renovate 44.90.3 → 44.92.0

package/dist/modules/manager/github-actions/known-actions.js

@@ -1,11 +1,14 @@
 import { regEx } from "../../../util/regex.js";
 import "../../versioning/npm/index.js";
 import { id } from "../../versioning/conda/index.js";
-import { id as id$1 } from "../../versioning/node/index.js";
+import { id as id$1 } from "../../versioning/gradle/index.js";
+import { id as id$2 } from "../../versioning/node/index.js";
+import { DartVersionDatasource } from "../../datasource/dart-version/index.js";
 import { DockerDatasource } from "../../datasource/docker/index.js";
 import { DotnetVersionDatasource } from "../../datasource/dotnet-version/index.js";
 import { GithubReleaseAttachmentsDatasource } from "../../datasource/github-release-attachments/index.js";
 import { GithubReleasesDatasource } from "../../datasource/github-releases/index.js";
+import { GradleVersionDatasource } from "../../datasource/gradle-version/index.js";
 import { JavaVersionDatasource } from "../../datasource/java-version/index.js";
 import { NodeVersionDatasource } from "../../datasource/node-version/index.js";
 import { NpmDatasource } from "../../datasource/npm/index.js";
@@ -58,6 +61,7 @@ function valSchema(key, isInvalid) {
 }
 const VersionVal = valSchema("version");
 const actionsVersionsExtractVersion = "^(?<version>\\d+\\.\\d+\\.\\d+)(-\\d+)?$";
+const SetupRustToolchainWith = z.object({ toolchain: z.string().optional() }).transform(({ toolchain }) => [parseValue(toolchain?.split(",").pop()?.trim())]);
 const InstallBinaryWith = z.object({
 	repo: z.string(),
 	tag: z.string()
@@ -138,6 +142,61 @@ const SetupJavaWith = z.object({
 		...parseValue(version)
 	}];
 });
+const TflintWith = z.object({ tflint_version: z.string().optional() }).transform(({ tflint_version: version }) => {
+	if (version === "latest") return [{
+		currentValue: version,
+		depType: "uses-with",
+		skipStage: "extract",
+		skipReason: "unsupported-version"
+	}];
+	return [parseValue(version)];
+});
+const KindActionWith = z.object({
+	version: z.string().optional(),
+	node_image: z.string().optional(),
+	kubectl_version: z.string().optional()
+}).transform(({ version, node_image, kubectl_version }) => {
+	const deps = [];
+	if (version) deps.push({
+		packageName: "kubernetes-sigs/kind",
+		...parseValue(version)
+	});
+	if (node_image) deps.push({
+		datasource: DockerDatasource.id,
+		...parseImageValue(node_image)
+	});
+	if (kubectl_version) deps.push({
+		packageName: "kubernetes/kubernetes",
+		...parseValue(kubectl_version)
+	});
+	return deps;
+});
+const ErlefSetupBeamWith = z.object({
+	"otp-version": z.string().optional(),
+	"elixir-version": z.string().optional(),
+	"gleam-version": z.string().optional(),
+	"rebar3-version": z.string().optional()
+}).transform(({ "otp-version": otpVersion, "elixir-version": elixirVersion, "gleam-version": gleamVersion, "rebar3-version": rebar3Version }) => {
+	const deps = [];
+	if (otpVersion) deps.push({
+		packageName: "erlang/otp",
+		extractVersion: "^OTP-(?<version>.+)$",
+		...parseValue(otpVersion)
+	});
+	if (elixirVersion) deps.push({
+		packageName: "elixir-lang/elixir",
+		...parseValue(elixirVersion)
+	});
+	if (gleamVersion) deps.push({
+		packageName: "gleam-lang/gleam",
+		...parseValue(gleamVersion)
+	});
+	if (rebar3Version) deps.push({
+		packageName: "erlang/rebar3",
+		...parseValue(rebar3Version)
+	});
+	return deps;
+});
 const renovateGithubActionDefaultImage = "ghcr.io/renovatebot/renovate";
 const RenovateGithubActionWith = z.object({
 	"renovate-version": z.string().optional(),
@@ -155,6 +214,16 @@ const RenovateGithubActionWith = z.object({
 * with known version input schemas.
 */
 const knownActions = {
+	"abatilo/actions-poetry": {
+		datasource: PypiDatasource.id,
+		packageName: "poetry",
+		withSchema: valSchema("poetry-version")
+	},
+	"actions-rust-lang/setup-rust-toolchain": {
+		datasource: RustVersionDatasource.id,
+		packageName: "rust",
+		withSchema: SetupRustToolchainWith
+	},
 	"actions/setup-dotnet": {
 		datasource: DotnetVersionDatasource.id,
 		packageName: "dotnet-sdk",
@@ -177,7 +246,7 @@ const knownActions = {
 		datasource: GithubReleasesDatasource.id,
 		depName: "node",
 		packageName: "actions/node-versions",
-		versioning: id$1,
+		versioning: id$2,
 		extractVersion: actionsVersionsExtractVersion,
 		withSchema: valSchema("node-version")
 	},
@@ -189,6 +258,12 @@ const knownActions = {
 		extractVersion: actionsVersionsExtractVersion,
 		withSchema: valSchema("python-version")
 	},
+	"aquaproj/aqua-installer": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "aqua",
+		packageName: "aquaproj/aqua",
+		withSchema: valSchema("aqua_version")
+	},
 	"aquasecurity/setup-trivy": {
 		datasource: GithubReleasesDatasource.id,
 		packageName: "aquasecurity/trivy"
@@ -197,6 +272,11 @@ const knownActions = {
 		datasource: GithubReleasesDatasource.id,
 		packageName: "aquasecurity/trivy"
 	},
+	"astral-sh/ruff-action": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "ruff",
+		packageName: "astral-sh/ruff"
+	},
 	"astral-sh/setup-uv": {
 		datasource: GithubReleasesDatasource.id,
 		versioning: "npm",
@@ -212,6 +292,53 @@ const knownActions = {
 		depName: "helm",
 		packageName: "helm/helm"
 	},
+	"azure/setup-kubectl": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "kubectl",
+		packageName: "kubernetes/kubernetes"
+	},
+	"biomejs/setup-biome": {
+		datasource: NpmDatasource.id,
+		packageName: "@biomejs/biome"
+	},
+	"bufbuild/buf-setup-action": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "buf",
+		packageName: "bufbuild/buf"
+	},
+	"cargo-bins/cargo-binstall": {
+		datasource: GithubReleasesDatasource.id,
+		packageName: "cargo-bins/cargo-binstall",
+		extractVersion: "^v(?<version>\\d+\\.\\d+\\.\\d+)$"
+	},
+	"cloudflare/wrangler-action": {
+		datasource: NpmDatasource.id,
+		packageName: "wrangler",
+		withSchema: valSchema("wranglerVersion")
+	},
+	"cue-lang/setup-cue": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "cue",
+		packageName: "cue-lang/cue"
+	},
+	"cycjimmy/semantic-release-action": {
+		datasource: NpmDatasource.id,
+		packageName: "semantic-release",
+		versioning: "npm",
+		withSchema: valSchema("semantic_version")
+	},
+	"dagger/dagger-for-github": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "dagger",
+		packageName: "dagger/dagger",
+		extractVersion: "^v(?<version>\\d+\\..*)$"
+	},
+	"dart-lang/setup-dart": {
+		datasource: DartVersionDatasource.id,
+		depName: "dart",
+		packageName: "dart-lang/sdk",
+		withSchema: valSchema("sdk")
+	},
 	"denoland/setup-deno": {
 		datasource: NpmDatasource.id,
 		packageName: "deno",
@@ -237,20 +364,82 @@ const knownActions = {
 		packageName: "rust",
 		withSchema: valSchema("toolchain")
 	},
+	"erlef/setup-beam": {
+		datasource: GithubReleasesDatasource.id,
+		packageName: "",
+		withSchema: ErlefSetupBeamWith
+	},
 	"expo/expo-github-action": {
 		datasource: NpmDatasource.id,
 		packageName: "eas-cli",
 		withSchema: valSchema("eas-version")
 	},
+	"extractions/setup-just": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "just",
+		packageName: "casey/just",
+		withSchema: valSchema("just-version")
+	},
+	"foundry-rs/foundry-toolchain": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "foundry",
+		packageName: "foundry-rs/foundry"
+	},
+	"GitTools/actions/gitversion/setup": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "gitversion",
+		packageName: "GitTools/GitVersion",
+		withSchema: valSchema("versionSpec")
+	},
 	"golangci/golangci-lint-action": {
 		datasource: GithubReleasesDatasource.id,
 		packageName: "golangci/golangci-lint"
 	},
+	"goreleaser/goreleaser-action": {
+		datasource: GithubReleasesDatasource.id,
+		packageName: "goreleaser/goreleaser",
+		versioning: "npm"
+	},
+	"gradle/actions/setup-gradle": {
+		datasource: GradleVersionDatasource.id,
+		depName: "gradle",
+		packageName: "gradle/gradle",
+		versioning: id$1,
+		withSchema: valSchema("gradle-version")
+	},
+	"hashicorp/setup-packer": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "packer",
+		packageName: "hashicorp/packer"
+	},
+	"hashicorp/setup-terraform": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "terraform",
+		packageName: "hashicorp/terraform",
+		withSchema: valSchema("terraform_version")
+	},
+	"helm/chart-releaser-action": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "chart-releaser",
+		packageName: "helm/chart-releaser"
+	},
 	"helm/chart-testing-action": {
 		datasource: GithubReleasesDatasource.id,
 		depName: "chart-testing",
 		packageName: "helm/chart-testing"
 	},
+	"helm/kind-action": {
+		datasource: GithubReleasesDatasource.id,
+		packageName: "",
+		withSchema: KindActionWith
+	},
+	"j178/prek-action": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "prek",
+		packageName: "j178/prek",
+		versioning: "npm",
+		withSchema: valSchema("prek-version")
+	},
 	"jakebailey/pyright-action": {
 		datasource: NpmDatasource.id,
 		packageName: "pyright",
@@ -266,6 +455,27 @@ const knownActions = {
 		packageName: "jdx/mise",
 		withSchema: MiseWith
 	},
+	"jfrog/setup-jfrog-cli": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "jfrog-cli",
+		packageName: "jfrog/jfrog-cli"
+	},
+	"julia-actions/setup-julia": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "julia",
+		packageName: "JuliaLang/julia"
+	},
+	"mozilla-actions/sccache-action": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "sccache",
+		packageName: "mozilla/sccache"
+	},
+	"opentofu/setup-opentofu": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "opentofu",
+		packageName: "opentofu/opentofu",
+		withSchema: valSchema("tofu_version")
+	},
 	"oven-sh/setup-bun": {
 		datasource: NpmDatasource.id,
 		packageName: "bun",
@@ -275,6 +485,12 @@ const knownActions = {
 		datasource: PypiDatasource.id,
 		packageName: "pdm"
 	},
+	"peaceiris/actions-hugo": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "hugo",
+		packageName: "gohugoio/hugo",
+		withSchema: valSchema("hugo-version")
+	},
 	"pnpm/action-setup": {
 		datasource: NpmDatasource.id,
 		packageName: "pnpm"
@@ -290,16 +506,38 @@ const knownActions = {
 		packageName: "prefix-dev/pixi",
