renovate 44.86.0 → 44.87.0

package/dist/modules/datasource/sbt-plugin/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../../lib/modules/datasource/sbt-plugin/index.ts"],"sourcesContent":["import { XmlDocument } from 'xmldoc';\nimport { logger } from '../../../logger/index.ts';\nimport { Http } from '../../../util/http/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { ensureTrailingSlash } from '../../../util/url.ts';\nimport * as ivyVersioning from '../../versioning/ivy/index.ts';\nimport { compare } from '../../versioning/maven/compare.ts';\nimport { Datasource } from '../datasource.ts';\nimport { MAVEN_REPO } from '../maven/common.ts';\nimport { downloadHttpContent } from '../maven/util.ts';\nimport { extractPageLinks, getLatestVersion } from '../sbt-package/util.ts';\nimport type {\n  GetReleasesConfig,\n  RegistryStrategy,\n  ReleaseResult,\n} from '../types.ts';\n\nexport const SBT_PLUGINS_REPO =\n  'https://repo.scala-sbt.org/scalasbt/sbt-plugin-releases';\n\nexport class SbtPluginDatasource extends Datasource {\n  static readonly id = 'sbt-plugin';\n\n  override readonly defaultRegistryUrls = [SBT_PLUGINS_REPO, MAVEN_REPO];\n\n  override readonly defaultVersioning = ivyVersioning.id;\n\n  override readonly registryStrategy: RegistryStrategy = 'merge';\n\n  override readonly sourceUrlSupport = 'package';\n  override readonly sourceUrlNote =\n    'The source URL is determined from the `scm` tags in the results.';\n\n  constructor() {\n    super(SbtPluginDatasource.id);\n    this.http = new Http('sbt');\n  }\n\n  // istanbul ignore next: to be rewritten\n  async getArtifactSubdirs(\n    searchRoot: string,\n    artifact: string,\n    scalaVersion: string,\n  ): Promise<string[] | null> {\n    const pkgUrl = ensureTrailingSlash(searchRoot);\n    const indexContent = await downloadHttpContent(this.http, pkgUrl);\n    if (indexContent) {\n      let artifactSubdirs = extractPageLinks(indexContent, (href) => {\n        const path = href.split('/').at(-1)!;\n        if (\n          path.startsWith(`${artifact}_native`) ||\n          path.startsWith(`${artifact}_sjs`)\n        ) {\n          return null;\n        }\n\n        if (path === artifact || path.startsWith(`${artifact}_`)) {\n          return path;\n        }\n\n        return null;\n      });\n\n      if (\n        scalaVersion &&\n        artifactSubdirs.includes(`${artifact}_${scalaVersion}`)\n      ) {\n        artifactSubdirs = [`${artifact}_${scalaVersion}`];\n      }\n      return artifactSubdirs;\n    }\n\n    return null;\n  }\n\n  // istanbul ignore next: to be rewritten\n  async getPackageReleases(\n    searchRoot: string,\n    artifactSubdirs: string[] | null,\n  ): Promise<string[] | null> {\n    if (artifactSubdirs) {\n      const releases: string[] = [];\n      for (const searchSubdir of artifactSubdirs) {\n        const pkgUrl = ensureTrailingSlash(`${searchRoot}/${searchSubdir}`);\n        const content = await downloadHttpContent(this.http, pkgUrl);\n        if (content) {\n          const subdirReleases = extractPageLinks(content, (href) => {\n            const path = href.split('/').at(-1)!;\n            if (path.startsWith('.')) {\n              return null;\n            }\n\n            return path;\n          });\n\n          subdirReleases.forEach((x) => releases.push(x));\n        }\n      }\n      if (releases.length) {\n        return [...new Set(releases)].sort(compare);\n      }\n    }\n\n    return null;\n  }\n\n  // istanbul ignore next: to be rewritten\n  async getUrls(\n    searchRoot: string,\n    artifactDirs: string[] | null,\n    version: string | null,\n  ): Promise<Partial<ReleaseResult>> {\n    const result: Partial<ReleaseResult> = {};\n\n    if (!artifactDirs?.length) {\n      return result;\n    }\n\n    if (!version) {\n      return result;\n    }\n\n    for (const artifactDir of artifactDirs) {\n      const [artifact] = artifactDir.split('_');\n      const pomFileNames = [\n        `${artifactDir}-${version}.pom`,\n        `${artifact}-${version}.pom`,\n      ];\n\n      for (const pomFileName of pomFileNames) {\n        const pomUrl = `${searchRoot}/${artifactDir}/${version}/${pomFileName}`;\n        const content = await downloadHttpContent(this.http, pomUrl);\n        if (content) {\n          const pomXml = new XmlDocument(content);\n\n          const homepage = pomXml.valueWithPath('url');\n          if (homepage) {\n            result.homepage = homepage;\n          }\n\n          const sourceUrl = pomXml.valueWithPath('scm.url');\n          if (sourceUrl) {\n            result.sourceUrl = sourceUrl\n              .replace(regEx(/^scm:/), '')\n              .replace(regEx(/^git:/), '')\n              .replace(regEx(/^git@github.com:/), 'https://github.com/')\n              .replace(regEx(/\\.git$/), '');\n          }\n\n          return result;\n        }\n      }\n    }\n\n    return result;\n  }\n\n  async resolvePluginReleases(\n    rootUrl: string,\n    artifact: string,\n    scalaVersion: string,\n  ): Promise<string[] | null> {\n    const searchRoot = `${rootUrl}/${artifact}`;\n    function hrefFilterMap(href: string): string | null {\n      if (href.startsWith('.')) {\n        return null;\n      }\n\n      return href;\n    }\n    const searchRootContent = await downloadHttpContent(\n      this.http,\n      ensureTrailingSlash(searchRoot),\n    );\n    if (searchRootContent) {\n      const releases: string[] = [];\n      const scalaVersionItems = extractPageLinks(\n        searchRootContent,\n        hrefFilterMap,\n      );\n      const scalaVersions = scalaVersionItems.map((x) =>\n        x.replace(regEx(/^scala_/), ''),\n      );\n      const searchVersions = scalaVersions.includes(scalaVersion)\n        ? [scalaVersion]\n        : scalaVersions;\n      for (const searchVersion of searchVersions) {\n        const searchSubRoot = `${searchRoot}/scala_${searchVersion}`;\n        const subRootContent = await downloadHttpContent(\n          this.http,\n          ensureTrailingSlash(searchSubRoot),\n        );\n        if (subRootContent) {\n          const sbtVersionItems = extractPageLinks(\n            subRootContent,\n            hrefFilterMap,\n          );\n          for (const sbtItem of sbtVersionItems) {\n            const releasesRoot = `${searchSubRoot}/${sbtItem}`;\n            const releasesIndexContent = await downloadHttpContent(\n              this.http,\n              ensureTrailingSlash(releasesRoot),\n            );\n            if (releasesIndexContent) {\n              const releasesParsed = extractPageLinks(\n                releasesIndexContent,\n                hrefFilterMap,\n              );\n              releasesParsed.forEach((x) => releases.push(x));\n            }\n          }\n        }\n      }\n      if (releases.length) {\n        return [...new Set(releases)].sort(compare);\n      }\n    }\n    return null;\n  }\n\n  override async getReleases({\n    packageName,\n    registryUrl,\n  }: GetReleasesConfig): Promise<ReleaseResult | null> {\n    /* v8 ignore next -- should never happen */\n    if (!registryUrl) {\n      return null;\n    }\n\n    const [groupId, artifactId] = packageName.split(':');\n    const groupIdSplit = groupId.split('.');\n    const artifactIdSplit = artifactId.split('_');\n    const [artifact, scalaVersion] = artifactIdSplit;\n\n    const repoRoot = ensureTrailingSlash(registryUrl);\n    const searchRoots: string[] = [];\n    // Optimize lookup order\n    if (!registryUrl.startsWith(MAVEN_REPO)) {\n      searchRoots.push(`${repoRoot}${groupIdSplit.join('.')}`);\n    }\n    searchRoots.push(`${repoRoot}${groupIdSplit.join('/')}`);\n\n    for (const searchRoot of searchRoots) {\n      let versions = await this.resolvePluginReleases(\n        searchRoot,\n        artifact,\n        scalaVersion,\n      );\n      let urls = {};\n\n      if (!versions?.length) {\n        const artifactSubdirs = await this.getArtifactSubdirs(\n          searchRoot,\n          artifact,\n          scalaVersion,\n        );\n        versions = await this.getPackageReleases(searchRoot, artifactSubdirs);\n        const latestVersion = getLatestVersion(versions);\n        urls = await this.getUrls(searchRoot, artifactSubdirs, latestVersion);\n      }\n\n      const dependencyUrl = `${searchRoot}/${artifact}`;\n\n      logger.trace({ dependency: packageName, versions }, `Package versions`);\n      if (versions) {\n        return {\n          ...urls,\n          dependencyUrl,\n          releases: versions.map((v) => ({ version: v })),\n        };\n      }\n    }\n\n    logger.debug(\n      `No versions found for ${packageName} in ${searchRoots.length} repositories`,\n    );\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,mBACX;AAEF,IAAa,sBAAb,MAAa,4BAA4B,WAAW;CAClD,OAAgB,KAAK;CAErB,sBAAwC,CAAC,kBAAkB,UAAU;CAErE,oBAAsC;CAEtC,mBAAuD;CAEvD,mBAAqC;CACrC,gBACE;CAEF,cAAc;EACZ,MAAM,oBAAoB,EAAE;EAC5B,KAAK,OAAO,IAAI,KAAK,KAAK;CAC5B;;CAGA,MAAM,mBACJ,YACA,UACA,cAC0B;EAC1B,MAAM,SAAS,oBAAoB,UAAU;EAC7C,MAAM,eAAe,MAAM,oBAAoB,KAAK,MAAM,MAAM;EAChE,IAAI,cAAc;GAChB,IAAI,kBAAkB,iBAAiB,eAAe,SAAS;IAC7D,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;IAClC,IACE,KAAK,WAAW,GAAG,SAAS,QAAQ,KACpC,KAAK,WAAW,GAAG,SAAS,KAAK,GAEjC,OAAO;IAGT,IAAI,SAAS,YAAY,KAAK,WAAW,GAAG,SAAS,EAAE,GACrD,OAAO;IAGT,OAAO;GACT,CAAC;GAED,IACE,gBACA,gBAAgB,SAAS,GAAG,SAAS,GAAG,cAAc,GAEtD,kBAAkB,CAAC,GAAG,SAAS,GAAG,cAAc;GAElD,OAAO;EACT;EAEA,OAAO;CACT;;CAGA,MAAM,mBACJ,YACA,iBAC0B;EAC1B,IAAI,iBAAiB;GACnB,MAAM,WAAqB,CAAC;GAC5B,KAAK,MAAM,gBAAgB,iBAAiB;IAC1C,MAAM,SAAS,oBAAoB,GAAG,WAAW,GAAG,cAAc;IAClE,MAAM,UAAU,MAAM,oBAAoB,KAAK,MAAM,MAAM;IAC3D,IAAI,SAUF,iBATwC,UAAU,SAAS;KACzD,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;KAClC,IAAI,KAAK,WAAW,GAAG,GACrB,OAAO;KAGT,OAAO;IACT,CAEa,CAAC,CAAC,SAAS,MAAM,SAAS,KAAK,CAAC,CAAC;GAElD;GACA,IAAI,SAAS,QACX,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO;EAE9C;EAEA,OAAO;CACT;;CAGA,MAAM,QACJ,YACA,cACA,SACiC;EACjC,MAAM,SAAiC,CAAC;EAExC,IAAI,CAAC,cAAc,QACjB,OAAO;EAGT,IAAI,CAAC,SACH,OAAO;EAGT,KAAK,MAAM,eAAe,cAAc;GACtC,MAAM,CAAC,YAAY,YAAY,MAAM,GAAG;GACxC,MAAM,eAAe,CACnB,GAAG,YAAY,GAAG,QAAQ,OAC1B,GAAG,SAAS,GAAG,QAAQ,KACzB;GAEA,KAAK,MAAM,eAAe,cAAc;IACtC,MAAM,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG;IAC1D,MAAM,UAAU,MAAM,oBAAoB,KAAK,MAAM,MAAM;IAC3D,IAAI,SAAS;KACX,MAAM,SAAS,IAAI,YAAY,OAAO;KAEtC,MAAM,WAAW,OAAO,cAAc,KAAK;KAC3C,IAAI,UACF,OAAO,WAAW;KAGpB,MAAM,YAAY,OAAO,cAAc,SAAS;KAChD,IAAI,WACF,OAAO,YAAY,UAChB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,CACzD,QAAQ,MAAM,QAAQ,GAAG,EAAE;KAGhC,OAAO;IACT;GACF;EACF;EAEA,OAAO;CACT;CAEA,MAAM,sBACJ,SACA,UACA,cAC0B;EAC1B,MAAM,aAAa,GAAG,QAAQ,GAAG;EACjC,SAAS,cAAc,MAA6B;GAClD,IAAI,KAAK,WAAW,GAAG,GACrB,OAAO;GAGT,OAAO;EACT;EACA,MAAM,oBAAoB,MAAM,oBAC9B,KAAK,MACL,oBAAoB,UAAU,CAChC;EACA,IAAI,mBAAmB;GACrB,MAAM,WAAqB,CAAC;GAK5B,MAAM,gBAJoB,iBACxB,mBACA,aAEoC,CAAC,CAAC,KAAK,MAC3C,EAAE,QAAQ,MAAM,SAAS,GAAG,EAAE,CAChC;GACA,MAAM,iBAAiB,cAAc,SAAS,YAAY,IACtD,CAAC,YAAY,IACb;GACJ,KAAK,MAAM,iBAAiB,gBAAgB;IAC1C,MAAM,gBAAgB,GAAG,WAAW,SAAS;IAC7C,MAAM,iBAAiB,MAAM,oBAC3B,KAAK,MACL,oBAAoB,aAAa,CACnC;IACA,IAAI,gBAAgB;KAClB,MAAM,kBAAkB,iBACtB,gBACA,aACF;KACA,KAAK,MAAM,WAAW,iBAAiB;MACrC,MAAM,eAAe,GAAG,cAAc,GAAG;MACzC,MAAM,uBAAuB,MAAM,oBACjC,KAAK,MACL,oBAAoB,YAAY,CAClC;MACA,IAAI,sBAKF,iBAHE,sBACA,aAEW,CAAC,CAAC,SAAS,MAAM,SAAS,KAAK,CAAC,CAAC;KAElD;IACF;GACF;GACA,IAAI,SAAS,QACX,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO;EAE9C;EACA,OAAO;CACT;CAEA,MAAe,YAAY,EACzB,aACA,eACmD;;EAEnD,IAAI,CAAC,aACH,OAAO;EAGT,MAAM,CAAC,SAAS,cAAc,YAAY,MAAM,GAAG;EACnD,MAAM,eAAe,QAAQ,MAAM,GAAG;EAEtC,MAAM,CAAC,UAAU,gBADO,WAAW,MAAM,GACM;EAE/C,MAAM,WAAW,oBAAoB,WAAW;EAChD,MAAM,cAAwB,CAAC;EAE/B,IAAI,CAAC,YAAY,WAAA,sCAAqB,GACpC,YAAY,KAAK,GAAG,WAAW,aAAa,KAAK,GAAG,GAAG;EAEzD,YAAY,KAAK,GAAG,WAAW,aAAa,KAAK,GAAG,GAAG;EAEvD,KAAK,MAAM,cAAc,aAAa;GACpC,IAAI,WAAW,MAAM,KAAK,sBACxB,YACA,UACA,YACF;GACA,IAAI,OAAO,CAAC;GAEZ,IAAI,CAAC,UAAU,QAAQ;IACrB,MAAM,kBAAkB,MAAM,KAAK,mBACjC,YACA,UACA,YACF;IACA,WAAW,MAAM,KAAK,mBAAmB,YAAY,eAAe;IACpE,MAAM,gBAAgB,iBAAiB,QAAQ;IAC/C,OAAO,MAAM,KAAK,QAAQ,YAAY,iBAAiB,aAAa;GACtE;GAEA,MAAM,gBAAgB,GAAG,WAAW,GAAG;GAEvC,OAAO,MAAM;IAAE,YAAY;IAAa;GAAS,GAAG,kBAAkB;GACtE,IAAI,UACF,OAAO;IACL,GAAG;IACH;IACA,UAAU,SAAS,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE;GAChD;EAEJ;EAEA,OAAO,MACL,yBAAyB,YAAY,MAAM,YAAY,OAAO,cAChE;EACA,OAAO;CACT;AACF"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../../lib/modules/datasource/sbt-plugin/index.ts"],"sourcesContent":["import { XmlDocument } from 'xmldoc';\nimport { logger } from '../../../logger/index.ts';\nimport { Http } from '../../../util/http/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { ensureTrailingSlash } from '../../../util/url.ts';\nimport * as ivyVersioning from '../../versioning/ivy/index.ts';\nimport { compare } from '../../versioning/maven/compare.ts';\nimport { Datasource } from '../datasource.ts';\nimport { MAVEN_REPO } from '../maven/common.ts';\nimport { downloadHttpContent } from '../maven/util.ts';\nimport { extractPageLinks, getLatestVersion } from '../sbt-package/util.ts';\nimport type {\n  GetReleasesConfig,\n  RegistryStrategy,\n  ReleaseResult,\n} from '../types.ts';\n\nexport const SBT_PLUGINS_REPO =\n  'https://repo.scala-sbt.org/scalasbt/sbt-plugin-releases';\n\nexport class SbtPluginDatasource extends Datasource {\n  static readonly id = 'sbt-plugin';\n\n  override readonly defaultRegistryUrls = [SBT_PLUGINS_REPO, MAVEN_REPO];\n\n  override readonly defaultVersioning = ivyVersioning.id;\n\n  override readonly registryStrategy: RegistryStrategy = 'merge';\n\n  override readonly sourceUrlSupport = 'package';\n  override readonly sourceUrlNote =\n    'The source URL is determined from the `scm` tags in the results.';\n\n  constructor() {\n    super(SbtPluginDatasource.id);\n    this.http = new Http('sbt');\n  }\n\n  // istanbul ignore next: to be rewritten\n  async getArtifactSubdirs(\n    searchRoot: string,\n    artifact: string,\n    scalaVersion: string,\n  ): Promise<string[] | null> {\n    const pkgUrl = ensureTrailingSlash(searchRoot);\n    const indexContent = await downloadHttpContent(this.http, pkgUrl);\n    if (indexContent) {\n      let artifactSubdirs = extractPageLinks(indexContent, (href) => {\n        const path = href.split('/').at(-1)!;\n        if (\n          path.startsWith(`${artifact}_native`) ||\n          path.startsWith(`${artifact}_sjs`)\n        ) {\n          return null;\n        }\n\n        if (path === artifact || path.startsWith(`${artifact}_`)) {\n          return path;\n        }\n\n        return null;\n      });\n\n      if (\n        scalaVersion &&\n        artifactSubdirs.includes(`${artifact}_${scalaVersion}`)\n      ) {\n        artifactSubdirs = [`${artifact}_${scalaVersion}`];\n      }\n      return artifactSubdirs;\n    }\n\n    return null;\n  }\n\n  // istanbul ignore next: to be rewritten\n  async getPackageReleases(\n    searchRoot: string,\n    artifactSubdirs: string[] | null,\n  ): Promise<string[] | null> {\n    if (artifactSubdirs) {\n      const releases: string[] = [];\n      for (const searchSubdir of artifactSubdirs) {\n        const pkgUrl = ensureTrailingSlash(`${searchRoot}/${searchSubdir}`);\n        const content = await downloadHttpContent(this.http, pkgUrl);\n        if (content) {\n          const subdirReleases = extractPageLinks(content, (href) => {\n            const path = href.split('/').at(-1)!;\n            if (path.startsWith('.')) {\n              return null;\n            }\n\n            return path;\n          });\n\n          subdirReleases.forEach((x) => releases.push(x));\n        }\n      }\n      if (releases.length) {\n        return [...new Set(releases)].sort(compare);\n      }\n    }\n\n    return null;\n  }\n\n  // istanbul ignore next: to be rewritten\n  async getUrls(\n    searchRoot: string,\n    artifactDirs: string[] | null,\n    version: string | null,\n  ): Promise<Partial<ReleaseResult>> {\n    const result: Partial<ReleaseResult> = {};\n\n    if (!artifactDirs?.length) {\n      return result;\n    }\n\n    if (!version) {\n      return result;\n    }\n\n    for (const artifactDir of artifactDirs) {\n      const [artifact] = artifactDir.split('_');\n      const pomFileNames = [\n        `${artifactDir}-${version}.pom`,\n        `${artifact}-${version}.pom`,\n      ];\n\n      for (const pomFileName of pomFileNames) {\n        const pomUrl = `${searchRoot}/${artifactDir}/${version}/${pomFileName}`;\n        const content = await downloadHttpContent(this.http, pomUrl);\n        if (content) {\n          const pomXml = new XmlDocument(content);\n\n          const homepage = pomXml.valueWithPath('url');\n          if (homepage) {\n            result.homepage = homepage;\n          }\n\n          const sourceUrl = pomXml.valueWithPath('scm.url');\n          if (sourceUrl) {\n            result.sourceUrl = sourceUrl\n              .replace(regEx(/^scm:/), '')\n              .replace(regEx(/^git:/), '')\n              .replace(regEx(/^git@github.com:/), 'https://github.com/')\n              .replace(regEx(/\\.git$/), '');\n          }\n\n          return result;\n        }\n      }\n    }\n\n    return result;\n  }\n\n  async resolvePluginReleases(\n    rootUrl: string,\n    artifact: string,\n    scalaVersion: string,\n  ): Promise<string[] | null> {\n    const searchRoot = `${rootUrl}/${artifact}`;\n    function hrefFilterMap(href: string): string | null {\n      if (href.startsWith('.')) {\n        return null;\n      }\n\n      return href;\n    }\n    const searchRootContent = await downloadHttpContent(\n      this.http,\n      ensureTrailingSlash(searchRoot),\n    );\n    if (searchRootContent) {\n      const releases: string[] = [];\n      const scalaVersionItems = extractPageLinks(\n        searchRootContent,\n        hrefFilterMap,\n      );\n      const scalaVersions = scalaVersionItems.map((x) =>\n        x.replace(regEx(/^scala_/), ''),\n      );\n      const searchVersions = scalaVersions.includes(scalaVersion)\n        ? [scalaVersion]\n        : scalaVersions;\n      for (const searchVersion of searchVersions) {\n        const searchSubRoot = `${searchRoot}/scala_${searchVersion}`;\n        const subRootContent = await downloadHttpContent(\n          this.http,\n          ensureTrailingSlash(searchSubRoot),\n        );\n        // v8 ignore else -- needs a nested directory listing fixture\n        if (subRootContent) {\n          const sbtVersionItems = extractPageLinks(\n            subRootContent,\n            hrefFilterMap,\n          );\n          for (const sbtItem of sbtVersionItems) {\n            const releasesRoot = `${searchSubRoot}/${sbtItem}`;\n            const releasesIndexContent = await downloadHttpContent(\n              this.http,\n              ensureTrailingSlash(releasesRoot),\n            );\n            // v8 ignore else -- needs a nested directory listing fixture\n            if (releasesIndexContent) {\n              const releasesParsed = extractPageLinks(\n                releasesIndexContent,\n                hrefFilterMap,\n              );\n              releasesParsed.forEach((x) => releases.push(x));\n            }\n          }\n        }\n      }\n      // v8 ignore else -- needs a nested directory listing fixture\n      if (releases.length) {\n        return [...new Set(releases)].sort(compare);\n      }\n    }\n    return null;\n  }\n\n  override async getReleases({\n    packageName,\n    registryUrl,\n  }: GetReleasesConfig): Promise<ReleaseResult | null> {\n    /* v8 ignore next -- should never happen */\n    if (!registryUrl) {\n      return null;\n    }\n\n    const [groupId, artifactId] = packageName.split(':');\n    const groupIdSplit = groupId.split('.');\n    const artifactIdSplit = artifactId.split('_');\n    const [artifact, scalaVersion] = artifactIdSplit;\n\n    const repoRoot = ensureTrailingSlash(registryUrl);\n    const searchRoots: string[] = [];\n    // Optimize lookup order\n    if (!registryUrl.startsWith(MAVEN_REPO)) {\n      searchRoots.push(`${repoRoot}${groupIdSplit.join('.')}`);\n    }\n    searchRoots.push(`${repoRoot}${groupIdSplit.join('/')}`);\n\n    for (const searchRoot of searchRoots) {\n      let versions = await this.resolvePluginReleases(\n        searchRoot,\n        artifact,\n        scalaVersion,\n      );\n      let urls = {};\n\n      if (!versions?.length) {\n        const artifactSubdirs = await this.getArtifactSubdirs(\n          searchRoot,\n          artifact,\n          scalaVersion,\n        );\n        versions = await this.getPackageReleases(searchRoot, artifactSubdirs);\n        const latestVersion = getLatestVersion(versions);\n        urls = await this.getUrls(searchRoot, artifactSubdirs, latestVersion);\n      }\n\n      const dependencyUrl = `${searchRoot}/${artifact}`;\n\n      logger.trace({ dependency: packageName, versions }, `Package versions`);\n      if (versions) {\n        return {\n          ...urls,\n          dependencyUrl,\n          releases: versions.map((v) => ({ version: v })),\n        };\n      }\n    }\n\n    logger.debug(\n      `No versions found for ${packageName} in ${searchRoots.length} repositories`,\n    );\n    return null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAiBA,MAAa,mBACX;AAEF,IAAa,sBAAb,MAAa,4BAA4B,WAAW;CAClD,OAAgB,KAAK;CAErB,sBAAwC,CAAC,kBAAkB,UAAU;CAErE,oBAAsC;CAEtC,mBAAuD;CAEvD,mBAAqC;CACrC,gBACE;CAEF,cAAc;EACZ,MAAM,oBAAoB,EAAE;EAC5B,KAAK,OAAO,IAAI,KAAK,KAAK;CAC5B;;CAGA,MAAM,mBACJ,YACA,UACA,cAC0B;EAC1B,MAAM,SAAS,oBAAoB,UAAU;EAC7C,MAAM,eAAe,MAAM,oBAAoB,KAAK,MAAM,MAAM;EAChE,IAAI,cAAc;GAChB,IAAI,kBAAkB,iBAAiB,eAAe,SAAS;IAC7D,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;IAClC,IACE,KAAK,WAAW,GAAG,SAAS,QAAQ,KACpC,KAAK,WAAW,GAAG,SAAS,KAAK,GAEjC,OAAO;IAGT,IAAI,SAAS,YAAY,KAAK,WAAW,GAAG,SAAS,EAAE,GACrD,OAAO;IAGT,OAAO;GACT,CAAC;GAED,IACE,gBACA,gBAAgB,SAAS,GAAG,SAAS,GAAG,cAAc,GAEtD,kBAAkB,CAAC,GAAG,SAAS,GAAG,cAAc;GAElD,OAAO;EACT;EAEA,OAAO;CACT;;CAGA,MAAM,mBACJ,YACA,iBAC0B;EAC1B,IAAI,iBAAiB;GACnB,MAAM,WAAqB,CAAC;GAC5B,KAAK,MAAM,gBAAgB,iBAAiB;IAC1C,MAAM,SAAS,oBAAoB,GAAG,WAAW,GAAG,cAAc;IAClE,MAAM,UAAU,MAAM,oBAAoB,KAAK,MAAM,MAAM;IAC3D,IAAI,SAUF,iBATwC,UAAU,SAAS;KACzD,MAAM,OAAO,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE;KAClC,IAAI,KAAK,WAAW,GAAG,GACrB,OAAO;KAGT,OAAO;IACT,CAEa,CAAC,CAAC,SAAS,MAAM,SAAS,KAAK,CAAC,CAAC;GAElD;GACA,IAAI,SAAS,QACX,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO;EAE9C;EAEA,OAAO;CACT;;CAGA,MAAM,QACJ,YACA,cACA,SACiC;EACjC,MAAM,SAAiC,CAAC;EAExC,IAAI,CAAC,cAAc,QACjB,OAAO;EAGT,IAAI,CAAC,SACH,OAAO;EAGT,KAAK,MAAM,eAAe,cAAc;GACtC,MAAM,CAAC,YAAY,YAAY,MAAM,GAAG;GACxC,MAAM,eAAe,CACnB,GAAG,YAAY,GAAG,QAAQ,OAC1B,GAAG,SAAS,GAAG,QAAQ,KACzB;GAEA,KAAK,MAAM,eAAe,cAAc;IACtC,MAAM,SAAS,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG;IAC1D,MAAM,UAAU,MAAM,oBAAoB,KAAK,MAAM,MAAM;IAC3D,IAAI,SAAS;KACX,MAAM,SAAS,IAAI,YAAY,OAAO;KAEtC,MAAM,WAAW,OAAO,cAAc,KAAK;KAC3C,IAAI,UACF,OAAO,WAAW;KAGpB,MAAM,YAAY,OAAO,cAAc,SAAS;KAChD,IAAI,WACF,OAAO,YAAY,UAChB,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,OAAO,GAAG,EAAE,CAAC,CAC3B,QAAQ,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,CACzD,QAAQ,MAAM,QAAQ,GAAG,EAAE;KAGhC,OAAO;IACT;GACF;EACF;EAEA,OAAO;CACT;CAEA,MAAM,sBACJ,SACA,UACA,cAC0B;EAC1B,MAAM,aAAa,GAAG,QAAQ,GAAG;EACjC,SAAS,cAAc,MAA6B;GAClD,IAAI,KAAK,WAAW,GAAG,GACrB,OAAO;GAGT,OAAO;EACT;EACA,MAAM,oBAAoB,MAAM,oBAC9B,KAAK,MACL,oBAAoB,UAAU,CAChC;EACA,IAAI,mBAAmB;GACrB,MAAM,WAAqB,CAAC;GAK5B,MAAM,gBAJoB,iBACxB,mBACA,aAEoC,CAAC,CAAC,KAAK,MAC3C,EAAE,QAAQ,MAAM,SAAS,GAAG,EAAE,CAChC;GACA,MAAM,iBAAiB,cAAc,SAAS,YAAY,IACtD,CAAC,YAAY,IACb;GACJ,KAAK,MAAM,iBAAiB,gBAAgB;IAC1C,MAAM,gBAAgB,GAAG,WAAW,SAAS;IAC7C,MAAM,iBAAiB,MAAM,oBAC3B,KAAK,MACL,oBAAoB,aAAa,CACnC;;IAEA,IAAI,gBAAgB;KAClB,MAAM,kBAAkB,iBACtB,gBACA,aACF;KACA,KAAK,MAAM,WAAW,iBAAiB;MACrC,MAAM,eAAe,GAAG,cAAc,GAAG;MACzC,MAAM,uBAAuB,MAAM,oBACjC,KAAK,MACL,oBAAoB,YAAY,CAClC;;MAEA,IAAI,sBAKF,iBAHE,sBACA,aAEW,CAAC,CAAC,SAAS,MAAM,SAAS,KAAK,CAAC,CAAC;KAElD;IACF;GACF;;GAEA,IAAI,SAAS,QACX,OAAO,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,OAAO;EAE9C;EACA,OAAO;CACT;CAEA,MAAe,YAAY,EACzB,aACA,eACmD;;EAEnD,IAAI,CAAC,aACH,OAAO;EAGT,MAAM,CAAC,SAAS,cAAc,YAAY,MAAM,GAAG;EACnD,MAAM,eAAe,QAAQ,MAAM,GAAG;EAEtC,MAAM,CAAC,UAAU,gBADO,WAAW,MAAM,GACM;EAE/C,MAAM,WAAW,oBAAoB,WAAW;EAChD,MAAM,cAAwB,CAAC;EAE/B,IAAI,CAAC,YAAY,WAAA,sCAAqB,GACpC,YAAY,KAAK,GAAG,WAAW,aAAa,KAAK,GAAG,GAAG;EAEzD,YAAY,KAAK,GAAG,WAAW,aAAa,KAAK,GAAG,GAAG;EAEvD,KAAK,MAAM,cAAc,aAAa;GACpC,IAAI,WAAW,MAAM,KAAK,sBACxB,YACA,UACA,YACF;GACA,IAAI,OAAO,CAAC;GAEZ,IAAI,CAAC,UAAU,QAAQ;IACrB,MAAM,kBAAkB,MAAM,KAAK,mBACjC,YACA,UACA,YACF;IACA,WAAW,MAAM,KAAK,mBAAmB,YAAY,eAAe;IACpE,MAAM,gBAAgB,iBAAiB,QAAQ;IAC/C,OAAO,MAAM,KAAK,QAAQ,YAAY,iBAAiB,aAAa;GACtE;GAEA,MAAM,gBAAgB,GAAG,WAAW,GAAG;GAEvC,OAAO,MAAM;IAAE,YAAY;IAAa;GAAS,GAAG,kBAAkB;GACtE,IAAI,UACF,OAAO;IACL,GAAG;IACH;IACA,UAAU,SAAS,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE;GAChD;EAEJ;EAEA,OAAO,MACL,yBAAyB,YAAY,MAAM,YAAY,OAAO,cAChE;EACA,OAAO;CACT;AACF"}

