const host = coerceString(gitlabHostRule.resolvedHost, 'gitlab.com');\n      authJson['gitlab-token'] = coerceObject(authJson['gitlab-token']);\n      authJson['gitlab-token'][host] = gitlabHostRule.token;\n      // https://getcomposer.org/doc/articles/authentication-for-private-packages.md#gitlab-token\n      authJson['gitlab-domains'] = [\n        host,\n        ...coerceArray(authJson['gitlab-domains']),\n      ];\n    }\n  }\n\n  for (const packagistHostRule of hostRules.findAll({\n    hostType: PackagistDatasource.id,\n  })) {\n    if (!isArtifactAuthEnabled(packagistHostRule)) {\n      continue;\n    }\n\n    const { resolvedHost, username, password, token } = packagistHostRule;\n    if (resolvedHost && username && password) {\n      authJson['http-basic'] = coerceObject(authJson['http-basic']);\n      authJson['http-basic'][resolvedHost] = { username, password };\n    } else if (resolvedHost && token) {\n      authJson.bearer = coerceObject(authJson.bearer);\n      authJson.bearer[resolvedHost] = token;\n    }\n  }\n\n  return isEmptyObject(authJson) ? null : JSON.stringify(authJson);\n}\n\nexport async function updateArtifacts({\n  packageFileName,\n  updatedDeps,\n  newPackageFileContent,\n  config,\n}: UpdateArtifact): Promise<UpdateArtifactsResult[] | null> {\n  logger.debug(`composer.updateArtifacts(${packageFileName})`);\n\n  const file = Json.pipe(PackageFile).parse(newPackageFileContent);\n\n  const lockFileName = packageFileName.replace(regEx(/\\.json$/), '.lock');\n  const lockfile = await z\n    .string()\n    .transform((f) => readLocalFile(f, 'utf8'))\n    .pipe(Json)\n    .pipe(Lockfile)\n    .nullable()\n    .catch(null)\n    .parseAsync(lockFileName);\n  if (!lockfile) {\n    logger.debug('Composer: unable to read lockfile');\n    return null;\n  }\n\n  const vendorDir = getSiblingFileName(packageFileName, 'vendor');\n  const commitVendorFiles = await localPathExists(vendorDir);\n  await ensureLocalDir(vendorDir);\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    // `extractConstraints()` re-reads the updated package file, so its values win\n    // over what extraction saw on the base branch. It only runs when a user\n    // constraint is missing for at least one of the tools.\n    const fileConstraints = new Lazy(() => extractConstraints(file, lockfile));\n\n    const composerToolConstraint: ToolConstraint = {\n      toolName: 'composer',\n      constraint: await resolveToolConstraint(\n        config,\n        'composer',\n        () => fileConstraints.getValue().composer,\n      ),\n    };\n\n    const phpToolConstraint: ToolConstraint = {\n      toolName: 'php',\n      constraint: await resolveToolConstraint(\n        config,\n        'php',\n        () => fileConstraints.getValue().php,\n      ),\n    };\n\n    const execOptions: ExecOptions = {\n      cwdFile: packageFileName,\n      extraEnv: {\n        COMPOSER_CACHE_DIR: await ensureCacheDir('composer'),\n        COMPOSER_AUTH: getAuthJson(),\n      },\n      toolConstraints: [phpToolConstraint, composerToolConstraint],\n      docker: {},\n    };\n\n    const commands: (string | CommandWithOptions)[] = [];\n\n    // Determine whether install is required before update\n    if (requireComposerDependencyInstallation(lockfile)) {\n      const preCmd = 'composer';\n      const preArgs = `install${getComposerArguments(config, composerToolConstraint)}`;\n      logger.trace({ preCmd, preArgs }, 'composer pre-update command');\n      commands.push('git stash -- composer.json');\n      commands.push(`${preCmd} ${preArgs}`);\n      commands.push({ command: ['git', 'stash', 'pop'], ignoreFailure: true });\n    }\n\n    if (config.isLockFileMaintenance) {\n      logger.debug(\n        `Removing ${lockFileName} first due to lock file maintenance upgrade`,\n      );\n      await deleteLocalFile(lockFileName);\n    }\n\n    const cmd = 'composer';\n    let args: string;\n    if (config.isLockFileMaintenance) {\n      args = 'update';\n    } else {\n      args =\n        (\n          'update ' +\n          updatedDeps\n            .map((dep) =>\n              dep.newVersion\n                ? quote(`${dep.depName}:${dep.newVersion}`)\n                : quote(dep.depName!),\n            )\n            .filter(isString)\n            .map((dep) => quote(dep))\n            .join(' ')\n        ).trim() +\n        (config.postUpdateOptions?.includes('composerWithAll')\n          ? ' --with-all-dependencies'\n          : ' --with-dependencies');\n    }\n    args += getComposerUpdateArguments(config, composerToolConstraint);\n    logger.trace({ cmd, args }, 'composer command');\n    commands.push(`${cmd} ${args}`);\n\n    await exec(commands, execOptions);\n    const status = await getRepoStatus();\n    if (!status.modified.includes(lockFileName)) {\n      return null;\n    }\n    logger.debug('Returning updated composer.lock');\n    const res: UpdateArtifactsResult[] = [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: await readLocalFile(lockFileName),\n        },\n      },\n    ];\n\n    if (!commitVendorFiles) {\n      return res;\n    }\n\n    logger.debug(`Committing vendor files in ${vendorDir}`);\n    for (const f of [...status.modified, ...status.not_added]) {\n      if (f.startsWith(vendorDir)) {\n        res.push({\n          file: {\n            type: 'addition',\n            path: f,\n            contents: await readLocalFile(f),\n          },\n        });\n      }\n    }\n    for (const f of status.deleted) {\n      res.push({\n        file: {\n          type: 'deletion',\n          path: f,\n        },\n      });\n    }\n\n    return res;\n  } catch (err) {\n    // istanbul ignore if\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n    if (\n      err.message?.includes(\n        'Your requirements could not be resolved to an installable set of packages.',\n      )\n    ) {\n      logger.info('Composer requirements cannot be resolved');\n    } else if (err.message?.includes('write error (disk full?)')) {\n      throw new Error(SYSTEM_INSUFFICIENT_DISK_SPACE);\n    } else {\n      logger.debug({ err }, 'Failed to generate composer.lock');\n    }\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAiDA,SAAS,cAA6B;CACpC,MAAM,WAAqB,CAAC;CAE5B,MAAM,iBAAiBA,KAAe;EACpC,UAAU;EACV,KAAK;CACP,CAAC;CAED,MAAM,kBAAkBA,KAAe;EACrC,UAAU,kBAAkB;EAC5B,KAAK;CACP,CAAC;CAED,MAAM,sBAAsB,kCAC1B,sBAAsB,cAAc,IAChC,gBAAgB,cAAc,IAC9B,KAAA,GACJ,sBAAsB,eAAe,IACjC,gBAAgB,eAAe,IAC/B,KAAA,CACN;CAEA,IAAI,qBACF,SAAS,kBAAkB,EACzB,cAAc,oBAChB;CAGF,KAAK,MAAM,kBAAkBC,QAAkB,EAAE,UAAU,SAAS,CAAC,GAAG;EACtE,IAAI,CAAC,sBAAsB,cAAc,GACvC;EAGF,IAAI,gBAAgB,OAAO;GACzB,MAAM,OAAO,aAAa,eAAe,cAAc,YAAY;GACnE,SAAS,kBAAkB,aAAa,SAAS,eAAe;GAChE,SAAS,eAAe,CAAC,QAAQ,eAAe;GAEhD,SAAS,oBAAoB,CAC3B,MACA,GAAG,YAAY,SAAS,iBAAiB,CAC3C;EACF;CACF;CAEA,KAAK,MAAM,qBAAqBA,QAAkB,EAChD,UAAU,oBAAoB,GAChC,CAAC,GAAG;EACF,IAAI,CAAC,sBAAsB,iBAAiB,GAC1C;EAGF,MAAM,EAAE,cAAc,UAAU,UAAU,UAAU;EACpD,IAAI,gBAAgB,YAAY,UAAU;GACxC,SAAS,gBAAgB,aAAa,SAAS,aAAa;GAC5D,SAAS,aAAa,CAAC,gBAAgB;IAAE;IAAU;GAAS;EAC9D,OAAO,IAAI,gBAAgB,OAAO;GAChC,SAAS,SAAS,aAAa,SAAS,MAAM;GAC9C,SAAS,OAAO,gBAAgB;EAClC;CACF;CAEA,OAAO,cAAc,QAAQ,IAAI,OAAO,KAAK,UAAU,QAAQ;AACjE;AAEA,eAAsB,gBAAgB,EACpC,iBACA,aACA,uBACA,UAC0D;CAC1D,OAAO,MAAM,4BAA4B,gBAAgB,EAAE;CAE3D,MAAM,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM,qBAAqB;CAE/D,MAAM,eAAe,gBAAgB,QAAQ,MAAM,SAAS,GAAG,OAAO;CACtE,MAAM,WAAW,MAAM,EACpB,OAAO,CAAC,CACR,WAAW,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,CAC1C,KAAK,IAAI,CAAC,CACV,KAAK,QAAQ,CAAC,CACd,SAAS,CAAC,CACV,MAAM,IAAI,CAAC,CACX,WAAW,YAAY;CAC1B,IAAI,CAAC,UAAU;EACb,OAAO,MAAM,mCAAmC;EAChD,OAAO;CACT;CAEA,MAAM,YAAY,mBAAmB,iBAAiB,QAAQ;CAC9D,MAAM,oBAAoB,MAAM,gBAAgB,SAAS;CACzD,MAAM,eAAe,SAAS;CAC9B,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAK3D,MAAM,kBAAkB,IAAI,WAAW,mBAAmB,MAAM,QAAQ,CAAC;EAEzE,MAAM,yBAAyC;GAC7C,UAAU;GACV,YAAY,MAAM,sBAChB,QACA,kBACM,gBAAgB,SAAS,CAAC,CAAC,QACnC;EACF;EAEA,MAAM,oBAAoC;GACxC,UAAU;GACV,YAAY,MAAM,sBAChB,QACA,aACM,gBAAgB,SAAS,CAAC,CAAC,GACnC;EACF;EAEA,MAAM,cAA2B;GAC/B,SAAS;GACT,UAAU;IACR,oBAAoB,MAAM,eAAe,UAAU;IACnD,eAAe,YAAY;GAC7B;GACA,iBAAiB,CAAC,mBAAmB,sBAAsB;GAC3D,QAAQ,CAAC;EACX;EAEA,MAAM,WAA4C,CAAC;EAGnD,IAAI,sCAAsC,QAAQ,GAAG;GACnD,MAAM,SAAS;GACf,MAAM,UAAU,UAAU,qBAAqB,QAAQ,sBAAsB;GAC7E,OAAO,MAAM;IAAE;IAAQ;GAAQ,GAAG,6BAA6B;GAC/D,SAAS,KAAK,4BAA4B;GAC1C,SAAS,KAAK,GAAG,OAAO,GAAG,SAAS;GACpC,SAAS,KAAK;IAAE,SAAS;KAAC;KAAO;KAAS;IAAK;IAAG,eAAe;GAAK,CAAC;EACzE;EAEA,IAAI,OAAO,uBAAuB;GAChC,OAAO,MACL,YAAY,aAAa,4CAC3B;GACA,MAAM,gBAAgB,YAAY;EACpC;EAEA,MAAM,MAAM;EACZ,IAAI;EACJ,IAAI,OAAO,uBACT,OAAO;OAEP,QAEI,YACA,YACG,KAAK,QACJ,IAAI,aACA,MAAM,GAAG,IAAI,QAAQ,GAAG,IAAI,YAAY,IACxC,MAAM,IAAI,OAAQ,CACxB,CAAC,CACA,OAAO,QAAQ,CAAC,CAChB,KAAK,QAAQ,MAAM,GAAG,CAAC,CAAC,CACxB,KAAK,GAAG,EAAA,CACX,KAAK,KACN,OAAO,mBAAmB,SAAS,iBAAiB,IACjD,6BACA;EAER,QAAQ,2BAA2B,QAAQ,sBAAsB;EACjE,OAAO,MAAM;GAAE;GAAK;EAAK,GAAG,kBAAkB;EAC9C,SAAS,KAAK,GAAG,IAAI,GAAG,MAAM;EAE9B,MAAM,KAAK,UAAU,WAAW;EAChC,MAAM,SAAS,MAAM,cAAc;EACnC,IAAI,CAAC,OAAO,SAAS,SAAS,YAAY,GACxC,OAAO;EAET,OAAO,MAAM,iCAAiC;EAC9C,MAAM,MAA+B,CACnC,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,YAAY;EAC5C,EACF,CACF;EAEA,IAAI,CAAC,mBACH,OAAO;EAGT,OAAO,MAAM,8BAA8B,WAAW;EACtD,KAAK,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,GAAG,OAAO,SAAS,GACtD,IAAI,EAAE,WAAW,SAAS,GACxB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU,MAAM,cAAc,CAAC;EACjC,EACF,CAAC;EAGL,KAAK,MAAM,KAAK,OAAO,SACrB,IAAI,KAAK,EACP,MAAM;GACJ,MAAM;GACN,MAAM;EACR,EACF,CAAC;EAGH,OAAO;CACT,SAAS,KAAK;;EAEZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAER,IACE,IAAI,SAAS,SACX,4EACF,GAEA,OAAO,KAAK,0CAA0C;OACjD,IAAI,IAAI,SAAS,SAAS,0BAA0B,GACzD,MAAM,IAAI,MAAM,8BAA8B;OAE9C,OAAO,MAAM,EAAE,IAAI,GAAG,kCAAkC;EAE1D,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}

package/dist/modules/manager/composer/utils.js

@@ -1,5 +1,4 @@
 import { GlobalConfig } from "../../../config/global.js";
-import { logger } from "../../../logger/index.js";
 import { api, id } from "../../versioning/composer/index.js";
 import { coerceNumber } from "../../../util/number.js";
 import { isString } from "@sindresorhus/is";
@@ -26,14 +25,6 @@ function getComposerUpdateArguments(config, toolConstraint) {
 	if (!config.isLockFileMaintenance && !config.postUpdateOptions?.includes("composerNoMinimalChanges") && isString(toolConstraint.constraint) && api.intersects(toolConstraint.constraint, ">=2.7")) args += " --minimal-changes";
 	return args;
 }
-function getPhpConstraint(constraints) {
-	const { php } = constraints;
-	if (php) {
-		logger.debug("Using php constraint from config");
-		return php;
-	}
-	return null;
-}
 function requireComposerDependencyInstallation({ packages, packagesDev }) {
 	return packages.some((p) => depRequireInstall.has(p.name)) === true || packagesDev.some((p) => depRequireInstall.has(p.name)) === true;
 }
@@ -54,6 +45,6 @@ function isArtifactAuthEnabled(rule) {
 	return !rule.artifactAuth || rule.artifactAuth.includes("composer");
 }
 //#endregion
-export { id as composerVersioningId, extractConstraints, getComposerArguments, getComposerUpdateArguments, getPhpConstraint, isArtifactAuthEnabled, requireComposerDependencyInstallation };
+export { id as composerVersioningId, extractConstraints, getComposerArguments, getComposerUpdateArguments, isArtifactAuthEnabled, requireComposerDependencyInstallation };
 
 //# sourceMappingURL=utils.js.map

package/dist/modules/manager/composer/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","names":[],"sources":["../../../../lib/modules/manager/composer/utils.ts"],"sourcesContent":["// TODO: types (#22198)\nimport { isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { CombinedHostRule } from '../../../types/index.ts';\nimport type {\n  ConstraintName,\n  ToolConstraint,\n} from '../../../util/exec/types.ts';\nimport { coerceNumber } from '../../../util/number.ts';\nimport {\n  api,\n  id as composerVersioningId,\n} from '../../versioning/composer/index.ts';\nimport type { UpdateArtifactsConfig } from '../types.ts';\nimport type { Lockfile, PackageFile } from './schema.ts';\n\nexport { composerVersioningId };\n\nconst depRequireInstall = new Set(['symfony/flex']);\n\nexport function getComposerArguments(\n  config: UpdateArtifactsConfig,\n  toolConstraint: ToolConstraint,\n): string {\n  let args = '';\n\n  if (config.composerIgnorePlatformReqs) {\n    if (config.composerIgnorePlatformReqs.length === 0) {\n      if (\n        isString(toolConstraint.constraint) &&\n        api.intersects!