 		withSchema: valSchema("pixi-version")
 	},
+	"pulumi/actions": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "pulumi",
+		packageName: "pulumi/pulumi",
+		withSchema: valSchema("pulumi-version")
+	},
+	"PyO3/maturin-action": {
+		datasource: PypiDatasource.id,
+		packageName: "maturin",
+		withSchema: valSchema("maturin-version")
+	},
 	"pypa/hatch": {
 		datasource: GithubReleasesDatasource.id,
 		packageName: "pypa/hatch",
 		extractVersion: "^hatch-(?<version>.+)$"
 	},
+	"raven-actions/actionlint": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "actionlint",
+		packageName: "rhysd/actionlint"
+	},
 	"renovatebot/github-action": {
 		datasource: DockerDatasource.id,
 		packageName: "",
 		withSchema: RenovateGithubActionWith
 	},
+	"reviewdog/action-setup": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "reviewdog",
+		packageName: "reviewdog/reviewdog",
+		withSchema: valSchema("reviewdog_version")
+	},
 	"ruby/setup-ruby": {
 		datasource: RubyVersionDatasource.id,
 		packageName: "ruby",
@@ -315,6 +553,34 @@ const knownActions = {
 		packageName: "sigstore/cosign",
 		withSchema: valSchema("cosign-release")
 	},
+	"snok/install-poetry": {
+		datasource: PypiDatasource.id,
+		packageName: "poetry"
+	},
+	"stCarolas/setup-maven": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "maven",
+		packageName: "apache/maven",
+		extractVersion: "^maven-(?<version>.+)$",
+		versioning: "npm",
+		withSchema: valSchema("maven-version")
+	},
+	"subosito/flutter-action": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "flutter",
+		packageName: "flutter/flutter",
+		withSchema: valSchema("flutter-version")
+	},
+	"supabase/setup-cli": {
+		datasource: NpmDatasource.id,
+		packageName: "supabase"
+	},
+	"terraform-linters/setup-tflint": {
+		datasource: GithubReleasesDatasource.id,
+		depName: "tflint",
+		packageName: "terraform-linters/tflint",
+		withSchema: TflintWith
+	},
 	"UpCloudLtd/upcloud-cli-action": {
 		datasource: GithubReleasesDatasource.id,
 		packageName: "UpCloudLtd/upcloud-cli"

package/dist/modules/manager/github-actions/known-actions.js.map

@@ -1 +1 @@
-{"version":3,"file":"known-actions.js","names":["nodeVersioning.id","condaVersioning.id"],"sources":["../../../../lib/modules/manager/github-actions/known-actions.ts"],"sourcesContent":["import { z } from 'zod/v4';\n\nimport { regEx } from '../../../util/regex.ts';\nimport { DockerDatasource } from '../../datasource/docker/index.ts';\nimport { DotnetVersionDatasource } from '../../datasource/dotnet-version/index.ts';\nimport { GithubReleaseAttachmentsDatasource } from '../../datasource/github-release-attachments/index.ts';\nimport { GithubReleasesDatasource } from '../../datasource/github-releases/index.ts';\nimport { JavaVersionDatasource } from '../../datasource/java-version/index.ts';\nimport { NodeVersionDatasource } from '../../datasource/node-version/index.ts';\nimport { NpmDatasource } from '../../datasource/npm/index.ts';\nimport { PypiDatasource } from '../../datasource/pypi/index.ts';\nimport { RubyVersionDatasource } from '../../datasource/ruby-version/index.ts';\nimport { RustVersionDatasource } from '../../datasource/rust-version/index.ts';\nimport * as condaVersioning from '../../versioning/conda/index.ts';\nimport * as nodeVersioning from '../../versioning/node/index.ts';\nimport * as npmVersioning from '../../versioning/npm/index.ts';\nimport { splitImageParts } from '../dockerfile/extract.ts';\nimport type { PackageDependency } from '../types.ts';\nimport type { ActionSchema, KnownActionConfig } from './types.ts';\n\nexport function actionSchema(\n  name: string,\n  { withSchema, ...cfg }: KnownActionConfig,\n): ActionSchema {\n  return z\n    .object({\n      uses: matchAction(name),\n      with: withSchema ?? VersionVal,\n    })\n    .transform(({ with: deps }) =>\n      deps.map((dep) => {\n        const merged = { ...cfg, ...dep };\n        merged.depName ??= merged.packageName;\n        return merged;\n      }),\n    );\n}\n\nfunction matchAction(action: string): z.ZodString {\n  return z\n    .string()\n    .regex(regEx(`(?:https?://[^/]+/)?${RegExp.escape(action)}(?:@.+)?$`));\n}\n\nfunction parseValue(\n  currentValue: string | undefined,\n  isInvalid?: (val: string) => boolean,\n): PackageDependency {\n  if (!currentValue) {\n    return {\n      skipStage: 'extract',\n      skipReason: 'unspecified-version',\n      depType: 'uses-with',\n    };\n  }\n  if (isInvalid?.(currentValue) === true) {\n    return {\n      skipStage: 'extract',\n      skipReason: 'invalid-version',\n      depType: 'uses-with',\n      currentValue,\n    };\n  }\n  return { currentValue, depType: 'uses-with' };\n}\n\n/**\n * A single dependency, versioned by the given `with:` input.\n *\n * @param isInvalid should return `true` if the version is invalid and should be skipped\n */\nfunction valSchema(\n  key: string,\n  isInvalid?: (val: string) => boolean,\n): ActionSchema {\n  return z\n    .object({ [key]: z.string().optional() })\n    .transform((val) => [parseValue(val[key], isInvalid)]);\n}\n\nconst VersionVal = valSchema('version');\n\n// Shared by the `actions/setup-{go,node,python}` entries below, whose\n// releases are published as `actions/{go,node,python}-versions` GitHub\n// releases, tagged like `20.11.0` or `20.11.0-1` (a build number suffix).\nconst actionsVersionsExtractVersion =\n  '^(?<version>\\\\d+\\\\.\\\\d+\\\\.\\\\d+)(-\\\\d+)?$';\n\nconst InstallBinaryWith: ActionSchema = z\n  .object({ repo: z.string(), tag: z.string() })\n  .transform(({ repo, tag }) => [{ packageName: repo, ...parseValue(tag) }]);\n\nfunction parseImageValue(image: string | undefined): PackageDependency {\n  if (!image) {\n    return {\n      depType: 'uses-with',\n      skipStage: 'extract',\n      skipReason: 'unspecified-version',\n    };\n  }\n\n  const dep = splitImageParts(image);\n  return {\n    depType: 'uses-with',\n    ...dep,\n    ...(dep.skipReason ? { skipStage: 'extract' } : {}),\n  };\n}\n\nconst EcsRenderTaskDefinitionWith: ActionSchema = z\n  .object({ image: z.string().optional() })\n  .transform(({ image }) => [parseImageValue(image)]);\n\nconst sha256Regex = regEx(/^[a-f0-9]{64}$/);\nconst MiseWith: ActionSchema = z\n  .object({\n    version: z.string().optional(),\n    sha256: z.string().optional(),\n  })\n  .transform(({ version, sha256 }) => [\n    {\n      ...parseValue(version),\n      ...(sha256 && sha256Regex.test(sha256) ? { currentDigest: sha256 } : {}),\n    },\n  ]);\n\n// Runtimes installable by `pnpm/setup`, keyed by the name used in its\n// `runtime:` input. `bun` and `deno` reuse the datasources of their respective\n// `setup-*` actions below.\nconst pnpmRuntimes: Record<string, PackageDependency | undefined> = {\n  node: { datasource: NodeVersionDatasource.id, packageName: 'node' },\n  bun: { datasource: NpmDatasource.id, packageName: 'bun' },\n  deno: { datasource: NpmDatasource.id, packageName: 'deno' },\n};\n\nfunction parsePnpmRuntime(runtime: string | undefined): PackageDependency[] {\n  if (!runtime) {\n    return [];\n  }\n\n  // `<name>` or `<name>@<version>`, matching pnpm's `packageManager` field syntax\n  const [name, version] = runtime.split('@');\n  const cfg = pnpmRuntimes[name];\n  if (!cfg) {\n    return [\n      {\n        packageName: name || runtime,\n        depType: 'uses-with',\n        skipStage: 'extract',\n        skipReason: 'invalid-name',\n      },\n    ];\n  }\n\n  return [{ ...cfg, ...parseValue(version) }];\n}\n\nconst PnpmSetupWith: ActionSchema = z\n  .object({\n    version: z.string().optional(),\n    runtime: z.string().optional(),\n  })\n  .transform(({ version, runtime }) => [\n    parseValue(version),\n    ...parsePnpmRuntime(runtime),\n  ]);\n\n// Distributions whose version numbering we can reliably track via the\n// java-version datasource (which sources releases from Adoptium/Eclipse\n// Temurin). Other distributions may not follow the same release cadence\n// or versioning, so we don't attempt to track them.\nconst supportedJavaDistributions = new Set(['temurin', 'adopt']);\n\nconst SetupJavaWith: ActionSchema = z\n  .object({\n    distribution: z.string().optional(),\n    'java-version': z.string().optional(),\n    'java-package': z.string().optional(),\n  })\n  .transform(\n    ({\n      distribution,\n      'java-version': version,\n      'java-package': javaPackage,\n    }) => {\n      const packageName = javaPackage?.startsWith('jre')\n        ? 'java-jre'\n        : 'java-jdk';\n\n      if (\n        !distribution ||\n        !supportedJavaDistributions.has(distribution.toLowerCase())\n      ) {\n        return [\n          {\n            packageName,\n            depType: 'uses-with',\n            skipStage: 'extract',\n            skipReason: 'unsupported',\n          },\n        ];\n      }\n\n      return [{ packageName, ...parseValue(version) }];\n    },\n  );\n\nconst renovateGithubActionDefaultImage = 'ghcr.io/renovatebot/renovate';\nconst RenovateGithubActionWith: ActionSchema = z\n  .object({\n    'renovate-version': z.string().optional(),\n    'renovate-image': z.string().optional(),\n  })\n  .transform(({ 'renovate-version': version, 'renovate-image': image }) => {\n    const [packageName, currentDigest] = (\n      image ?? renovateGithubActionDefaultImage\n    ).split('@');\n    return [\n      {\n        packageName,\n        ...(currentDigest ? { currentDigest } : {}),\n        ...parseValue(version),\n      },\n    ];\n  });\n\n/**\n * Community-maintained and first-party (GitHub's own `actions/*`) Actions\n * with known version input schemas.\n */\nexport const knownActions: Record<string, KnownActionConfig> = {\n  // https://github.com/actions/setup-dotnet\n  'actions/setup-dotnet': {\n    datasource: DotnetVersionDatasource.id,\n    packageName: 'dotnet-sdk',\n    withSchema: valSchema('dotnet-version', (val) => val.includes('\\n')),\n  },\n  // https://github.com/actions/setup-go\n  'actions/setup-go': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'go',\n    packageName: 'actions/go-versions',\n    versioning: npmVersioning.id,\n    extractVersion: actionsVersionsExtractVersion,\n    withSchema: valSchema('go-version'),\n  },\n  // https://github.com/actions/setup-java\n  'actions/setup-java': {\n    datasource: JavaVersionDatasource.id,\n    packageName: '', // determined from `distribution`/`java-package` inputs\n    withSchema: SetupJavaWith,\n  },\n  // https://github.com/actions/setup-node\n  'actions/setup-node': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'node',\n    packageName: 'actions/node-versions',\n    versioning: nodeVersioning.id,\n    extractVersion: actionsVersionsExtractVersion,\n    withSchema: valSchema('node-version'),\n  },\n  // https://github.com/actions/setup-python\n  'actions/setup-python': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'python',\n    packageName: 'actions/python-versions',\n    versioning: npmVersioning.id,\n    extractVersion: actionsVersionsExtractVersion,\n    withSchema: valSchema('python-version'),\n  },\n  // https://github.com/aquasecurity/setup-trivy\n  'aquasecurity/setup-trivy': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'aquasecurity/trivy',\n  },\n  // https://github.com/aquasecurity/trivy-action\n  'aquasecurity/trivy-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'aquasecurity/trivy',\n  },\n  // https://github.com/astral-sh/setup-uv\n  'astral-sh/setup-uv': {\n    datasource: GithubReleasesDatasource.id,\n    versioning: npmVersioning.id,\n    packageName: 'astral-sh/uv',\n  },\n  // https://github.com/aws-actions/amazon-ecs-render-task-definition\n  'aws-actions/amazon-ecs-render-task-definition': {\n    datasource: DockerDatasource.id,\n    packageName: '', // determined from `image` input\n    withSchema: EcsRenderTaskDefinitionWith,\n  },\n  'azure/setup-helm': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'helm',\n    packageName: 'helm/helm',\n  },\n  // https://github.com/azure/setup-helm\n  'denoland/setup-deno': {\n    datasource: NpmDatasource.id,\n    packageName: 'deno',\n    withSchema: valSchema('deno-version'),\n  },\n  // https://github.com/docker/setup-buildx-action\n  'docker/setup-buildx-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'buildx',\n    packageName: 'docker/buildx',\n  },\n  // https://github.com/docker/setup-compose-action\n  'docker/setup-compose-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'docker/compose',\n  },\n  // https://github.com/docker/setup-docker-action\n  'docker/setup-docker-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'docker',\n    packageName: 'moby/moby',\n    extractVersion: '^docker-(?<version>.+)$',\n  },\n  // https://github.com/dtolnay/rust-toolchain\n  'dtolnay/rust-toolchain': {\n    datasource: RustVersionDatasource.id,\n    packageName: 'rust',\n    withSchema: valSchema('toolchain'),\n  },\n  // https://github.com/expo/expo-github-action\n  'expo/expo-github-action': {\n    datasource: NpmDatasource.id,\n    packageName: 'eas-cli',\n    withSchema: valSchema('eas-version'),\n  },\n  'golangci/golangci-lint-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'golangci/golangci-lint',\n  },\n  // https://github.com/helm/chart-testing-action\n  'helm/chart-testing-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'chart-testing',\n    packageName: 'helm/chart-testing',\n  },\n  'jakebailey/pyright-action': {\n    datasource: NpmDatasource.id,\n    packageName: 'pyright',\n    withSchema: valSchema('version', (val) => val === 'PATH'),\n  },\n  'jaxxstorm/action-install-gh-release': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: '', // determined from `repo` input\n    withSchema: InstallBinaryWith,\n  },\n  'jdx/mise-action': {\n    datasource: GithubReleaseAttachmentsDatasource.id,\n    packageName: 'jdx/mise',\n    withSchema: MiseWith,\n  },\n  'oven-sh/setup-bun': {\n    datasource: NpmDatasource.id,\n    packageName: 'bun',\n    withSchema: valSchema('bun-version'),\n  },\n  'pdm-project/setup-pdm': {\n    datasource: PypiDatasource.id,\n    packageName: 'pdm',\n  },\n  'pnpm/action-setup': {\n    datasource: NpmDatasource.id,\n    packageName: 'pnpm',\n  },\n  'pnpm/setup': {\n    datasource: NpmDatasource.id,\n    packageName: 'pnpm',\n    withSchema: PnpmSetupWith,\n  },\n  'prefix-dev/setup-pixi': {\n    datasource: GithubReleasesDatasource.id,\n    versioning: condaVersioning.id,\n    packageName: 'prefix-dev/pixi',\n    withSchema: valSchema('pixi-version'),\n  },\n  // https://github.com/pypa/hatch/tree/install\n  'pypa/hatch': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'pypa/hatch',\n    // Strip hatch- prefix from release tags\n    extractVersion: '^hatch-(?<version>.+)$',\n  },\n  // https://github.com/renovatebot/github-action\n  'renovatebot/github-action': {\n    datasource: DockerDatasource.id,\n    packageName: '', // determined from `renovate-image` input, if set\n    withSchema: RenovateGithubActionWith,\n  },\n  'ruby/setup-ruby': {\n    datasource: RubyVersionDatasource.id,\n    packageName: 'ruby',\n    withSchema: valSchema('ruby-version'),\n  },\n  'sigoden/install-binary': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: '', // determined from `repo` input\n    withSchema: InstallBinaryWith,\n  },\n  'sigstore/cosign-installer': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'sigstore/cosign',\n    withSchema: valSchema('cosign-release'),\n  },\n  'UpCloudLtd/upcloud-cli-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'UpCloudLtd/upcloud-cli',\n  },\n  'zizmorcore/zizmor-action': {\n    datasource: DockerDatasource.id,\n    packageName: 'ghcr.io/zizmorcore/zizmor',\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAoBA,SAAgB,aACd,MACA,EAAE,YAAY,GAAG,OACH;CACd,OAAO,EACJ,OAAO;EACN,MAAM,YAAY,IAAI;EACtB,MAAM,cAAc;CACtB,CAAC,CAAC,CACD,WAAW,EAAE,MAAM,WAClB,KAAK,KAAK,QAAQ;EAChB,MAAM,SAAS;GAAE,GAAG;GAAK,GAAG;EAAI;EAChC,OAAO,YAAY,OAAO;EAC1B,OAAO;CACT,CAAC,CACH;AACJ;AAEA,SAAS,YAAY,QAA6B;CAChD,OAAO,EACJ,OAAO,CAAC,CACR,MAAM,MAAM,uBAAuB,OAAO,OAAO,MAAM,EAAE,UAAU,CAAC;AACzE;AAEA,SAAS,WACP,cACA,WACmB;CACnB,IAAI,CAAC,cACH,OAAO;EACL,WAAW;EACX,YAAY;EACZ,SAAS;CACX;CAEF,IAAI,YAAY,YAAY,MAAM,MAChC,OAAO;EACL,WAAW;EACX,YAAY;EACZ,SAAS;EACT;CACF;CAEF,OAAO;EAAE;EAAc,SAAS;CAAY;AAC9C;;;;;;AAOA,SAAS,UACP,KACA,WACc;CACd,OAAO,EACJ,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CACxC,WAAW,QAAQ,CAAC,WAAW,IAAI,MAAM,SAAS,CAAC,CAAC;AACzD;AAEA,MAAM,aAAa,UAAU,SAAS;AAKtC,MAAM,gCACJ;AAEF,MAAM,oBAAkC,EACrC,OAAO;CAAE,MAAM,EAAE,OAAO;CAAG,KAAK,EAAE,OAAO;AAAE,CAAC,CAAC,CAC7C,WAAW,EAAE,MAAM,UAAU,CAAC;CAAE,aAAa;CAAM,GAAG,WAAW,GAAG;AAAE,CAAC,CAAC;AAE3E,SAAS,gBAAgB,OAA8C;CACrE,IAAI,CAAC,OACH,OAAO;EACL,SAAS;EACT,WAAW;EACX,YAAY;CACd;CAGF,MAAM,MAAM,gBAAgB,KAAK;CACjC,OAAO;EACL,SAAS;EACT,GAAG;EACH,GAAI,IAAI,aAAa,EAAE,WAAW,UAAU,IAAI,CAAC;CACnD;AACF;AAEA,MAAM,8BAA4C,EAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CACxC,WAAW,EAAE,YAAY,CAAC,gBAAgB,KAAK,CAAC,CAAC;AAEpD,MAAM,cAAc,MAAM,gBAAgB;AAC1C,MAAM,WAAyB,EAC5B,OAAO;CACN,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC,CAAC,CACD,WAAW,EAAE,SAAS,aAAa,CAClC;CACE,GAAG,WAAW,OAAO;CACrB,GAAI,UAAU,YAAY,KAAK,MAAM,IAAI,EAAE,eAAe,OAAO,IAAI,CAAC;AACxE,CACF,CAAC;AAKH,MAAM,eAA8D;CAClE,MAAM;EAAE,YAAY,sBAAsB;EAAI,aAAa;CAAO;CAClE,KAAK;EAAE,YAAY,cAAc;EAAI,aAAa;CAAM;CACxD,MAAM;EAAE,YAAY,cAAc;EAAI,aAAa;CAAO;AAC5D;AAEA,SAAS,iBAAiB,SAAkD;CAC1E,IAAI,CAAC,SACH,OAAO,CAAC;CAIV,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG;CACzC,MAAM,MAAM,aAAa;CACzB,IAAI,CAAC,KACH,OAAO,CACL;EACE,aAAa,QAAQ;EACrB,SAAS;EACT,WAAW;EACX,YAAY;CACd,CACF;CAGF,OAAO,CAAC;EAAE,GAAG;EAAK,GAAG,WAAW,OAAO;CAAE,CAAC;AAC5C;AAEA,MAAM,gBAA8B,EACjC,OAAO;CACN,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC,CAAC,CACD,WAAW,EAAE,SAAS,cAAc,CACnC,WAAW,OAAO,GAClB,GAAG,iBAAiB,OAAO,CAC7B,CAAC;AAMH,MAAM,6CAA6B,IAAI,IAAI,CAAC,WAAW,OAAO,CAAC;AAE/D,MAAM,gBAA8B,EACjC,OAAO;CACN,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;AACtC,CAAC,CAAC,CACD,WACE,EACC,cACA,gBAAgB,SAChB,gBAAgB,kBACZ;CACJ,MAAM,cAAc,aAAa,WAAW,KAAK,IAC7C,aACA;CAEJ,IACE,CAAC,gBACD,CAAC,2BAA2B,IAAI,aAAa,YAAY,CAAC,GAE1D,OAAO,CACL;EACE;EACA,SAAS;EACT,WAAW;EACX,YAAY;CACd,CACF;CAGF,OAAO,CAAC;EAAE;EAAa,GAAG,WAAW,OAAO;CAAE,CAAC;AACjD,CACF;AAEF,MAAM,mCAAmC;AACzC,MAAM,2BAAyC,EAC5C,OAAO;CACN,oBAAoB,EAAE,OAAO,CAAC,CAAC,SAAS;CACxC,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;AACxC,CAAC,CAAC,CACD,WAAW,EAAE,oBAAoB,SAAS,kBAAkB,YAAY;CACvE,MAAM,CAAC,aAAa,kBAClB,SAAS,iCAAA,CACT,MAAM,GAAG;CACX,OAAO,CACL;EACE;EACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;EACzC,GAAG,WAAW,OAAO;CACvB,CACF;AACF,CAAC;;;;;AAMH,MAAa,eAAkD;CAE7D,wBAAwB;EACtB,YAAY,wBAAwB;EACpC,aAAa;EACb,YAAY,UAAU,mBAAmB,QAAQ,IAAI,SAAS,IAAI,CAAC;CACrE;CAEA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY;EACZ,gBAAgB;EAChB,YAAY,UAAU,YAAY;CACpC;CAEA,sBAAsB;EACpB,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY;CACd;CAEA,sBAAsB;EACpB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAYA;EACZ,gBAAgB;EAChB,YAAY,UAAU,cAAc;CACtC;CAEA,wBAAwB;EACtB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY;EACZ,gBAAgB;EAChB,YAAY,UAAU,gBAAgB;CACxC;CAEA,4BAA4B;EAC1B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,sBAAsB;EACpB,YAAY,yBAAyB;EACrC,YAAY;EACZ,aAAa;CACf;CAEA,iDAAiD;EAC/C,YAAY,iBAAiB;EAC7B,aAAa;EACb,YAAY;CACd;CACA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,uBAAuB;EACrB,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CAEA,8BAA8B;EAC5B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,+BAA+B;EAC7B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,8BAA8B;EAC5B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,gBAAgB;CAClB;CAEA,0BAA0B;EACxB,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY,UAAU,WAAW;CACnC;CAEA,2BAA2B;EACzB,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,aAAa;CACrC;CACA,iCAAiC;EAC/B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CACA,6BAA6B;EAC3B,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,YAAY,QAAQ,QAAQ,MAAM;CAC1D;CACA,uCAAuC;EACrC,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY;CACd;CACA,mBAAmB;EACjB,YAAY,mCAAmC;EAC/C,aAAa;EACb,YAAY;CACd;CACA,qBAAqB;EACnB,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,aAAa;CACrC;CACA,yBAAyB;EACvB,YAAY,eAAe;EAC3B,aAAa;CACf;CACA,qBAAqB;EACnB,YAAY,cAAc;EAC1B,aAAa;CACf;CACA,cAAc;EACZ,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY;CACd;CACA,yBAAyB;EACvB,YAAY,yBAAyB;EACrC,YAAYC;EACZ,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CAEA,cAAc;EACZ,YAAY,yBAAyB;EACrC,aAAa;EAEb,gBAAgB;CAClB;CAEA,6BAA6B;EAC3B,YAAY,iBAAiB;EAC7B,aAAa;EACb,YAAY;CACd;CACA,mBAAmB;EACjB,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CACA,0BAA0B;EACxB,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY;CACd;CACA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY,UAAU,gBAAgB;CACxC;CACA,iCAAiC;EAC/B,YAAY,yBAAyB;EACrC,aAAa;CACf;CACA,4BAA4B;EAC1B,YAAY,iBAAiB;EAC7B,aAAa;CACf;AACF"}