package/dist/workers/repository/process/lookup/filter.js

@@ -60,7 +60,7 @@ function filterVersions(config, currentVersion, latestVersion, releases, version
 		else if (config.versioning !== "npm" && semver.validRange(allowedVersions)) {
 			logger.debug({ depName: config.depName }, "Falling back to npm semver syntax for allowedVersions");
 			filteredReleases = filteredReleases.filter((r) => semver.satisfies(
-				semver.valid(r.version) ? r.version : /* v8 ignore start: not reachable, but it's safer to preserve it */ semver.coerce(r.version),
+				semver.valid(r.version) ? r.version : /* v8 ignore start: only for a version the configured versioning accepts but semver cannot parse, e.g. a four-part docker tag, see #40625 */ semver.coerce(r.version),
 				/* v8 ignore stop */
 				allowedVersions
 			));

package/dist/workers/repository/process/lookup/filter.js.map

@@ -1 +1 @@
-{"version":3,"file":"filter.js","names":["template.compile","pep440.isValid","pep440.matches"],"sources":["../../../../../lib/workers/repository/process/lookup/filter.ts"],"sourcesContent":["import semver from 'semver';\nimport { CONFIG_VALIDATION } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport type { Release } from '../../../../modules/datasource/types.ts';\nimport type { VersioningApi } from '../../../../modules/versioning/index.ts';\nimport * as npmVersioning from '../../../../modules/versioning/npm/index.ts';\nimport * as pep440 from '../../../../modules/versioning/pep440/index.ts';\nimport * as poetryVersioning from '../../../../modules/versioning/poetry/index.ts';\nimport { getRegexPredicate } from '../../../../util/string-match.ts';\nimport * as template from '../../../../util/template/index.ts';\nimport type { FilterConfig } from './types.ts';\n\nfunction isReleaseStable(\n  release: Release,\n  versioningApi: VersioningApi,\n): boolean {\n  if (!versioningApi.isStable(release.version)) {\n    return false;\n  }\n\n  if (release.isStable === false) {\n    return false;\n  }\n\n  return true;\n}\n\nfunction filterByMaxMajorIncrement(\n  releases: Release[],\n  currentVersion: string,\n  maxMajorIncrement: number,\n  versioningApi: VersioningApi,\n  depName: string,\n): Release[] {\n  const currentMajor = versioningApi.getMajor(currentVersion);\n  /* v8 ignore next -- shouldn't happen */\n  if (currentMajor === null) {\n    return releases;\n  }\n  return releases.filter((r) => {\n    const releaseMajor = versioningApi.getMajor(r.version);\n    /* v8 ignore next -- shouldn't happen */\n    if (releaseMajor === null) {\n      return true;\n    }\n    const majorIncrement = releaseMajor - currentMajor;\n    if (majorIncrement > maxMajorIncrement) {\n      logger.once.debug(\n        `Skipping ${depName}@${r.version} because major increment ${majorIncrement} exceeds maxMajorIncrement ${maxMajorIncrement}`,\n      );\n      return false;\n    }\n    return true;\n  });\n}\n\nexport function filterVersions(\n  config: FilterConfig,\n  currentVersion: string,\n  latestVersion: string,\n  releases: Release[],\n  versioningApi: VersioningApi,\n): Release[] {\n  const { ignoreUnstable, ignoreDeprecated, respectLatest, maxMajorIncrement } =\n    config;\n\n  /* v8 ignore next -- shouldn't happen */\n  if (!currentVersion) {\n    return [];\n  }\n\n  // Leave only versions greater than current\n  const versionedReleases = releases.filter((r) =>\n    versioningApi.isVersion(r.version),\n  );\n  let filteredReleases = versionedReleases.filter((r) =>\n    versioningApi.isGreaterThan(r.version, currentVersion),\n  );\n\n  const currentRelease = versioningApi.isVersion(currentVersion)\n    ? versionedReleases.find((r) =>\n        versioningApi.equals(r.version, currentVersion),\n      )\n    : undefined;\n\n  // Don't upgrade from non-deprecated to deprecated\n  if (ignoreDeprecated && currentRelease && !currentRelease.isDeprecated) {\n    filteredReleases = filteredReleases.filter((r) => {\n      if (r.isDeprecated) {\n        logger.trace(\n          `Skipping ${config.depName!}@${r.version} because it is deprecated`,\n        );\n        return false;\n      }\n      return true;\n    });\n  }\n\n  if (maxMajorIncrement && maxMajorIncrement > 0) {\n    filteredReleases = filterByMaxMajorIncrement(\n      filteredReleases,\n      currentVersion,\n      maxMajorIncrement,\n      versioningApi,\n      config.depName!,\n    );\n  }\n\n  const currentMajor = versioningApi.getMajor(currentVersion);\n  const currentMinor = versioningApi.getMinor(currentVersion);\n  const currentPatch = versioningApi.getPatch(currentVersion);\n\n  if (config.allowedVersions) {\n    const input = {\n      currentVersion,\n      major: currentMajor,\n      minor: currentMinor,\n      patch: currentPatch,\n    };\n    const allowedVersions = template.compile(config.allowedVersions, input);\n    const isAllowedPred = getRegexPredicate(allowedVersions);\n    if (isAllowedPred) {\n      filteredReleases = filteredReleases.filter(({ version }) =>\n        isAllowedPred(version),\n      );\n    } else if (versioningApi.isValid(allowedVersions)) {\n      filteredReleases = filteredReleases.filter((r) =>\n        versioningApi.matches(r.version, allowedVersions),\n      );\n    } else if (\n      config.versioning !== npmVersioning.id &&\n      semver.validRange(allowedVersions)\n    ) {\n      logger.debug(\n        { depName: config.depName },\n        'Falling back to npm semver syntax for allowedVersions',\n      );\n      filteredReleases = filteredReleases.filter((r) =>\n        semver.satisfies(\n          semver.valid(r.version)\n            ? r.version\n            : /* v8 ignore start: not reachable, but it's safer to preserve it */ semver.coerce(\n                r.version,\n              )!,\n          /* v8 ignore stop */\n          allowedVersions,\n        ),\n      );\n    } else if (\n      config.versioning === poetryVersioning.id &&\n      pep440.isValid(allowedVersions)\n    ) {\n      logger.debug(\n        { depName: config.depName },\n        'Falling back to pypi syntax for allowedVersions',\n      );\n      filteredReleases = filteredReleases.filter((r) =>\n        pep440.matches(r.version, allowedVersions),\n      );\n    } else {\n      const error = new Error(CONFIG_VALIDATION);\n      error.validationSource = 'config';\n      error.validationError = 'Invalid `allowedVersions`';\n      error.validationMessage = `The following allowedVersions does not parse as a valid version or range with versioning=${JSON.stringify(config.versioning)}: ${JSON.stringify(allowedVersions)}`;\n      throw error;\n    }\n  }\n\n  if (config.followTag) {\n    return filteredReleases;\n  }\n\n  if (\n    respectLatest &&\n    latestVersion &&\n    !versioningApi.isGreaterThan(currentVersion, latestVersion)\n  ) {\n    filteredReleases = filteredReleases.filter(\n      (r) => !versioningApi.isGreaterThan(r.version, latestVersion),\n    );\n  }\n\n  if (!ignoreUnstable) {\n    return filteredReleases;\n  }\n\n  if (currentRelease && isReleaseStable(currentRelease, versioningApi)) {\n    return filteredReleases.filter((r) => isReleaseStable(r, versioningApi));\n  }\n\n  return filteredReleases.filter((r) => {\n    if (isReleaseStable(r, versioningApi)) {\n      return true;\n    }\n\n    const major = versioningApi.getMajor(r.version);\n\n    if (major !== currentMajor) {\n      return false;\n    }\n\n    if (versioningApi.allowUnstableMajorUpgrades) {\n      return true;\n    }\n\n    const minor = versioningApi.getMinor(r.version);\n    const patch = versioningApi.getPatch(r.version);\n\n    return minor === currentMinor && patch === currentPatch;\n  });\n}\n"],"mappings":";;;;;;;;;AAYA,SAAS,gBACP,SACA,eACS;CACT,IAAI,CAAC,cAAc,SAAS,QAAQ,OAAO,GACzC,OAAO;CAGT,IAAI,QAAQ,aAAa,OACvB,OAAO;CAGT,OAAO;AACT;AAEA,SAAS,0BACP,UACA,gBACA,mBACA,eACA,SACW;CACX,MAAM,eAAe,cAAc,SAAS,cAAc;;CAE1D,IAAI,iBAAiB,MACnB,OAAO;CAET,OAAO,SAAS,QAAQ,MAAM;EAC5B,MAAM,eAAe,cAAc,SAAS,EAAE,OAAO;;EAErD,IAAI,iBAAiB,MACnB,OAAO;EAET,MAAM,iBAAiB,eAAe;EACtC,IAAI,iBAAiB,mBAAmB;GACtC,OAAO,KAAK,MACV,YAAY,QAAQ,GAAG,EAAE,QAAQ,2BAA2B,eAAe,6BAA6B,mBAC1G;GACA,OAAO;EACT;EACA,OAAO;CACT,CAAC;AACH;AAEA,SAAgB,eACd,QACA,gBACA,eACA,UACA,eACW;CACX,MAAM,EAAE,gBAAgB,kBAAkB,eAAe,sBACvD;;CAGF,IAAI,CAAC,gBACH,OAAO,CAAC;CAIV,MAAM,oBAAoB,SAAS,QAAQ,MACzC,cAAc,UAAU,EAAE,OAAO,CACnC;CACA,IAAI,mBAAmB,kBAAkB,QAAQ,MAC/C,cAAc,cAAc,EAAE,SAAS,cAAc,CACvD;CAEA,MAAM,iBAAiB,cAAc,UAAU,cAAc,IACzD,kBAAkB,MAAM,MACtB,cAAc,OAAO,EAAE,SAAS,cAAc,CAChD,IACA,KAAA;CAGJ,IAAI,oBAAoB,kBAAkB,CAAC,eAAe,cACxD,mBAAmB,iBAAiB,QAAQ,MAAM;EAChD,IAAI,EAAE,cAAc;GAClB,OAAO,MACL,YAAY,OAAO,QAAS,GAAG,EAAE,QAAQ,0BAC3C;GACA,OAAO;EACT;EACA,OAAO;CACT,CAAC;CAGH,IAAI,qBAAqB,oBAAoB,GAC3C,mBAAmB,0BACjB,kBACA,gBACA,mBACA,eACA,OAAO,OACT;CAGF,MAAM,eAAe,cAAc,SAAS,cAAc;CAC1D,MAAM,eAAe,cAAc,SAAS,cAAc;CAC1D,MAAM,eAAe,cAAc,SAAS,cAAc;CAE1D,IAAI,OAAO,iBAAiB;EAC1B,MAAM,QAAQ;GACZ;GACA,OAAO;GACP,OAAO;GACP,OAAO;EACT;EACA,MAAM,kBAAkBA,QAAiB,OAAO,iBAAiB,KAAK;EACtE,MAAM,gBAAgB,kBAAkB,eAAe;EACvD,IAAI,eACF,mBAAmB,iBAAiB,QAAQ,EAAE,cAC5C,cAAc,OAAO,CACvB;OACK,IAAI,cAAc,QAAQ,eAAe,GAC9C,mBAAmB,iBAAiB,QAAQ,MAC1C,cAAc,QAAQ,EAAE,SAAS,eAAe,CAClD;OACK,IACL,OAAO,eAAe,SACtB,OAAO,WAAW,eAAe,GACjC;GACA,OAAO,MACL,EAAE,SAAS,OAAO,QAAQ,GAC1B,uDACF;GACA,mBAAmB,iBAAiB,QAAQ,MAC1C,OAAO;IACL,OAAO,MAAM,EAAE,OAAO,IAClB,EAAE,8EACkE,OAAO,OACzE,EAAE,OACJ;;IAEJ;GACF,CACF;EACF,OAAO,IACL,OAAO,eAAe,YACtBC,QAAe,eAAe,GAC9B;GACA,OAAO,MACL,EAAE,SAAS,OAAO,QAAQ,GAC1B,iDACF;GACA,mBAAmB,iBAAiB,QAAQ,MAC1CC,QAAe,EAAE,SAAS,eAAe,CAC3C;EACF,OAAO;GACL,MAAM,QAAQ,IAAI,MAAM,iBAAiB;GACzC,MAAM,mBAAmB;GACzB,MAAM,kBAAkB;GACxB,MAAM,oBAAoB,4FAA4F,KAAK,UAAU,OAAO,UAAU,EAAE,IAAI,KAAK,UAAU,eAAe;GAC1L,MAAM;EACR;CACF;CAEA,IAAI,OAAO,WACT,OAAO;CAGT,IACE,iBACA,iBACA,CAAC,cAAc,cAAc,gBAAgB,aAAa,GAE1D,mBAAmB,iBAAiB,QACjC,MAAM,CAAC,cAAc,cAAc,EAAE,SAAS,aAAa,CAC9D;CAGF,IAAI,CAAC,gBACH,OAAO;CAGT,IAAI,kBAAkB,gBAAgB,gBAAgB,aAAa,GACjE,OAAO,iBAAiB,QAAQ,MAAM,gBAAgB,GAAG,aAAa,CAAC;CAGzE,OAAO,iBAAiB,QAAQ,MAAM;EACpC,IAAI,gBAAgB,GAAG,aAAa,GAClC,OAAO;EAKT,IAFc,cAAc,SAAS,EAAE,OAE/B,MAAM,cACZ,OAAO;EAGT,IAAI,cAAc,4BAChB,OAAO;EAGT,MAAM,QAAQ,cAAc,SAAS,EAAE,OAAO;EAC9C,MAAM,QAAQ,cAAc,SAAS,EAAE,OAAO;EAE9C,OAAO,UAAU,gBAAgB,UAAU;CAC7C,CAAC;AACH"}
+{"version":3,"file":"filter.js","names":["template.compile","pep440.isValid","pep440.matches"],"sources":["../../../../../lib/workers/repository/process/lookup/filter.ts"],"sourcesContent":["import semver from 'semver';\nimport { CONFIG_VALIDATION } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport type { Release } from '../../../../modules/datasource/types.ts';\nimport type { VersioningApi } from '../../../../modules/versioning/index.ts';\nimport * as npmVersioning from '../../../../modules/versioning/npm/index.ts';\nimport * as pep440 from '../../../../modules/versioning/pep440/index.ts';\nimport * as poetryVersioning from '../../../../modules/versioning/poetry/index.ts';\nimport { getRegexPredicate } from '../../../../util/string-match.ts';\nimport * as template from '../../../../util/template/index.ts';\nimport type { FilterConfig } from './types.ts';\n\nfunction isReleaseStable(\n  release: Release,\n  versioningApi: VersioningApi,\n): boolean {\n  if (!versioningApi.isStable(release.version)) {\n    return false;\n  }\n\n  if (release.isStable === false) {\n    return false;\n  }\n\n  return true;\n}\n\nfunction filterByMaxMajorIncrement(\n  releases: Release[],\n  currentVersion: string,\n  maxMajorIncrement: number,\n  versioningApi: VersioningApi,\n  depName: string,\n): Release[] {\n  const currentMajor = versioningApi.getMajor(currentVersion);\n  /* v8 ignore next -- shouldn't happen */\n  if (currentMajor === null) {\n    return releases;\n  }\n  return releases.filter((r) => {\n    const releaseMajor = versioningApi.getMajor(r.version);\n    /* v8 ignore next -- shouldn't happen */\n    if (releaseMajor === null) {\n      return true;\n    }\n    const majorIncrement = releaseMajor - currentMajor;\n    if (majorIncrement > maxMajorIncrement) {\n      logger.once.debug(\n        `Skipping ${depName}@${r.version} because major increment ${majorIncrement} exceeds maxMajorIncrement ${maxMajorIncrement}`,\n      );\n      return false;\n    }\n    return true;\n  });\n}\n\nexport function filterVersions(\n  config: FilterConfig,\n  currentVersion: string,\n  latestVersion: string,\n  releases: Release[],\n  versioningApi: VersioningApi,\n): Release[] {\n  const { ignoreUnstable, ignoreDeprecated, respectLatest, maxMajorIncrement } =\n    config;\n\n  /* v8 ignore next -- shouldn't happen */\n  if (!currentVersion) {\n    return [];\n  }\n\n  // Leave only versions greater than current\n  const versionedReleases = releases.filter((r) =>\n    versioningApi.isVersion(r.version),\n  );\n  let filteredReleases = versionedReleases.filter((r) =>\n    versioningApi.isGreaterThan(r.version, currentVersion),\n  );\n\n  const currentRelease = versioningApi.isVersion(currentVersion)\n    ? versionedReleases.find((r) =>\n        versioningApi.equals(r.version, currentVersion),\n      )\n    : undefined;\n\n  // Don't upgrade from non-deprecated to deprecated\n  if (ignoreDeprecated && currentRelease && !currentRelease.isDeprecated) {\n    filteredReleases = filteredReleases.filter((r) => {\n      if (r.isDeprecated) {\n        logger.trace(\n          `Skipping ${config.depName!}@${r.version} because it is deprecated`,\n        );\n        return false;\n      }\n      return true;\n    });\n  }\n\n  if (maxMajorIncrement && maxMajorIncrement > 0) {\n    filteredReleases = filterByMaxMajorIncrement(\n      filteredReleases,\n      currentVersion,\n      maxMajorIncrement,\n      versioningApi,\n      config.depName!,\n    );\n  }\n\n  const currentMajor = versioningApi.getMajor(currentVersion);\n  const currentMinor = versioningApi.getMinor(currentVersion);\n  const currentPatch = versioningApi.getPatch(currentVersion);\n\n  if (config.allowedVersions) {\n    const input = {\n      currentVersion,\n      major: currentMajor,\n      minor: currentMinor,\n      patch: currentPatch,\n    };\n    const allowedVersions = template.compile(config.allowedVersions, input);\n    const isAllowedPred = getRegexPredicate(allowedVersions);\n    if (isAllowedPred) {\n      filteredReleases = filteredReleases.filter(({ version }) =>\n        isAllowedPred(version),\n      );\n    } else if (versioningApi.isValid(allowedVersions)) {\n      filteredReleases = filteredReleases.filter((r) =>\n        versioningApi.matches(r.version, allowedVersions),\n      );\n    } else if (\n      config.versioning !== npmVersioning.id &&\n      semver.validRange(allowedVersions)\n    ) {\n      logger.debug(\n        { depName: config.depName },\n        'Falling back to npm semver syntax for allowedVersions',\n      );\n      filteredReleases = filteredReleases.filter((r) =>\n        semver.satisfies(\n          semver.valid(r.version)\n            ? r.version\n            : /* v8 ignore start: only for a version the configured versioning accepts but semver cannot parse, e.g. a four-part docker tag, see #40625 */ semver.coerce(\n                r.version,\n              )!,\n          /* v8 ignore stop */\n          allowedVersions,\n        ),\n      );\n    } else if (\n      config.versioning === poetryVersioning.id &&\n      pep440.isValid(allowedVersions)\n    ) {\n      logger.debug(\n        { depName: config.depName },\n        'Falling back to pypi syntax for allowedVersions',\n      );\n      filteredReleases = filteredReleases.filter((r) =>\n        pep440.matches(r.version, allowedVersions),\n      );\n    } else {\n      const error = new Error(CONFIG_VALIDATION);\n      error.validationSource = 'config';\n      error.validationError = 'Invalid `allowedVersions`';\n      error.validationMessage = `The following allowedVersions does not parse as a valid version or range with versioning=${JSON.stringify(config.versioning)}: ${JSON.stringify(allowedVersions)}`;\n      throw error;\n    }\n  }\n\n  if (config.followTag) {\n    return filteredReleases;\n  }\n\n  if (\n    respectLatest &&\n    latestVersion &&\n    !versioningApi.isGreaterThan(currentVersion, latestVersion)\n  ) {\n    filteredReleases = filteredReleases.filter(\n      (r) => !versioningApi.isGreaterThan(r.version, latestVersion),\n    );\n  }\n\n  if (!ignoreUnstable) {\n    return filteredReleases;\n  }\n\n  if (currentRelease && isReleaseStable(currentRelease, versioningApi)) {\n    return filteredReleases.filter((r) => isReleaseStable(r, versioningApi));\n  }\n\n  return filteredReleases.filter((r) => {\n    if (isReleaseStable(r, versioningApi)) {\n      return true;\n    }\n\n    const major = versioningApi.getMajor(r.version);\n\n    if (major !== currentMajor) {\n      return false;\n    }\n\n    if (versioningApi.allowUnstableMajorUpgrades) {\n      return true;\n    }\n\n    const minor = versioningApi.getMinor(r.version);\n    const patch = versioningApi.getPatch(r.version);\n\n    return minor === currentMinor && patch === currentPatch;\n  });\n}\n"],"mappings":";;;;;;;;;AAYA,SAAS,gBACP,SACA,eACS;CACT,IAAI,CAAC,cAAc,SAAS,QAAQ,OAAO,GACzC,OAAO;CAGT,IAAI,QAAQ,aAAa,OACvB,OAAO;CAGT,OAAO;AACT;AAEA,SAAS,0BACP,UACA,gBACA,mBACA,eACA,SACW;CACX,MAAM,eAAe,cAAc,SAAS,cAAc;;CAE1D,IAAI,iBAAiB,MACnB,OAAO;CAET,OAAO,SAAS,QAAQ,MAAM;EAC5B,MAAM,eAAe,cAAc,SAAS,EAAE,OAAO;;EAErD,IAAI,iBAAiB,MACnB,OAAO;EAET,MAAM,iBAAiB,eAAe;EACtC,IAAI,iBAAiB,mBAAmB;GACtC,OAAO,KAAK,MACV,YAAY,QAAQ,GAAG,EAAE,QAAQ,2BAA2B,eAAe,6BAA6B,mBAC1G;GACA,OAAO;EACT;EACA,OAAO;CACT,CAAC;AACH;AAEA,SAAgB,eACd,QACA,gBACA,eACA,UACA,eACW;CACX,MAAM,EAAE,gBAAgB,kBAAkB,eAAe,sBACvD;;CAGF,IAAI,CAAC,gBACH,OAAO,CAAC;CAIV,MAAM,oBAAoB,SAAS,QAAQ,MACzC,cAAc,UAAU,EAAE,OAAO,CACnC;CACA,IAAI,mBAAmB,kBAAkB,QAAQ,MAC/C,cAAc,cAAc,EAAE,SAAS,cAAc,CACvD;CAEA,MAAM,iBAAiB,cAAc,UAAU,cAAc,IACzD,kBAAkB,MAAM,MACtB,cAAc,OAAO,EAAE,SAAS,cAAc,CAChD,IACA,KAAA;CAGJ,IAAI,oBAAoB,kBAAkB,CAAC,eAAe,cACxD,mBAAmB,iBAAiB,QAAQ,MAAM;EAChD,IAAI,EAAE,cAAc;GAClB,OAAO,MACL,YAAY,OAAO,QAAS,GAAG,EAAE,QAAQ,0BAC3C;GACA,OAAO;EACT;EACA,OAAO;CACT,CAAC;CAGH,IAAI,qBAAqB,oBAAoB,GAC3C,mBAAmB,0BACjB,kBACA,gBACA,mBACA,eACA,OAAO,OACT;CAGF,MAAM,eAAe,cAAc,SAAS,cAAc;CAC1D,MAAM,eAAe,cAAc,SAAS,cAAc;CAC1D,MAAM,eAAe,cAAc,SAAS,cAAc;CAE1D,IAAI,OAAO,iBAAiB;EAC1B,MAAM,QAAQ;GACZ;GACA,OAAO;GACP,OAAO;GACP,OAAO;EACT;EACA,MAAM,kBAAkBA,QAAiB,OAAO,iBAAiB,KAAK;EACtE,MAAM,gBAAgB,kBAAkB,eAAe;EACvD,IAAI,eACF,mBAAmB,iBAAiB,QAAQ,EAAE,cAC5C,cAAc,OAAO,CACvB;OACK,IAAI,cAAc,QAAQ,eAAe,GAC9C,mBAAmB,iBAAiB,QAAQ,MAC1C,cAAc,QAAQ,EAAE,SAAS,eAAe,CAClD;OACK,IACL,OAAO,eAAe,SACtB,OAAO,WAAW,eAAe,GACjC;GACA,OAAO,MACL,EAAE,SAAS,OAAO,QAAQ,GAC1B,uDACF;GACA,mBAAmB,iBAAiB,QAAQ,MAC1C,OAAO;IACL,OAAO,MAAM,EAAE,OAAO,IAClB,EAAE,uJAC2I,OAAO,OAClJ,EAAE,OACJ;;IAEJ;GACF,CACF;EACF,OAAO,IACL,OAAO,eAAe,YACtBC,QAAe,eAAe,GAC9B;GACA,OAAO,MACL,EAAE,SAAS,OAAO,QAAQ,GAC1B,iDACF;GACA,mBAAmB,iBAAiB,QAAQ,MAC1CC,QAAe,EAAE,SAAS,eAAe,CAC3C;EACF,OAAO;GACL,MAAM,QAAQ,IAAI,MAAM,iBAAiB;GACzC,MAAM,mBAAmB;GACzB,MAAM,kBAAkB;GACxB,MAAM,oBAAoB,4FAA4F,KAAK,UAAU,OAAO,UAAU,EAAE,IAAI,KAAK,UAAU,eAAe;GAC1L,MAAM;EACR;CACF;CAEA,IAAI,OAAO,WACT,OAAO;CAGT,IACE,iBACA,iBACA,CAAC,cAAc,cAAc,gBAAgB,aAAa,GAE1D,mBAAmB,iBAAiB,QACjC,MAAM,CAAC,cAAc,cAAc,EAAE,SAAS,aAAa,CAC9D;CAGF,IAAI,CAAC,gBACH,OAAO;CAGT,IAAI,kBAAkB,gBAAgB,gBAAgB,aAAa,GACjE,OAAO,iBAAiB,QAAQ,MAAM,gBAAgB,GAAG,aAAa,CAAC;CAGzE,OAAO,iBAAiB,QAAQ,MAAM;EACpC,IAAI,gBAAgB,GAAG,aAAa,GAClC,OAAO;EAKT,IAFc,cAAc,SAAS,EAAE,OAE/B,MAAM,cACZ,OAAO;EAGT,IAAI,cAAc,4BAChB,OAAO;EAGT,MAAM,QAAQ,cAAc,SAAS,EAAE,OAAO;EAC9C,MAAM,QAAQ,cAAc,SAAS,EAAE,OAAO;EAE9C,OAAO,UAAU,gBAAgB,UAAU;CAC7C,CAAC;AACH"}