(toolConstraint.constraint, '^2.2')\n      ) {\n        args += \" --ignore-platform-req='ext-*' --ignore-platform-req='lib-*'\";\n      } else {\n        args += ' --ignore-platform-reqs';\n      }\n    } else {\n      config.composerIgnorePlatformReqs.forEach((req) => {\n        args += ` --ignore-platform-req ${quote(req)}`;\n      });\n    }\n  }\n\n  args += ' --no-ansi --no-interaction';\n  if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n    args += ' --no-scripts --no-autoloader';\n  }\n\n  if (!GlobalConfig.get('allowPlugins') || config.ignorePlugins) {\n    args += ' --no-plugins';\n  }\n\n  return args;\n}\n\nexport function getComposerUpdateArguments(\n  config: UpdateArtifactsConfig,\n  toolConstraint: ToolConstraint,\n): string {\n  let args = getComposerArguments(config, toolConstraint);\n\n  if (\n    !config.isLockFileMaintenance &&\n    !config.postUpdateOptions?.includes('composerNoMinimalChanges') &&\n    isString(toolConstraint.constraint) &&\n    api.intersects!(toolConstraint.constraint, '>=2.7')\n  ) {\n    args += ' --minimal-changes';\n  }\n\n  return args;\n}\n\nexport function getPhpConstraint(\n  constraints: Partial<Record<ConstraintName, string>>,\n): string | null {\n  const { php } = constraints;\n\n  if (php) {\n    logger.debug('Using php constraint from config');\n    return php;\n  }\n\n  return null;\n}\n\nexport function requireComposerDependencyInstallation({\n  packages,\n  packagesDev,\n}: Lockfile): boolean {\n  return (\n    packages.some((p) => depRequireInstall.has(p.name)) === true ||\n    packagesDev.some((p) => depRequireInstall.has(p.name)) === true\n  );\n}\n\nexport function extractConstraints(\n  { config, require, requireDev }: PackageFile,\n  { pluginApiVersion }: Lockfile,\n): Partial<Record<ConstraintName, string>> {\n  const res: Record<string, string> = { composer: '1.*' };\n\n  // extract php\n  const phpVersion = config?.platform.php;\n  if (phpVersion) {\n    const major = api.getMajor(phpVersion);\n    const minor = coerceNumber(api.getMinor(phpVersion));\n    const patch = coerceNumber(api.getPatch(phpVersion));\n    res.php = `<=${major}.${minor}.${patch}`;\n  } else if (require.php) {\n    res.php = require.php;\n  }\n\n  // extract direct composer dependency\n  if (require['composer/composer']) {\n    res.composer = require['composer/composer'];\n  } else if (requireDev['composer/composer']) {\n    res.composer = requireDev['composer/composer'];\n  }\n  // composer platform package\n  else if (require.composer) {\n    res.composer = require.composer;\n  } else if (requireDev.composer) {\n    res.composer = requireDev.composer;\n  }\n  // check last used composer version\n  else if (pluginApiVersion) {\n    const major = api.getMajor(pluginApiVersion);\n    const minor = api.getMinor(pluginApiVersion);\n    res.composer = `^${major}.${minor}`;\n  }\n  // check composer api dependency\n  else if (require['composer-runtime-api']) {\n    const major = api.getMajor(require['composer-runtime-api']);\n    const minor = api.getMinor(require['composer-runtime-api']);\n    res.composer = `^${major}.${minor}`;\n  }\n  return res;\n}\n\nexport function isArtifactAuthEnabled(rule: CombinedHostRule): boolean {\n  return !rule.artifactAuth || rule.artifactAuth.includes('composer');\n}\n"],"mappings":";;;;;;;AAoBA,MAAM,oCAAoB,IAAI,IAAI,CAAC,cAAc,CAAC;AAElD,SAAgB,qBACd,QACA,gBACQ;CACR,IAAI,OAAO;CAEX,IAAI,OAAO,4BAA4B;EACrC,IAAI,OAAO,2BAA2B,WAAW,GAAG;GAClD,IACE,SAAS,eAAe,UAAU,KAClC,IAAI,WAAY,eAAe,YAAY,MAAM,GAEjD,QAAQ;QAER,QAAQ;EAEZ,OACE,OAAO,2BAA2B,SAAS,QAAQ;GACjD,QAAQ,0BAA0B,MAAM,GAAG;EAC7C,CAAC;CAEL;CAEA,QAAQ;CACR,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,QAAQ;CAGV,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,QAAQ;CAGV,OAAO;AACT;AAEA,SAAgB,2BACd,QACA,gBACQ;CACR,IAAI,OAAO,qBAAqB,QAAQ,cAAc;CAEtD,IACE,CAAC,OAAO,yBACR,CAAC,OAAO,mBAAmB,SAAS,0BAA0B,KAC9D,SAAS,eAAe,UAAU,KAClC,IAAI,WAAY,eAAe,YAAY,OAAO,GAElD,QAAQ;CAGV,OAAO;AACT;AAEA,SAAgB,iBACd,aACe;CACf,MAAM,EAAE,QAAQ;CAEhB,IAAI,KAAK;EACP,OAAO,MAAM,kCAAkC;EAC/C,OAAO;CACT;CAEA,OAAO;AACT;AAEA,SAAgB,sCAAsC,EACpD,UACA,eACoB;CACpB,OACE,SAAS,MAAM,MAAM,kBAAkB,IAAI,EAAE,IAAI,CAAC,MAAM,QACxD,YAAY,MAAM,MAAM,kBAAkB,IAAI,EAAE,IAAI,CAAC,MAAM;AAE/D;AAEA,SAAgB,mBACd,EAAE,QAAQ,SAAS,cACnB,EAAE,oBACuC;CACzC,MAAM,MAA8B,EAAE,UAAU,MAAM;CAGtD,MAAM,aAAa,QAAQ,SAAS;CACpC,IAAI,YAIF,IAAI,MAAM,KAHI,IAAI,SAAS,UAGR,EAAE,GAFP,aAAa,IAAI,SAAS,UAAU,CAEtB,EAAE,GADhB,aAAa,IAAI,SAAS,UAAU,CACb;MAChC,IAAI,QAAQ,KACjB,IAAI,MAAM,QAAQ;CAIpB,IAAI,QAAQ,sBACV,IAAI,WAAW,QAAQ;MAClB,IAAI,WAAW,sBACpB,IAAI,WAAW,WAAW;MAGvB,IAAI,QAAQ,UACf,IAAI,WAAW,QAAQ;MAClB,IAAI,WAAW,UACpB,IAAI,WAAW,WAAW;MAGvB,IAAI,kBAGP,IAAI,WAAW,IAFD,IAAI,SAAS,gBAEJ,EAAE,GADX,IAAI,SAAS,gBACK;MAG7B,IAAI,QAAQ,yBAGf,IAAI,WAAW,IAFD,IAAI,SAAS,QAAQ,uBAEZ,EAAE,GADX,IAAI,SAAS,QAAQ,uBACH;CAElC,OAAO;AACT;AAEA,SAAgB,sBAAsB,MAAiC;CACrE,OAAO,CAAC,KAAK,gBAAgB,KAAK,aAAa,SAAS,UAAU;AACpE"}
+{"version":3,"file":"utils.js","names":[],"sources":["../../../../lib/modules/manager/composer/utils.ts"],"sourcesContent":["// TODO: types (#22198)\nimport { isString } from '@sindresorhus/is';\nimport { quote } from 'shlex';\nimport { GlobalConfig } from '../../../config/global.ts';\nimport type { CombinedHostRule } from '../../../types/index.ts';\nimport type {\n  ConstraintName,\n  ToolConstraint,\n} from '../../../util/exec/types.ts';\nimport { coerceNumber } from '../../../util/number.ts';\nimport {\n  api,\n  id as composerVersioningId,\n} from '../../versioning/composer/index.ts';\nimport type { UpdateArtifactsConfig } from '../types.ts';\nimport type { Lockfile, PackageFile } from './schema.ts';\n\nexport { composerVersioningId };\n\nconst depRequireInstall = new Set(['symfony/flex']);\n\nexport function getComposerArguments(\n  config: UpdateArtifactsConfig,\n  toolConstraint: ToolConstraint,\n): string {\n  let args = '';\n\n  if (config.composerIgnorePlatformReqs) {\n    if (config.composerIgnorePlatformReqs.length === 0) {\n      if (\n        isString(toolConstraint.constraint) &&\n        api.intersects!(toolConstraint.constraint, '^2.2')\n      ) {\n        args += \" --ignore-platform-req='ext-*' --ignore-platform-req='lib-*'\";\n      } else {\n        args += ' --ignore-platform-reqs';\n      }\n    } else {\n      config.composerIgnorePlatformReqs.forEach((req) => {\n        args += ` --ignore-platform-req ${quote(req)}`;\n      });\n    }\n  }\n\n  args += ' --no-ansi --no-interaction';\n  if (!GlobalConfig.get('allowScripts') || config.ignoreScripts) {\n    args += ' --no-scripts --no-autoloader';\n  }\n\n  if (!GlobalConfig.get('allowPlugins') || config.ignorePlugins) {\n    args += ' --no-plugins';\n  }\n\n  return args;\n}\n\nexport function getComposerUpdateArguments(\n  config: UpdateArtifactsConfig,\n  toolConstraint: ToolConstraint,\n): string {\n  let args = getComposerArguments(config, toolConstraint);\n\n  if (\n    !config.isLockFileMaintenance &&\n    !config.postUpdateOptions?.includes('composerNoMinimalChanges') &&\n    isString(toolConstraint.constraint) &&\n    api.intersects!(toolConstraint.constraint, '>=2.7')\n  ) {\n    args += ' --minimal-changes';\n  }\n\n  return args;\n}\n\nexport function requireComposerDependencyInstallation({\n  packages,\n  packagesDev,\n}: Lockfile): boolean {\n  return (\n    packages.some((p) => depRequireInstall.has(p.name)) === true ||\n    packagesDev.some((p) => depRequireInstall.has(p.name)) === true\n  );\n}\n\nexport function extractConstraints(\n  { config, require, requireDev }: PackageFile,\n  { pluginApiVersion }: Lockfile,\n): Partial<Record<ConstraintName, string>> {\n  const res: Record<string, string> = { composer: '1.*' };\n\n  // extract php\n  const phpVersion = config?.platform.php;\n  if (phpVersion) {\n    const major = api.getMajor(phpVersion);\n    const minor = coerceNumber(api.getMinor(phpVersion));\n    const patch = coerceNumber(api.getPatch(phpVersion));\n    res.php = `<=${major}.