+{"version":3,"file":"known-actions.js","names":["nodeVersioning.id","gradleVersioning.id","condaVersioning.id"],"sources":["../../../../lib/modules/manager/github-actions/known-actions.ts"],"sourcesContent":["import { z } from 'zod/v4';\n\nimport { regEx } from '../../../util/regex.ts';\nimport { DartVersionDatasource } from '../../datasource/dart-version/index.ts';\nimport { DockerDatasource } from '../../datasource/docker/index.ts';\nimport { DotnetVersionDatasource } from '../../datasource/dotnet-version/index.ts';\nimport { GithubReleaseAttachmentsDatasource } from '../../datasource/github-release-attachments/index.ts';\nimport { GithubReleasesDatasource } from '../../datasource/github-releases/index.ts';\nimport { GradleVersionDatasource } from '../../datasource/gradle-version/index.ts';\nimport { JavaVersionDatasource } from '../../datasource/java-version/index.ts';\nimport { NodeVersionDatasource } from '../../datasource/node-version/index.ts';\nimport { NpmDatasource } from '../../datasource/npm/index.ts';\nimport { PypiDatasource } from '../../datasource/pypi/index.ts';\nimport { RubyVersionDatasource } from '../../datasource/ruby-version/index.ts';\nimport { RustVersionDatasource } from '../../datasource/rust-version/index.ts';\nimport * as condaVersioning from '../../versioning/conda/index.ts';\nimport * as gradleVersioning from '../../versioning/gradle/index.ts';\nimport * as nodeVersioning from '../../versioning/node/index.ts';\nimport * as npmVersioning from '../../versioning/npm/index.ts';\nimport { splitImageParts } from '../dockerfile/extract.ts';\nimport type { PackageDependency } from '../types.ts';\nimport type { ActionSchema, KnownActionConfig } from './types.ts';\n\nexport function actionSchema(\n  name: string,\n  { withSchema, ...cfg }: KnownActionConfig,\n): ActionSchema {\n  return z\n    .object({\n      uses: matchAction(name),\n      with: withSchema ?? VersionVal,\n    })\n    .transform(({ with: deps }) =>\n      deps.map((dep) => {\n        const merged = { ...cfg, ...dep };\n        merged.depName ??= merged.packageName;\n        return merged;\n      }),\n    );\n}\n\nfunction matchAction(action: string): z.ZodString {\n  return z\n    .string()\n    .regex(regEx(`(?:https?://[^/]+/)?${RegExp.escape(action)}(?:@.+)?$`));\n}\n\nfunction parseValue(\n  currentValue: string | undefined,\n  isInvalid?: (val: string) => boolean,\n): PackageDependency {\n  if (!currentValue) {\n    return {\n      skipStage: 'extract',\n      skipReason: 'unspecified-version',\n      depType: 'uses-with',\n    };\n  }\n  if (isInvalid?.(currentValue) === true) {\n    return {\n      skipStage: 'extract',\n      skipReason: 'invalid-version',\n      depType: 'uses-with',\n      currentValue,\n    };\n  }\n  return { currentValue, depType: 'uses-with' };\n}\n\n/**\n * A single dependency, versioned by the given `with:` input.\n *\n * @param isInvalid should return `true` if the version is invalid and should be skipped\n */\nfunction valSchema(\n  key: string,\n  isInvalid?: (val: string) => boolean,\n): ActionSchema {\n  return z\n    .object({ [key]: z.string().optional() })\n    .transform((val) => [parseValue(val[key], isInvalid)]);\n}\n\nconst VersionVal = valSchema('version');\n\n// Shared by the `actions/setup-{go,node,python}` entries below, whose\n// releases are published as `actions/{go,node,python}-versions` GitHub\n// releases, tagged like `20.11.0` or `20.11.0-1` (a build number suffix).\nconst actionsVersionsExtractVersion =\n  '^(?<version>\\\\d+\\\\.\\\\d+\\\\.\\\\d+)(-\\\\d+)?$';\n\n// `actions-rust-lang/setup-rust-toolchain`'s `toolchain` input is a\n// comma-separated list of toolchains; only the LAST one becomes the active\n// default toolchain, so that's the only one worth tracking.\nconst SetupRustToolchainWith: ActionSchema = z\n  .object({ toolchain: z.string().optional() })\n  .transform(({ toolchain }) => [\n    parseValue(toolchain?.split(',').pop()?.trim()),\n  ]);\n\nconst InstallBinaryWith: ActionSchema = z\n  .object({ repo: z.string(), tag: z.string() })\n  .transform(({ repo, tag }) => [{ packageName: repo, ...parseValue(tag) }]);\n\nfunction parseImageValue(image: string | undefined): PackageDependency {\n  if (!image) {\n    return {\n      depType: 'uses-with',\n      skipStage: 'extract',\n      skipReason: 'unspecified-version',\n    };\n  }\n\n  const dep = splitImageParts(image);\n  return {\n    depType: 'uses-with',\n    ...dep,\n    ...(dep.skipReason ? { skipStage: 'extract' } : {}),\n  };\n}\n\nconst EcsRenderTaskDefinitionWith: ActionSchema = z\n  .object({ image: z.string().optional() })\n  .transform(({ image }) => [parseImageValue(image)]);\n\nconst sha256Regex = regEx(/^[a-f0-9]{64}$/);\nconst MiseWith: ActionSchema = z\n  .object({\n    version: z.string().optional(),\n    sha256: z.string().optional(),\n  })\n  .transform(({ version, sha256 }) => [\n    {\n      ...parseValue(version),\n      ...(sha256 && sha256Regex.test(sha256) ? { currentDigest: sha256 } : {}),\n    },\n  ]);\n\n// Runtimes installable by `pnpm/setup`, keyed by the name used in its\n// `runtime:` input. `bun` and `deno` reuse the datasources of their respective\n// `setup-*` actions below.\nconst pnpmRuntimes: Record<string, PackageDependency | undefined> = {\n  node: { datasource: NodeVersionDatasource.id, packageName: 'node' },\n  bun: { datasource: NpmDatasource.id, packageName: 'bun' },\n  deno: { datasource: NpmDatasource.id, packageName: 'deno' },\n};\n\nfunction parsePnpmRuntime(runtime: string | undefined): PackageDependency[] {\n  if (!runtime) {\n    return [];\n  }\n\n  // `<name>` or `<name>@<version>`, matching pnpm's `packageManager` field syntax\n  const [name, version] = runtime.split('@');\n  const cfg = pnpmRuntimes[name];\n  if (!cfg) {\n    return [\n      {\n        packageName: name || runtime,\n        depType: 'uses-with',\n        skipStage: 'extract',\n        skipReason: 'invalid-name',\n      },\n    ];\n  }\n\n  return [{ ...cfg, ...parseValue(version) }];\n}\n\nconst PnpmSetupWith: ActionSchema = z\n  .object({\n    version: z.string().optional(),\n    runtime: z.string().optional(),\n  })\n  .transform(({ version, runtime }) => [\n    parseValue(version),\n    ...parsePnpmRuntime(runtime),\n  ]);\n\n// Distributions whose version numbering we can reliably track via the\n// java-version datasource (which sources releases from Adoptium/Eclipse\n// Temurin). Other distributions may not follow the same release cadence\n// or versioning, so we don't attempt to track them.\nconst supportedJavaDistributions = new Set(['temurin', 'adopt']);\n\nconst SetupJavaWith: ActionSchema = z\n  .object({\n    distribution: z.string().optional(),\n    'java-version': z.string().optional(),\n    'java-package': z.string().optional(),\n  })\n  .transform(\n    ({\n      distribution,\n      'java-version': version,\n      'java-package': javaPackage,\n    }) => {\n      const packageName = javaPackage?.startsWith('jre')\n        ? 'java-jre'\n        : 'java-jdk';\n\n      if (\n        !distribution ||\n        !supportedJavaDistributions.has(distribution.toLowerCase())\n      ) {\n        return [\n          {\n            packageName,\n            depType: 'uses-with',\n            skipStage: 'extract',\n            skipReason: 'unsupported',\n          },\n        ];\n      }\n\n      return [{ packageName, ...parseValue(version) }];\n    },\n  );\n\n// `'latest'` is a valid, documented value for `tflint_version` (it's also the\n// action's own default), but it isn't a version we can pin/bump, so treat it\n// as present-but-unsupported rather than as an invalid value.\nconst TflintWith: ActionSchema = z\n  .object({ tflint_version: z.string().optional() })\n  .transform(({ tflint_version: version }) => {\n    if (version === 'latest') {\n      return [\n        {\n          currentValue: version,\n          depType: 'uses-with',\n          skipStage: 'extract',\n          skipReason: 'unsupported-version',\n        },\n      ];\n    }\n    return [parseValue(version)];\n  });\n\n// `helm/kind-action` can yield up to 3 dependencies from a single step: the\n// `kind` binary itself, the `kindest/node` image it boots, and (optionally) a\n// pinned `kubectl` binary. All 3 inputs are optional, so only emit a\n// dependency for the ones a workflow actually sets.\nconst KindActionWith: ActionSchema = z\n  .object({\n    version: z.string().optional(),\n    node_image: z.string().optional(),\n    kubectl_version: z.string().optional(),\n  })\n  .transform(({ version, node_image, kubectl_version }) => {\n    const deps: PackageDependency[] = [];\n\n    if (version) {\n      deps.push({\n        packageName: 'kubernetes-sigs/kind',\n        ...parseValue(version),\n      });\n    }\n\n    if (node_image) {\n      // `node_image` may be pinned by digest (e.g.\n      // `kindest/node:v1.31.0@sha256:...`), so reuse the same Docker\n      // image-reference parsing as `aws-actions/amazon-ecs-render-task-definition`\n      // rather than naively splitting on `:`.\n      deps.push({\n        datasource: DockerDatasource.id,\n        ...parseImageValue(node_image),\n      });\n    }\n\n    if (kubectl_version) {\n      deps.push({\n        packageName: 'kubernetes/kubernetes',\n        ...parseValue(kubectl_version),\n      });\n    }\n\n    return deps;\n  });\n\n// `erlef/setup-beam` can yield up to 4 dependencies from a single step: OTP,\n// Elixir, Gleam, and rebar3. All inputs are optional, so only emit a\n// dependency for the ones a workflow actually sets.