package/dist/workers/repository/process/lookup/generate.js

@@ -12,18 +12,13 @@ async function generateUpdate(config, currentValue, versioningApi, rangeStrategy
 		newValue: null,
 		hasAttestation: release.attestation
 	};
-	// istanbul ignore if
 	if (release.checksumUrl !== void 0) update.checksumUrl = release.checksumUrl;
-	// istanbul ignore if
 	if (release.downloadUrl !== void 0) update.downloadUrl = release.downloadUrl;
-	// istanbul ignore if
 	if (release.newDigest !== void 0) update.newDigest = release.newDigest;
-	// istanbul ignore if
 	if (release.releaseTimestamp) {
 		update.releaseTimestamp = release.releaseTimestamp;
 		update.newVersionAgeInDays = getElapsedDays(release.releaseTimestamp);
 	}
-	// istanbul ignore if
 	if (release.registryUrl !== void 0)
  /**
 	* This means:
@@ -39,7 +34,7 @@ async function generateUpdate(config, currentValue, versioningApi, rangeStrategy
 			newVersion,
 			allVersions
 		});
-	} catch (err) /* istanbul ignore next */ {
+	} catch (err) {
 		logger.warn({
 			err,
 			currentValue,
@@ -53,7 +48,6 @@ async function generateUpdate(config, currentValue, versioningApi, rangeStrategy
 	update.newMajor = versioningApi.getMajor(newVersion);
 	update.newMinor = versioningApi.getMinor(newVersion);
 	update.newPatch = versioningApi.getPatch(newVersion);
-	// istanbul ignore if
 	if (!update.updateType && !currentVersion) {
 		logger.debug({ update }, "Update has no currentVersion");
 		update.newValue = currentValue;

package/dist/workers/repository/process/lookup/generate.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate.js","names":[],"sources":["../../../../../lib/workers/repository/process/lookup/generate.ts"],"sourcesContent":["import { isNonEmptyArray } from '@sindresorhus/is';\nimport { logger } from '../../../../logger/index.ts';\nimport type { Release } from '../../../../modules/datasource/index.ts';\nimport type { LookupUpdate } from '../../../../modules/manager/types.ts';\nimport type { VersioningApi } from '../../../../modules/versioning/index.ts';\nimport type { RangeStrategy } from '../../../../types/index.ts';\nimport { getElapsedDays } from '../../../../util/date.ts';\nimport { getMergeConfidenceLevel } from '../../../../util/merge-confidence/index.ts';\nimport type { LookupUpdateConfig } from './types.ts';\nimport { getUpdateType } from './update-type.ts';\n\nexport async function generateUpdate(\n  config: LookupUpdateConfig,\n  currentValue: string | undefined,\n  versioningApi: VersioningApi,\n  rangeStrategy: RangeStrategy,\n  currentVersion: string,\n  bucket: string,\n  release: Release,\n  allVersions: Set<string>,\n): Promise<LookupUpdate> {\n  const newVersion = release.version;\n  const update: LookupUpdate = {\n    bucket,\n    newVersion,\n    newValue: null!,\n    hasAttestation: release.attestation,\n  };\n\n  // istanbul ignore if\n  if (release.checksumUrl !== undefined) {\n    update.checksumUrl = release.checksumUrl;\n  }\n  // istanbul ignore if\n  if (release.downloadUrl !== undefined) {\n    update.downloadUrl = release.downloadUrl;\n  }\n  // istanbul ignore if\n  if (release.newDigest !== undefined) {\n    update.newDigest = release.newDigest;\n  }\n  // istanbul ignore if\n  if (release.releaseTimestamp) {\n    update.releaseTimestamp = release.releaseTimestamp;\n    update.newVersionAgeInDays = getElapsedDays(release.releaseTimestamp);\n  }\n  // istanbul ignore if\n  if (release.registryUrl !== undefined) {\n    /**\n     * This means:\n     *  - registry strategy is set to merge\n     *  - releases were fetched from multiple registry urls\n     */\n    update.registryUrl = release.registryUrl;\n  }\n\n  if (currentValue) {\n    try {\n      update.newValue = versioningApi.getNewValue({\n        currentValue,\n        rangeStrategy,\n        currentVersion,\n        newVersion,\n        allVersions,\n      })!;\n    } catch (err) /* istanbul ignore next */ {\n      logger.warn(\n        { err, currentValue, rangeStrategy, currentVersion, newVersion },\n        'getNewValue error',\n      );\n      update.newValue = currentValue;\n    }\n  } else {\n    update.newValue = currentValue;\n  }\n  update.newMajor = versioningApi.getMajor(newVersion)!;\n  update.newMinor = versioningApi.getMinor(newVersion)!;\n  update.newPatch = versioningApi.getPatch(newVersion)!;\n  // istanbul ignore if\n  if (!update.updateType && !currentVersion) {\n    logger.debug({ update }, 'Update has no currentVersion');\n    update.newValue = currentValue!;\n    return update;\n  }\n  update.updateType =\n    update.updateType ??\n    getUpdateType(config, versioningApi, currentVersion, newVersion);\n  if (versioningApi.isBreaking) {\n    // This versioning scheme has breaking awareness\n    update.isBreaking = versioningApi.isBreaking(currentVersion, newVersion);\n  } else {\n    // This versioning scheme does not have breaking awareness - assume only major updates are breaking\n    // Updates from, or to, unstable releases should be treated as breaking too.\n    // But we should not add that as default behavior until we stop treating non-LTS versions as unstable first\n    update.isBreaking = update.updateType === 'major';\n  }\n  const { datasource, packageName, packageRules } = config;\n  if (packageRules?.some((pr) => isNonEmptyArray(pr.matchConfidence))) {\n    update.mergeConfidenceLevel = await getMergeConfidenceLevel(\n      datasource,\n      packageName,\n      currentVersion,\n      newVersion,\n      update.updateType,\n    );\n  }\n  if (!versioningApi.isVersion(update.newValue)) {\n    update.isRange = true;\n  }\n  if (rangeStrategy === 'update-lockfile' && currentValue === update.newValue) {\n    update.isLockfileUpdate = true;\n  }\n  if (\n    rangeStrategy === 'bump' &&\n    // TODO #22198\n    versioningApi.matches(newVersion, currentValue!)\n  ) {\n    update.isBump = true;\n  }\n  return update;\n}\n"],"mappings":";;;;;;AAWA,eAAsB,eACpB,QACA,cACA,eACA,eACA,gBACA,QACA,SACA,aACuB;CACvB,MAAM,aAAa,QAAQ;CAC3B,MAAM,SAAuB;EAC3B;EACA;EACA,UAAU;EACV,gBAAgB,QAAQ;CAC1B;;CAGA,IAAI,QAAQ,gBAAgB,KAAA,GAC1B,OAAO,cAAc,QAAQ;;CAG/B,IAAI,QAAQ,gBAAgB,KAAA,GAC1B,OAAO,cAAc,QAAQ;;CAG/B,IAAI,QAAQ,cAAc,KAAA,GACxB,OAAO,YAAY,QAAQ;;CAG7B,IAAI,QAAQ,kBAAkB;EAC5B,OAAO,mBAAmB,QAAQ;EAClC,OAAO,sBAAsB,eAAe,QAAQ,gBAAgB;CACtE;;CAEA,IAAI,QAAQ,gBAAgB,KAAA;;;;;;CAM1B,OAAO,cAAc,QAAQ;CAG/B,IAAI,cACF,IAAI;EACF,OAAO,WAAW,cAAc,YAAY;GAC1C;GACA;GACA;GACA;GACA;EACF,CAAC;CACH,SAAS,gCAAgC;EACvC,OAAO,KACL;GAAE;GAAK;GAAc;GAAe;GAAgB;EAAW,GAC/D,mBACF;EACA,OAAO,WAAW;CACpB;MAEA,OAAO,WAAW;CAEpB,OAAO,WAAW,cAAc,SAAS,UAAU;CACnD,OAAO,WAAW,cAAc,SAAS,UAAU;CACnD,OAAO,WAAW,cAAc,SAAS,UAAU;;CAEnD,IAAI,CAAC,OAAO,cAAc,CAAC,gBAAgB;EACzC,OAAO,MAAM,EAAE,OAAO,GAAG,8BAA8B;EACvD,OAAO,WAAW;EAClB,OAAO;CACT;CACA,OAAO,aACL,OAAO,cACP,cAAc,QAAQ,eAAe,gBAAgB,UAAU;CACjE,IAAI,cAAc,YAEhB,OAAO,aAAa,cAAc,WAAW,gBAAgB,UAAU;MAKvE,OAAO,aAAa,OAAO,eAAe;CAE5C,MAAM,EAAE,YAAY,aAAa,iBAAiB;CAClD,IAAI,cAAc,MAAM,OAAO,gBAAgB,GAAG,eAAe,CAAC,GAChE,OAAO,uBAAuB,MAAM,wBAClC,YACA,aACA,gBACA,YACA,OAAO,UACT;CAEF,IAAI,CAAC,cAAc,UAAU,OAAO,QAAQ,GAC1C,OAAO,UAAU;CAEnB,IAAI,kBAAkB,qBAAqB,iBAAiB,OAAO,UACjE,OAAO,mBAAmB;CAE5B,IACE,kBAAkB,UAElB,cAAc,QAAQ,YAAY,YAAa,GAE/C,OAAO,SAAS;CAElB,OAAO;AACT"}
+{"version":3,"file":"generate.js","names":[],"sources":["../../../../../lib/workers/repository/process/lookup/generate.ts"],"sourcesContent":["import { isNonEmptyArray } from '@sindresorhus/is';\nimport { logger } from '../../../../logger/index.ts';\nimport type { Release } from '../../../../modules/datasource/index.ts';\nimport type { LookupUpdate } from '../../../../modules/manager/types.ts';\nimport type { VersioningApi } from '../../../../modules/versioning/index.ts';\nimport type { RangeStrategy } from '../../../../types/index.ts';\nimport { getElapsedDays } from '../../../../util/date.ts';\nimport { getMergeConfidenceLevel } from '../../../../util/merge-confidence/index.ts';\nimport type { LookupUpdateConfig } from './types.ts';\nimport { getUpdateType } from './update-type.ts';\n\nexport async function generateUpdate(\n  config: LookupUpdateConfig,\n  currentValue: string | undefined,\n  versioningApi: VersioningApi,\n  rangeStrategy: RangeStrategy,\n  currentVersion: string,\n  bucket: string,\n  release: Release,\n  allVersions: Set<string>,\n): Promise<LookupUpdate> {\n  const newVersion = release.version;\n  const update: LookupUpdate = {\n    bucket,\n    newVersion,\n    newValue: null!,\n    hasAttestation: release.attestation,\n  };\n\n  if (release.checksumUrl !== undefined) {\n    update.checksumUrl = release.checksumUrl;\n  }\n  if (release.downloadUrl !== undefined) {\n    update.downloadUrl = release.downloadUrl;\n  }\n  if (release.newDigest !== undefined) {\n    update.newDigest = release.newDigest;\n  }\n  if (release.releaseTimestamp) {\n    update.releaseTimestamp = release.releaseTimestamp;\n    update.newVersionAgeInDays = getElapsedDays(release.releaseTimestamp);\n  }\n  if (release.registryUrl !== undefined) {\n    /**\n     * This means:\n     *  - registry strategy is set to merge\n     *  - releases were fetched from multiple registry urls\n     */\n    update.registryUrl = release.registryUrl;\n  }\n\n  if (currentValue) {\n    try {\n      update.newValue = versioningApi.getNewValue({\n        currentValue,\n        rangeStrategy,\n        currentVersion,\n        newVersion,\n        allVersions,\n      })!;\n    } catch (err) {\n      logger.warn(\n        { err, currentValue, rangeStrategy, currentVersion, newVersion },\n        'getNewValue error',\n      );\n      update.newValue = currentValue;\n    }\n  } else {\n    update.newValue = currentValue;\n  }\n  update.newMajor = versioningApi.getMajor(newVersion)!;\n  update.newMinor = versioningApi.getMinor(newVersion)!;\n  update.newPatch = versioningApi.getPatch(newVersion)!;\n  if (!update.updateType && !currentVersion) {\n    logger.debug({ update }, 'Update has no currentVersion');\n    update.newValue = currentValue!;\n    return update;\n  }\n  update.updateType =\n    update.updateType ??\n    getUpdateType(config, versioningApi, currentVersion, newVersion);\n  if (versioningApi.isBreaking) {\n    // This versioning scheme has breaking awareness\n    update.isBreaking = versioningApi.isBreaking(currentVersion, newVersion);\n  } else {\n    // This versioning scheme does not have breaking awareness - assume only major updates are breaking\n    // Updates from, or to, unstable releases should be treated as breaking too.\n    // But we should not add that as default behavior until we stop treating non-LTS versions as unstable first\n    update.isBreaking = update.updateType === 'major';\n  }\n  const { datasource, packageName, packageRules } = config;\n  if (packageRules?.some((pr) => isNonEmptyArray(pr.matchConfidence))) {\n    update.mergeConfidenceLevel = await getMergeConfidenceLevel(\n      datasource,\n      packageName,\n      currentVersion,\n      newVersion,\n      update.updateType,\n    );\n  }\n  if (!versioningApi.isVersion(update.newValue)) {\n    update.isRange = true;\n  }\n  if (rangeStrategy === 'update-lockfile' && currentValue === update.newValue) {\n    update.isLockfileUpdate = true;\n  }\n  if (\n    rangeStrategy === 'bump' &&\n    // TODO #22198\n    versioningApi.matches(newVersion, currentValue!)\n  ) {\n    update.isBump = true;\n  }\n  return update;\n}\n"],"mappings":";;;;;;AAWA,eAAsB,eACpB,QACA,cACA,eACA,eACA,gBACA,QACA,SACA,aACuB;CACvB,MAAM,aAAa,QAAQ;CAC3B,MAAM,SAAuB;EAC3B;EACA;EACA,UAAU;EACV,gBAAgB,QAAQ;CAC1B;CAEA,IAAI,QAAQ,gBAAgB,KAAA,GAC1B,OAAO,cAAc,QAAQ;CAE/B,IAAI,QAAQ,gBAAgB,KAAA,GAC1B,OAAO,cAAc,QAAQ;CAE/B,IAAI,QAAQ,cAAc,KAAA,GACxB,OAAO,YAAY,QAAQ;CAE7B,IAAI,QAAQ,kBAAkB;EAC5B,OAAO,mBAAmB,QAAQ;EAClC,OAAO,sBAAsB,eAAe,QAAQ,gBAAgB;CACtE;CACA,IAAI,QAAQ,gBAAgB,KAAA;;;;;;CAM1B,OAAO,cAAc,QAAQ;CAG/B,IAAI,cACF,IAAI;EACF,OAAO,WAAW,cAAc,YAAY;GAC1C;GACA;GACA;GACA;GACA;EACF,CAAC;CACH,SAAS,KAAK;EACZ,OAAO,KACL;GAAE;GAAK;GAAc;GAAe;GAAgB;EAAW,GAC/D,mBACF;EACA,OAAO,WAAW;CACpB;MAEA,OAAO,WAAW;CAEpB,OAAO,WAAW,cAAc,SAAS,UAAU;CACnD,OAAO,WAAW,cAAc,SAAS,UAAU;CACnD,OAAO,WAAW,cAAc,SAAS,UAAU;CACnD,IAAI,CAAC,OAAO,cAAc,CAAC,gBAAgB;EACzC,OAAO,MAAM,EAAE,OAAO,GAAG,8BAA8B;EACvD,OAAO,WAAW;EAClB,OAAO;CACT;CACA,OAAO,aACL,OAAO,cACP,cAAc,QAAQ,eAAe,gBAAgB,UAAU;CACjE,IAAI,cAAc,YAEhB,OAAO,aAAa,cAAc,WAAW,gBAAgB,UAAU;MAKvE,OAAO,aAAa,OAAO,eAAe;CAE5C,MAAM,EAAE,YAAY,aAAa,iBAAiB;CAClD,IAAI,cAAc,MAAM,OAAO,gBAAgB,GAAG,eAAe,CAAC,GAChE,OAAO,uBAAuB,MAAM,wBAClC,YACA,aACA,gBACA,YACA,OAAO,UACT;CAEF,IAAI,CAAC,cAAc,UAAU,OAAO,QAAQ,GAC1C,OAAO,UAAU;CAEnB,IAAI,kBAAkB,qBAAqB,iBAAiB,OAAO,UACjE,OAAO,mBAAmB;CAE5B,IACE,kBAAkB,UAElB,cAAc,QAAQ,YAAY,YAAa,GAE/C,OAAO,SAAS;CAElB,OAAO;AACT"}

package/dist/workers/repository/process/lookup/index.js

@@ -284,7 +284,7 @@ async function lookupUpdates(inconfig) {
 			const buckets = {};
 			for (const release of filteredReleases) {
 				const bucket = getBucket(config, currentVersion, release.version, versioningApi);
-				// v8 ignore else -- TODO: add test #40625
+				// v8 ignore else -- see #40625
 				if (isString(bucket)) {
 					if (buckets[bucket]) buckets[bucket].push(release);
 					else buckets[bucket] = [release];
@@ -351,7 +351,7 @@ async function lookupUpdates(inconfig) {
 		} else if (compareValue && versioningApi.isSingleVersion(compareValue)) res.fixedVersion = compareValue.replace(regEx(/^=+/), "");
 		if (isString(config.currentValue) && isString(compareValue) && isString(config.versionCompatibility)) for (const update of res.updates) {
 			logger.debug({ update });
-			// v8 ignore else -- TODO: add test #40625
+			// v8 ignore else -- see #40625
 			if (isString(config.currentValue) && isString(update.newValue)) update.newValue = config.currentValue.replace(compareValue, update.newValue);
 		}
 		if (supportsDigests(config.datasource)) {