${minor}.${patch}`;\n  } else if (require.php) {\n    res.php = require.php;\n  }\n\n  // extract direct composer dependency\n  if (require['composer/composer']) {\n    res.composer = require['composer/composer'];\n  } else if (requireDev['composer/composer']) {\n    res.composer = requireDev['composer/composer'];\n  }\n  // composer platform package\n  else if (require.composer) {\n    res.composer = require.composer;\n  } else if (requireDev.composer) {\n    res.composer = requireDev.composer;\n  }\n  // check last used composer version\n  else if (pluginApiVersion) {\n    const major = api.getMajor(pluginApiVersion);\n    const minor = api.getMinor(pluginApiVersion);\n    res.composer = `^${major}.${minor}`;\n  }\n  // check composer api dependency\n  else if (require['composer-runtime-api']) {\n    const major = api.getMajor(require['composer-runtime-api']);\n    const minor = api.getMinor(require['composer-runtime-api']);\n    res.composer = `^${major}.${minor}`;\n  }\n  return res;\n}\n\nexport function isArtifactAuthEnabled(rule: CombinedHostRule): boolean {\n  return !rule.artifactAuth || rule.artifactAuth.includes('composer');\n}\n"],"mappings":";;;;;;AAmBA,MAAM,oCAAoB,IAAI,IAAI,CAAC,cAAc,CAAC;AAElD,SAAgB,qBACd,QACA,gBACQ;CACR,IAAI,OAAO;CAEX,IAAI,OAAO,4BAA4B;EACrC,IAAI,OAAO,2BAA2B,WAAW,GAAG;GAClD,IACE,SAAS,eAAe,UAAU,KAClC,IAAI,WAAY,eAAe,YAAY,MAAM,GAEjD,QAAQ;QAER,QAAQ;EAEZ,OACE,OAAO,2BAA2B,SAAS,QAAQ;GACjD,QAAQ,0BAA0B,MAAM,GAAG;EAC7C,CAAC;CAEL;CAEA,QAAQ;CACR,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,QAAQ;CAGV,IAAI,CAAC,aAAa,IAAI,cAAc,KAAK,OAAO,eAC9C,QAAQ;CAGV,OAAO;AACT;AAEA,SAAgB,2BACd,QACA,gBACQ;CACR,IAAI,OAAO,qBAAqB,QAAQ,cAAc;CAEtD,IACE,CAAC,OAAO,yBACR,CAAC,OAAO,mBAAmB,SAAS,0BAA0B,KAC9D,SAAS,eAAe,UAAU,KAClC,IAAI,WAAY,eAAe,YAAY,OAAO,GAElD,QAAQ;CAGV,OAAO;AACT;AAEA,SAAgB,sCAAsC,EACpD,UACA,eACoB;CACpB,OACE,SAAS,MAAM,MAAM,kBAAkB,IAAI,EAAE,IAAI,CAAC,MAAM,QACxD,YAAY,MAAM,MAAM,kBAAkB,IAAI,EAAE,IAAI,CAAC,MAAM;AAE/D;AAEA,SAAgB,mBACd,EAAE,QAAQ,SAAS,cACnB,EAAE,oBACuC;CACzC,MAAM,MAA8B,EAAE,UAAU,MAAM;CAGtD,MAAM,aAAa,QAAQ,SAAS;CACpC,IAAI,YAIF,IAAI,MAAM,KAHI,IAAI,SAAS,UAGR,EAAE,GAFP,aAAa,IAAI,SAAS,UAAU,CAEtB,EAAE,GADhB,aAAa,IAAI,SAAS,UAAU,CACb;MAChC,IAAI,QAAQ,KACjB,IAAI,MAAM,QAAQ;CAIpB,IAAI,QAAQ,sBACV,IAAI,WAAW,QAAQ;MAClB,IAAI,WAAW,sBACpB,IAAI,WAAW,WAAW;MAGvB,IAAI,QAAQ,UACf,IAAI,WAAW,QAAQ;MAClB,IAAI,WAAW,UACpB,IAAI,WAAW,WAAW;MAGvB,IAAI,kBAGP,IAAI,WAAW,IAFD,IAAI,SAAS,gBAEJ,EAAE,GADX,IAAI,SAAS,gBACK;MAG7B,IAAI,QAAQ,yBAGf,IAAI,WAAW,IAFD,IAAI,SAAS,QAAQ,uBAEZ,EAAE,GADX,IAAI,SAAS,QAAQ,uBACH;CAElC,OAAO;AACT;AAEA,SAAgB,sBAAsB,MAAiC;CACrE,OAAO,CAAC,KAAK,gBAAgB,KAAK,aAAa,SAAS,UAAU;AACpE"}

package/dist/modules/manager/conan/artifacts.js

@@ -1,6 +1,7 @@
 import "../../../constants/error-messages.js";
 import { logger } from "../../../logger/index.js";
 import { findLocalSiblingOrParent, readLocalFile, writeLocalFile } from "../../../util/fs/index.js";
+import { resolveToolConstraint } from "../util.js";
 import { withGitEnvironment } from "../../../util/git/exec.js";
 import { quote } from "shlex";
 //#region lib/modules/manager/conan/artifacts.ts
@@ -39,7 +40,7 @@ async function updateArtifacts(updateArtifact) {
 	try {
 		await writeLocalFile(packageFileName, newPackageFileContent);
 		logger.trace(`Updating ${lockFileName}`);
-		await conanLockUpdate(packageFileName, isLockFileMaintenance, config.constraints?.conan, config.constraints?.python);
+		await conanLockUpdate(packageFileName, isLockFileMaintenance, await resolveToolConstraint(config, "conan"), await resolveToolConstraint(config, "python"));
 		const newLockFileContent = await readLocalFile(lockFileName);
 		if (!newLockFileContent) {
 			logger.debug(`New ${lockFileName} read operation failed`);