\nconst ErlefSetupBeamWith: ActionSchema = z\n  .object({\n    'otp-version': z.string().optional(),\n    'elixir-version': z.string().optional(),\n    'gleam-version': z.string().optional(),\n    'rebar3-version': z.string().optional(),\n  })\n  .transform(\n    ({\n      'otp-version': otpVersion,\n      'elixir-version': elixirVersion,\n      'gleam-version': gleamVersion,\n      'rebar3-version': rebar3Version,\n    }) => {\n      const deps: PackageDependency[] = [];\n\n      if (otpVersion) {\n        deps.push({\n          packageName: 'erlang/otp',\n          // erlang/otp tags releases like `OTP-27.1.2`\n          extractVersion: '^OTP-(?<version>.+)$',\n          ...parseValue(otpVersion),\n        });\n      }\n\n      if (elixirVersion) {\n        deps.push({\n          packageName: 'elixir-lang/elixir',\n          ...parseValue(elixirVersion),\n        });\n      }\n\n      if (gleamVersion) {\n        deps.push({\n          packageName: 'gleam-lang/gleam',\n          ...parseValue(gleamVersion),\n        });\n      }\n\n      if (rebar3Version) {\n        deps.push({\n          packageName: 'erlang/rebar3',\n          ...parseValue(rebar3Version),\n        });\n      }\n\n      return deps;\n    },\n  );\n\nconst renovateGithubActionDefaultImage = 'ghcr.io/renovatebot/renovate';\nconst RenovateGithubActionWith: ActionSchema = z\n  .object({\n    'renovate-version': z.string().optional(),\n    'renovate-image': z.string().optional(),\n  })\n  .transform(({ 'renovate-version': version, 'renovate-image': image }) => {\n    const [packageName, currentDigest] = (\n      image ?? renovateGithubActionDefaultImage\n    ).split('@');\n    return [\n      {\n        packageName,\n        ...(currentDigest ? { currentDigest } : {}),\n        ...parseValue(version),\n      },\n    ];\n  });\n\n/**\n * Community-maintained and first-party (GitHub's own `actions/*`) Actions\n * with known version input schemas.\n */\nexport const knownActions: Record<string, KnownActionConfig> = {\n  // https://github.com/abatilo/actions-poetry\n  'abatilo/actions-poetry': {\n    datasource: PypiDatasource.id,\n    packageName: 'poetry',\n    withSchema: valSchema('poetry-version'),\n  },\n  // https://github.com/actions-rust-lang/setup-rust-toolchain\n  'actions-rust-lang/setup-rust-toolchain': {\n    datasource: RustVersionDatasource.id,\n    packageName: 'rust',\n    withSchema: SetupRustToolchainWith,\n  },\n  // https://github.com/actions/setup-dotnet\n  'actions/setup-dotnet': {\n    datasource: DotnetVersionDatasource.id,\n    packageName: 'dotnet-sdk',\n    withSchema: valSchema('dotnet-version', (val) => val.includes('\\n')),\n  },\n  // https://github.com/actions/setup-go\n  'actions/setup-go': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'go',\n    packageName: 'actions/go-versions',\n    versioning: npmVersioning.id,\n    extractVersion: actionsVersionsExtractVersion,\n    withSchema: valSchema('go-version'),\n  },\n  // https://github.com/actions/setup-java\n  'actions/setup-java': {\n    datasource: JavaVersionDatasource.id,\n    packageName: '', // determined from `distribution`/`java-package` inputs\n    withSchema: SetupJavaWith,\n  },\n  // https://github.com/actions/setup-node\n  'actions/setup-node': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'node',\n    packageName: 'actions/node-versions',\n    versioning: nodeVersioning.id,\n    extractVersion: actionsVersionsExtractVersion,\n    withSchema: valSchema('node-version'),\n  },\n  // https://github.com/actions/setup-python\n  'actions/setup-python': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'python',\n    packageName: 'actions/python-versions',\n    versioning: npmVersioning.id,\n    extractVersion: actionsVersionsExtractVersion,\n    withSchema: valSchema('python-version'),\n  },\n  // https://github.com/aquaproj/aqua-installer\n  'aquaproj/aqua-installer': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'aqua',\n    packageName: 'aquaproj/aqua',\n    withSchema: valSchema('aqua_version'),\n  },\n  // https://github.com/aquasecurity/setup-trivy\n  'aquasecurity/setup-trivy': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'aquasecurity/trivy',\n  },\n  // https://github.com/aquasecurity/trivy-action\n  'aquasecurity/trivy-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'aquasecurity/trivy',\n  },\n  // https://github.com/astral-sh/ruff-action\n  'astral-sh/ruff-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'ruff',\n    packageName: 'astral-sh/ruff',\n  },\n  // https://github.com/astral-sh/setup-uv\n  'astral-sh/setup-uv': {\n    datasource: GithubReleasesDatasource.id,\n    versioning: npmVersioning.id,\n    packageName: 'astral-sh/uv',\n  },\n  // https://github.com/aws-actions/amazon-ecs-render-task-definition\n  'aws-actions/amazon-ecs-render-task-definition': {\n    datasource: DockerDatasource.id,\n    packageName: '', // determined from `image` input\n    withSchema: EcsRenderTaskDefinitionWith,\n  },\n  'azure/setup-helm': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'helm',\n    packageName: 'helm/helm',\n  },\n  // https://github.com/azure/setup-kubectl\n  'azure/setup-kubectl': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'kubectl',\n    packageName: 'kubernetes/kubernetes',\n  },\n  // https://github.com/biomejs/setup-biome\n  'biomejs/setup-biome': {\n    datasource: NpmDatasource.id,\n    packageName: '@biomejs/biome',\n  },\n  // https://github.com/bufbuild/buf-setup-action\n  'bufbuild/buf-setup-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'buf',\n    packageName: 'bufbuild/buf',\n  },\n  // https://github.com/cargo-bins/cargo-binstall\n  'cargo-bins/cargo-binstall': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'cargo-bins/cargo-binstall',\n    // the repo also publishes releases for its internal sub-crates (e.g.\n    // `detect-targets-v0.1.91`, `binstalk-v0.28.81`) — only match the bare\n    // main-tool release tag\n    extractVersion: '^v(?<version>\\\\d+\\\\.\\\\d+\\\\.\\\\d+)$',\n  },\n  // https://github.com/cloudflare/wrangler-action\n  'cloudflare/wrangler-action': {\n    datasource: NpmDatasource.id,\n    packageName: 'wrangler',\n    withSchema: valSchema('wranglerVersion'),\n  },\n  // https://github.com/cue-lang/setup-cue\n  'cue-lang/setup-cue': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'cue',\n    packageName: 'cue-lang/cue',\n  },\n  // https://github.com/cycjimmy/semantic-release-action\n  'cycjimmy/semantic-release-action': {\n    datasource: NpmDatasource.id,\n    packageName: 'semantic-release',\n    // the action's docs describe `semantic_version` as a version range, not\n    // a pinned exact version\n    versioning: npmVersioning.id,\n    withSchema: valSchema('semantic_version'),\n  },\n  // https://github.com/dagger/dagger-for-github\n  'dagger/dagger-for-github': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'dagger',\n    packageName: 'dagger/dagger',\n    // the repo also publishes per-SDK/component tags sharing the same\n    // version (e.g. `sdk/typescript/v0.21.9`, `helm/chart/v0.21.9`) — only\n    // match the bare release tag\n    extractVersion: '^v(?<version>\\\\d+\\\\..*)$',\n  },\n  // https://github.com/dart-lang/setup-dart\n  'dart-lang/setup-dart': {\n    datasource: DartVersionDatasource.id,\n    depName: 'dart',\n    packageName: 'dart-lang/sdk',\n    withSchema: valSchema('sdk'),\n  },\n  // https://github.com/azure/setup-helm\n  'denoland/setup-deno': {\n    datasource: NpmDatasource.id,\n    packageName: 'deno',\n    withSchema: valSchema('deno-version'),\n  },\n  // https://github.com/docker/setup-buildx-action\n  'docker/setup-buildx-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'buildx',\n    packageName: 'docker/buildx',\n  },\n  // https://github.com/docker/setup-compose-action\n  'docker/setup-compose-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'docker/compose',\n  },\n  // https://github.com/docker/setup-docker-action\n  'docker/setup-docker-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'docker',\n    packageName: 'moby/moby',\n    extractVersion: '^docker-(?<version>.+)$',\n  },\n  // https://github.com/dtolnay/rust-toolchain\n  'dtolnay/rust-toolchain': {\n    datasource: RustVersionDatasource.id,\n    packageName: 'rust',\n    withSchema: valSchema('toolchain'),\n  },\n  // https://github.com/erlef/setup-beam\n  'erlef/setup-beam': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: '', // determined per dependency: OTP, Elixir, Gleam, rebar3\n    withSchema: ErlefSetupBeamWith,\n  },\n  // https://github.com/expo/expo-github-action\n  'expo/expo-github-action': {\n    datasource: NpmDatasource.id,\n    packageName: 'eas-cli',\n    withSchema: valSchema('eas-version'),\n  },\n  // https://github.com/extractions/setup-just\n  'extractions/setup-just': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'just',\n    packageName: 'casey/just',\n    withSchema: valSchema('just-version'),\n  },\n  // https://github.com/foundry-rs/foundry-toolchain\n  'foundry-rs/foundry-toolchain': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'foundry',\n    packageName: 'foundry-rs/foundry',\n  },\n  // https://github.com/GitTools/actions (there is no root-level Action, only\n  // subpaths are usable; the sibling `GitTools/actions/gitreleasemanager/setup`\n  // is a separate, unrelated Action)\n  'GitTools/actions/gitversion/setup': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'gitversion',\n    packageName: 'GitTools/GitVersion',\n    withSchema: valSchema('versionSpec'),\n  },\n  'golangci/golangci-lint-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'golangci/golangci-lint',\n  },\n  // https://github.com/goreleaser/goreleaser-action\n  'goreleaser/goreleaser-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'goreleaser/goreleaser',\n    // the default value (`~> v2`) is itself a range, not a pinned version\n    versioning: npmVersioning.id,\n  },\n  // https://github.com/gradle/actions (there is no root-level Action, only\n  // subpaths such as `setup-gradle` are usable)\n  'gradle/actions/setup-gradle': {\n    datasource: GradleVersionDatasource.id,\n    depName: 'gradle',\n    packageName: 'gradle/gradle',\n    versioning: gradleVersioning.id,\n    withSchema: valSchema('gradle-version'),\n  },\n  // https://github.com/hashicorp/setup-packer\n  'hashicorp/setup-packer': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'packer',\n    