package/dist/workers/repository/process/lookup/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["allVersioning.get"],"sources":["../../../../../lib/workers/repository/process/lookup/index.ts"],"sourcesContent":["import { isNonEmptyString, isString, isUndefined } from '@sindresorhus/is';\nimport { mergeChildConfig } from '../../../../config/index.ts';\nimport type { ValidationMessage } from '../../../../config/types.ts';\nimport { CONFIG_VALIDATION } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport {\n  getDatasourceFor,\n  getDefaultVersioning,\n} from '../../../../modules/datasource/common.ts';\nimport type {\n  GetDigestInputConfig,\n  Release,\n  ReleaseResult,\n} from '../../../../modules/datasource/index.ts';\nimport {\n  applyDatasourceFilters,\n  getDigest,\n  getRawPkgReleases,\n  isGetPkgReleasesConfig,\n  supportsDigests,\n} from '../../../../modules/datasource/index.ts';\nimport { postprocessRelease } from '../../../../modules/datasource/postprocess-release.ts';\nimport { getRangeStrategy } from '../../../../modules/manager/index.ts';\nimport type { LookupUpdate } from '../../../../modules/manager/types.ts';\nimport { id as dockerVersioningId } from '../../../../modules/versioning/docker/index.ts';\nimport * as allVersioning from '../../../../modules/versioning/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { assignKeys } from '../../../../util/assign-keys.ts';\nimport { getElapsedDays } from '../../../../util/date.ts';\nimport { checkMinimumReleaseAge } from '../../../../util/minimum-release-age.ts';\nimport { applyPackageRules } from '../../../../util/package-rules/index.ts';\nimport { regEx } from '../../../../util/regex.ts';\nimport { Result } from '../../../../util/result.ts';\nimport { safeStringify } from '../../../../util/stringify.ts';\nimport type { Timestamp } from '../../../../util/timestamp.ts';\nimport { calculateAbandonment } from './abandonment.ts';\nimport { getBucket } from './bucket.ts';\nimport { getCurrentVersion } from './current.ts';\nimport { filterVersions } from './filter.ts';\nimport { filterInternalChecks } from './filter-checks.ts';\nimport { generateUpdate } from './generate.ts';\nimport { getRollbackUpdate } from './rollback.ts';\nimport { calculateMostRecentTimestamp } from './timestamps.ts';\nimport type { LookupUpdateConfig, UpdateResult } from './types.ts';\nimport {\n  addReplacementUpdateIfValid,\n  isReplacementRulesConfigured,\n} from './utils.ts';\n\nasync function getTimestamp(\n  config: LookupUpdateConfig,\n  versions: Release[],\n  version: string,\n  versioningApi: allVersioning.VersioningApi,\n): Promise<Timestamp | null | undefined> {\n  const currentRelease = versions.find(\n    (v) =>\n      versioningApi.isValid(v.version) &&\n      versioningApi.equals(v.version, version),\n  );\n\n  if (!currentRelease) {\n    return null;\n  }\n\n  if (currentRelease.releaseTimestamp) {\n    return currentRelease.releaseTimestamp;\n  }\n\n  const remoteRelease = await postprocessRelease(config, currentRelease);\n  return remoteRelease?.releaseTimestamp;\n}\n\n/** The only two `updateType`s that `applyMinimumReleaseAgeToDigestUpdate()` can be called with */\ntype DigestLikeUpdate = LookupUpdate & { updateType: 'digest' | 'pinDigest' };\n\n/**\n * A helper function to allow a short-circuit for `minimumReleaseAge` functionality if a package may have config that applies it.\n *\n * Allows avoiding unnecessary calls to more expensive checks like merge + `applyPackageRules()` and `getTimestamp()`.\n */\nfunction couldApplyMinimumReleaseAgeToDigest(\n  config: LookupUpdateConfig,\n  updateType: DigestLikeUpdate['updateType'],\n): boolean {\n  // Match filterInternalChecks(): under `none` the user opted out of internal\n  // checks entirely, so do no merging, no package rules, no age check and no\n  // logging claiming an age check ran.\n  if (config.internalChecksFilter === 'none') {\n    return false;\n  }\n\n  return (\n    isNonEmptyString(config.minimumReleaseAge) ||\n    isNonEmptyString(config[updateType]?.minimumReleaseAge) ||\n    !!config.packageRules?.some((rule) =>\n      isNonEmptyString(rule.minimumReleaseAge),\n    )\n  );\n}\n\n/**\n * Ensure `minimumReleaseAge`/`internalChecksFilter` applies to digest/pinDigest updates, as they don't currently get run through `filterInternalChecks()`.\n *\n * NOTE that this should be kept in sync with `filterInternalChecks`()\n */\nasync function applyMinimumReleaseAgeToDigestUpdate(\n  update: DigestLikeUpdate,\n  config: LookupUpdateConfig,\n  res: UpdateResult,\n  currentVersionWasResolved: boolean,\n  newestMatchingVersionTimestamp: Timestamp | null | undefined,\n): Promise<void> {\n  if (!couldApplyMinimumReleaseAgeToDigest(config, update.updateType)) {\n    return;\n  }\n\n  if (update.updateType === 'pinDigest' && !currentVersionWasResolved) {\n    // Not `!res.currentVersion` - that's force-set to lockedVersion further down regardless of timestamp resolution.\n    // `pinDigest` doesn't repoint anywhere, unlike `digest` - it just freezes whatever the ref already resolves to.\n    // An unversioned tag (e.g. `latest`) has no versioned release to age against, and holding the pin would only\n    // prolong the less-pinned (less safe) state, so skip the check entirely rather than treating the missing\n    // timestamp as pending.\n    logger.once.debug(\n      { depName: config.depName, updateType: update.updateType },\n      `Skipping minimumReleaseAge check for ${update.updateType} update of ${config.depName}, as its current value does not resolve to a versioned release`,\n    );\n    return;\n  }\n\n  let releaseConfig: LookupUpdateConfig = {\n    ...mergeChildConfig(config, res),\n    updateType: update.updateType,\n  };\n  releaseConfig = mergeChildConfig(\n    releaseConfig,\n    releaseConfig[update.updateType]!,\n  );\n  releaseConfig = await applyPackageRules(releaseConfig, 'update-type');\n\n  // Not update.releaseTimestamp - that field means \"age of the new release\" elsewhere (generate.ts, libyear.ts).\n  // Not res.currentVersionTimestamp either - that tracks whatever rangeStrategy resolves currentVersion to (e.g.\n  // the oldest matching release under `bump`), whereas both `digest` and `pinDigest` reflect whatever the current\n  // value's ref actually resolves to *right now*, which is always the newest matching version.\n  const ageCheck = checkMinimumReleaseAge(\n    releaseConfig,\n    newestMatchingVersionTimestamp,\n  );\n\n  // Mirror filterInternalChecks()'s logging so a held/passed digest update is diagnosable.\n  if (ageCheck.minimumReleaseAgeMs && !ageCheck.hasTimestamp) {\n    if (releaseConfig.minimumReleaseAgeBehaviour === 'timestamp-optional') {\n      logger.once.warn(\n        \"Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information\",\n      );\n    }\n\n    logger.once.debug(\n      {\n        depName: config.depName,\n        updateType: update.updateType,\n        minimumReleaseAgeBehaviour: releaseConfig.minimumReleaseAgeBehaviour,\n        check: 'minimumReleaseAge',\n      },\n      `${update.updateType} update of ${config.depName} has no releaseTimestamp to age against`,\n    );\n  }\n  if (ageCheck.isPending) {\n    logger.trace(\n      {\n        depName: config.depName,\n        updateType: update.updateType,\n        releaseTimestamp: newestMatchingVersionTimestamp,\n        check: 'minimumReleaseAge',\n      },\n      `${update.updateType} update is pending minimumReleaseAge status checks`,\n    );\n\n    // internalChecksFilter is read from the unmerged top-level config, like filterInternalChecks().\n    if (config.internalChecksFilter === 'strict') {\n      update.pendingChecks = true;\n    }\n  }\n}\n\nexport async function lookupUpdates(\n  inconfig: LookupUpdateConfig,\n): Promise<Result<UpdateResult>> {\n  let config: LookupUpdateConfig = { ...inconfig };\n  config.versioning ??= getDefaultVersioning(config.datasource);\n\n  const versioningApi = allVersioning.get(config.versioning);\n\n  let dependency: ReleaseResult | null = null;\n  const res: UpdateResult = {\n    versioning: config.versioning,\n    updates: [],\n    warnings: [],\n  };\n  // Timestamp of the release a `digest`/`pinDigest` update's current value currently resolves to (the newest version matching it, regardless of `rangeStrategy`), as opposed to `res.currentVersionTimestamp` which tracks whatever the configured rangeStrategy resolves `currentVersion` to (e.g. the oldest for `bump`)\n  let newestMatchingVersionTimestamp: Timestamp | null | undefined;\n  // The `digest` update for `config.currentDigest` (if one is added), so its age check can run after `newDigest` is fetched and no-op updates are stripped.\n  let digestUpdate: DigestLikeUpdate | undefined;\n\n  try {\n    logger.trace(\n      {\n        dependency: config.packageName,\n        currentValue: config.currentValue,\n      },\n      'lookupUpdates',\n    );\n    if (config.currentValue && !isString(config.currentValue)) {\n      // If currentValue is not a string, then it's invalid\n      logger.debug(\n        `Invalid currentValue for ${config.packageName}: ${safeStringify(config.currentValue)} (${typeof config.currentValue})`,\n      );\n      res.skipReason = 'invalid-value';\n      return Result.ok(res);\n    }\n    if (\n      !isGetPkgReleasesConfig(config) ||\n      !getDatasourceFor(config.datasource)\n    ) {\n      res.skipReason = 'invalid-config';\n      return Result.ok(res);\n    }\n    let compareValue = config.currentValue;\n    if (\n      isString(config.currentValue) &&\n      isString(config.versionCompatibility)\n    ) {\n      const versionCompatbilityRegEx = regEx(config.versionCompatibility);\n      const regexMatch = versionCompatbilityRegEx.exec(config.currentValue);\n      if (regexMatch?.groups) {\n        logger.debug(\n          {\n            versionCompatibility: config.versionCompatibility,\n            currentValue: config.currentValue,\n            packageName: config.packageName,\n            groups: regexMatch.groups,\n          },\n          'version compatibility regex match',\n        );\n        config.currentCompatibility = regexMatch.groups.compatibility;\n        res.currentCompatibility = regexMatch.groups.compatibility;\n        compareValue = regexMatch.groups.version;\n      } else {\n        logger.debug(\n          {\n            versionCompatibility: config.versionCompatibility,\n            currentValue: config.currentValue,\n            packageName: config.packageName,\n          },\n          'version compatibility regex mismatch',\n        );\n      }\n    }\n\n    const isValid =\n      isString(compareValue) && versioningApi.isValid(compareValue);\n\n    const unconstrainedValue =\n      !!config.lockedVersion && isUndefined(config.currentValue);\n\n    if (isValid || unconstrainedValue) {\n      if (\n        !config.updatePinnedDependencies &&\n        // TODO #22198\n        versioningApi.isSingleVersion(compareValue!)\n      ) {\n        res.skipReason = 'is-pinned';\n        return Result.ok(res);\n      }\n\n      const { val: releaseResult, err: lookupError } = await getRawPkgReleases(\n        config,\n      )\n        .transform((res) => calculateMostRecentTimestamp(versioningApi, res))\n        .transform((res) => calculateAbandonment(res, config))\n        .transform((res) => applyDatasourceFilters(res, config))\n        .unwrap();\n\n      if (lookupError instanceof Error) {\n        throw lookupError;\n      }\n\n      if (lookupError) {\n        // If dependency lookup fails then warn and return\n        const warning: ValidationMessage = {\n          topic: config.packageName,\n          message: `Failed to look up ${config.datasource} package ${config.packageName}: ${lookupError}`,\n        };\n        logger.debug(\n          {\n            dependency: config.packageName,\n            packageFile: config.packageFile,\n          },\n          warning.message,\n        );\n        // TODO: return warnings in own field\n        res.warnings.push(warning);\n        return Result.ok(res);\n      }\n\n      dependency = releaseResult;\n\n      if (dependency.deprecationMessage) {\n        logger.debug(\n          `Found deprecationMessage for ${config.datasource} package ${config.packageName}`,\n        );\n      }\n\n      assignKeys(res, dependency, [\n        'deprecationMessage',\n        'sourceUrl',\n        'registryUrl',\n        'sourceDirectory',\n        'homepage',\n        'changelogUrl',\n        'dependencyUrl',\n        'lookupName',\n        'packageScope',\n        'mostRecentTimestamp',\n        'isAbandoned',\n        'respectLatest',\n      ]);\n\n      const latestVersion = dependency.tags?.latest;\n      // Filter out any results from datasource that don't comply with our versioning\n      let allVersions = dependency.releases.filter((release) =>\n        versioningApi.isVersion(release.version),\n      );\n      const allReleaseVersions = new Set(allVersions.map((r) => r.version));\n      // istanbul ignore if\n      if (allVersions.length === 0) {\n        const message = `Found no results from datasource that look like a version`;\n        logger.info(\n          {\n            dependency: config.packageName,\n            result: dependency,\n          },\n          message,\n        );\n        if (!config.currentDigest) {\n          return Result.ok(res);\n        }\n      }\n      // Reapply package rules in case we missed something from sourceUrl\n      config = await applyPackageRules(\n        { ...config, sourceUrl: res.sourceUrl },\n        'source-url',\n      );\n      if (config.followTag) {\n        const taggedVersion = dependency.tags?.[config.followTag];\n        if (!taggedVersion) {\n          res.warnings.push({\n            topic: config.packageName,\n            message: `Can't find version with tag ${config.followTag} for ${config.datasource} package ${config.packageName}`,\n          });\n          return Result.ok(res);\n        }\n        allVersions = allVersions.filter(\n          (v) =>\n            v.version === taggedVersion ||\n            (v.version === compareValue &&\n              versioningApi.isGreaterThan(taggedVersion, compareValue)),\n        );\n      }\n\n      const inRangeOnlyStrategy = config.rangeStrategy === 'in-range-only';\n      // Check that existing constraint can be satisfied\n      const allSatisfyingVersions =\n        (inRangeOnlyStrategy || config.rollbackPrs) && !unconstrainedValue\n          ? allVersions.filter((v) =>\n              // TODO #22198\n              versioningApi.matches(v.version, compareValue!),\n            )\n          : allVersions;\n      if (!allSatisfyingVersions.length) {\n        logger.debug(\n          `Found no satisfying versions with '${config.versioning}' versioning`,\n        );\n      }\n\n      if (config.rollbackPrs && !allSatisfyingVersions.length) {\n        const rollback = getRollbackUpdate(config, allVersions, versioningApi);\n        // istanbul ignore if\n        if (!rollback) {\n          res.warnings.push({\n            topic: config.packageName,\n            // TODO: types (#22198)\n            message: `Can't find version matching ${compareValue!} for ${\n              config.datasource\n            } package ${config.packageName}`,\n          });\n          return Result.ok(res);\n        }\n        res.updates.push(rollback);\n      }\n      let rangeStrategy = getRangeStrategy(config);\n\n      // istanbul ignore next\n      if (\n        config.isVulnerabilityAlert &&\n        rangeStrategy === 'update-lockfile' &&\n        !config.lockedVersion\n      ) {\n        rangeStrategy = 'bump';\n      }\n      // unconstrained deps with lockedVersion\n      if (\n        config.isVulnerabilityAlert &&\n        !config.currentValue &&\n        config.lockedVersion\n      ) {\n        rangeStrategy = 'update-lockfile';\n      }\n      const nonDeprecatedVersions = dependency.releases\n        .filter((release) => !release.isDeprecated)\n        .map((release) => release.version);\n      let currentVersion: string;\n      if (rangeStrategy === 'update-lockfile') {\n        currentVersion = config.lockedVersion!;\n      } else if (\n        compareValue &&\n        versioningApi.isSingleVersion(compareValue) &&\n        allVersions.find((v) => v.version === compareValue)\n      ) {\n        currentVersion = compareValue;\n      }\n      // TODO #22198\n      currentVersion ??=\n        getCurrentVersion(\n          compareValue!,\n          config.lockedVersion!,\n          versioningApi,\n          rangeStrategy!,\n          latestVersion!,\n          nonDeprecatedVersions,\n        ) ??\n        getCurrentVersion(\n          compareValue!,\n          config.lockedVersion!,\n          versioningApi,\n          rangeStrategy!,\n          latestVersion!,\n          allVersions.map((v) => v.version),\n        )!;\n\n      if (!currentVersion) {\n        // v8 ignore else -- TODO: add test #40625\n        if (!config.lockedVersion) {\n          logger.debug(\n            `No currentVersion or lockedVersion found for ${config.packageName}`,\n          );\n          res.skipReason = 'invalid-value';\n        }\n        return Result.ok(res);\n      }\n\n      res.currentVersion = currentVersion;\n\n      // Use lockedVersion for the timestamp lookup when available, because\n      // res.currentVersion is later overwritten to lockedVersion (see below).\n      // Without this, strategies like \"replace\" would compute the timestamp\n      // for the highest satisfying version (e.g. 1.4.1) while the reported\n      // currentVersion ends up being the locked one (e.g. 1.0.0).\n      const versionForTimestamp = config.lockedVersion ?? currentVersion;\n      const currentVersionTimestamp = await getTimestamp(\n        config,\n        allVersions,\n        versionForTimestamp,\n        versioningApi,\n      );\n\n      if (isNonEmptyString(currentVersionTimestamp)) {\n        res.currentVersionTimestamp = currentVersionTimestamp;\n        res.currentVersionAgeInDays = getElapsedDays(currentVersionTimestamp);\n\n        if (\n          config.packageRules?.some((rule) =>\n            isNonEmptyString(rule.matchCurrentAge),\n          )\n        ) {\n          // Reapply package rules to check matches for matchCurrentAge\n          config = await applyPackageRules(\n            { ...config, currentVersionTimestamp },\n            'current-timestamp',\n          );\n        }\n      }\n\n      if (\n        config.currentDigest\n          ? couldApplyMinimumReleaseAgeToDigest(config, 'digest')\n          : config.pinDigests &&\n            couldApplyMinimumReleaseAgeToDigest(config, 'pinDigest')\n      ) {\n        // Resolve from `allVersions` (not `dependency.releases`) so that filters like followTag apply, preferring non-deprecated versions with a fallback - both like the `currentVersion` resolution above.\n        const newestMatchingVersion =\n          getCurrentVersion(\n            compareValue!,\n            '',\n            versioningApi,\n            'replace',\n            latestVersion!,\n            allVersions.filter((v) => !v.isDeprecated).map((v) => v.version),\n          ) ??\n          getCurrentVersion(\n            compareValue!,\n            '',\n            versioningApi,\n            'replace',\n            latestVersion!,\n            allVersions.map((v) => v.version),\n          );\n        if (newestMatchingVersion) {\n          newestMatchingVersionTimestamp = await getTimestamp(\n            config,\n            allVersions,\n            newestMatchingVersion,\n            versioningApi,\n          );\n        }\n      }\n\n      if (\n        compareValue &&\n        currentVersion &&\n        rangeStrategy === 'pin' &&\n        !versioningApi.isSingleVersion(compareValue)\n      ) {\n        const newValue =\n          versioningApi.getPinnedValue?.(currentVersion) ?? currentVersion;\n        res.updates.push({\n          updateType: 'pin',\n          isPin: true,\n          newValue,\n          newVersion: currentVersion,\n          newMajor: versioningApi.getMajor(currentVersion)!,\n        });\n      }\n      if (rangeStrategy === 'pin') {\n        // Fall back to replace once pinning logic is done\n        rangeStrategy = 'replace';\n      }\n      // istanbul ignore if\n      if (!versioningApi.isVersion(currentVersion!)) {\n        res.skipReason = 'invalid-version';\n        return Result.ok(res);\n      }\n      // Filter latest, unstable, etc\n      // TODO #22198\n      let filteredReleases = filterVersions(\n        config,\n        currentVersion!,\n        latestVersion!,\n        inRangeOnlyStrategy ? allSatisfyingVersions : allVersions,\n        versioningApi,\n      ).filter(\n        (v) =>\n          // Leave only compatible versions\n          unconstrainedValue ||\n          versioningApi.isCompatible(v.version, compareValue),\n      );\n      let shrinkedViaVulnerability = false;\n      if (config.isVulnerabilityAlert) {\n        if (config.vulnerabilityFixVersion) {\n          res.vulnerabilityFixVersion = config.vulnerabilityFixVersion;\n          res.vulnerabilityFixStrategy = config.vulnerabilityFixStrategy;\n          if (versioningApi.isValid(config.vulnerabilityFixVersion)) {\n            let fixedFilteredReleases;\n            if (versioningApi.isVersion(config.vulnerabilityFixVersion)) {\n              // Retain only releases greater than or equal to the fix version\n              fixedFilteredReleases = filteredReleases.filter(\n                (release) =>\n                  !versioningApi.isGreaterThan(\n                    config.vulnerabilityFixVersion!,\n                    release.version,\n                  ),\n              );\n            } else {\n              // Retain only releases which max the fix constraint\n              fixedFilteredReleases = filteredReleases.filter((release) =>\n                versioningApi.matches(\n                  release.version,\n                  config.vulnerabilityFixVersion!,\n                ),\n              );\n            }\n            // Warn if this filtering results caused zero releases\n            if (fixedFilteredReleases.length === 0 && filteredReleases.length) {\n              logger.warn(\n                {\n                  releases: filteredReleases,\n                  vulnerabilityFixVersion: config.vulnerabilityFixVersion,\n                  packageName: config.packageName,\n                },\n                'No releases satisfy vulnerabilityFixVersion',\n              );\n            }\n            // Use the additionally filtered releases\n            filteredReleases = fixedFilteredReleases;\n          } else {\n            logger.warn(\n              {\n                vulnerabilityFixVersion: config.vulnerabilityFixVersion,\n                packageName: config.packageName,\n              },\n              'vulnerabilityFixVersion is not valid',\n            );\n          }\n        }\n        if (config.vulnerabilityFixStrategy === 'highest') {\n          // Don't shrink the list of releases - let Renovate use its normal logic\n          logger.once.debug(\n            `Using vulnerabilityFixStrategy=highest for ${config.packageName}`,\n          );\n        } else {\n          // Shrink the list of releases to the lowest fixed version\n          logger.once.debug(\n            `Using vulnerabilityFixStrategy=lowest for ${config.packageName}`,\n          );\n          filteredReleases = filteredReleases.slice(0, 1);\n          shrinkedViaVulnerability = true;\n        }\n      }\n      const buckets: Record<string, [Release]> = {};\n      for (const release of filteredReleases) {\n        const bucket = getBucket(\n          config,\n          // TODO #22198\n          currentVersion!,\n          release.version,\n          versioningApi,\n        );\n        // v8 ignore else -- TODO: add test #40625\n        if (isString(bucket)) {\n          if (buckets[bucket]) {\n            buckets[bucket].push(release);\n          } else {\n            buckets[bucket] = [release];\n          }\n        }\n      }\n      const depResultConfig = mergeChildConfig(config, res);\n      for (const [bucket, releases] of Object.entries(buckets)) {\n        const sortedReleases = releases.sort((r1, r2) =>\n          versioningApi.sortVersions(r1.version, r2.version),\n        );\n        const { release, pendingChecks, pendingReleases } =\n          await filterInternalChecks(\n            depResultConfig,\n            versioningApi,\n            bucket,\n            sortedReleases,\n          );\n        // istanbul ignore next\n        if (!release) {\n          return Result.ok(res);\n        }\n        const newVersion = release.version;\n        const update = await generateUpdate(\n          config,\n          compareValue,\n          versioningApi,\n          // TODO #22198\n\n          rangeStrategy!,\n          config.lockedVersion ?? currentVersion!,\n          bucket,\n          release,\n          allReleaseVersions,\n        );\n\n        // #29034\n        if (\n          config.manager === 'gomod' &&\n          compareValue?.startsWith('v0.0.0-') &&\n          update.newValue?.startsWith('v0.0.0-') &&\n          config.currentDigest !