package/dist/modules/manager/conan/artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/conan/artifacts.ts"],"sourcesContent":["import { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../util/git/exec.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\n\nconst gitExec = withGitEnvironment(['conan']);\n\nasync function conanLockUpdate(\n  conanFilePath: string,\n  isLockFileMaintenance: boolean | undefined,\n  conanConstraint?: string,\n  pythonConstraint?: string,\n): Promise<void> {\n  const command = `conan lock create ${quote(conanFilePath)}${isLockFileMaintenance ? ' --lockfile=\"\"' : ''}`;\n\n  const execOptions: ExecOptions = {\n    toolConstraints: [\n      {\n        toolName: 'python',\n        constraint: pythonConstraint,\n      },\n      {\n        toolName: 'conan',\n        constraint: conanConstraint,\n      },\n    ],\n    docker: {},\n  };\n\n  await gitExec(command, execOptions);\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n\n  logger.trace(`conan.updateArtifacts(${packageFileName})`);\n\n  const { isLockFileMaintenance } = config;\n\n  if (updatedDeps.length === 0 && !isLockFileMaintenance) {\n    logger.trace('No conan.lock dependencies to update');\n    return null;\n  }\n\n  const lockFileName = await findLocalSiblingOrParent(\n    packageFileName,\n    'conan.lock',\n  );\n  if (!lockFileName) {\n    logger.trace('No conan.lock found');\n    return null;\n  }\n\n  const existingLockFileContent = await readLocalFile(lockFileName);\n  if (!existingLockFileContent) {\n    logger.debug(`${lockFileName} read operation failed`);\n    return null;\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    logger.trace(`Updating ${lockFileName}`);\n    await conanLockUpdate(\n      packageFileName,\n      isLockFileMaintenance,\n      config.constraints?.conan,\n      config.constraints?.python,\n    );\n\n    const newLockFileContent = await readLocalFile(lockFileName);\n    if (!newLockFileContent) {\n      logger.debug(`New ${lockFileName} read operation failed`);\n      return null;\n    }\n\n    if (existingLockFileContent === newLockFileContent) {\n      logger.trace(`${lockFileName} is unchanged`);\n      return null;\n    }\n\n    logger.trace(`Returning updated ${lockFileName}`);\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newLockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n\n    logger.debug(\n      { err, packageFileName, lockFileName },\n      'Lockfile update failed',\n    );\n\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;AAYA,MAAM,UAAU,mBAAmB,CAAC,OAAO,CAAC;AAE5C,eAAe,gBACb,eACA,uBACA,iBACA,kBACe;CACf,MAAM,UAAU,qBAAqB,MAAM,aAAa,IAAI,wBAAwB,qBAAmB;CAgBvG,MAAM,QAAQ,SAAS;EAbrB,iBAAiB,CACf;GACE,UAAU;GACV,YAAY;EACd,GACA;GACE,UAAU;GACV,YAAY;EACd,CACF;EACA,QAAQ,CAAC;CAGsB,CAAC;AACpC;AAEA,eAAsB,gBACpB,gBACyC;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CAEF,OAAO,MAAM,yBAAyB,gBAAgB,EAAE;CAExD,MAAM,EAAE,0BAA0B;CAElC,IAAI,YAAY,WAAW,KAAK,CAAC,uBAAuB;EACtD,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CAEA,MAAM,eAAe,MAAM,yBACzB,iBACA,YACF;CACA,IAAI,CAAC,cAAc;EACjB,OAAO,MAAM,qBAAqB;EAClC,OAAO;CACT;CAEA,MAAM,0BAA0B,MAAM,cAAc,YAAY;CAChE,IAAI,CAAC,yBAAyB;EAC5B,OAAO,MAAM,GAAG,aAAa,uBAAuB;EACpD,OAAO;CACT;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,OAAO,MAAM,YAAY,cAAc;EACvC,MAAM,gBACJ,iBACA,uBACA,OAAO,aAAa,OACpB,OAAO,aAAa,MACtB;EAEA,MAAM,qBAAqB,MAAM,cAAc,YAAY;EAC3D,IAAI,CAAC,oBAAoB;GACvB,OAAO,MAAM,OAAO,aAAa,uBAAuB;GACxD,OAAO;EACT;EAEA,IAAI,4BAA4B,oBAAoB;GAClD,OAAO,MAAM,GAAG,aAAa,cAAc;GAC3C,OAAO;EACT;EAEA,OAAO,MAAM,qBAAqB,cAAc;EAChD,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAGR,OAAO,MACL;GAAE;GAAK;GAAiB;EAAa,GACrC,wBACF;EAEA,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}
+{"version":3,"file":"artifacts.js","names":[],"sources":["../../../../lib/modules/manager/conan/artifacts.ts"],"sourcesContent":["import { quote } from 'shlex';\nimport { TEMPORARY_ERROR } from '../../../constants/error-messages.ts';\nimport { logger } from '../../../logger/index.ts';\nimport type { ExecOptions } from '../../../util/exec/types.ts';\nimport {\n  findLocalSiblingOrParent,\n  readLocalFile,\n  writeLocalFile,\n} from '../../../util/fs/index.ts';\nimport { withGitEnvironment } from '../../../util/git/exec.ts';\nimport type { UpdateArtifact, UpdateArtifactsResult } from '../types.ts';\nimport { resolveToolConstraint } from '../util.ts';\n\nconst gitExec = withGitEnvironment(['conan']);\n\nasync function conanLockUpdate(\n  conanFilePath: string,\n  isLockFileMaintenance: boolean | undefined,\n  conanConstraint?: string,\n  pythonConstraint?: string,\n): Promise<void> {\n  const command = `conan lock create ${quote(conanFilePath)}${isLockFileMaintenance ? ' --lockfile=\"\"' : ''}`;\n\n  const execOptions: ExecOptions = {\n    toolConstraints: [\n      {\n        toolName: 'python',\n        constraint: pythonConstraint,\n      },\n      {\n        toolName: 'conan',\n        constraint: conanConstraint,\n      },\n    ],\n    docker: {},\n  };\n\n  await gitExec(command, execOptions);\n}\n\nexport async function updateArtifacts(\n  updateArtifact: UpdateArtifact,\n): Promise<UpdateArtifactsResult[] | null> {\n  const { packageFileName, updatedDeps, newPackageFileContent, config } =\n    updateArtifact;\n\n  logger.trace(`conan.updateArtifacts(${packageFileName})`);\n\n  const { isLockFileMaintenance } = config;\n\n  if (updatedDeps.length === 0 && !isLockFileMaintenance) {\n    logger.trace('No conan.lock dependencies to update');\n    return null;\n  }\n\n  const lockFileName = await findLocalSiblingOrParent(\n    packageFileName,\n    'conan.lock',\n  );\n  if (!lockFileName) {\n    logger.trace('No conan.lock found');\n    return null;\n  }\n\n  const existingLockFileContent = await readLocalFile(lockFileName);\n  if (!existingLockFileContent) {\n    logger.debug(`${lockFileName} read operation failed`);\n    return null;\n  }\n\n  try {\n    await writeLocalFile(packageFileName, newPackageFileContent);\n\n    logger.trace(`Updating ${lockFileName}`);\n    await conanLockUpdate(\n      packageFileName,\n      isLockFileMaintenance,\n      await resolveToolConstraint(config, 'conan'),\n      await resolveToolConstraint(config, 'python'),\n    );\n\n    const newLockFileContent = await readLocalFile(lockFileName);\n    if (!newLockFileContent) {\n      logger.debug(`New ${lockFileName} read operation failed`);\n      return null;\n    }\n\n    if (existingLockFileContent === newLockFileContent) {\n      logger.trace(`${lockFileName} is unchanged`);\n      return null;\n    }\n\n    logger.trace(`Returning updated ${lockFileName}`);\n    return [\n      {\n        file: {\n          type: 'addition',\n          path: lockFileName,\n          contents: newLockFileContent,\n        },\n      },\n    ];\n  } catch (err) {\n    if (err.message === TEMPORARY_ERROR) {\n      throw err;\n    }\n\n    logger.debug(\n      { err, packageFileName, lockFileName },\n      'Lockfile update failed',\n    );\n\n    return [\n      {\n        artifactError: {\n          fileName: lockFileName,\n          stderr: err.message,\n        },\n      },\n    ];\n  }\n}\n"],"mappings":";;;;;;;AAaA,MAAM,UAAU,mBAAmB,CAAC,OAAO,CAAC;AAE5C,eAAe,gBACb,eACA,uBACA,iBACA,kBACe;CACf,MAAM,UAAU,qBAAqB,MAAM,aAAa,IAAI,wBAAwB,qBAAmB;CAgBvG,MAAM,QAAQ,SAAS;EAbrB,iBAAiB,CACf;GACE,UAAU;GACV,YAAY;EACd,GACA;GACE,UAAU;GACV,YAAY;EACd,CACF;EACA,QAAQ,CAAC;CAGsB,CAAC;AACpC;AAEA,eAAsB,gBACpB,gBACyC;CACzC,MAAM,EAAE,iBAAiB,aAAa,uBAAuB,WAC3D;CAEF,OAAO,MAAM,yBAAyB,gBAAgB,EAAE;CAExD,MAAM,EAAE,0BAA0B;CAElC,IAAI,YAAY,WAAW,KAAK,CAAC,uBAAuB;EACtD,OAAO,MAAM,sCAAsC;EACnD,OAAO;CACT;CAEA,MAAM,eAAe,MAAM,yBACzB,iBACA,YACF;CACA,IAAI,CAAC,cAAc;EACjB,OAAO,MAAM,qBAAqB;EAClC,OAAO;CACT;CAEA,MAAM,0BAA0B,MAAM,cAAc,YAAY;CAChE,IAAI,CAAC,yBAAyB;EAC5B,OAAO,MAAM,GAAG,aAAa,uBAAuB;EACpD,OAAO;CACT;CAEA,IAAI;EACF,MAAM,eAAe,iBAAiB,qBAAqB;EAE3D,OAAO,MAAM,YAAY,cAAc;EACvC,MAAM,gBACJ,iBACA,uBACA,MAAM,sBAAsB,QAAQ,OAAO,GAC3C,MAAM,sBAAsB,QAAQ,QAAQ,CAC9C;EAEA,MAAM,qBAAqB,MAAM,cAAc,YAAY;EAC3D,IAAI,CAAC,oBAAoB;GACvB,OAAO,MAAM,OAAO,aAAa,uBAAuB;GACxD,OAAO;EACT;EAEA,IAAI,4BAA4B,oBAAoB;GAClD,OAAO,MAAM,GAAG,aAAa,cAAc;GAC3C,OAAO;EACT;EAEA,OAAO,MAAM,qBAAqB,cAAc;EAChD,OAAO,CACL,EACE,MAAM;GACJ,MAAM;GACN,MAAM;GACN,UAAU;EACZ,EACF,CACF;CACF,SAAS,KAAK;EACZ,IAAI,IAAI,YAAA,mBACN,MAAM;EAGR,OAAO,MACL;GAAE;GAAK;GAAiB;EAAa,GACrC,wBACF;EAEA,OAAO,CACL,EACE,eAAe;GACb,UAAU;GACV,QAAQ,IAAI;EACd,EACF,CACF;CACF;AACF"}