packageName: 'hashicorp/packer',\n  },\n  // https://github.com/hashicorp/setup-terraform\n  'hashicorp/setup-terraform': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'terraform',\n    packageName: 'hashicorp/terraform',\n    withSchema: valSchema('terraform_version'),\n  },\n  // https://github.com/helm/chart-releaser-action\n  'helm/chart-releaser-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'chart-releaser',\n    packageName: 'helm/chart-releaser',\n  },\n  // https://github.com/helm/chart-testing-action\n  'helm/chart-testing-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'chart-testing',\n    packageName: 'helm/chart-testing',\n  },\n  // https://github.com/helm/kind-action\n  'helm/kind-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: '', // determined per dependency: `version`, `node_image`, `kubectl_version`\n    withSchema: KindActionWith,\n  },\n  // https://github.com/j178/prek-action\n  'j178/prek-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'prek',\n    packageName: 'j178/prek',\n    // the value may be a semver range (e.g. `0.3.x`, `<=1.0.0`), not just a\n    // pinned version\n    versioning: npmVersioning.id,\n    withSchema: valSchema('prek-version'),\n  },\n  'jakebailey/pyright-action': {\n    datasource: NpmDatasource.id,\n    packageName: 'pyright',\n    withSchema: valSchema('version', (val) => val === 'PATH'),\n  },\n  'jaxxstorm/action-install-gh-release': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: '', // determined from `repo` input\n    withSchema: InstallBinaryWith,\n  },\n  'jdx/mise-action': {\n    datasource: GithubReleaseAttachmentsDatasource.id,\n    packageName: 'jdx/mise',\n    withSchema: MiseWith,\n  },\n  // https://github.com/jfrog/setup-jfrog-cli\n  'jfrog/setup-jfrog-cli': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'jfrog-cli',\n    packageName: 'jfrog/jfrog-cli',\n  },\n  // https://github.com/julia-actions/setup-julia\n  'julia-actions/setup-julia': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'julia',\n    packageName: 'JuliaLang/julia',\n  },\n  // https://github.com/mozilla-actions/sccache-action\n  'mozilla-actions/sccache-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'sccache',\n    packageName: 'mozilla/sccache',\n  },\n  // https://github.com/opentofu/setup-opentofu\n  'opentofu/setup-opentofu': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'opentofu',\n    packageName: 'opentofu/opentofu',\n    withSchema: valSchema('tofu_version'),\n  },\n  'oven-sh/setup-bun': {\n    datasource: NpmDatasource.id,\n    packageName: 'bun',\n    withSchema: valSchema('bun-version'),\n  },\n  'pdm-project/setup-pdm': {\n    datasource: PypiDatasource.id,\n    packageName: 'pdm',\n  },\n  // https://github.com/peaceiris/actions-hugo\n  'peaceiris/actions-hugo': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'hugo',\n    packageName: 'gohugoio/hugo',\n    withSchema: valSchema('hugo-version'),\n  },\n  'pnpm/action-setup': {\n    datasource: NpmDatasource.id,\n    packageName: 'pnpm',\n  },\n  'pnpm/setup': {\n    datasource: NpmDatasource.id,\n    packageName: 'pnpm',\n    withSchema: PnpmSetupWith,\n  },\n  'prefix-dev/setup-pixi': {\n    datasource: GithubReleasesDatasource.id,\n    versioning: condaVersioning.id,\n    packageName: 'prefix-dev/pixi',\n    withSchema: valSchema('pixi-version'),\n  },\n  // https://github.com/pulumi/actions\n  'pulumi/actions': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'pulumi',\n    packageName: 'pulumi/pulumi',\n    withSchema: valSchema('pulumi-version'),\n  },\n  // https://github.com/PyO3/maturin-action\n  'PyO3/maturin-action': {\n    datasource: PypiDatasource.id,\n    packageName: 'maturin',\n    withSchema: valSchema('maturin-version'),\n  },\n  // https://github.com/pypa/hatch/tree/install\n  'pypa/hatch': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'pypa/hatch',\n    // Strip hatch- prefix from release tags\n    extractVersion: '^hatch-(?<version>.+)$',\n  },\n  // https://github.com/raven-actions/actionlint\n  'raven-actions/actionlint': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'actionlint',\n    packageName: 'rhysd/actionlint',\n  },\n  // https://github.com/renovatebot/github-action\n  'renovatebot/github-action': {\n    datasource: DockerDatasource.id,\n    packageName: '', // determined from `renovate-image` input, if set\n    withSchema: RenovateGithubActionWith,\n  },\n  // https://github.com/reviewdog/action-setup\n  'reviewdog/action-setup': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'reviewdog',\n    packageName: 'reviewdog/reviewdog',\n    withSchema: valSchema('reviewdog_version'),\n  },\n  'ruby/setup-ruby': {\n    datasource: RubyVersionDatasource.id,\n    packageName: 'ruby',\n    withSchema: valSchema('ruby-version'),\n  },\n  'sigoden/install-binary': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: '', // determined from `repo` input\n    withSchema: InstallBinaryWith,\n  },\n  'sigstore/cosign-installer': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'sigstore/cosign',\n    withSchema: valSchema('cosign-release'),\n  },\n  // https://github.com/snok/install-poetry\n  'snok/install-poetry': {\n    datasource: PypiDatasource.id,\n    packageName: 'poetry',\n  },\n  // https://github.com/stCarolas/setup-maven\n  'stCarolas/setup-maven': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'maven',\n    packageName: 'apache/maven',\n    // apache/maven tags its releases as `maven-X.Y.Z`\n    extractVersion: '^maven-(?<version>.+)$',\n    // the input also documents range/glob specs (e.g. `10.x`, `>=10.15.0`),\n    // not just pinned versions\n    versioning: npmVersioning.id,\n    withSchema: valSchema('maven-version'),\n  },\n  // https://github.com/subosito/flutter-action\n  'subosito/flutter-action': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'flutter',\n    packageName: 'flutter/flutter',\n    withSchema: valSchema('flutter-version'),\n  },\n  // https://github.com/supabase/setup-cli\n  'supabase/setup-cli': {\n    datasource: NpmDatasource.id,\n    packageName: 'supabase',\n  },\n  // https://github.com/terraform-linters/setup-tflint\n  'terraform-linters/setup-tflint': {\n    datasource: GithubReleasesDatasource.id,\n    depName: 'tflint',\n    packageName: 'terraform-linters/tflint',\n    withSchema: TflintWith,\n  },\n  'UpCloudLtd/upcloud-cli-action': {\n    datasource: GithubReleasesDatasource.id,\n    packageName: 'UpCloudLtd/upcloud-cli',\n  },\n  'zizmorcore/zizmor-action': {\n    datasource: DockerDatasource.id,\n    packageName: 'ghcr.io/zizmorcore/zizmor',\n  },\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,aACd,MACA,EAAE,YAAY,GAAG,OACH;CACd,OAAO,EACJ,OAAO;EACN,MAAM,YAAY,IAAI;EACtB,MAAM,cAAc;CACtB,CAAC,CAAC,CACD,WAAW,EAAE,MAAM,WAClB,KAAK,KAAK,QAAQ;EAChB,MAAM,SAAS;GAAE,GAAG;GAAK,GAAG;EAAI;EAChC,OAAO,YAAY,OAAO;EAC1B,OAAO;CACT,CAAC,CACH;AACJ;AAEA,SAAS,YAAY,QAA6B;CAChD,OAAO,EACJ,OAAO,CAAC,CACR,MAAM,MAAM,uBAAuB,OAAO,OAAO,MAAM,EAAE,UAAU,CAAC;AACzE;AAEA,SAAS,WACP,cACA,WACmB;CACnB,IAAI,CAAC,cACH,OAAO;EACL,WAAW;EACX,YAAY;EACZ,SAAS;CACX;CAEF,IAAI,YAAY,YAAY,MAAM,MAChC,OAAO;EACL,WAAW;EACX,YAAY;EACZ,SAAS;EACT;CACF;CAEF,OAAO;EAAE;EAAc,SAAS;CAAY;AAC9C;;;;;;AAOA,SAAS,UACP,KACA,WACc;CACd,OAAO,EACJ,OAAO,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CACxC,WAAW,QAAQ,CAAC,WAAW,IAAI,MAAM,SAAS,CAAC,CAAC;AACzD;AAEA,MAAM,aAAa,UAAU,SAAS;AAKtC,MAAM,gCACJ;AAKF,MAAM,yBAAuC,EAC1C,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAC5C,WAAW,EAAE,gBAAgB,CAC5B,WAAW,WAAW,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAChD,CAAC;AAEH,MAAM,oBAAkC,EACrC,OAAO;CAAE,MAAM,EAAE,OAAO;CAAG,KAAK,EAAE,OAAO;AAAE,CAAC,CAAC,CAC7C,WAAW,EAAE,MAAM,UAAU,CAAC;CAAE,aAAa;CAAM,GAAG,WAAW,GAAG;AAAE,CAAC,CAAC;AAE3E,SAAS,gBAAgB,OAA8C;CACrE,IAAI,CAAC,OACH,OAAO;EACL,SAAS;EACT,WAAW;EACX,YAAY;CACd;CAGF,MAAM,MAAM,gBAAgB,KAAK;CACjC,OAAO;EACL,SAAS;EACT,GAAG;EACH,GAAI,IAAI,aAAa,EAAE,WAAW,UAAU,IAAI,CAAC;CACnD;AACF;AAEA,MAAM,8BAA4C,EAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CACxC,WAAW,EAAE,YAAY,CAAC,gBAAgB,KAAK,CAAC,CAAC;AAEpD,MAAM,cAAc,MAAM,gBAAgB;AAC1C,MAAM,WAAyB,EAC5B,OAAO;CACN,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,QAAQ,EAAE,OAAO,CAAC,CAAC,SAAS;AAC9B,CAAC,CAAC,CACD,WAAW,EAAE,SAAS,aAAa,CAClC;CACE,GAAG,WAAW,OAAO;CACrB,GAAI,UAAU,YAAY,KAAK,MAAM,IAAI,EAAE,eAAe,OAAO,IAAI,CAAC;AACxE,CACF,CAAC;AAKH,MAAM,eAA8D;CAClE,MAAM;EAAE,YAAY,sBAAsB;EAAI,aAAa;CAAO;CAClE,KAAK;EAAE,YAAY,cAAc;EAAI,aAAa;CAAM;CACxD,MAAM;EAAE,YAAY,cAAc;EAAI,aAAa;CAAO;AAC5D;AAEA,SAAS,iBAAiB,SAAkD;CAC1E,IAAI,CAAC,SACH,OAAO,CAAC;CAIV,MAAM,CAAC,MAAM,WAAW,QAAQ,MAAM,GAAG;CACzC,MAAM,MAAM,aAAa;CACzB,IAAI,CAAC,KACH,OAAO,CACL;EACE,aAAa,QAAQ;EACrB,SAAS;EACT,WAAW;EACX,YAAY;CACd,CACF;CAGF,OAAO,CAAC;EAAE,GAAG;EAAK,GAAG,WAAW,OAAO;CAAE,CAAC;AAC5C;AAEA,MAAM,gBAA8B,EACjC,OAAO;CACN,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;AAC/B,CAAC,CAAC,CACD,WAAW,EAAE,SAAS,cAAc,CACnC,WAAW,OAAO,GAClB,GAAG,iBAAiB,OAAO,CAC7B,CAAC;AAMH,MAAM,6CAA6B,IAAI,IAAI,CAAC,WAAW,OAAO,CAAC;AAE/D,MAAM,gBAA8B,EACjC,OAAO;CACN,cAAc,EAAE,OAAO,CAAC,CAAC,SAAS;CAClC,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;CACpC,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS;AACtC,CAAC,CAAC,CACD,WACE,EACC,cACA,gBAAgB,SAChB,gBAAgB,kBACZ;CACJ,MAAM,cAAc,aAAa,WAAW,KAAK,IAC7C,aACA;CAEJ,IACE,CAAC,gBACD,CAAC,2BAA2B,IAAI,aAAa,YAAY,CAAC,GAE1D,OAAO,CACL;EACE;EACA,SAAS;EACT,WAAW;EACX,YAAY;CACd,CACF;CAGF,OAAO,CAAC;EAAE;EAAa,GAAG,WAAW,OAAO;CAAE,CAAC;AACjD,CACF;AAKF,MAAM,aAA2B,EAC9B,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CACjD,WAAW,EAAE,gBAAgB,cAAc;CAC1C,IAAI,YAAY,UACd,OAAO,CACL;EACE,cAAc;EACd,SAAS;EACT,WAAW;EACX,YAAY;CACd,CACF;CAEF,OAAO,CAAC,WAAW,OAAO,CAAC;AAC7B,CAAC;AAMH,MAAM,iBAA+B,EAClC,OAAO;CACN,SAAS,EAAE,OAAO,CAAC,CAAC,SAAS;CAC7B,YAAY,EAAE,OAAO,CAAC,CAAC,SAAS;CAChC,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;AACvC,CAAC,CAAC,CACD,WAAW,EAAE,SAAS,YAAY,sBAAsB;CACvD,MAAM,OAA4B,CAAC;CAEnC,IAAI,SACF,KAAK,KAAK;EACR,aAAa;EACb,GAAG,WAAW,OAAO;CACvB,CAAC;CAGH,IAAI,YAKF,KAAK,KAAK;EACR,YAAY,iBAAiB;EAC7B,GAAG,gBAAgB,UAAU;CAC/B,CAAC;CAGH,IAAI,iBACF,KAAK,KAAK;EACR,aAAa;EACb,GAAG,WAAW,eAAe;CAC/B,CAAC;CAGH,OAAO;AACT,CAAC;AAKH,MAAM,qBAAmC,EACtC,OAAO;CACN,eAAe,EAAE,OAAO,CAAC,CAAC,SAAS;CACnC,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;CACtC,iBAAiB,EAAE,OAAO,CAAC,CAAC,SAAS;CACrC,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;AACxC,CAAC,CAAC,CACD,WACE,EACC,eAAe,YACf,kBAAkB,eAClB,iBAAiB,cACjB,kBAAkB,oBACd;CACJ,MAAM,OAA4B,CAAC;CAEnC,IAAI,YACF,KAAK,KAAK;EACR,aAAa;EAEb,gBAAgB;EAChB,GAAG,WAAW,UAAU;CAC1B,CAAC;CAGH,IAAI,eACF,KAAK,KAAK;EACR,aAAa;EACb,GAAG,WAAW,aAAa;CAC7B,CAAC;CAGH,IAAI,cACF,KAAK,KAAK;EACR,aAAa;EACb,GAAG,WAAW,YAAY;CAC5B,CAAC;CAGH,IAAI,eACF,KAAK,KAAK;EACR,aAAa;EACb,GAAG,WAAW,aAAa;CAC7B,CAAC;CAGH,OAAO;AACT,CACF;AAEF,MAAM,mCAAmC;AACzC,MAAM,2BAAyC,EAC5C,OAAO;CACN,oBAAoB,EAAE,OAAO,CAAC,CAAC,SAAS;CACxC,kBAAkB,EAAE,OAAO,CAAC,CAAC,SAAS;AACxC,CAAC,CAAC,CACD,WAAW,EAAE,oBAAoB,SAAS,kBAAkB,YAAY;CACvE,MAAM,CAAC,aAAa,kBAClB,SAAS,iCAAA,CACT,MAAM,GAAG;CACX,OAAO,CACL;EACE;EACA,GAAI,gBAAgB,EAAE,cAAc,IAAI,CAAC;EACzC,GAAG,WAAW,OAAO;CACvB,CACF;AACF,CAAC;;;;;AAMH,MAAa,eAAkD;CAE7D,0BAA0B;EACxB,YAAY,eAAe;EAC3B,aAAa;EACb,YAAY,UAAU,gBAAgB;CACxC;CAEA,0CAA0C;EACxC,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY;CACd;CAEA,wBAAwB;EACtB,YAAY,wBAAwB;EACpC,aAAa;EACb,YAAY,UAAU,mBAAmB,QAAQ,IAAI,SAAS,IAAI,CAAC;CACrE;CAEA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY;EACZ,gBAAgB;EAChB,YAAY,UAAU,YAAY;CACpC;CAEA,sBAAsB;EACpB,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY;CACd;CAEA,sBAAsB;EACpB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAYA;EACZ,gBAAgB;EAChB,YAAY,UAAU,cAAc;CACtC;CAEA,wBAAwB;EACtB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY;EACZ,gBAAgB;EAChB,YAAY,UAAU,gBAAgB;CACxC;CAEA,2BAA2B;EACzB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CAEA,4BAA4B;EAC1B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,yBAAyB;EACvB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,sBAAsB;EACpB,YAAY,yBAAyB;EACrC,YAAY;EACZ,aAAa;CACf;CAEA,iDAAiD;EAC/C,YAAY,iBAAiB;EAC7B,aAAa;EACb,YAAY;CACd;CACA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,uBAAuB;EACrB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,uBAAuB;EACrB,YAAY,cAAc;EAC1B,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,aAAa;EAIb,gBAAgB;CAClB;CAEA,8BAA8B;EAC5B,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,iBAAiB;CACzC;CAEA,sBAAsB;EACpB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,oCAAoC;EAClC,YAAY,cAAc;EAC1B,aAAa;EAGb,YAAY;EACZ,YAAY,UAAU,kBAAkB;CAC1C;CAEA,4BAA4B;EAC1B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EAIb,gBAAgB;CAClB;CAEA,wBAAwB;EACtB,YAAY,sBAAsB;EAClC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,KAAK;CAC7B;CAEA,uBAAuB;EACrB,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CAEA,8BAA8B;EAC5B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,+BAA+B;EAC7B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,8BAA8B;EAC5B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,gBAAgB;CAClB;CAEA,0BAA0B;EACxB,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY,UAAU,WAAW;CACnC;CAEA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY;CACd;CAEA,2BAA2B;EACzB,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,aAAa;CACrC;CAEA,0BAA0B;EACxB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CAEA,gCAAgC;EAC9B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAIA,qCAAqC;EACnC,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,aAAa;CACrC;CACA,iCAAiC;EAC/B,YAAY,yBAAyB;EACrC,aAAa;CACf;CAEA,gCAAgC;EAC9B,YAAY,yBAAyB;EACrC,aAAa;EAEb,YAAY;CACd;CAGA,+BAA+B;EAC7B,YAAY,wBAAwB;EACpC,SAAS;EACT,aAAa;EACb,YAAYC;EACZ,YAAY,UAAU,gBAAgB;CACxC;CAEA,0BAA0B;EACxB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,mBAAmB;CAC3C;CAEA,8BAA8B;EAC5B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY;CACd;CAEA,oBAAoB;EAClB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EAGb,YAAY;EACZ,YAAY,UAAU,cAAc;CACtC;CACA,6BAA6B;EAC3B,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,YAAY,QAAQ,QAAQ,MAAM;CAC1D;CACA,uCAAuC;EACrC,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY;CACd;CACA,mBAAmB;EACjB,YAAY,mCAAmC;EAC/C,aAAa;EACb,YAAY;CACd;CAEA,yBAAyB;EACvB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,kCAAkC;EAChC,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,2BAA2B;EACzB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CACA,qBAAqB;EACnB,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY,UAAU,aAAa;CACrC;CACA,yBAAyB;EACvB,YAAY,eAAe;EAC3B,aAAa;CACf;CAEA,0BAA0B;EACxB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CACA,qBAAqB;EACnB,YAAY,cAAc;EAC1B,aAAa;CACf;CACA,cAAc;EACZ,YAAY,cAAc;EAC1B,aAAa;EACb,YAAY;CACd;CACA,yBAAyB;EACvB,YAAY,yBAAyB;EACrC,YAAYC;EACZ,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CAEA,kBAAkB;EAChB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,gBAAgB;CACxC;CAEA,uBAAuB;EACrB,YAAY,eAAe;EAC3B,aAAa;EACb,YAAY,UAAU,iBAAiB;CACzC;CAEA,cAAc;EACZ,YAAY,yBAAyB;EACrC,aAAa;EAEb,gBAAgB;CAClB;CAEA,4BAA4B;EAC1B,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;CACf;CAEA,6BAA6B;EAC3B,YAAY,iBAAiB;EAC7B,aAAa;EACb,YAAY;CACd;CAEA,0BAA0B;EACxB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,mBAAmB;CAC3C;CACA,mBAAmB;EACjB,YAAY,sBAAsB;EAClC,aAAa;EACb,YAAY,UAAU,cAAc;CACtC;CACA,0BAA0B;EACxB,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY;CACd;CACA,6BAA6B;EAC3B,YAAY,yBAAyB;EACrC,aAAa;EACb,YAAY,UAAU,gBAAgB;CACxC;CAEA,uBAAuB;EACrB,YAAY,eAAe;EAC3B,aAAa;CACf;CAEA,yBAAyB;EACvB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EAEb,gBAAgB;EAGhB,YAAY;EACZ,YAAY,UAAU,eAAe;CACvC;CAEA,2BAA2B;EACzB,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY,UAAU,iBAAiB;CACzC;CAEA,sBAAsB;EACpB,YAAY,cAAc;EAC1B,aAAa;CACf;CAEA,kCAAkC;EAChC,YAAY,yBAAyB;EACrC,SAAS;EACT,aAAa;EACb,YAAY;CACd;CACA,iCAAiC;EAC/B,YAAY,yBAAyB;EACrC,aAAa;CACf;CACA,4BAA4B;EAC1B,YAAY,iBAAiB;EAC7B,aAAa;CACf;AACF"}

package/dist/modules/manager/gitlabci/extract.js

@@ -93,6 +93,7 @@ async function extractAllPackageFiles(config, packageFiles) {
 			filesToExamine.push(file);
 		}
 		const result = extractPackageFile(content, file, config);
+		// v8 ignore else -- needs a listed file that yields no deps
 		if (result !== null) results.push({
 			packageFile: file,
 			deps: result.deps

package/dist/modules/manager/gitlabci/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":["semverPartialId"],"sources":["../../../../lib/modules/manager/gitlabci/extract.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport { readLocalFile } from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Result } from '../../../util/result.ts';\nimport { parseYaml } from '../../../util/yaml.ts';\nimport { GitlabTagsDatasource } from '../../datasource/gitlab-tags/index.ts';\nimport { id as semverPartialId } from '../../versioning/semver-partial/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFile,\n  PackageFileContent,\n} from '../types.ts';\nimport {\n  GitlabDocument,\n  Job,\n  Jobs,\n  MultiDocumentLocalIncludes,\n} from './schema.ts';\nimport { getGitlabDep } from './utils.ts';\n\n// See https://docs.gitlab.com/ee/ci/components/index.html#use-a-component\nconst componentReferenceRegex = regEx(\n  /(?<fqdn>[^/]+)\\/(?<projectPath>.+)\\/(?:.+)@(?<specificVersion>.+)/,\n);\n\nfunction extractDepFromIncludeComponent(\n  component: string,\n  registryAliases?: Record<string, string>,\n): PackageDependency | null {\n  let componentUrl = component;\n  if (registryAliases) {\n    for (const key in registryAliases) {\n      componentUrl = componentUrl.replace(key, registryAliases[key]);\n    }\n  }\n  const componentReference = componentReferenceRegex.exec(componentUrl)?.groups;\n  if (!componentReference) {\n    logger.debug(\n      { componentReference: componentUrl },\n      'Ignoring malformed component reference',\n    );\n    return null;\n  }\n  const projectPathParts = componentReference.projectPath.split('/');\n  if (projectPathParts.length < 2) {\n    logger.debug(\n      { componentReference: componentUrl },\n      'Ignoring component reference with incomplete project path',\n    );\n    return null;\n  }\n\n  const dep: PackageDependency = {\n    datasource: GitlabTagsDatasource.id,\n    depName: componentReference.projectPath,\n    depType: 'repository',\n    currentValue: componentReference.specificVersion,\n    registryUrls: [`https://${componentReference.fqdn}`],\n    versioning: semverPartialId,\n  };\n  return dep;\n}\n\nexport function extractPackageFile(\n  content: string,\n  packageFile: string,\n  config: ExtractConfig,\n): PackageFileContent | null {\n  const deps: PackageDependency[] = [];\n  try {\n    const docs = parseYaml(content, { uniqueKeys: false });\n\n    for (const doc of docs) {\n      const topLevel = Job.parse(doc);\n      const jobs = Jobs.parse(doc);\n\n      for (const job of [topLevel, ...jobs]) {\n        const { image, services } = job;\n\n        if (image) {\n          const dep = getGitlabDep(image.value, config.registryAliases);\n          dep.depType = image.type;\n          deps.push(dep);\n        }\n\n        for (const service of services) {\n          const dep = getGitlabDep(service, config.registryAliases);\n          dep.depType = 'service-image';\n          deps.push(dep);\n        }\n      }\n\n      const includedComponents = GitlabDocument.parse(doc);\n      for (const includedComponent of includedComponents) {\n        const dep = extractDepFromIncludeComponent(\n          includedComponent,\n          config.registryAliases,\n        );\n        if (dep) {\n          deps.push(dep);\n        }\n      }\n    }\n  } catch (err) /* istanbul ignore next */ {\n    if (err.stack?.startsWith('YAMLException:')) {\n      logger.debug(\n        { err, packageFile },\n        'YAML exception extracting GitLab CI includes',\n      );\n    } else {\n      logger.debug(\n        { err, packageFile },\n        'Error extracting GitLab CI dependencies',\n      );\n    }\n  }\n\n  return deps.length ? { deps } : null;\n}\n\nexport async function extractAllPackageFiles(\n  config: ExtractConfig,\n  packageFiles: string[],\n): Promise<PackageFile[] | null> {\n  const filesToExamine = [...packageFiles];\n  const seen = new Set<string>(packageFiles);\n  const results: PackageFile[] = [];\n\n  // extract all includes from the files\n  while (filesToExamine.length > 0) {\n    const file = filesToExamine.pop()!;\n\n    const content = await readLocalFile(file, 'utf8');\n    if (!content) {\n      logger.debug(\n        { packageFile: file },\n        `Empty or non existent gitlabci file`,\n      );\n      continue;\n    }\n\n    const { val: docs, err } = Result.wrap(() =>\n      parseYaml(content, { uniqueKeys: false }),\n    ).unwrap();\n\n    if (err) {\n      logger.debug(\n        { err, packageFile: file },\n        'Error extracting GitLab CI dependencies',\n      );\n      continue;\n    }\n\n    const localIncludes = MultiDocumentLocalIncludes.parse(docs);\n    for (const file of localIncludes) {\n      if (!seen.has(file)) {\n        seen.add(file);\n        filesToExamine.push(file);\n      }\n    }\n\n    const result = extractPackageFile(content, file, config);\n    if (result !