== update.newDigest\n        ) {\n          update.updateType = 'digest';\n\n          // As this has already been processed by `filterInternalChecks()`, but we're changing the `updateType`, we need to apply the digest-scoped minimumReleaseAge rules.\n          // `currentVersionWasResolved` only matters for `pinDigest`, which `update.updateType` never is here - true is a safe constant.\n          await applyMinimumReleaseAgeToDigestUpdate(\n            update as DigestLikeUpdate,\n            config,\n            res,\n            true,\n            release.releaseTimestamp,\n          );\n        }\n\n        if (pendingChecks) {\n          update.pendingChecks = pendingChecks;\n        }\n\n        if (pendingReleases.length) {\n          update.pendingVersions = pendingReleases.map((r) => r.version);\n        }\n        if (!update.newValue || update.newValue === compareValue) {\n          if (!config.lockedVersion) {\n            continue;\n          }\n          // istanbul ignore if\n          if (rangeStrategy === 'bump') {\n            logger.trace(\n              {\n                packageName: config.packageName,\n                currentValue: config.currentValue,\n                lockedVersion: config.lockedVersion,\n                newVersion,\n              },\n              'Skipping bump because newValue is the same',\n            );\n            continue;\n          }\n          res.isSingleVersion = true;\n        }\n        res.isSingleVersion ??=\n          isString(update.newValue) &&\n          versioningApi.isSingleVersion(update.newValue);\n        // istanbul ignore if\n        if (\n          config.versioning === dockerVersioningId &&\n          update.updateType !== 'rollback' &&\n          update.newValue &&\n          versioningApi.isVersion(update.newValue) &&\n          compareValue &&\n          versioningApi.isVersion(compareValue) &&\n          versioningApi.isGreaterThan(compareValue, update.newValue)\n        ) {\n          logger.warn(\n            {\n              packageName: config.packageName,\n              currentValue: config.currentValue,\n              compareValue,\n              currentVersion: config.currentVersion,\n              update,\n              allVersionsLength: allVersions.length,\n              filteredReleaseVersions: filteredReleases.map((r) => r.version),\n              shrinkedViaVulnerability,\n            },\n            'Unexpected downgrade detected: skipping',\n          );\n        } else {\n          res.updates.push(update);\n        }\n      }\n    } else if (compareValue) {\n      logger.debug(\n        `Dependency ${config.packageName} has unsupported/unversioned value ${compareValue} (versioning=${config.versioning})`,\n      );\n\n      if (!config.pinDigests && !config.currentDigest) {\n        logger.debug(\n          `Skipping ${config.packageName} because no currentDigest or pinDigests`,\n        );\n        res.skipReason = 'invalid-value';\n      } else {\n        delete res.skipReason;\n      }\n    } else {\n      res.skipReason = 'invalid-value';\n    }\n\n    if (isReplacementRulesConfigured(config)) {\n      addReplacementUpdateIfValid(res.updates, config);\n    } else if (dependency?.replacementName && dependency.replacementVersion) {\n      res.updates.push({\n        updateType: 'replacement',\n        newName: dependency.replacementName,\n        newValue: dependency.replacementVersion,\n      });\n    }\n\n    // Record if the dep is fixed to a version\n    if (config.lockedVersion) {\n      res.currentVersion = config.lockedVersion;\n      res.fixedVersion = config.lockedVersion;\n    } else if (compareValue && versioningApi.isSingleVersion(compareValue)) {\n      res.fixedVersion = compareValue.replace(regEx(/^=+/), '');\n    }\n\n    // massage versionCompatibility\n    if (\n      isString(config.currentValue) &&\n      isString(compareValue) &&\n      isString(config.versionCompatibility)\n    ) {\n      for (const update of res.updates) {\n        logger.debug({ update });\n        // v8 ignore else -- TODO: add test #40625\n        if (isString(config.currentValue) && isString(update.newValue)) {\n          update.newValue = config.currentValue.replace(\n            compareValue,\n            update.newValue,\n          );\n        }\n      }\n    }\n\n    // Add digests if necessary\n    if (supportsDigests(config.datasource)) {\n      if (config.currentDigest) {\n        if (!config.digestOneAndOnly || !res.updates.length) {\n          // digest update - age-checked after the strip below, once newDigest is known\n          digestUpdate = {\n            updateType: 'digest',\n            newValue: config.currentValue,\n          };\n          res.updates.push(digestUpdate);\n        }\n      } else if (\n        config.pinDigests &&\n        // only update the digest in the package file if it's managed by us\n        !config.digestManagedExternally &&\n        // Create a pin only if one doesn't already exists\n        // v8 ignore else -- TODO: add test #40625\n        !res.updates.some((update) => update.updateType === 'pin')\n      ) {\n        // pin digest\n        const pinDigestUpdate: DigestLikeUpdate = {\n          isPinDigest: true,\n          updateType: 'pinDigest',\n          newValue: config.currentValue,\n        };\n        await applyMinimumReleaseAgeToDigestUpdate(\n          pinDigestUpdate,\n          config,\n          res,\n          isValid || unconstrainedValue,\n          newestMatchingVersionTimestamp,\n        );\n        res.updates.push(pinDigestUpdate);\n      }\n      if (versioningApi.valueToVersion) {\n        // TODO #22198\n        res.currentVersion = versioningApi.valueToVersion(res.currentVersion!);\n        for (const update of res.updates) {\n          // TODO #22198\n          update.newVersion = versioningApi.valueToVersion(update.newVersion!);\n        }\n      }\n      if (res.registryUrl) {\n        config.registryUrls = [res.registryUrl];\n      }\n\n      // update digest for all\n      for (const update of res.updates) {\n        // only update the digest in the package file if it's managed by us\n        if (\n          (config.pinDigests === true && !config.digestManagedExternally) ||\n          config.currentDigest\n        ) {\n          const getDigestConfig: GetDigestInputConfig = {\n            ...config,\n            registryUrl: update.registryUrl ?? res.registryUrl,\n            lookupName: res.lookupName,\n          };\n\n          // #20304 only pass it for replacement updates, otherwise we get wrong or invalid digest\n          if (update.updateType !== 'replacement') {\n            delete getDigestConfig.replacementName;\n          }\n\n          // #20304 don't use lookupName and currentDigest when we replace image name\n          if (\n            update.updateType === 'replacement' &&\n            update.newName !== config.packageName\n          ) {\n            delete getDigestConfig.lookupName;\n            delete getDigestConfig.currentDigest;\n            getDigestConfig.replacementName = update.newName;\n          }\n\n          // Don't use current releases if replacement changes name, otherwise we use the wrong new digest.\n          // This happens on datasources which return the digest in release info like `github-tags`.\n          // We can still use it when only version is changing.\n          if (\n            update.updateType !== 'replacement' ||\n            update.newName === config.packageName\n          ) {\n            update.newDigest ??= dependency?.releases.find(\n              (r) => r.version === update.newValue,\n            )?.newDigest;\n          }\n\n          update.newDigest ??= await getDigest(\n            getDigestConfig,\n            update.newValue,\n          );\n\n          // If the digest could not be determined, report this as otherwise the\n          // update will be omitted later on without notice.\n          if (update.newDigest === null) {\n            logger.debug(\n              {\n                packageName: config.packageName,\n                currentValue: config.currentValue,\n                datasource: config.datasource,\n                newValue: update.newValue,\n                bucket: update.bucket,\n              },\n              'Could not determine new digest for update.',\n            );\n\n            // Only report a warning if there is a current digest.\n            // Context: https://github.com/renovatebot/renovate/pull/20175#discussion_r1102615059.\n            if (config.currentDigest) {\n              res.warnings.push({\n                message: `Could not determine new digest for update (${config.datasource} package ${config.packageName})`,\n                topic: config.packageName,\n              });\n            }\n          }\n        } else {\n          delete update.newDigest;\n        }\n        if (update.newVersion) {\n          const registryUrl = dependency?.releases?.find(\n            (release) => release.version === update.newVersion,\n          )?.registryUrl;\n          if (registryUrl && registryUrl !== res.registryUrl) {\n            update.registryUrl = registryUrl;\n          }\n        }\n      }\n    }\n\n    if (res.updates.length) {\n      delete res.skipReason;\n    }\n    // Strip out any non-changed ones\n    res.updates = res.updates\n      .filter(\n        (update) => update.newValue !== null || config.currentValue === null,\n      )\n      .filter((update) => update.newDigest !== null)\n      .filter(\n        (update) =>\n          (isString(update.newName) && update.newName !== config.packageName) ||\n          update.isReplacement === true ||\n          update.newValue !== config.currentValue ||\n          update.isLockfileUpdate === true ||\n          // TODO #22198\n          (update.newDigest &&\n            !update.newDigest.startsWith(config.currentDigest!)),\n      );\n    // If range strategy specified in config is 'in-range-only', also strip out updates where currentValue !== newValue\n    if (config.rangeStrategy === 'in-range-only') {\n      res.updates = res.updates.filter(\n        (update) => update.newValue === config.currentValue,\n      );\n    }\n    // Handle a weird edge case involving followTag and fallbacks\n    if (config.rollbackPrs && config.followTag) {\n      res.updates = res.updates.filter(\n        (update) =>\n          update.updateType !== 'rollback' || res.updates.length === 1,\n      );\n    }\n\n    // If there is a digest update proposed which is in the pending updates for this dependency, ensure that `minimumReleaseAge` is applied.\n    // `currentVersionWasResolved` only matters for `pinDigest`, which `digestUpdate` never is - true is a safe constant.\n    if (digestUpdate && res.updates.includes(digestUpdate)) {\n      await applyMinimumReleaseAgeToDigestUpdate(\n        digestUpdate,\n        config,\n        res,\n        true,\n        newestMatchingVersionTimestamp,\n      );\n    }\n\n    const release =\n      res.updates.length > 0\n        ? (dependency?.releases.find(\n            (r) => r.version === res.updates[0].newValue,\n          ) ??\n          dependency?.releases.find(\n            (r) => r.version === res.updates[0].newVersion,\n          ))\n        : null;\n\n    if (release?.changelogContent) {\n      res.changelogContent = release.changelogContent;\n      res.changelogUrl = release.changelogUrl;\n    }\n  } catch (err) /* istanbul ignore next */ {\n    if (err instanceof ExternalHostError) {\n      return Result.err(err);\n    }\n\n    if (err instanceof Error && err.message === CONFIG_VALIDATION) {\n      return Result.err(err);\n    }\n\n    logger.error(\n      {\n        currentDigest: config.currentDigest,\n        currentValue: config.currentValue,\n        datasource: config.datasource,\n        packageName: config.packageName,\n        digestOneAndOnly: config.digestOneAndOnly,\n        followTag: config.followTag,\n        lockedVersion: config.lockedVersion,\n        packageFile: config.packageFile,\n        pinDigests: config.pinDigests,\n        rollbackPrs: config.rollbackPrs,\n        isVulnerabilityAlert: config.isVulnerabilityAlert,\n        updatePinnedDependencies: config.updatePinnedDependencies,\n        err,\n      },\n      'lookupUpdates error',\n    );\n    res.skipReason = 'internal-error';\n  }\n  return Result.ok(res);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,eAAe,aACb,QACA,UACA,SACA,eACuC;CACvC,MAAM,iBAAiB,SAAS,MAC7B,MACC,cAAc,QAAQ,EAAE,OAAO,KAC/B,cAAc,OAAO,EAAE,SAAS,OAAO,CAC3C;CAEA,IAAI,CAAC,gBACH,OAAO;CAGT,IAAI,eAAe,kBACjB,OAAO,eAAe;CAIxB,QAAO,MADqB,mBAAmB,QAAQ,cAAc,EAAA,EAC/C;AACxB;;;;;;AAUA,SAAS,oCACP,QACA,YACS;CAIT,IAAI,OAAO,yBAAyB,QAClC,OAAO;CAGT,OACE,iBAAiB,OAAO,iBAAiB,KACzC,iBAAiB,OAAO,WAAW,EAAE,iBAAiB,KACtD,CAAC,CAAC,OAAO,cAAc,MAAM,SAC3B,iBAAiB,KAAK,iBAAiB,CACzC;AAEJ;;;;;;AAOA,eAAe,qCACb,QACA,QACA,KACA,2BACA,gCACe;CACf,IAAI,CAAC,oCAAoC,QAAQ,OAAO,UAAU,GAChE;CAGF,IAAI,OAAO,eAAe,eAAe,CAAC,2BAA2B;EAMnE,OAAO,KAAK,MACV;GAAE,SAAS,OAAO;GAAS,YAAY,OAAO;EAAW,GACzD,wCAAwC,OAAO,WAAW,aAAa,OAAO,QAAQ,+DACxF;EACA;CACF;CAEA,IAAI,gBAAoC;EACtC,GAAG,iBAAiB,QAAQ,GAAG;EAC/B,YAAY,OAAO;CACrB;CACA,gBAAgB,iBACd,eACA,cAAc,OAAO,WACvB;CACA,gBAAgB,MAAM,kBAAkB,eAAe,aAAa;CAMpE,MAAM,WAAW,uBACf,eACA,8BACF;CAGA,IAAI,SAAS,uBAAuB,CAAC,SAAS,cAAc;EAC1D,IAAI,cAAc,+BAA+B,sBAC/C,OAAO,KAAK,KACV,2KACF;EAGF,OAAO,KAAK,MACV;GACE,SAAS,OAAO;GAChB,YAAY,OAAO;GACnB,4BAA4B,cAAc;GAC1C,OAAO;EACT,GACA,GAAG,OAAO,WAAW,aAAa,OAAO,QAAQ,wCACnD;CACF;CACA,IAAI,SAAS,WAAW;EACtB,OAAO,MACL;GACE,SAAS,OAAO;GAChB,YAAY,OAAO;GACnB,kBAAkB;GAClB,OAAO;EACT,GACA,GAAG,OAAO,WAAW,mDACvB;EAGA,IAAI,OAAO,yBAAyB,UAClC,OAAO,gBAAgB;CAE3B;AACF;AAEA,eAAsB,cACpB,UAC+B;CAC/B,IAAI,SAA6B,EAAE,GAAG,SAAS;CAC/C,OAAO,eAAe,qBAAqB,OAAO,UAAU;CAE5D,MAAM,gBAAgBA,IAAkB,OAAO,UAAU;CAEzD,IAAI,aAAmC;CACvC,MAAM,MAAoB;EACxB,YAAY,OAAO;EACnB,SAAS,CAAC;EACV,UAAU,CAAC;CACb;CAEA,IAAI;CAEJ,IAAI;CAEJ,IAAI;EACF,OAAO,MACL;GACE,YAAY,OAAO;GACnB,cAAc,OAAO;EACvB,GACA,eACF;EACA,IAAI,OAAO,gBAAgB,CAAC,SAAS,OAAO,YAAY,GAAG;GAEzD,OAAO,MACL,4BAA4B,OAAO,YAAY,IAAI,cAAc,OAAO,YAAY,EAAE,IAAI,OAAO,OAAO,aAAa,EACvH;GACA,IAAI,aAAa;GACjB,OAAO,OAAO,GAAG,GAAG;EACtB;EACA,IACE,CAAC,uBAAuB,MAAM,KAC9B,CAAC,iBAAiB,OAAO,UAAU,GACnC;GACA,IAAI,aAAa;GACjB,OAAO,OAAO,GAAG,GAAG;EACtB;EACA,IAAI,eAAe,OAAO;EAC1B,IACE,SAAS,OAAO,YAAY,KAC5B,SAAS,OAAO,oBAAoB,GACpC;GAEA,MAAM,aAD2B,MAAM,OAAO,oBACJ,CAAC,CAAC,KAAK,OAAO,YAAY;GACpE,IAAI,YAAY,QAAQ;IACtB,OAAO,MACL;KACE,sBAAsB,OAAO;KAC7B,cAAc,OAAO;KACrB,aAAa,OAAO;KACpB,QAAQ,WAAW;IACrB,GACA,mCACF;IACA,OAAO,uBAAuB,WAAW,OAAO;IAChD,IAAI,uBAAuB,WAAW,OAAO;IAC7C,eAAe,WAAW,OAAO;GACnC,OACE,OAAO,MACL;IACE,sBAAsB,OAAO;IAC7B,cAAc,OAAO;IACrB,aAAa,OAAO;GACtB,GACA,sCACF;EAEJ;EAEA,MAAM,UACJ,SAAS,YAAY,KAAK,cAAc,QAAQ,YAAY;EAE9D,MAAM,qBACJ,CAAC,CAAC,OAAO,iBAAiB,YAAY,OAAO,YAAY;EAE3D,IAAI,WAAW,oBAAoB;GACjC,IACE,CAAC,OAAO,4BAER,cAAc,gBAAgB,YAAa,GAC3C;IACA,IAAI,aAAa;IACjB,OAAO,OAAO,GAAG,GAAG;GACtB;GAEA,MAAM,EAAE,KAAK,eAAe,KAAK,gBAAgB,MAAM,kBACrD,MACF,CAAC,CACE,WAAW,QAAQ,6BAA6B,eAAe,GAAG,CAAC,CAAC,CACpE,WAAW,QAAQ,qBAAqB,KAAK,MAAM,CAAC,CAAC,CACrD,WAAW,QAAQ,uBAAuB,KAAK,MAAM,CAAC,CAAC,CACvD,OAAO;GAEV,IAAI,uBAAuB,OACzB,MAAM;GAGR,IAAI,aAAa;IAEf,MAAM,UAA6B;KACjC,OAAO,OAAO;KACd,SAAS,qBAAqB,OAAO,WAAW,WAAW,OAAO,YAAY,IAAI;IACpF;IACA,OAAO,MACL;KACE,YAAY,OAAO;KACnB,aAAa,OAAO;IACtB,GACA,QAAQ,OACV;IAEA,IAAI,SAAS,KAAK,OAAO;IACzB,OAAO,OAAO,GAAG,GAAG;GACtB;GAEA,aAAa;GAEb,IAAI,WAAW,oBACb,OAAO,MACL,gCAAgC,OAAO,WAAW,WAAW,OAAO,aACtE;GAGF,WAAW,KAAK,YAAY;IAC1B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;GACF,CAAC;GAED,MAAM,gBAAgB,WAAW,MAAM;GAEvC,IAAI,cAAc,WAAW,SAAS,QAAQ,YAC5C,cAAc,UAAU,QAAQ,OAAO,CACzC;GACA,MAAM,qBAAqB,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,OAAO,CAAC;;GAEpE,IAAI,YAAY,WAAW,GAAG;IAE5B,OAAO,KACL;KACE,YAAY,OAAO;KACnB,QAAQ;IACV,GACA,2DACF;IACA,IAAI,CAAC,OAAO,eACV,OAAO,OAAO,GAAG,GAAG;GAExB;GAEA,SAAS,MAAM,kBACb;IAAE,GAAG;IAAQ,WAAW,IAAI;GAAU,GACtC,YACF;GACA,IAAI,OAAO,WAAW;IACpB,MAAM,gBAAgB,WAAW,OAAO,OAAO;IAC/C,IAAI,CAAC,eAAe;KAClB,IAAI,SAAS,KAAK;MAChB,OAAO,OAAO;MACd,SAAS,+BAA+B,OAAO,UAAU,OAAO,OAAO,WAAW,WAAW,OAAO;KACtG,CAAC;KACD,OAAO,OAAO,GAAG,GAAG;IACtB;IACA,cAAc,YAAY,QACvB,MACC,EAAE,YAAY,iBACb,EAAE,YAAY,gBACb,cAAc,cAAc,eAAe,YAAY,CAC7D;GACF;GAEA,MAAM,sBAAsB,OAAO,kBAAkB;GAErD,MAAM,yBACH,uBAAuB,OAAO,gBAAgB,CAAC,qBAC5C,YAAY,QAAQ,MAElB,cAAc,QAAQ,EAAE,SAAS,YAAa,CAChD,IACA;GACN,IAAI,CAAC,sBAAsB,QACzB,OAAO,MACL,sCAAsC,OAAO,WAAW,aAC1D;GAGF,IAAI,OAAO,eAAe,CAAC,sBAAsB,QAAQ;IACvD,MAAM,WAAW,kBAAkB,QAAQ,aAAa,aAAa;;IAErE,IAAI,CAAC,UAAU;KACb,IAAI,SAAS,KAAK;MAChB,OAAO,OAAO;MAEd,SAAS,+BAA+B,aAAc,OACpD,OAAO,WACR,WAAW,OAAO;KACrB,CAAC;KACD,OAAO,OAAO,GAAG,GAAG;IACtB;IACA,IAAI,QAAQ,KAAK,QAAQ;GAC3B;GACA,IAAI,gBAAgB,iBAAiB,MAAM;;GAG3C,IACE,OAAO,wBACP,kBAAkB,qBAClB,CAAC,OAAO,eAER,gBAAgB;GAGlB,IACE,OAAO,wBACP,CAAC,OAAO,gBACR,OAAO,eAEP,gBAAgB;GAElB,MAAM,wBAAwB,WAAW,SACtC,QAAQ,YAAY,CAAC,QAAQ,YAAY,CAAC,CAC1C,KAAK,YAAY,QAAQ,OAAO;GACnC,IAAI;GACJ,IAAI,kBAAkB,mBACpB,iBAAiB,OAAO;QACnB,IACL,gBACA,cAAc,gBAAgB,YAAY,KAC1C,YAAY,MAAM,MAAM,EAAE,YAAY,YAAY,GAElD,iBAAiB;GAGnB,mBACE,kBACE,cACA,OAAO,eACP,eACA,eACA,eACA,qBACF,KACA,kBACE,cACA,OAAO,eACP,eACA,eACA,eACA,YAAY,KAAK,MAAM,EAAE,OAAO,CAClC;GAEF,IAAI,CAAC,gBAAgB;;IAEnB,IAAI,CAAC,OAAO,eAAe;KACzB,OAAO,MACL,gDAAgD,OAAO,aACzD;KACA,IAAI,aAAa;IACnB;IACA,OAAO,OAAO,GAAG,GAAG;GACtB;GAEA,IAAI,iBAAiB;GAOrB,MAAM,sBAAsB,OAAO,iBAAiB;GACpD,MAAM,0BAA0B,MAAM,aACpC,QACA,aACA,qBACA,aACF;GAEA,IAAI,iBAAiB,uBAAuB,GAAG;IAC7C,IAAI,0BAA0B;IAC9B,IAAI,0BAA0B,eAAe,uBAAuB;IAEpE,IACE,OAAO,cAAc,MAAM,SACzB,iBAAiB,KAAK,eAAe,CACvC,GAGA,SAAS,MAAM,kBACb;KAAE,GAAG;KAAQ;IAAwB,GACrC,mBACF;GAEJ;GAEA,IACE,OAAO,gBACH,oCAAoC,QAAQ,QAAQ,IACpD,OAAO,cACP,oCAAoC,QAAQ,WAAW,GAC3D;IAEA,MAAM,wBACJ,kBACE,cACA,IACA,eACA,WACA,eACA,YAAY,QAAQ,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK,MAAM,EAAE,OAAO,CACjE,KACA,kBACE,cACA,IACA,eACA,WACA,eACA,YAAY,KAAK,MAAM,EAAE,OAAO,CAClC;IACF,IAAI,uBACF,iCAAiC,MAAM,aACrC,QACA,aACA,uBACA,aACF;GAEJ;GAEA,IACE,gBACA,kBACA,kBAAkB,SAClB,CAAC,cAAc,gBAAgB,YAAY,GAC3C;IACA,MAAM,WACJ,cAAc,iBAAiB,cAAc,KAAK;IACpD,IAAI,QAAQ,KAAK;KACf,YAAY;KACZ,OAAO;KACP;KACA,YAAY;KACZ,UAAU,cAAc,SAAS,cAAc;IACjD,CAAC;GACH;GACA,IAAI,kBAAkB,OAEpB,gBAAgB;;GAGlB,IAAI,CAAC,cAAc,UAAU,cAAe,GAAG;IAC7C,IAAI,aAAa;IACjB,OAAO,OAAO,GAAG,GAAG;GACtB;GAGA,IAAI,mBAAmB,eACrB,QACA,gBACA,eACA,sBAAsB,wBAAwB,aAC9C,aACF,CAAC,CAAC,QACC,MAEC,sBACA,cAAc,aAAa,EAAE,SAAS,YAAY,CACtD;GACA,IAAI,2BAA2B;GAC/B,IAAI,OAAO,sBAAsB;IAC/B,IAAI,OAAO,yBAAyB;KAClC,IAAI,0BAA0B,OAAO;KACrC,IAAI,2BAA2B,OAAO;KACtC,IAAI,cAAc,QAAQ,OAAO,uBAAuB,GAAG;MACzD,IAAI;MACJ,IAAI,cAAc,UAAU,OAAO,uBAAuB,GAExD,wBAAwB,iBAAiB,QACtC,YACC,CAAC,cAAc,cACb,OAAO,yBACP,QAAQ,OACV,CACJ;WAGA,wBAAwB,iBAAiB,QAAQ,YAC/C,cAAc,QACZ,QAAQ,SACR,OAAO,uBACT,CACF;MAGF,IAAI,sBAAsB,WAAW,KAAK,iBAAiB,QACzD,OAAO,KACL;OACE,UAAU;OACV,yBAAyB,OAAO;OAChC,aAAa,OAAO;MACtB,GACA,6CACF;MAGF,mBAAmB;KACrB,OACE,OAAO,KACL;MACE,yBAAyB,OAAO;MAChC,aAAa,OAAO;KACtB,GACA,sCACF;IAEJ;IACA,IAAI,OAAO,6BAA6B,WAEtC,OAAO,KAAK,MACV,8CAA8C,OAAO,aACvD;SACK;KAEL,OAAO,KAAK,MACV,6CAA6C,OAAO,aACtD;KACA,mBAAmB,iBAAiB,MAAM,GAAG,CAAC;KAC9C,2BAA2B;IAC7B;GACF;GACA,MAAM,UAAqC,CAAC;GAC5C,KAAK,MAAM,WAAW,kBAAkB;IACtC,MAAM,SAAS,UACb,QAEA,gBACA,QAAQ,SACR,aACF;;IAEA,IAAI,SAAS,MAAM,GAAG;KACpB,IAAI,QAAQ,SACV,QAAQ,OAAO,CAAC,KAAK,OAAO;UAE5B,QAAQ,UAAU,CAAC,OAAO;IAE9B;GACF;GACA,MAAM,kBAAkB,iBAAiB,QAAQ,GAAG;GACpD,KAAK,MAAM,CAAC,QAAQ,aAAa,OAAO,QAAQ,OAAO,GAAG;IACxD,MAAM,iBAAiB,SAAS,MAAM,IAAI,OACxC,cAAc,aAAa,GAAG,SAAS,GAAG,OAAO,CACnD;IACA,MAAM,EAAE,SAAS,eAAe,oBAC9B,MAAM,qBACJ,iBACA,eACA,QACA,cACF;;IAEF,IAAI,CAAC,SACH,OAAO,OAAO,GAAG,GAAG;IAEtB,MAAM,aAAa,QAAQ;IAC3B,MAAM,SAAS,MAAM,eACnB,QACA,cACA,eAGA,eACA,OAAO,iBAAiB,gBACxB,QACA,SACA,kBACF;IAGA,IACE,OAAO,YAAY,WACnB,cAAc,WAAW,SAAS,KAClC,OAAO,UAAU,WAAW,SAAS,KACrC,OAAO,kBAAkB,OAAO,WAChC;KACA,OAAO,aAAa;KAIpB,MAAM,qCACJ,QACA,QACA,KACA,MACA,QAAQ,gBACV;IACF;IAEA,IAAI,eACF,OAAO,gBAAgB;IAGzB,IAAI,gBAAgB,QAClB,OAAO,kBAAkB,gBAAgB,KAAK,MAAM,EAAE,OAAO;IAE/D,IAAI,CAAC,OAAO,YAAY,OAAO,aAAa,cAAc;KACxD,IAAI,CAAC,OAAO,eACV;;KAGF,IAAI,kBAAkB,QAAQ;MAC5B,OAAO,MACL;OACE,aAAa,OAAO;OACpB,cAAc,OAAO;OACrB,eAAe,OAAO;OACtB;MACF,GACA,4CACF;MACA;KACF;KACA,IAAI,kBAAkB;IACxB;IACA,IAAI,oBACF,SAAS,OAAO,QAAQ,KACxB,cAAc,gBAAgB,OAAO,QAAQ;;IAE/C,IACE,OAAO,eAAA,YACP,OAAO,eAAe,cACtB,OAAO,YACP,cAAc,UAAU,OAAO,QAAQ,KACvC,gBACA,cAAc,UAAU,YAAY,KACpC,cAAc,cAAc,cAAc,OAAO,QAAQ,GAEzD,OAAO,KACL;KACE,aAAa,OAAO;KACpB,cAAc,OAAO;KACrB;KACA,gBAAgB,OAAO;KACvB;KACA,mBAAmB,YAAY;KAC/B,yBAAyB,iBAAiB,KAAK,MAAM,EAAE,OAAO;KAC9D;IACF,GACA,yCACF;SAEA,IAAI,QAAQ,KAAK,MAAM;GAE3B;EACF,OAAO,IAAI,cAAc;GACvB,OAAO,MACL,cAAc,OAAO,YAAY,qCAAqC,aAAa,eAAe,OAAO,WAAW,EACtH;GAEA,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,eAAe;IAC/C,OAAO,MACL,YAAY,OAAO,YAAY,wCACjC;IACA,IAAI,aAAa;GACnB,OACE,OAAO,IAAI;EAEf,OACE,IAAI,aAAa;EAGnB,IAAI,6BAA6B,MAAM,GACrC,4BAA4B,IAAI,SAAS,MAAM;OAC1C,IAAI,YAAY,mBAAmB,WAAW,oBACnD,IAAI,QAAQ,KAAK;GACf,YAAY;GACZ,SAAS,WAAW;GACpB,UAAU,WAAW;EACvB,CAAC;EAIH,IAAI,OAAO,eAAe;GACxB,IAAI,iBAAiB,OAAO;GAC5B,IAAI,eAAe,OAAO;EAC5B,OAAO,IAAI,gBAAgB,cAAc,gBAAgB,YAAY,GACnE,IAAI,eAAe,aAAa,QAAQ,MAAM,KAAK,GAAG,EAAE;EAI1D,IACE,SAAS,OAAO,YAAY,KAC5B,SAAS,YAAY,KACrB,SAAS,OAAO,oBAAoB,GAEpC,KAAK,MAAM,UAAU,IAAI,SAAS;GAChC,OAAO,MAAM,EAAE,OAAO,CAAC;;GAEvB,IAAI,SAAS,OAAO,YAAY,KAAK,SAAS,OAAO,QAAQ,GAC3D,OAAO,WAAW,OAAO,aAAa,QACpC,cACA,OAAO,QACT;EAEJ;EAIF,IAAI,gBAAgB,OAAO,UAAU,GAAG;GACtC,IAAI,OAAO,eACL;QAAA,CAAC,OAAO,oBAAoB,CAAC,IAAI,QAAQ,QAAQ;KAEnD,eAAe;MACb,YAAY;MACZ,UAAU,OAAO;KACnB;KACA,IAAI,QAAQ,KAAK,YAAY;IAC/B;UACK,IACL,OAAO,cAEP,CAAC,OAAO;;GAGR,CAAC,IAAI,QAAQ,MAAM,WAAW,OAAO,eAAe,KAAK,GACzD;IAEA,MAAM,kBAAoC;KACxC,aAAa;KACb,YAAY;KACZ,UAAU,OAAO;IACnB;IACA,MAAM,qCACJ,iBACA,QACA,KACA,WAAW,oBACX,8BACF;IACA,IAAI,QAAQ,KAAK,eAAe;GAClC;GACA,IAAI,cAAc,gBAAgB;IAEhC,IAAI,iBAAiB,cAAc,eAAe,IAAI,cAAe;IACrE,KAAK,MAAM,UAAU,IAAI,SAEvB,OAAO,aAAa,cAAc,eAAe,OAAO,UAAW;GAEvE;GACA,IAAI,IAAI,aACN,OAAO,eAAe,CAAC,IAAI,WAAW;GAIxC,KAAK,MAAM,UAAU,IAAI,SAAS;IAEhC,IACG,OAAO,eAAe,QAAQ,CAAC,OAAO,2BACvC,OAAO,eACP;KACA,MAAM,kBAAwC;MAC5C,GAAG;MACH,aAAa,OAAO,eAAe,IAAI;MACvC,YAAY,IAAI;KAClB;KAGA,IAAI,OAAO,eAAe,eACxB,OAAO,gBAAgB;KAIzB,IACE,OAAO,eAAe,iBACtB,OAAO,YAAY,OAAO,aAC1B;MACA,OAAO,gBAAgB;MACvB,OAAO,gBAAgB;MACvB,gBAAgB,kBAAkB,OAAO;KAC3C;KAKA,IACE,OAAO,eAAe,iBACtB,OAAO,YAAY,OAAO,aAE1B,OAAO,cAAc,YAAY,SAAS,MACvC,MAAM,EAAE,YAAY,OAAO,QAC9B,CAAC,EAAE;KAGL,OAAO,cAAc,MAAM,UACzB,iBACA,OAAO,QACT;KAIA,IAAI,OAAO,cAAc,MAAM;MAC7B,OAAO,MACL;OACE,aAAa,OAAO;OACpB,cAAc,OAAO;OACrB,YAAY,OAAO;OACnB,UAAU,OAAO;OACjB,QAAQ,OAAO;MACjB,GACA,4CACF;MAIA,IAAI,OAAO,eACT,IAAI,SAAS,KAAK;OAChB,SAAS,8CAA8C,OAAO,WAAW,WAAW,OAAO,YAAY;OACvG,OAAO,OAAO;MAChB,CAAC;KAEL;IACF,OACE,OAAO,OAAO;IAEhB,IAAI,OAAO,YAAY;KACrB,MAAM,cAAc,YAAY,UAAU,MACvC,YAAY,QAAQ,YAAY,OAAO,UAC1C,CAAC,EAAE;KACH,IAAI,eAAe,gBAAgB,IAAI,aACrC,OAAO,cAAc;IAEzB;GACF;EACF;EAEA,IAAI,IAAI,QAAQ,QACd,OAAO,IAAI;EAGb,IAAI,UAAU,IAAI,QACf,QACE,WAAW,OAAO,aAAa,QAAQ,OAAO,iBAAiB,IAClE,CAAC,CACA,QAAQ,WAAW,OAAO,cAAc,IAAI,CAAC,CAC7C,QACE,WACE,SAAS,OAAO,OAAO,KAAK,OAAO,YAAY,OAAO,eACvD,OAAO,kBAAkB,QACzB,OAAO,aAAa,OAAO,gBAC3B,OAAO,qBAAqB,QAE3B,OAAO,aACN,CAAC,OAAO,UAAU,WAAW,OAAO,aAAc,CACxD;EAEF,IAAI,OAAO,kBAAkB,iBAC3B,IAAI,UAAU,IAAI,QAAQ,QACvB,WAAW,OAAO,aAAa,OAAO,YACzC;EAGF,IAAI,OAAO,eAAe,OAAO,WAC/B,IAAI,UAAU,IAAI,QAAQ,QACvB,WACC,OAAO,eAAe,cAAc,IAAI,QAAQ,WAAW,CAC/D;EAKF,IAAI,gBAAgB,IAAI,QAAQ,SAAS,YAAY,GACnD,MAAM,qCACJ,cACA,QACA,KACA,MACA,8BACF;EAGF,MAAM,UACJ,IAAI,QAAQ,SAAS,IAChB,YAAY,SAAS,MACnB,MAAM,EAAE,YAAY,IAAI,QAAQ,EAAE,CAAC,QACtC,KACA,YAAY,SAAS,MAClB,MAAM,EAAE,YAAY,IAAI,QAAQ,EAAE,CAAC,UACtC,IACA;EAEN,IAAI,SAAS,kBAAkB;GAC7B,IAAI,mBAAmB,QAAQ;GAC/B,IAAI,eAAe,QAAQ;EAC7B;CACF,SAAS,gCAAgC;EACvC,IAAI,eAAe,mBACjB,OAAO,OAAO,IAAI,GAAG;EAGvB,IAAI,eAAe,SAAS,IAAI,YAAA,qBAC9B,OAAO,OAAO,IAAI,GAAG;EAGvB,OAAO,MACL;GACE,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,kBAAkB,OAAO;GACzB,WAAW,OAAO;GAClB,eAAe,OAAO;GACtB,aAAa,OAAO;GACpB,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,sBAAsB,OAAO;GAC7B,0BAA0B,OAAO;GACjC;EACF,GACA,qBACF;EACA,IAAI,aAAa;CACnB;CACA,OAAO,OAAO,GAAG,GAAG;AACtB"}
+{"version":3,"file":"index.js","names":["allVersioning.get"],"sources":["../../../../../lib/workers/repository/process/lookup/index.ts"],"sourcesContent":["import { isNonEmptyString, isString, isUndefined } from '@sindresorhus/is';\nimport { mergeChildConfig } from '../../../../config/index.ts';\nimport type { ValidationMessage } from '../../../../config/types.ts';\nimport { CONFIG_VALIDATION } from '../../../../constants/error-messages.ts';\nimport { logger } from '../../../../logger/index.ts';\nimport {\n  getDatasourceFor,\n  getDefaultVersioning,\n} from '../../../../modules/datasource/common.ts';\nimport type {\n  GetDigestInputConfig,\n  Release,\n  ReleaseResult,\n} from '../../../../modules/datasource/index.ts';\nimport {\n  applyDatasourceFilters,\n  getDigest,\n  getRawPkgReleases,\n  isGetPkgReleasesConfig,\n  supportsDigests,\n} from '../../../../modules/datasource/index.ts';\nimport { postprocessRelease } from '../../../../modules/datasource/postprocess-release.ts';\nimport { getRangeStrategy } from '../../../../modules/manager/index.ts';\nimport type { LookupUpdate } from '../../../../modules/manager/types.ts';\nimport { id as dockerVersioningId } from '../../../../modules/versioning/docker/index.ts';\nimport * as allVersioning from '../../../../modules/versioning/index.ts';\nimport { ExternalHostError } from '../../../../types/errors/external-host-error.ts';\nimport { assignKeys } from '../../../../util/assign-keys.ts';\nimport { getElapsedDays } from '../../../../util/date.ts';\nimport { checkMinimumReleaseAge } from '../../../../util/minimum-release-age.ts';\nimport { applyPackageRules } from '../../../../util/package-rules/index.ts';\nimport { regEx } from '../../../../util/regex.ts';\nimport { Result } from '../../../../util/result.ts';\nimport { safeStringify } from '../../../../util/stringify.ts';\nimport type { Timestamp } from '../../../../util/timestamp.ts';\nimport { calculateAbandonment } from './abandonment.ts';\nimport { getBucket } from './bucket.ts';\nimport { getCurrentVersion } from './current.ts';\nimport { filterVersions } from './filter.ts';\nimport { filterInternalChecks } from './filter-checks.ts';\nimport { generateUpdate } from './generate.ts';\nimport { getRollbackUpdate } from './rollback.ts';\nimport { calculateMostRecentTimestamp } from './timestamps.ts';\nimport type { LookupUpdateConfig, UpdateResult } from './types.ts';\nimport {\n  addReplacementUpdateIfValid,\n  isReplacementRulesConfigured,\n} from './utils.ts';\n\nasync function getTimestamp(\n  config: LookupUpdateConfig,\n  versions: Release[],\n  version: string,\n  versioningApi: allVersioning.VersioningApi,\n): Promise<Timestamp | null | undefined> {\n  const currentRelease = versions.find(\n    (v) =>\n      versioningApi.isValid(v.version) &&\n      versioningApi.equals(v.version, version),\n  );\n\n  if (!currentRelease) {\n    return null;\n  }\n\n  if (currentRelease.releaseTimestamp) {\n    return currentRelease.releaseTimestamp;\n  }\n\n  const remoteRelease = await postprocessRelease(config, currentRelease);\n  return remoteRelease?.releaseTimestamp;\n}\n\n/** The only two `updateType`s that `applyMinimumReleaseAgeToDigestUpdate()` can be called with */\ntype DigestLikeUpdate = LookupUpdate & { updateType: 'digest' | 'pinDigest' };\n\n/**\n * A helper function to allow a short-circuit for `minimumReleaseAge` functionality if a package may have config that applies it.\n *\n * Allows avoiding unnecessary calls to more expensive checks like merge + `applyPackageRules()` and `getTimestamp()`.\n */\nfunction couldApplyMinimumReleaseAgeToDigest(\n  config: LookupUpdateConfig,\n  updateType: DigestLikeUpdate['updateType'],\n): boolean {\n  // Match filterInternalChecks(): under `none` the user opted out of internal\n  // checks entirely, so do no merging, no package rules, no age check and no\n  // logging claiming an age check ran.\n  if (config.internalChecksFilter === 'none') {\n    return false;\n  }\n\n  return (\n    isNonEmptyString(config.minimumReleaseAge) ||\n    isNonEmptyString(config[updateType]?.minimumReleaseAge) ||\n    !!config.packageRules?.some((rule) =>\n      isNonEmptyString(rule.minimumReleaseAge),\n    )\n  );\n}\n\n/**\n * Ensure `minimumReleaseAge`/`internalChecksFilter` applies to digest/pinDigest updates, as they don't currently get run through `filterInternalChecks()`.\n *\n * NOTE that this should be kept in sync with `filterInternalChecks`()\n */\nasync function applyMinimumReleaseAgeToDigestUpdate(\n  update: DigestLikeUpdate,\n  config: LookupUpdateConfig,\n  res: UpdateResult,\n  currentVersionWasResolved: boolean,\n  newestMatchingVersionTimestamp: Timestamp | null | undefined,\n): Promise<void> {\n  if (!couldApplyMinimumReleaseAgeToDigest(config, update.updateType)) {\n    return;\n  }\n\n  if (update.updateType === 'pinDigest' && !currentVersionWasResolved) {\n    // Not `!res.currentVersion` - that's force-set to lockedVersion further down regardless of timestamp resolution.\n    // `pinDigest` doesn't repoint anywhere, unlike `digest` - it just freezes whatever the ref already resolves to.\n    // An unversioned tag (e.g. `latest`) has no versioned release to age against, and holding the pin would only\n    // prolong the less-pinned (less safe) state, so skip the check entirely rather than treating the missing\n    // timestamp as pending.\n    logger.once.debug(\n      { depName: config.depName, updateType: update.updateType },\n      `Skipping minimumReleaseAge check for ${update.updateType} update of ${config.depName}, as its current value does not resolve to a versioned release`,\n    );\n    return;\n  }\n\n  let releaseConfig: LookupUpdateConfig = {\n    ...mergeChildConfig(config, res),\n    updateType: update.updateType,\n  };\n  releaseConfig = mergeChildConfig(\n    releaseConfig,\n    releaseConfig[update.updateType]!,\n  );\n  releaseConfig = await applyPackageRules(releaseConfig, 'update-type');\n\n  // Not update.releaseTimestamp - that field means \"age of the new release\" elsewhere (generate.ts, libyear.ts).\n  // Not res.currentVersionTimestamp either - that tracks whatever rangeStrategy resolves currentVersion to (e.g.\n  // the oldest matching release under `bump`), whereas both `digest` and `pinDigest` reflect whatever the current\n  // value's ref actually resolves to *right now*, which is always the newest matching version.\n  const ageCheck = checkMinimumReleaseAge(\n    releaseConfig,\n    newestMatchingVersionTimestamp,\n  );\n\n  // Mirror filterInternalChecks()'s logging so a held/passed digest update is diagnosable.\n  if (ageCheck.minimumReleaseAgeMs && !ageCheck.hasTimestamp) {\n    if (releaseConfig.minimumReleaseAgeBehaviour === 'timestamp-optional') {\n      logger.once.warn(\n        \"Some release(s) did not have a releaseTimestamp, but as we're running with minimumReleaseAgeBehaviour=timestamp-optional, proceeding. See debug logs for more information\",\n      );\n    }\n\n    logger.once.debug(\n      {\n        depName: config.depName,\n        updateType: update.updateType,\n        minimumReleaseAgeBehaviour: releaseConfig.minimumReleaseAgeBehaviour,\n        check: 'minimumReleaseAge',\n      },\n      `${update.updateType} update of ${config.depName} has no releaseTimestamp to age against`,\n    );\n  }\n  if (ageCheck.isPending) {\n    logger.trace(\n      {\n        depName: config.depName,\n        updateType: update.updateType,\n        releaseTimestamp: newestMatchingVersionTimestamp,\n        check: 'minimumReleaseAge',\n      },\n      `${update.updateType} update is pending minimumReleaseAge status checks`,\n    );\n\n    // internalChecksFilter is read from the unmerged top-level config, like filterInternalChecks().\n    if (config.internalChecksFilter === 'strict') {\n      update.pendingChecks = true;\n    }\n  }\n}\n\nexport async function lookupUpdates(\n  inconfig: LookupUpdateConfig,\n): Promise<Result<UpdateResult>> {\n  let config: LookupUpdateConfig = { ...inconfig };\n  config.versioning ??= getDefaultVersioning(config.datasource);\n\n  const versioningApi = allVersioning.get(config.versioning);\n\n  let dependency: ReleaseResult | null = null;\n  const res: UpdateResult = {\n    versioning: config.versioning,\n    updates: [],\n    warnings: [],\n  };\n  // Timestamp of the release a `digest`/`pinDigest` update's current value currently resolves to (the newest version matching it, regardless of `rangeStrategy`), as opposed to `res.currentVersionTimestamp` which tracks whatever the configured rangeStrategy resolves `currentVersion` to (e.g. the oldest for `bump`)\n  let newestMatchingVersionTimestamp: Timestamp | null | undefined;\n  // The `digest` update for `config.currentDigest` (if one is added), so its age check can run after `newDigest` is fetched and no-op updates are stripped.\n  let digestUpdate: DigestLikeUpdate | undefined;\n\n  try {\n    logger.trace(\n      {\n        dependency: config.packageName,\n        currentValue: config.currentValue,\n      },\n      'lookupUpdates',\n    );\n    if (config.currentValue && !isString(config.currentValue)) {\n      // If currentValue is not a string, then it's invalid\n      logger.debug(\n        `Invalid currentValue for ${config.packageName}: ${safeStringify(config.currentValue)} (${typeof config.currentValue})`,\n      );\n      res.skipReason = 'invalid-value';\n      return Result.ok(res);\n    }\n    if (\n      !isGetPkgReleasesConfig(config) ||\n      !getDatasourceFor(config.datasource)\n    ) {\n      res.skipReason = 'invalid-config';\n      return Result.ok(res);\n    }\n    let compareValue = config.currentValue;\n    if (\n      isString(config.currentValue) &&\n      isString(config.versionCompatibility)\n    ) {\n      const versionCompatbilityRegEx = regEx(config.versionCompatibility);\n      const regexMatch = versionCompatbilityRegEx.exec(config.currentValue);\n      if (regexMatch?.groups) {\n        logger.debug(\n          {\n            versionCompatibility: config.versionCompatibility,\n            currentValue: config.currentValue,\n            packageName: config.packageName,\n            groups: regexMatch.groups,\n          },\n          'version compatibility regex match',\n        );\n        config.currentCompatibility = regexMatch.groups.compatibility;\n        res.currentCompatibility = regexMatch.groups.compatibility;\n        compareValue = regexMatch.groups.version;\n      } else {\n        logger.debug(\n          {\n            versionCompatibility: config.versionCompatibility,\n            currentValue: config.currentValue,\n            packageName: config.packageName,\n          },\n          'version compatibility regex mismatch',\n        );\n      }\n    }\n\n    const isValid =\n      isString(compareValue) && versioningApi.isValid(compareValue);\n\n    const unconstrainedValue =\n      !!config.lockedVersion && isUndefined(config.currentValue);\n\n    if (isValid || unconstrainedValue) {\n      if (\n        !config.updatePinnedDependencies &&\n        // TODO #22198\n        versioningApi.isSingleVersion(compareValue!)\n      ) {\n        res.skipReason = 'is-pinned';\n        return Result.ok(res);\n      }\n\n      const { val: releaseResult, err: lookupError } = await getRawPkgReleases(\n        config,\n      )\n        .transform((res) => calculateMostRecentTimestamp(versioningApi, res))\n        .transform((res) => calculateAbandonment(res, config))\n        .transform((res) => applyDatasourceFilters(res, config))\n        .unwrap();\n\n      if (lookupError instanceof Error) {\n        throw lookupError;\n      }\n\n      if (lookupError) {\n        // If dependency lookup fails then warn and return\n        const warning: ValidationMessage = {\n          topic: config.packageName,\n          message: `Failed to look up ${config.datasource} package ${config.packageName}: ${lookupError}`,\n        };\n        logger.debug(\n          {\n            dependency: config.packageName,\n            packageFile: config.packageFile,\n          },\n          warning.message,\n        );\n        // TODO: return warnings in own field\n        res.warnings.push(warning);\n        return Result.ok(res);\n      }\n\n      dependency = releaseResult;\n\n      if (dependency.deprecationMessage) {\n        logger.debug(\n          `Found deprecationMessage for ${config.datasource} package ${config.packageName}`,\n        );\n      }\n\n      assignKeys(res, dependency, [\n        'deprecationMessage',\n        'sourceUrl',\n        'registryUrl',\n        'sourceDirectory',\n        'homepage',\n        'changelogUrl',\n        'dependencyUrl',\n        'lookupName',\n        'packageScope',\n        'mostRecentTimestamp',\n        'isAbandoned',\n        'respectLatest',\n      ]);\n\n      const latestVersion = dependency.tags?.latest;\n      // Filter out any results from datasource that don't comply with our versioning\n      let allVersions = dependency.releases.filter((release) =>\n        versioningApi.isVersion(release.version),\n      );\n      const allReleaseVersions = new Set(allVersions.map((r) => r.version));\n      // The datasources used in these tests always return at least one\n      // version-like release, so neither this block nor the currentDigest\n      // check inside it is reached. A lookup whose releases are all\n      // unversioned tags does not get here either - with a digest configured\n      // it takes the digest-only path above instead - see #40625\n      // istanbul ignore if\n      if (allVersions.length === 0) {\n        const message = `Found no results from datasource that look like a version`;\n        logger.info(\n          {\n            dependency: config.packageName,\n            result: dependency,\n          },\n          message,\n        );\n        if (!config.currentDigest) {\n          return Result.ok(res);\n        }\n      }\n      // Reapply package rules in case we missed something from sourceUrl\n      config = await applyPackageRules(\n        { ...config, sourceUrl: res.sourceUrl },\n        'source-url',\n      );\n      if (config.followTag) {\n        const taggedVersion = dependency.tags?.[config.followTag];\n        if (!taggedVersion) {\n          res.warnings.push({\n            topic: config.packageName,\n            message: `Can't find version with tag ${config.followTag} for ${config.datasource} package ${config.packageName}`,\n          });\n          return Result.ok(res);\n        }\n        allVersions = allVersions.filter(\n          (v) =>\n            v.version === taggedVersion ||\n            (v.version === compareValue &&\n              versioningApi.isGreaterThan(taggedVersion, compareValue)),\n        );\n      }\n\n      const inRangeOnlyStrategy = config.rangeStrategy === 'in-range-only';\n      // Check that existing constraint can be satisfied\n      const allSatisfyingVersions =\n        (inRangeOnlyStrategy || config.rollbackPrs) && !unconstrainedValue\n          ? allVersions.filter((v) =>\n              // TODO #22198\n              versioningApi.matches(v.version, compareValue!),\n            )\n          : allVersions;\n      if (!allSatisfyingVersions.length) {\n        logger.debug(\n          `Found no satisfying versions with '${config.versioning}' versioning`,\n        );\n      }\n\n      if (config.rollbackPrs && !allSatisfyingVersions.length) {\n        const rollback = getRollbackUpdate(config, allVersions, versioningApi);\n        // istanbul ignore if\n        if (!rollback) {\n          res.warnings.push({\n            topic: config.packageName,\n            // TODO: types (#22198)\n            message: `Can't find version matching ${compareValue!} for ${\n              config.datasource\n            } package ${config.packageName}`,\n          });\n          return Result.ok(res);\n        }\n        res.updates.push(rollback);\n      }\n      let rangeStrategy = getRangeStrategy(config);\n\n      // istanbul ignore next\n      if (\n        config.isVulnerabilityAlert &&\n        rangeStrategy === 'update-lockfile' &&\n        !config.lockedVersion\n      ) {\n        rangeStrategy = 'bump';\n      }\n      // unconstrained deps with lockedVersion\n      if (\n        config.isVulnerabilityAlert &&\n        !config.currentValue &&\n        config.lockedVersion\n      ) {\n        rangeStrategy = 'update-lockfile';\n      }\n      const nonDeprecatedVersions = dependency.releases\n        .filter((release) => !release.isDeprecated)\n        .map((release) => release.version);\n      let currentVersion: string;\n      if (rangeStrategy === 'update-lockfile') {\n        currentVersion = config.lockedVersion!;\n      } else if (\n        compareValue &&\n        versioningApi.isSingleVersion(compareValue) &&\n        allVersions.find((v) => v.version === compareValue)\n      ) {\n        currentVersion = compareValue;\n      }\n      // TODO #22198\n      currentVersion ??=\n        getCurrentVersion(\n          compareValue!,\n          config.lockedVersion!,\n          versioningApi,\n          rangeStrategy!,\n          latestVersion!,\n          nonDeprecatedVersions,\n        ) ??\n        getCurrentVersion(\n          compareValue!,\n          config.lockedVersion!,\n          versioningApi,\n          rangeStrategy!,\n          latestVersion!,\n          allVersions.map((v) => v.version),\n        )!;\n\n      if (!currentVersion) {\n        // v8 ignore else -- TODO: add test #40625\n        if (!config.lockedVersion) {\n          logger.debug(\n            `No currentVersion or lockedVersion found for ${config.packageName}`,\n          );\n          res.skipReason = 'invalid-value';\n        }\n        return Result.ok(res);\n      }\n\n      res.currentVersion = currentVersion;\n\n      // Use lockedVersion for the timestamp lookup when available, because\n      // res.currentVersion is later overwritten to lockedVersion (see below).\n      // Without this, strategies like \"replace\" would compute the timestamp\n      // for the highest satisfying version (e.g. 1.4.1) while the reported\n      // currentVersion ends up being the locked one (e.g. 1.0.0).\n      const versionForTimestamp = config.lockedVersion ?? currentVersion;\n      const currentVersionTimestamp = await getTimestamp(\n        config,\n        allVersions,\n        versionForTimestamp,\n        versioningApi,\n      );\n\n      if (isNonEmptyString(currentVersionTimestamp)) {\n        res.currentVersionTimestamp = currentVersionTimestamp;\n        res.currentVersionAgeInDays = getElapsedDays(currentVersionTimestamp);\n\n        if (\n          config.packageRules?.some((rule) =>\n            isNonEmptyString(rule.matchCurrentAge),\n          )\n        ) {\n          // Reapply package rules to check matches for matchCurrentAge\n          config = await applyPackageRules(\n            { ...config, currentVersionTimestamp },\n            'current-timestamp',\n          );\n        }\n      }\n\n      if (\n        config.currentDigest\n          ? couldApplyMinimumReleaseAgeToDigest(config, 'digest')\n          : config.pinDigests &&\n            couldApplyMinimumReleaseAgeToDigest(config, 'pinDigest')\n      ) {\n        // Resolve from `allVersions` (not `dependency.releases`) so that filters like followTag apply, preferring non-deprecated versions with a fallback - both like the `currentVersion` resolution above.\n        const newestMatchingVersion =\n          getCurrentVersion(\n            compareValue!,\n            '',\n            versioningApi,\n            'replace',\n            latestVersion!,\n            allVersions.filter((v) => !v.isDeprecated).map((v) => v.version),\n          ) ??\n          getCurrentVersion(\n            compareValue!,\n            '',\n            versioningApi,\n            'replace',\n            latestVersion!,\n            allVersions.map((v) => v.version),\n          );\n        if (newestMatchingVersion) {\n          newestMatchingVersionTimestamp = await getTimestamp(\n            config,\n            allVersions,\n            newestMatchingVersion,\n            versioningApi,\n          );\n        }\n      }\n\n      if (\n        compareValue &&\n        currentVersion &&\n        rangeStrategy === 'pin' &&\n        !versioningApi.isSingleVersion(compareValue)\n      ) {\n        const newValue =\n          versioningApi.getPinnedValue?.(currentVersion) ?? currentVersion;\n        res.updates.push({\n          updateType: 'pin',\n          isPin: true,\n          newValue,\n          newVersion: currentVersion,\n          newMajor: versioningApi.getMajor(currentVersion)!,\n        });\n      }\n      if (rangeStrategy === 'pin') {\n        // Fall back to replace once pinning logic is done\n        rangeStrategy = 'replace';\n      }\n      // A non-version can only get this far via a locked version under\n      // rangeStrategy=pin, but the timestamp lookup above calls `equals()` on\n      // it first and throws - see #40625\n      // istanbul ignore if\n      if (!versioningApi.isVersion(currentVersion!)) {\n        res.skipReason = 'invalid-version';\n        return Result.ok(res);\n      }\n      // Filter latest, unstable, etc\n      // TODO #22198\n      let filteredReleases = filterVersions(\n        config,\n        currentVersion!,\n        latestVersion!,\n        inRangeOnlyStrategy ? allSatisfyingVersions : allVersions,\n        versioningApi,\n      ).filter(\n        (v) =>\n          // Leave only compatible versions\n          unconstrainedValue ||\n          versioningApi.isCompatible(v.version, compareValue),\n      );\n      let shrinkedViaVulnerability = false;\n      if (config.isVulnerabilityAlert) {\n        if (config.vulnerabilityFixVersion) {\n          res.vulnerabilityFixVersion = config.vulnerabilityFixVersion;\n          res.vulnerabilityFixStrategy = config.vulnerabilityFixStrategy;\n          if (versioningApi.isValid(config.vulnerabilityFixVersion)) {\n            let fixedFilteredReleases;\n            if (versioningApi.isVersion(config.vulnerabilityFixVersion)) {\n              // Retain only releases greater than or equal to the fix version\n              fixedFilteredReleases = filteredReleases.filter(\n                (release) =>\n                  !versioningApi.isGreaterThan(\n                    config.vulnerabilityFixVersion!,\n                    release.version,\n                  ),\n              );\n            } else {\n              // Retain only releases which max the fix constraint\n              fixedFilteredReleases = filteredReleases.filter((release) =>\n                versioningApi.matches(\n                  release.version,\n                  config.vulnerabilityFixVersion!,\n                ),\n              );\n            }\n            // Warn if this filtering results caused zero releases\n            if (fixedFilteredReleases.length === 0 && filteredReleases.length) {\n              logger.warn(\n                {\n                  releases: filteredReleases,\n                  vulnerabilityFixVersion: config.vulnerabilityFixVersion,\n                  packageName: config.packageName,\n                },\n                'No releases satisfy vulnerabilityFixVersion',\n              );\n            }\n            // Use the additionally filtered releases\n            filteredReleases = fixedFilteredReleases;\n          } else {\n            logger.warn(\n              {\n                vulnerabilityFixVersion: config.vulnerabilityFixVersion,\n                packageName: config.packageName,\n              },\n              'vulnerabilityFixVersion is not valid',\n            );\n          }\n        }\n        if (config.vulnerabilityFixStrategy === 'highest') {\n          // Don't shrink the list of releases - let Renovate use its normal logic\n          logger.once.debug(\n            `Using vulnerabilityFixStrategy=highest for ${config.packageName}`,\n          );\n        } else {\n          // Shrink the list of releases to the lowest fixed version\n          logger.once.debug(\n            `Using vulnerabilityFixStrategy=lowest for ${config.packageName}`,\n          );\n          filteredReleases = filteredReleases.slice(0, 1);\n          shrinkedViaVulnerability = true;\n        }\n      }\n      const buckets: Record<string, [Release]> = {};\n      for (const release of filteredReleases) {\n        const bucket = getBucket(\n          config,\n          // TODO #22198\n          currentVersion!,\n          release.version,\n          versioningApi,\n        );\n        // `getBucket()` only returns null when the versioning api cannot\n        // determine a major, but every release reaching it has already passed\n        // `isVersion()`, so a null major contradicts that and the else looks\n        // unreachable rather than merely untested\n        // v8 ignore else -- see #40625\n        if (isString(bucket)) {\n          if (buckets[bucket]) {\n            buckets[bucket].push(release);\n          } else {\n            buckets[bucket] = [release];\n          }\n        }\n      }\n      const depResultConfig = mergeChildConfig(config, res);\n      for (const [bucket, releases] of Object.entries(buckets)) {\n        const sortedReleases = releases.sort((r1, r2) =>\n          versioningApi.sortVersions(r1.version, r2.version),\n        );\n        const { release, pendingChecks, pendingReleases } =\n          await filterInternalChecks(\n            depResultConfig,\n            versioningApi,\n            bucket,\n            sortedReleases,\n          );\n        // `filterInternalChecks()` normally yields a release, falling back to\n        // the newest pending one; only a datasource rejecting every candidate\n        // during postprocessing leaves none - see #40625\n        // istanbul ignore next\n        if (!release) {\n          return Result.ok(res);\n        }\n        const newVersion = release.version;\n        const update = await generateUpdate(\n          config,\n          compareValue,\n          versioningApi,\n          // TODO #22198\n\n          rangeStrategy!,\n          config.lockedVersion ?? currentVersion!,\n          bucket,\n          release,\n          allReleaseVersions,\n        );\n\n        // #29034\n        if (\n          config.manager === 'gomod' &&\n          compareValue?.startsWith('v0.0.0-') &&\n          update.newValue?.startsWith('v0.0.0-') &&\n          config.currentDigest !== update.newDigest\n        ) {\n          update.updateType = 'digest';\n\n          // As this has already been processed by `filterInternalChecks()`, but we're changing the `updateType`, we need to apply the digest-scoped minimumReleaseAge rules.\n          // `currentVersionWasResolved` only matters for `pinDigest`, which `update.updateType` never is here - true is a safe constant.\n          await applyMinimumReleaseAgeToDigestUpdate(\n            update as DigestLikeUpdate,\n            config,\n            res,\n            true,\n            release.releaseTimestamp,\n          );\n        }\n\n        if (pendingChecks) {\n          update.pendingChecks = pendingChecks;\n        }\n\n        if (pendingReleases.length) {\n          update.pendingVersions = pendingReleases.map((r) => r.version);\n        }\n        if (!update.newValue || update.newValue === compareValue) {\n          if (!config.lockedVersion) {\n            continue;\n          }\n          // istanbul ignore if\n          if (rangeStrategy === 'bump') {\n            logger.trace(\n              {\n                packageName: config.packageName,\n                currentValue: config.currentValue,\n                lockedVersion: config.lockedVersion,\n                newVersion,\n              },\n              'Skipping bump because newValue is the same',\n            );\n            continue;\n          }\n          res.isSingleVersion = true;\n        }\n        res.isSingleVersion ??=\n          isString(update.newValue) &&\n          versioningApi.isSingleVersion(update.newValue);\n        // Guards against a docker downgrade, which the datasources used in\n        // these tests never produce - see #40625\n        // istanbul ignore if\n        if (\n          config.versioning === dockerVersioningId &&\n          update.updateType !== 'rollback' &&\n          update.newValue &&\n          versioningApi.isVersion(update.newValue) &&\n          compareValue &&\n          versioningApi.isVersion(compareValue) &&\n          versioningApi.isGreaterThan(compareValue, update.newValue)\n        ) {\n          logger.warn(\n            {\n              packageName: config.packageName,\n              currentValue: config.currentValue,\n              compareValue,\n              currentVersion: config.currentVersion,\n              update,\n              allVersionsLength: allVersions.length,\n              filteredReleaseVersions: filteredReleases.map((r) => r.version),\n              shrinkedViaVulnerability,\n            },\n            'Unexpected downgrade detected: skipping',\n          );\n        } else {\n          res.updates.push(update);\n        }\n      }\n    } else if (compareValue) {\n      logger.debug(\n        `Dependency ${config.packageName} has unsupported/unversioned value ${compareValue} (versioning=${config.versioning})`,\n      );\n\n      if (!config.pinDigests && !config.currentDigest) {\n        logger.debug(\n          `Skipping ${config.packageName} because no currentDigest or pinDigests`,\n        );\n        res.skipReason = 'invalid-value';\n      } else {\n        delete res.skipReason;\n      }\n    } else {\n      res.skipReason = 'invalid-value';\n    }\n\n    if (isReplacementRulesConfigured(config)) {\n      addReplacementUpdateIfValid(res.updates, config);\n    } else if (dependency?.replacementName && dependency.replacementVersion) {\n      res.updates.push({\n        updateType: 'replacement',\n        newName: dependency.replacementName,\n        newValue: dependency.replacementVersion,\n      });\n    }\n\n    // Record if the dep is fixed to a version\n    if (config.lockedVersion) {\n      res.currentVersion = config.lockedVersion;\n      res.fixedVersion = config.lockedVersion;\n    } else if (compareValue && versioningApi.isSingleVersion(compareValue)) {\n      res.fixedVersion = compareValue.replace(regEx(/^=+/), '');\n    }\n\n    // massage versionCompatibility\n    if (\n      isString(config.currentValue) &&\n      isString(compareValue) &&\n      isString(config.versionCompatibility)\n    ) {\n      for (const update of res.updates) {\n        logger.debug({ update });\n        // The enclosing condition already requires a string `currentValue`,\n        // so only a null `newValue` takes the else\n        // v8 ignore else -- see #40625\n        if (isString(config.currentValue) && isString(update.newValue)) {\n          update.newValue = config.currentValue.replace(\n            compareValue,\n            update.newValue,\n          );\n        }\n      }\n    }\n\n    // Add digests if necessary\n    if (supportsDigests(config.datasource)) {\n      if (config.currentDigest) {\n        if (!config.digestOneAndOnly || !res.updates.length) {\n          // digest update - age-checked after the strip below, once newDigest is known\n          digestUpdate = {\n            updateType: 'digest',\n            newValue: config.currentValue,\n          };\n          res.updates.push(digestUpdate);\n        }\n      } else if (\n        config.pinDigests &&\n        // only update the digest in the package file if it's managed by us\n        !config.digestManagedExternally &&\n        // Create a pin only if one doesn't already exists\n        // v8 ignore else -- TODO: add test #40625\n        !res.updates.some((update) => update.updateType === 'pin')\n      ) {\n        // pin digest\n        const pinDigestUpdate: DigestLikeUpdate = {\n          isPinDigest: true,\n          updateType: 'pinDigest',\n          newValue: config.currentValue,\n        };\n        await applyMinimumReleaseAgeToDigestUpdate(\n          pinDigestUpdate,\n          config,\n          res,\n          isValid || unconstrainedValue,\n          newestMatchingVersionTimestamp,\n        );\n        res.updates.push(pinDigestUpdate);\n      }\n      if (versioningApi.valueToVersion) {\n        // TODO #22198\n        res.currentVersion = versioningApi.valueToVersion(res.currentVersion!);\n        for (const update of res.updates) {\n          // TODO #22198\n          update.newVersion = versioningApi.valueToVersion(update.newVersion!);\n        }\n      }\n      if (res.registryUrl) {\n        config.registryUrls = [res.registryUrl];\n      }\n\n      // update digest for all\n      for (const update of res.updates) {\n        // only update the digest in the package file if it's managed by us\n        if (\n          (config.pinDigests === true && !config.digestManagedExternally) ||\n          config.currentDigest\n        ) {\n          const getDigestConfig: GetDigestInputConfig = {\n            ...config,\n            registryUrl: update.registryUrl ?? res.registryUrl,\n            lookupName: res.lookupName,\n          };\n\n          // #20304 only pass it for replacement updates, otherwise we get wrong or invalid digest\n          if (update.updateType !== 'replacement') {\n            delete getDigestConfig.replacementName;\n          }\n\n          // #20304 don't use lookupName and currentDigest when we replace image name\n          if (\n            update.updateType === 'replacement' &&\n            update.newName !== config.packageName\n          ) {\n            delete getDigestConfig.lookupName;\n            delete getDigestConfig.currentDigest;\n            getDigestConfig.replacementName = update.newName;\n          }\n\n          // Don't use current releases if replacement changes name, otherwise we use the wrong new digest.\n          // This happens on datasources which return the digest in release info like `github-tags`.\n          // We can still use it when only version is changing.\n          if (\n            update.updateType !== 'replacement' ||\n            update.newName === config.packageName\n          ) {\n            update.newDigest ??= dependency?.releases.find(\n              (r) => r.version === update.newValue,\n            )?.newDigest;\n          }\n\n          update.newDigest ??= await getDigest(\n            getDigestConfig,\n            update.newValue,\n          );\n\n          // If the digest could not be determined, report this as otherwise the\n          // update will be omitted later on without notice.\n          if (update.newDigest === null) {\n            logger.debug(\n              {\n                packageName: config.packageName,\n                currentValue: config.currentValue,\n                datasource: config.datasource,\n                newValue: update.newValue,\n                bucket: update.bucket,\n              },\n              'Could not determine new digest for update.',\n            );\n\n            // Only report a warning if there is a current digest.\n            // Context: https://github.com/renovatebot/renovate/pull/20175#discussion_r1102615059.\n            if (config.currentDigest) {\n              res.warnings.push({\n                message: `Could not determine new digest for update (${config.datasource} package ${config.packageName})`,\n                topic: config.packageName,\n              });\n            }\n          }\n        } else {\n          delete update.newDigest;\n        }\n        if (update.newVersion) {\n          const registryUrl = dependency?.releases?.find(\n            (release) => release.version === update.newVersion,\n          )?.registryUrl;\n          if (registryUrl && registryUrl !== res.registryUrl) {\n            update.registryUrl = registryUrl;\n          }\n        }\n      }\n    }\n\n    if (res.updates.length) {\n      delete res.skipReason;\n    }\n    // Strip out any non-changed ones\n    res.updates = res.updates\n      .filter(\n        (update) => update.newValue !== null || config.currentValue === null,\n      )\n      .filter((update) => update.newDigest !== null)\n      .filter(\n        (update) =>\n          (isString(update.newName) && update.newName !== config.packageName) ||\n          update.isReplacement === true ||\n          update.newValue !== config.currentValue ||\n          update.isLockfileUpdate === true ||\n          // TODO #22198\n          (update.newDigest &&\n            !update.newDigest.startsWith(config.currentDigest!)),\n      );\n    // If range strategy specified in config is 'in-range-only', also strip out updates where currentValue !== newValue\n    if (config.rangeStrategy === 'in-range-only') {\n      res.updates = res.updates.filter(\n        (update) => update.newValue === config.currentValue,\n      );\n    }\n    // Handle a weird edge case involving followTag and fallbacks\n    if (config.rollbackPrs && config.followTag) {\n      res.updates = res.updates.filter(\n        (update) =>\n          update.updateType !== 'rollback' || res.updates.length === 1,\n      );\n    }\n\n    // If there is a digest update proposed which is in the pending updates for this dependency, ensure that `minimumReleaseAge` is applied.\n    // `currentVersionWasResolved` only matters for `pinDigest`, which `digestUpdate` never is - true is a safe constant.\n    if (digestUpdate && res.updates.includes(digestUpdate)) {\n      await applyMinimumReleaseAgeToDigestUpdate(\n        digestUpdate,\n        config,\n        res,\n        true,\n        newestMatchingVersionTimestamp,\n      );\n    }\n\n    const release =\n      res.updates.length > 0\n        ? (dependency?.releases.find(\n            (r) => r.version === res.updates[0].newValue,\n          ) ??\n          dependency?.releases.find(\n            (r) => r.version === res.updates[0].newVersion,\n          ))\n        : null;\n\n    if (release?.changelogContent) {\n      res.changelogContent = release.changelogContent;\n      res.changelogUrl = release.changelogUrl;\n    }\n  } catch (err) /* istanbul ignore next */ {\n    if (err instanceof ExternalHostError) {\n      return Result.err(err);\n    }\n\n    if (err instanceof Error && err.message === CONFIG_VALIDATION) {\n      return Result.err(err);\n    }\n\n    logger.error(\n      {\n        currentDigest: config.currentDigest,\n        currentValue: config.currentValue,\n        datasource: config.datasource,\n        packageName: config.packageName,\n        digestOneAndOnly: config.digestOneAndOnly,\n        followTag: config.followTag,\n        lockedVersion: config.lockedVersion,\n        packageFile: config.packageFile,\n        pinDigests: config.pinDigests,\n        rollbackPrs: config.rollbackPrs,\n        isVulnerabilityAlert: config.isVulnerabilityAlert,\n        updatePinnedDependencies: config.updatePinnedDependencies,\n        err,\n      },\n      'lookupUpdates error',\n    );\n    res.skipReason = 'internal-error';\n  }\n  return Result.ok(res);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiDA,eAAe,aACb,QACA,UACA,SACA,eACuC;CACvC,MAAM,iBAAiB,SAAS,MAC7B,MACC,cAAc,QAAQ,EAAE,OAAO,KAC/B,cAAc,OAAO,EAAE,SAAS,OAAO,CAC3C;CAEA,IAAI,CAAC,gBACH,OAAO;CAGT,IAAI,eAAe,kBACjB,OAAO,eAAe;CAIxB,QAAO,MADqB,mBAAmB,QAAQ,cAAc,EAAA,EAC/C;AACxB;;;;;;AAUA,SAAS,oCACP,QACA,YACS;CAIT,IAAI,OAAO,yBAAyB,QAClC,OAAO;CAGT,OACE,iBAAiB,OAAO,iBAAiB,KACzC,iBAAiB,OAAO,WAAW,EAAE,iBAAiB,KACtD,CAAC,CAAC,OAAO,cAAc,MAAM,SAC3B,iBAAiB,KAAK,iBAAiB,CACzC;AAEJ;;;;;;AAOA,eAAe,qCACb,QACA,QACA,KACA,2BACA,gCACe;CACf,IAAI,CAAC,oCAAoC,QAAQ,OAAO,UAAU,GAChE;CAGF,IAAI,OAAO,eAAe,eAAe,CAAC,2BAA2B;EAMnE,OAAO,KAAK,MACV;GAAE,SAAS,OAAO;GAAS,YAAY,OAAO;EAAW,GACzD,wCAAwC,OAAO,WAAW,aAAa,OAAO,QAAQ,+DACxF;EACA;CACF;CAEA,IAAI,gBAAoC;EACtC,GAAG,iBAAiB,QAAQ,GAAG;EAC/B,YAAY,OAAO;CACrB;CACA,gBAAgB,iBACd,eACA,cAAc,OAAO,WACvB;CACA,gBAAgB,MAAM,kBAAkB,eAAe,aAAa;CAMpE,MAAM,WAAW,uBACf,eACA,8BACF;CAGA,IAAI,SAAS,uBAAuB,CAAC,SAAS,cAAc;EAC1D,IAAI,cAAc,+BAA+B,sBAC/C,OAAO,KAAK,KACV,2KACF;EAGF,OAAO,KAAK,MACV;GACE,SAAS,OAAO;GAChB,YAAY,OAAO;GACnB,4BAA4B,cAAc;GAC1C,OAAO;EACT,GACA,GAAG,OAAO,WAAW,aAAa,OAAO,QAAQ,wCACnD;CACF;CACA,IAAI,SAAS,WAAW;EACtB,OAAO,MACL;GACE,SAAS,OAAO;GAChB,YAAY,OAAO;GACnB,kBAAkB;GAClB,OAAO;EACT,GACA,GAAG,OAAO,WAAW,mDACvB;EAGA,IAAI,OAAO,yBAAyB,UAClC,OAAO,gBAAgB;CAE3B;AACF;AAEA,eAAsB,cACpB,UAC+B;CAC/B,IAAI,SAA6B,EAAE,GAAG,SAAS;CAC/C,OAAO,eAAe,qBAAqB,OAAO,UAAU;CAE5D,MAAM,gBAAgBA,IAAkB,OAAO,UAAU;CAEzD,IAAI,aAAmC;CACvC,MAAM,MAAoB;EACxB,YAAY,OAAO;EACnB,SAAS,CAAC;EACV,UAAU,CAAC;CACb;CAEA,IAAI;CAEJ,IAAI;CAEJ,IAAI;EACF,OAAO,MACL;GACE,YAAY,OAAO;GACnB,cAAc,OAAO;EACvB,GACA,eACF;EACA,IAAI,OAAO,gBAAgB,CAAC,SAAS,OAAO,YAAY,GAAG;GAEzD,OAAO,MACL,4BAA4B,OAAO,YAAY,IAAI,cAAc,OAAO,YAAY,EAAE,IAAI,OAAO,OAAO,aAAa,EACvH;GACA,IAAI,aAAa;GACjB,OAAO,OAAO,GAAG,GAAG;EACtB;EACA,IACE,CAAC,uBAAuB,MAAM,KAC9B,CAAC,iBAAiB,OAAO,UAAU,GACnC;GACA,IAAI,aAAa;GACjB,OAAO,OAAO,GAAG,GAAG;EACtB;EACA,IAAI,eAAe,OAAO;EAC1B,IACE,SAAS,OAAO,YAAY,KAC5B,SAAS,OAAO,oBAAoB,GACpC;GAEA,MAAM,aAD2B,MAAM,OAAO,oBACJ,CAAC,CAAC,KAAK,OAAO,YAAY;GACpE,IAAI,YAAY,QAAQ;IACtB,OAAO,MACL;KACE,sBAAsB,OAAO;KAC7B,cAAc,OAAO;KACrB,aAAa,OAAO;KACpB,QAAQ,WAAW;IACrB,GACA,mCACF;IACA,OAAO,uBAAuB,WAAW,OAAO;IAChD,IAAI,uBAAuB,WAAW,OAAO;IAC7C,eAAe,WAAW,OAAO;GACnC,OACE,OAAO,MACL;IACE,sBAAsB,OAAO;IAC7B,cAAc,OAAO;IACrB,aAAa,OAAO;GACtB,GACA,sCACF;EAEJ;EAEA,MAAM,UACJ,SAAS,YAAY,KAAK,cAAc,QAAQ,YAAY;EAE9D,MAAM,qBACJ,CAAC,CAAC,OAAO,iBAAiB,YAAY,OAAO,YAAY;EAE3D,IAAI,WAAW,oBAAoB;GACjC,IACE,CAAC,OAAO,4BAER,cAAc,gBAAgB,YAAa,GAC3C;IACA,IAAI,aAAa;IACjB,OAAO,OAAO,GAAG,GAAG;GACtB;GAEA,MAAM,EAAE,KAAK,eAAe,KAAK,gBAAgB,MAAM,kBACrD,MACF,CAAC,CACE,WAAW,QAAQ,6BAA6B,eAAe,GAAG,CAAC,CAAC,CACpE,WAAW,QAAQ,qBAAqB,KAAK,MAAM,CAAC,CAAC,CACrD,WAAW,QAAQ,uBAAuB,KAAK,MAAM,CAAC,CAAC,CACvD,OAAO;GAEV,IAAI,uBAAuB,OACzB,MAAM;GAGR,IAAI,aAAa;IAEf,MAAM,UAA6B;KACjC,OAAO,OAAO;KACd,SAAS,qBAAqB,OAAO,WAAW,WAAW,OAAO,YAAY,IAAI;IACpF;IACA,OAAO,MACL;KACE,YAAY,OAAO;KACnB,aAAa,OAAO;IACtB,GACA,QAAQ,OACV;IAEA,IAAI,SAAS,KAAK,OAAO;IACzB,OAAO,OAAO,GAAG,GAAG;GACtB;GAEA,aAAa;GAEb,IAAI,WAAW,oBACb,OAAO,MACL,gCAAgC,OAAO,WAAW,WAAW,OAAO,aACtE;GAGF,WAAW,KAAK,YAAY;IAC1B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;GACF,CAAC;GAED,MAAM,gBAAgB,WAAW,MAAM;GAEvC,IAAI,cAAc,WAAW,SAAS,QAAQ,YAC5C,cAAc,UAAU,QAAQ,OAAO,CACzC;GACA,MAAM,qBAAqB,IAAI,IAAI,YAAY,KAAK,MAAM,EAAE,OAAO,CAAC;;GAOpE,IAAI,YAAY,WAAW,GAAG;IAE5B,OAAO,KACL;KACE,YAAY,OAAO;KACnB,QAAQ;IACV,GACA,2DACF;IACA,IAAI,CAAC,OAAO,eACV,OAAO,OAAO,GAAG,GAAG;GAExB;GAEA,SAAS,MAAM,kBACb;IAAE,GAAG;IAAQ,WAAW,IAAI;GAAU,GACtC,YACF;GACA,IAAI,OAAO,WAAW;IACpB,MAAM,gBAAgB,WAAW,OAAO,OAAO;IAC/C,IAAI,CAAC,eAAe;KAClB,IAAI,SAAS,KAAK;MAChB,OAAO,OAAO;MACd,SAAS,+BAA+B,OAAO,UAAU,OAAO,OAAO,WAAW,WAAW,OAAO;KACtG,CAAC;KACD,OAAO,OAAO,GAAG,GAAG;IACtB;IACA,cAAc,YAAY,QACvB,MACC,EAAE,YAAY,iBACb,EAAE,YAAY,gBACb,cAAc,cAAc,eAAe,YAAY,CAC7D;GACF;GAEA,MAAM,sBAAsB,OAAO,kBAAkB;GAErD,MAAM,yBACH,uBAAuB,OAAO,gBAAgB,CAAC,qBAC5C,YAAY,QAAQ,MAElB,cAAc,QAAQ,EAAE,SAAS,YAAa,CAChD,IACA;GACN,IAAI,CAAC,sBAAsB,QACzB,OAAO,MACL,sCAAsC,OAAO,WAAW,aAC1D;GAGF,IAAI,OAAO,eAAe,CAAC,sBAAsB,QAAQ;IACvD,MAAM,WAAW,kBAAkB,QAAQ,aAAa,aAAa;;IAErE,IAAI,CAAC,UAAU;KACb,IAAI,SAAS,KAAK;MAChB,OAAO,OAAO;MAEd,SAAS,+BAA+B,aAAc,OACpD,OAAO,WACR,WAAW,OAAO;KACrB,CAAC;KACD,OAAO,OAAO,GAAG,GAAG;IACtB;IACA,IAAI,QAAQ,KAAK,QAAQ;GAC3B;GACA,IAAI,gBAAgB,iBAAiB,MAAM;;GAG3C,IACE,OAAO,wBACP,kBAAkB,qBAClB,CAAC,OAAO,eAER,gBAAgB;GAGlB,IACE,OAAO,wBACP,CAAC,OAAO,gBACR,OAAO,eAEP,gBAAgB;GAElB,MAAM,wBAAwB,WAAW,SACtC,QAAQ,YAAY,CAAC,QAAQ,YAAY,CAAC,CAC1C,KAAK,YAAY,QAAQ,OAAO;GACnC,IAAI;GACJ,IAAI,kBAAkB,mBACpB,iBAAiB,OAAO;QACnB,IACL,gBACA,cAAc,gBAAgB,YAAY,KAC1C,YAAY,MAAM,MAAM,EAAE,YAAY,YAAY,GAElD,iBAAiB;GAGnB,mBACE,kBACE,cACA,OAAO,eACP,eACA,eACA,eACA,qBACF,KACA,kBACE,cACA,OAAO,eACP,eACA,eACA,eACA,YAAY,KAAK,MAAM,EAAE,OAAO,CAClC;GAEF,IAAI,CAAC,gBAAgB;;IAEnB,IAAI,CAAC,OAAO,eAAe;KACzB,OAAO,MACL,gDAAgD,OAAO,aACzD;KACA,IAAI,aAAa;IACnB;IACA,OAAO,OAAO,GAAG,GAAG;GACtB;GAEA,IAAI,iBAAiB;GAOrB,MAAM,sBAAsB,OAAO,iBAAiB;GACpD,MAAM,0BAA0B,MAAM,aACpC,QACA,aACA,qBACA,aACF;GAEA,IAAI,iBAAiB,uBAAuB,GAAG;IAC7C,IAAI,0BAA0B;IAC9B,IAAI,0BAA0B,eAAe,uBAAuB;IAEpE,IACE,OAAO,cAAc,MAAM,SACzB,iBAAiB,KAAK,eAAe,CACvC,GAGA,SAAS,MAAM,kBACb;KAAE,GAAG;KAAQ;IAAwB,GACrC,mBACF;GAEJ;GAEA,IACE,OAAO,gBACH,oCAAoC,QAAQ,QAAQ,IACpD,OAAO,cACP,oCAAoC,QAAQ,WAAW,GAC3D;IAEA,MAAM,wBACJ,kBACE,cACA,IACA,eACA,WACA,eACA,YAAY,QAAQ,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC,KAAK,MAAM,EAAE,OAAO,CACjE,KACA,kBACE,cACA,IACA,eACA,WACA,eACA,YAAY,KAAK,MAAM,EAAE,OAAO,CAClC;IACF,IAAI,uBACF,iCAAiC,MAAM,aACrC,QACA,aACA,uBACA,aACF;GAEJ;GAEA,IACE,gBACA,kBACA,kBAAkB,SAClB,CAAC,cAAc,gBAAgB,YAAY,GAC3C;IACA,MAAM,WACJ,cAAc,iBAAiB,cAAc,KAAK;IACpD,IAAI,QAAQ,KAAK;KACf,YAAY;KACZ,OAAO;KACP;KACA,YAAY;KACZ,UAAU,cAAc,SAAS,cAAc;IACjD,CAAC;GACH;GACA,IAAI,kBAAkB,OAEpB,gBAAgB;;GAMlB,IAAI,CAAC,cAAc,UAAU,cAAe,GAAG;IAC7C,IAAI,aAAa;IACjB,OAAO,OAAO,GAAG,GAAG;GACtB;GAGA,IAAI,mBAAmB,eACrB,QACA,gBACA,eACA,sBAAsB,wBAAwB,aAC9C,aACF,CAAC,CAAC,QACC,MAEC,sBACA,cAAc,aAAa,EAAE,SAAS,YAAY,CACtD;GACA,IAAI,2BAA2B;GAC/B,IAAI,OAAO,sBAAsB;IAC/B,IAAI,OAAO,yBAAyB;KAClC,IAAI,0BAA0B,OAAO;KACrC,IAAI,2BAA2B,OAAO;KACtC,IAAI,cAAc,QAAQ,OAAO,uBAAuB,GAAG;MACzD,IAAI;MACJ,IAAI,cAAc,UAAU,OAAO,uBAAuB,GAExD,wBAAwB,iBAAiB,QACtC,YACC,CAAC,cAAc,cACb,OAAO,yBACP,QAAQ,OACV,CACJ;WAGA,wBAAwB,iBAAiB,QAAQ,YAC/C,cAAc,QACZ,QAAQ,SACR,OAAO,uBACT,CACF;MAGF,IAAI,sBAAsB,WAAW,KAAK,iBAAiB,QACzD,OAAO,KACL;OACE,UAAU;OACV,yBAAyB,OAAO;OAChC,aAAa,OAAO;MACtB,GACA,6CACF;MAGF,mBAAmB;KACrB,OACE,OAAO,KACL;MACE,yBAAyB,OAAO;MAChC,aAAa,OAAO;KACtB,GACA,sCACF;IAEJ;IACA,IAAI,OAAO,6BAA6B,WAEtC,OAAO,KAAK,MACV,8CAA8C,OAAO,aACvD;SACK;KAEL,OAAO,KAAK,MACV,6CAA6C,OAAO,aACtD;KACA,mBAAmB,iBAAiB,MAAM,GAAG,CAAC;KAC9C,2BAA2B;IAC7B;GACF;GACA,MAAM,UAAqC,CAAC;GAC5C,KAAK,MAAM,WAAW,kBAAkB;IACtC,MAAM,SAAS,UACb,QAEA,gBACA,QAAQ,SACR,aACF;;IAMA,IAAI,SAAS,MAAM,GAAG;KACpB,IAAI,QAAQ,SACV,QAAQ,OAAO,CAAC,KAAK,OAAO;UAE5B,QAAQ,UAAU,CAAC,OAAO;IAE9B;GACF;GACA,MAAM,kBAAkB,iBAAiB,QAAQ,GAAG;GACpD,KAAK,MAAM,CAAC,QAAQ,aAAa,OAAO,QAAQ,OAAO,GAAG;IACxD,MAAM,iBAAiB,SAAS,MAAM,IAAI,OACxC,cAAc,aAAa,GAAG,SAAS,GAAG,OAAO,CACnD;IACA,MAAM,EAAE,SAAS,eAAe,oBAC9B,MAAM,qBACJ,iBACA,eACA,QACA,cACF;;IAKF,IAAI,CAAC,SACH,OAAO,OAAO,GAAG,GAAG;IAEtB,MAAM,aAAa,QAAQ;IAC3B,MAAM,SAAS,MAAM,eACnB,QACA,cACA,eAGA,eACA,OAAO,iBAAiB,gBACxB,QACA,SACA,kBACF;IAGA,IACE,OAAO,YAAY,WACnB,cAAc,WAAW,SAAS,KAClC,OAAO,UAAU,WAAW,SAAS,KACrC,OAAO,kBAAkB,OAAO,WAChC;KACA,OAAO,aAAa;KAIpB,MAAM,qCACJ,QACA,QACA,KACA,MACA,QAAQ,gBACV;IACF;IAEA,IAAI,eACF,OAAO,gBAAgB;IAGzB,IAAI,gBAAgB,QAClB,OAAO,kBAAkB,gBAAgB,KAAK,MAAM,EAAE,OAAO;IAE/D,IAAI,CAAC,OAAO,YAAY,OAAO,aAAa,cAAc;KACxD,IAAI,CAAC,OAAO,eACV;;KAGF,IAAI,kBAAkB,QAAQ;MAC5B,OAAO,MACL;OACE,aAAa,OAAO;OACpB,cAAc,OAAO;OACrB,eAAe,OAAO;OACtB;MACF,GACA,4CACF;MACA;KACF;KACA,IAAI,kBAAkB;IACxB;IACA,IAAI,oBACF,SAAS,OAAO,QAAQ,KACxB,cAAc,gBAAgB,OAAO,QAAQ;;IAI/C,IACE,OAAO,eAAA,YACP,OAAO,eAAe,cACtB,OAAO,YACP,cAAc,UAAU,OAAO,QAAQ,KACvC,gBACA,cAAc,UAAU,YAAY,KACpC,cAAc,cAAc,cAAc,OAAO,QAAQ,GAEzD,OAAO,KACL;KACE,aAAa,OAAO;KACpB,cAAc,OAAO;KACrB;KACA,gBAAgB,OAAO;KACvB;KACA,mBAAmB,YAAY;KAC/B,yBAAyB,iBAAiB,KAAK,MAAM,EAAE,OAAO;KAC9D;IACF,GACA,yCACF;SAEA,IAAI,QAAQ,KAAK,MAAM;GAE3B;EACF,OAAO,IAAI,cAAc;GACvB,OAAO,MACL,cAAc,OAAO,YAAY,qCAAqC,aAAa,eAAe,OAAO,WAAW,EACtH;GAEA,IAAI,CAAC,OAAO,cAAc,CAAC,OAAO,eAAe;IAC/C,OAAO,MACL,YAAY,OAAO,YAAY,wCACjC;IACA,IAAI,aAAa;GACnB,OACE,OAAO,IAAI;EAEf,OACE,IAAI,aAAa;EAGnB,IAAI,6BAA6B,MAAM,GACrC,4BAA4B,IAAI,SAAS,MAAM;OAC1C,IAAI,YAAY,mBAAmB,WAAW,oBACnD,IAAI,QAAQ,KAAK;GACf,YAAY;GACZ,SAAS,WAAW;GACpB,UAAU,WAAW;EACvB,CAAC;EAIH,IAAI,OAAO,eAAe;GACxB,IAAI,iBAAiB,OAAO;GAC5B,IAAI,eAAe,OAAO;EAC5B,OAAO,IAAI,gBAAgB,cAAc,gBAAgB,YAAY,GACnE,IAAI,eAAe,aAAa,QAAQ,MAAM,KAAK,GAAG,EAAE;EAI1D,IACE,SAAS,OAAO,YAAY,KAC5B,SAAS,YAAY,KACrB,SAAS,OAAO,oBAAoB,GAEpC,KAAK,MAAM,UAAU,IAAI,SAAS;GAChC,OAAO,MAAM,EAAE,OAAO,CAAC;;GAIvB,IAAI,SAAS,OAAO,YAAY,KAAK,SAAS,OAAO,QAAQ,GAC3D,OAAO,WAAW,OAAO,aAAa,QACpC,cACA,OAAO,QACT;EAEJ;EAIF,IAAI,gBAAgB,OAAO,UAAU,GAAG;GACtC,IAAI,OAAO,eACL;QAAA,CAAC,OAAO,oBAAoB,CAAC,IAAI,QAAQ,QAAQ;KAEnD,eAAe;MACb,YAAY;MACZ,UAAU,OAAO;KACnB;KACA,IAAI,QAAQ,KAAK,YAAY;IAC/B;UACK,IACL,OAAO,cAEP,CAAC,OAAO;;GAGR,CAAC,IAAI,QAAQ,MAAM,WAAW,OAAO,eAAe,KAAK,GACzD;IAEA,MAAM,kBAAoC;KACxC,aAAa;KACb,YAAY;KACZ,UAAU,OAAO;IACnB;IACA,MAAM,qCACJ,iBACA,QACA,KACA,WAAW,oBACX,8BACF;IACA,IAAI,QAAQ,KAAK,eAAe;GAClC;GACA,IAAI,cAAc,gBAAgB;IAEhC,IAAI,iBAAiB,cAAc,eAAe,IAAI,cAAe;IACrE,KAAK,MAAM,UAAU,IAAI,SAEvB,OAAO,aAAa,cAAc,eAAe,OAAO,UAAW;GAEvE;GACA,IAAI,IAAI,aACN,OAAO,eAAe,CAAC,IAAI,WAAW;GAIxC,KAAK,MAAM,UAAU,IAAI,SAAS;IAEhC,IACG,OAAO,eAAe,QAAQ,CAAC,OAAO,2BACvC,OAAO,eACP;KACA,MAAM,kBAAwC;MAC5C,GAAG;MACH,aAAa,OAAO,eAAe,IAAI;MACvC,YAAY,IAAI;KAClB;KAGA,IAAI,OAAO,eAAe,eACxB,OAAO,gBAAgB;KAIzB,IACE,OAAO,eAAe,iBACtB,OAAO,YAAY,OAAO,aAC1B;MACA,OAAO,gBAAgB;MACvB,OAAO,gBAAgB;MACvB,gBAAgB,kBAAkB,OAAO;KAC3C;KAKA,IACE,OAAO,eAAe,iBACtB,OAAO,YAAY,OAAO,aAE1B,OAAO,cAAc,YAAY,SAAS,MACvC,MAAM,EAAE,YAAY,OAAO,QAC9B,CAAC,EAAE;KAGL,OAAO,cAAc,MAAM,UACzB,iBACA,OAAO,QACT;KAIA,IAAI,OAAO,cAAc,MAAM;MAC7B,OAAO,MACL;OACE,aAAa,OAAO;OACpB,cAAc,OAAO;OACrB,YAAY,OAAO;OACnB,UAAU,OAAO;OACjB,QAAQ,OAAO;MACjB,GACA,4CACF;MAIA,IAAI,OAAO,eACT,IAAI,SAAS,KAAK;OAChB,SAAS,8CAA8C,OAAO,WAAW,WAAW,OAAO,YAAY;OACvG,OAAO,OAAO;MAChB,CAAC;KAEL;IACF,OACE,OAAO,OAAO;IAEhB,IAAI,OAAO,YAAY;KACrB,MAAM,cAAc,YAAY,UAAU,MACvC,YAAY,QAAQ,YAAY,OAAO,UAC1C,CAAC,EAAE;KACH,IAAI,eAAe,gBAAgB,IAAI,aACrC,OAAO,cAAc;IAEzB;GACF;EACF;EAEA,IAAI,IAAI,QAAQ,QACd,OAAO,IAAI;EAGb,IAAI,UAAU,IAAI,QACf,QACE,WAAW,OAAO,aAAa,QAAQ,OAAO,iBAAiB,IAClE,CAAC,CACA,QAAQ,WAAW,OAAO,cAAc,IAAI,CAAC,CAC7C,QACE,WACE,SAAS,OAAO,OAAO,KAAK,OAAO,YAAY,OAAO,eACvD,OAAO,kBAAkB,QACzB,OAAO,aAAa,OAAO,gBAC3B,OAAO,qBAAqB,QAE3B,OAAO,aACN,CAAC,OAAO,UAAU,WAAW,OAAO,aAAc,CACxD;EAEF,IAAI,OAAO,kBAAkB,iBAC3B,IAAI,UAAU,IAAI,QAAQ,QACvB,WAAW,OAAO,aAAa,OAAO,YACzC;EAGF,IAAI,OAAO,eAAe,OAAO,WAC/B,IAAI,UAAU,IAAI,QAAQ,QACvB,WACC,OAAO,eAAe,cAAc,IAAI,QAAQ,WAAW,CAC/D;EAKF,IAAI,gBAAgB,IAAI,QAAQ,SAAS,YAAY,GACnD,MAAM,qCACJ,cACA,QACA,KACA,MACA,8BACF;EAGF,MAAM,UACJ,IAAI,QAAQ,SAAS,IAChB,YAAY,SAAS,MACnB,MAAM,EAAE,YAAY,IAAI,QAAQ,EAAE,CAAC,QACtC,KACA,YAAY,SAAS,MAClB,MAAM,EAAE,YAAY,IAAI,QAAQ,EAAE,CAAC,UACtC,IACA;EAEN,IAAI,SAAS,kBAAkB;GAC7B,IAAI,mBAAmB,QAAQ;GAC/B,IAAI,eAAe,QAAQ;EAC7B;CACF,SAAS,gCAAgC;EACvC,IAAI,eAAe,mBACjB,OAAO,OAAO,IAAI,GAAG;EAGvB,IAAI,eAAe,SAAS,IAAI,YAAA,qBAC9B,OAAO,OAAO,IAAI,GAAG;EAGvB,OAAO,MACL;GACE,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,kBAAkB,OAAO;GACzB,WAAW,OAAO;GAClB,eAAe,OAAO;GACtB,aAAa,OAAO;GACpB,YAAY,OAAO;GACnB,aAAa,OAAO;GACpB,sBAAsB,OAAO;GAC7B,0BAA0B,OAAO;GACjC;EACF,GACA,qBACF;EACA,IAAI,aAAa;CACnB;CACA,OAAO,OAAO,GAAG,GAAG;AACtB"}

package/dist/workers/repository/process/lookup/rollback.js.map

@@ -1 +1 @@
-{"version":3,"file":"rollback.js","names":[],"sources":["../../../../../lib/workers/repository/process/lookup/rollback.ts"],"sourcesContent":["import { logger } from '../../../../logger/index.ts';\nimport type { Release } from '../../../../modules/datasource/types.ts';\nimport type { LookupUpdate } from '../../../../modules/manager/types.ts';\nimport type { VersioningApi } from '../../../../modules/versioning/index.ts';\nimport type { RollbackConfig } from './types.ts';\n\nexport function getRollbackUpdate(\n  config: RollbackConfig,\n  versions: Release[],\n  versioningApi: VersioningApi,\n): LookupUpdate | null {\n  const {\n    packageFile,\n    versioning,\n    packageName,\n    depName,\n    currentValue,\n    datasource,\n  } = config;\n  // istanbul ignore if\n  if (!('isLessThanRange' in versioningApi)) {\n    logger.debug(\n      { versioning },\n      'Current versioning does not support isLessThanRange()',\n    );\n    return null;\n  }\n  const lessThanVersions = versions.filter((v) => {\n    try {\n      return versioningApi.isLessThanRange!(v.version, currentValue!);\n    } catch /* istanbul ignore next */ {\n      return false;\n    }\n  });\n  // istanbul ignore if\n  if (!lessThanVersions.length) {\n    logger.debug(\n      { packageFile, depName, currentValue },\n      'Missing version has nothing to roll back to',\n    );\n    return null;\n  }\n  logger.debug(\n    { packageFile, depName, currentValue },\n    `Current version not found - rolling back`,\n  );\n  logger.debug(\n    { dependency: depName, versions },\n    'Versions found before rolling back',\n  );\n\n  lessThanVersions.sort((a, b) =>\n    versioningApi.sortVersions(a.version, b.version),\n  );\n  let newRelease;\n  if (currentValue && versioningApi.isStable(currentValue)) {\n    newRelease = lessThanVersions\n      .filter((v) => versioningApi.isStable(v.version))\n      .pop();\n  }\n  let newVersion = newRelease?.version;\n  let registryUrl = newRelease?.registryUrl;\n\n  if (!newVersion) {\n    newRelease = lessThanVersions.pop();\n    newVersion = newRelease?.version;\n    registryUrl = newRelease?.registryUrl;\n  }\n  // istanbul ignore if\n  if (!newVersion) {\n    logger.debug('No newVersion to roll back to');\n    return null;\n  }\n  const newValue = versioningApi.getNewValue({\n    // TODO #22198\n    currentValue: currentValue!,\n    rangeStrategy: 'replace',\n    newVersion,\n  });\n  return {\n    bucket: 'rollback',\n    // TODO #22198\n    newMajor: versioningApi.getMajor(newVersion)!,\n    newValue: newValue!,\n    newVersion,\n    registryUrl,\n    updateType: 'rollback',\n    prBodyNotes: [\n      `The version of \\`${depName ?? packageName}\\` in use (\\`${currentValue}\\`) was not found once Renovate filtered the dependencies. The ${datasource} datasource returned ${versions.length} entries, but when Renovate applied its filtering, none were left, so Renovate will roll back to a supported version`,\n    ],\n  };\n}\n"],"mappings":";;AAMA,SAAgB,kBACd,QACA,UACA,eACqB;CACrB,MAAM,EACJ,aACA,YACA,aACA,SACA,cACA,eACE;;CAEJ,IAAI,EAAE,qBAAqB,gBAAgB;EACzC,OAAO,MACL,EAAE,WAAW,GACb,uDACF;EACA,OAAO;CACT;CACA,MAAM,mBAAmB,SAAS,QAAQ,MAAM;EAC9C,IAAI;GACF,OAAO,cAAc,gBAAiB,EAAE,SAAS,YAAa;EAChE,mCAAmC;GACjC,OAAO;EACT;CACF,CAAC;;CAED,IAAI,CAAC,iBAAiB,QAAQ;EAC5B,OAAO,MACL;GAAE;GAAa;GAAS;EAAa,GACrC,6CACF;EACA,OAAO;CACT;CACA,OAAO,MACL;EAAE;EAAa;EAAS;CAAa,GACrC,0CACF;CACA,OAAO,MACL;EAAE,YAAY;EAAS;CAAS,GAChC,oCACF;CAEA,iBAAiB,MAAM,GAAG,MACxB,cAAc,aAAa,EAAE,SAAS,EAAE,OAAO,CACjD;CACA,IAAI;CACJ,IAAI,gBAAgB,cAAc,SAAS,YAAY,GACrD,aAAa,iBACV,QAAQ,MAAM,cAAc,SAAS,EAAE,OAAO,CAAC,CAAC,CAChD,IAAI;CAET,IAAI,aAAa,YAAY;CAC7B,IAAI,cAAc,YAAY;CAE9B,IAAI,CAAC,YAAY;EACf,aAAa,iBAAiB,IAAI;EAClC,aAAa,YAAY;EACzB,cAAc,YAAY;CAC5B;;CAEA,IAAI,CAAC,YAAY;EACf,OAAO,MAAM,+BAA+B;EAC5C,OAAO;CACT;CACA,MAAM,WAAW,cAAc,YAAY;EAE3B;EACd,eAAe;EACf;CACF,CAAC;CACD,OAAO;EACL,QAAQ;EAER,UAAU,cAAc,SAAS,UAAU;EACjC;EACV;EACA;EACA,YAAY;EACZ,aAAa,CACX,oBAAoB,WAAW,YAAY,eAAe,aAAa,iEAAiE,WAAW,uBAAuB,SAAS,OAAO,qHAC5L;CACF;AACF"}
+{"version":3,"file":"rollback.js","names":[],"sources":["../../../../../lib/workers/repository/process/lookup/rollback.ts"],"sourcesContent":["import { logger } from '../../../../logger/index.ts';\nimport type { Release } from '../../../../modules/datasource/types.ts';\nimport type { LookupUpdate } from '../../../../modules/manager/types.ts';\nimport type { VersioningApi } from '../../../../modules/versioning/index.ts';\nimport type { RollbackConfig } from './types.ts';\n\nexport function getRollbackUpdate(\n  config: RollbackConfig,\n  versions: Release[],\n  versioningApi: VersioningApi,\n): LookupUpdate | null {\n  const {\n    packageFile,\n    versioning,\n    packageName,\n    depName,\n    currentValue,\n    datasource,\n  } = config;\n  // istanbul ignore if\n  if (!('isLessThanRange' in versioningApi)) {\n    logger.debug(\n      { versioning },\n      'Current versioning does not support isLessThanRange()',\n    );\n    return null;\n  }\n  const lessThanVersions = versions.filter((v) => {\n    try {\n      return versioningApi.isLessThanRange!(v.version, currentValue!);\n    } catch /* istanbul ignore next */ {\n      return false;\n    }\n  });\n  // istanbul ignore if\n  if (!lessThanVersions.length) {\n    logger.debug(\n      { packageFile, depName, currentValue },\n      'Missing version has nothing to roll back to',\n    );\n    return null;\n  }\n  logger.debug(\n    { packageFile, depName, currentValue },\n    `Current version not found - rolling back`,\n  );\n  logger.debug(\n    { dependency: depName, versions },\n    'Versions found before rolling back',\n  );\n\n  lessThanVersions.sort((a, b) =>\n    versioningApi.sortVersions(a.version, b.version),\n  );\n  let newRelease;\n  if (currentValue && versioningApi.isStable(currentValue)) {\n    newRelease = lessThanVersions\n      .filter((v) => versioningApi.isStable(v.version))\n      .pop();\n  }\n  let newVersion = newRelease?.version;\n  let registryUrl = newRelease?.registryUrl;\n\n  if (!newVersion) {\n    newRelease = lessThanVersions.pop();\n    newVersion = newRelease?.version;\n    registryUrl = newRelease?.registryUrl;\n  }\n  // A real datasource always yields a release carrying a version here, so this\n  // only guards against malformed release data; `rollback.spec.ts` reaches it\n  // with a hand-built versioning api - see #40625\n  // istanbul ignore if\n  if (!newVersion) {\n    logger.debug('No newVersion to roll back to');\n    return null;\n  }\n  const newValue = versioningApi.getNewValue({\n    // TODO #22198\n    currentValue: currentValue!,\n    rangeStrategy: 'replace',\n    newVersion,\n  });\n  return {\n    bucket: 'rollback',\n    // TODO #22198\n    newMajor: versioningApi.getMajor(newVersion)!,\n    newValue: newValue!,\n    newVersion,\n    registryUrl,\n    updateType: 'rollback',\n    prBodyNotes: [\n      `The version of \\`${depName ?? packageName}\\` in use (\\`${currentValue}\\`) was not found once Renovate filtered the dependencies. The ${datasource} datasource returned ${versions.length} entries, but when Renovate applied its filtering, none were left, so Renovate will roll back to a supported version`,\n    ],\n  };\n}\n"],"mappings":";;AAMA,SAAgB,kBACd,QACA,UACA,eACqB;CACrB,MAAM,EACJ,aACA,YACA,aACA,SACA,cACA,eACE;;CAEJ,IAAI,EAAE,qBAAqB,gBAAgB;EACzC,OAAO,MACL,EAAE,WAAW,GACb,uDACF;EACA,OAAO;CACT;CACA,MAAM,mBAAmB,SAAS,QAAQ,MAAM;EAC9C,IAAI;GACF,OAAO,cAAc,gBAAiB,EAAE,SAAS,YAAa;EAChE,mCAAmC;GACjC,OAAO;EACT;CACF,CAAC;;CAED,IAAI,CAAC,iBAAiB,QAAQ;EAC5B,OAAO,MACL;GAAE;GAAa;GAAS;EAAa,GACrC,6CACF;EACA,OAAO;CACT;CACA,OAAO,MACL;EAAE;EAAa;EAAS;CAAa,GACrC,0CACF;CACA,OAAO,MACL;EAAE,YAAY;EAAS;CAAS,GAChC,oCACF;CAEA,iBAAiB,MAAM,GAAG,MACxB,cAAc,aAAa,EAAE,SAAS,EAAE,OAAO,CACjD;CACA,IAAI;CACJ,IAAI,gBAAgB,cAAc,SAAS,YAAY,GACrD,aAAa,iBACV,QAAQ,MAAM,cAAc,SAAS,EAAE,OAAO,CAAC,CAAC,CAChD,IAAI;CAET,IAAI,aAAa,YAAY;CAC7B,IAAI,cAAc,YAAY;CAE9B,IAAI,CAAC,YAAY;EACf,aAAa,iBAAiB,IAAI;EAClC,aAAa,YAAY;EACzB,cAAc,YAAY;CAC5B;;CAKA,IAAI,CAAC,YAAY;EACf,OAAO,MAAM,+BAA+B;EAC5C,OAAO;CACT;CACA,MAAM,WAAW,cAAc,YAAY;EAE3B;EACd,eAAe;EACf;CACF,CAAC;CACD,OAAO;EACL,QAAQ;EAER,UAAU,cAAc,SAAS,UAAU;EACjC;EACV;EACA;EACA,YAAY;EACZ,aAAa,CACX,oBAAoB,WAAW,YAAY,eAAe,aAAa,iEAAiE,WAAW,uBAAuB,SAAS,OAAO,qHAC5L;CACF;AACF"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "renovate",
   "description": "Automated dependency updates. Flexible so you don't need to be.",
-  "version": "44.86.0",
+  "version": "44.87.0",
   "type": "module",
   "bin": {
     "renovate": "dist/renovate.js",

package/renovate-schema.json

@@ -1,8 +1,8 @@
 {
   "$id": "https://docs.renovatebot.com/renovate-schema.json",
-  "title": "JSON schema for Renovate 44.86.0 config files (https://renovatebot.com/)",
+  "title": "JSON schema for Renovate 44.87.0 config files (https://renovatebot.com/)",
   "$schema": "http://json-schema.org/draft-07/schema#",
-  "x-renovate-version": "44.86.0",
+  "x-renovate-version": "44.87.0",
   "allowComments": true,
   "type": "object",
   "definitions": {