== null) {\n      results.push({\n        packageFile: file,\n        deps: result.deps,\n      });\n    }\n  }\n\n  logger.trace(\n    { packageFiles, files: filesToExamine.entries() },\n    'extracted all GitLab CI files',\n  );\n\n  if (!results.length) {\n    return null;\n  }\n\n  return results;\n}\n"],"mappings":";;;;;;;;;;AAsBA,MAAM,0BAA0B,MAC9B,mEACF;AAEA,SAAS,+BACP,WACA,iBAC0B;CAC1B,IAAI,eAAe;CACnB,IAAI,iBACF,KAAK,MAAM,OAAO,iBAChB,eAAe,aAAa,QAAQ,KAAK,gBAAgB,IAAI;CAGjE,MAAM,qBAAqB,wBAAwB,KAAK,YAAY,CAAC,EAAE;CACvE,IAAI,CAAC,oBAAoB;EACvB,OAAO,MACL,EAAE,oBAAoB,aAAa,GACnC,wCACF;EACA,OAAO;CACT;CAEA,IADyB,mBAAmB,YAAY,MAAM,GAC3C,CAAC,CAAC,SAAS,GAAG;EAC/B,OAAO,MACL,EAAE,oBAAoB,aAAa,GACnC,2DACF;EACA,OAAO;CACT;CAUA,OAAO;EAPL,YAAY,qBAAqB;EACjC,SAAS,mBAAmB;EAC5B,SAAS;EACT,cAAc,mBAAmB;EACjC,cAAc,CAAC,WAAW,mBAAmB,MAAM;EACnD,YAAYA;CAEL;AACX;AAEA,SAAgB,mBACd,SACA,aACA,QAC2B;CAC3B,MAAM,OAA4B,CAAC;CACnC,IAAI;EACF,MAAM,OAAO,UAAU,SAAS,EAAE,YAAY,MAAM,CAAC;EAErD,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,WAAW,IAAI,MAAM,GAAG;GAC9B,MAAM,OAAO,KAAK,MAAM,GAAG;GAE3B,KAAK,MAAM,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG;IACrC,MAAM,EAAE,OAAO,aAAa;IAE5B,IAAI,OAAO;KACT,MAAM,MAAM,aAAa,MAAM,OAAO,OAAO,eAAe;KAC5D,IAAI,UAAU,MAAM;KACpB,KAAK,KAAK,GAAG;IACf;IAEA,KAAK,MAAM,WAAW,UAAU;KAC9B,MAAM,MAAM,aAAa,SAAS,OAAO,eAAe;KACxD,IAAI,UAAU;KACd,KAAK,KAAK,GAAG;IACf;GACF;GAEA,MAAM,qBAAqB,eAAe,MAAM,GAAG;GACnD,KAAK,MAAM,qBAAqB,oBAAoB;IAClD,MAAM,MAAM,+BACV,mBACA,OAAO,eACT;IACA,IAAI,KACF,KAAK,KAAK,GAAG;GAEjB;EACF;CACF,SAAS,gCAAgC;EACvC,IAAI,IAAI,OAAO,WAAW,gBAAgB,GACxC,OAAO,MACL;GAAE;GAAK;EAAY,GACnB,8CACF;OAEA,OAAO,MACL;GAAE;GAAK;EAAY,GACnB,yCACF;CAEJ;CAEA,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI;AAClC;AAEA,eAAsB,uBACpB,QACA,cAC+B;CAC/B,MAAM,iBAAiB,CAAC,GAAG,YAAY;CACvC,MAAM,OAAO,IAAI,IAAY,YAAY;CACzC,MAAM,UAAyB,CAAC;CAGhC,OAAO,eAAe,SAAS,GAAG;EAChC,MAAM,OAAO,eAAe,IAAI;EAEhC,MAAM,UAAU,MAAM,cAAc,MAAM,MAAM;EAChD,IAAI,CAAC,SAAS;GACZ,OAAO,MACL,EAAE,aAAa,KAAK,GACpB,qCACF;GACA;EACF;EAEA,MAAM,EAAE,KAAK,MAAM,QAAQ,OAAO,WAChC,UAAU,SAAS,EAAE,YAAY,MAAM,CAAC,CAC1C,CAAC,CAAC,OAAO;EAET,IAAI,KAAK;GACP,OAAO,MACL;IAAE;IAAK,aAAa;GAAK,GACzB,yCACF;GACA;EACF;EAEA,MAAM,gBAAgB,2BAA2B,MAAM,IAAI;EAC3D,KAAK,MAAM,QAAQ,eACjB,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG;GACnB,KAAK,IAAI,IAAI;GACb,eAAe,KAAK,IAAI;EAC1B;EAGF,MAAM,SAAS,mBAAmB,SAAS,MAAM,MAAM;EACvD,IAAI,WAAW,MACb,QAAQ,KAAK;GACX,aAAa;GACb,MAAM,OAAO;EACf,CAAC;CAEL;CAEA,OAAO,MACL;EAAE;EAAc,OAAO,eAAe,QAAQ;CAAE,GAChD,+BACF;CAEA,IAAI,CAAC,QAAQ,QACX,OAAO;CAGT,OAAO;AACT"}
+{"version":3,"file":"extract.js","names":["semverPartialId"],"sources":["../../../../lib/modules/manager/gitlabci/extract.ts"],"sourcesContent":["import { logger } from '../../../logger/index.ts';\nimport { readLocalFile } from '../../../util/fs/index.ts';\nimport { regEx } from '../../../util/regex.ts';\nimport { Result } from '../../../util/result.ts';\nimport { parseYaml } from '../../../util/yaml.ts';\nimport { GitlabTagsDatasource } from '../../datasource/gitlab-tags/index.ts';\nimport { id as semverPartialId } from '../../versioning/semver-partial/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFile,\n  PackageFileContent,\n} from '../types.ts';\nimport {\n  GitlabDocument,\n  Job,\n  Jobs,\n  MultiDocumentLocalIncludes,\n} from './schema.ts';\nimport { getGitlabDep } from './utils.ts';\n\n// See https://docs.gitlab.com/ee/ci/components/index.html#use-a-component\nconst componentReferenceRegex = regEx(\n  /(?<fqdn>[^/]+)\\/(?<projectPath>.+)\\/(?:.+)@(?<specificVersion>.+)/,\n);\n\nfunction extractDepFromIncludeComponent(\n  component: string,\n  registryAliases?: Record<string, string>,\n): PackageDependency | null {\n  let componentUrl = component;\n  if (registryAliases) {\n    for (const key in registryAliases) {\n      componentUrl = componentUrl.replace(key, registryAliases[key]);\n    }\n  }\n  const componentReference = componentReferenceRegex.exec(componentUrl)?.groups;\n  if (!componentReference) {\n    logger.debug(\n      { componentReference: componentUrl },\n      'Ignoring malformed component reference',\n    );\n    return null;\n  }\n  const projectPathParts = componentReference.projectPath.split('/');\n  if (projectPathParts.length < 2) {\n    logger.debug(\n      { componentReference: componentUrl },\n      'Ignoring component reference with incomplete project path',\n    );\n    return null;\n  }\n\n  const dep: PackageDependency = {\n    datasource: GitlabTagsDatasource.id,\n    depName: componentReference.projectPath,\n    depType: 'repository',\n    currentValue: componentReference.specificVersion,\n    registryUrls: [`https://${componentReference.fqdn}`],\n    versioning: semverPartialId,\n  };\n  return dep;\n}\n\nexport function extractPackageFile(\n  content: string,\n  packageFile: string,\n  config: ExtractConfig,\n): PackageFileContent | null {\n  const deps: PackageDependency[] = [];\n  try {\n    const docs = parseYaml(content, { uniqueKeys: false });\n\n    for (const doc of docs) {\n      const topLevel = Job.parse(doc);\n      const jobs = Jobs.parse(doc);\n\n      for (const job of [topLevel, ...jobs]) {\n        const { image, services } = job;\n\n        if (image) {\n          const dep = getGitlabDep(image.value, config.registryAliases);\n          dep.depType = image.type;\n          deps.push(dep);\n        }\n\n        for (const service of services) {\n          const dep = getGitlabDep(service, config.registryAliases);\n          dep.depType = 'service-image';\n          deps.push(dep);\n        }\n      }\n\n      const includedComponents = GitlabDocument.parse(doc);\n      for (const includedComponent of includedComponents) {\n        const dep = extractDepFromIncludeComponent(\n          includedComponent,\n          config.registryAliases,\n        );\n        if (dep) {\n          deps.push(dep);\n        }\n      }\n    }\n  } catch (err) /* istanbul ignore next */ {\n    if (err.stack?.startsWith('YAMLException:')) {\n      logger.debug(\n        { err, packageFile },\n        'YAML exception extracting GitLab CI includes',\n      );\n    } else {\n      logger.debug(\n        { err, packageFile },\n        'Error extracting GitLab CI dependencies',\n      );\n    }\n  }\n\n  return deps.length ? { deps } : null;\n}\n\nexport async function extractAllPackageFiles(\n  config: ExtractConfig,\n  packageFiles: string[],\n): Promise<PackageFile[] | null> {\n  const filesToExamine = [...packageFiles];\n  const seen = new Set<string>(packageFiles);\n  const results: PackageFile[] = [];\n\n  // extract all includes from the files\n  while (filesToExamine.length > 0) {\n    const file = filesToExamine.pop()!;\n\n    const content = await readLocalFile(file, 'utf8');\n    if (!content) {\n      logger.debug(\n        { packageFile: file },\n        `Empty or non existent gitlabci file`,\n      );\n      continue;\n    }\n\n    const { val: docs, err } = Result.wrap(() =>\n      parseYaml(content, { uniqueKeys: false }),\n    ).unwrap();\n\n    if (err) {\n      logger.debug(\n        { err, packageFile: file },\n        'Error extracting GitLab CI dependencies',\n      );\n      continue;\n    }\n\n    const localIncludes = MultiDocumentLocalIncludes.parse(docs);\n    for (const file of localIncludes) {\n      if (!seen.has(file)) {\n        seen.add(file);\n        filesToExamine.push(file);\n      }\n    }\n\n    const result = extractPackageFile(content, file, config);\n    // v8 ignore else -- needs a listed file that yields no deps\n    if (result !== null) {\n      results.push({\n        packageFile: file,\n        deps: result.deps,\n      });\n    }\n  }\n\n  logger.trace(\n    { packageFiles, files: filesToExamine.entries() },\n    'extracted all GitLab CI files',\n  );\n\n  if (!results.length) {\n    return null;\n  }\n\n  return results;\n}\n"],"mappings":";;;;;;;;;;AAsBA,MAAM,0BAA0B,MAC9B,mEACF;AAEA,SAAS,+BACP,WACA,iBAC0B;CAC1B,IAAI,eAAe;CACnB,IAAI,iBACF,KAAK,MAAM,OAAO,iBAChB,eAAe,aAAa,QAAQ,KAAK,gBAAgB,IAAI;CAGjE,MAAM,qBAAqB,wBAAwB,KAAK,YAAY,CAAC,EAAE;CACvE,IAAI,CAAC,oBAAoB;EACvB,OAAO,MACL,EAAE,oBAAoB,aAAa,GACnC,wCACF;EACA,OAAO;CACT;CAEA,IADyB,mBAAmB,YAAY,MAAM,GAC3C,CAAC,CAAC,SAAS,GAAG;EAC/B,OAAO,MACL,EAAE,oBAAoB,aAAa,GACnC,2DACF;EACA,OAAO;CACT;CAUA,OAAO;EAPL,YAAY,qBAAqB;EACjC,SAAS,mBAAmB;EAC5B,SAAS;EACT,cAAc,mBAAmB;EACjC,cAAc,CAAC,WAAW,mBAAmB,MAAM;EACnD,YAAYA;CAEL;AACX;AAEA,SAAgB,mBACd,SACA,aACA,QAC2B;CAC3B,MAAM,OAA4B,CAAC;CACnC,IAAI;EACF,MAAM,OAAO,UAAU,SAAS,EAAE,YAAY,MAAM,CAAC;EAErD,KAAK,MAAM,OAAO,MAAM;GACtB,MAAM,WAAW,IAAI,MAAM,GAAG;GAC9B,MAAM,OAAO,KAAK,MAAM,GAAG;GAE3B,KAAK,MAAM,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG;IACrC,MAAM,EAAE,OAAO,aAAa;IAE5B,IAAI,OAAO;KACT,MAAM,MAAM,aAAa,MAAM,OAAO,OAAO,eAAe;KAC5D,IAAI,UAAU,MAAM;KACpB,KAAK,KAAK,GAAG;IACf;IAEA,KAAK,MAAM,WAAW,UAAU;KAC9B,MAAM,MAAM,aAAa,SAAS,OAAO,eAAe;KACxD,IAAI,UAAU;KACd,KAAK,KAAK,GAAG;IACf;GACF;GAEA,MAAM,qBAAqB,eAAe,MAAM,GAAG;GACnD,KAAK,MAAM,qBAAqB,oBAAoB;IAClD,MAAM,MAAM,+BACV,mBACA,OAAO,eACT;IACA,IAAI,KACF,KAAK,KAAK,GAAG;GAEjB;EACF;CACF,SAAS,gCAAgC;EACvC,IAAI,IAAI,OAAO,WAAW,gBAAgB,GACxC,OAAO,MACL;GAAE;GAAK;EAAY,GACnB,8CACF;OAEA,OAAO,MACL;GAAE;GAAK;EAAY,GACnB,yCACF;CAEJ;CAEA,OAAO,KAAK,SAAS,EAAE,KAAK,IAAI;AAClC;AAEA,eAAsB,uBACpB,QACA,cAC+B;CAC/B,MAAM,iBAAiB,CAAC,GAAG,YAAY;CACvC,MAAM,OAAO,IAAI,IAAY,YAAY;CACzC,MAAM,UAAyB,CAAC;CAGhC,OAAO,eAAe,SAAS,GAAG;EAChC,MAAM,OAAO,eAAe,IAAI;EAEhC,MAAM,UAAU,MAAM,cAAc,MAAM,MAAM;EAChD,IAAI,CAAC,SAAS;GACZ,OAAO,MACL,EAAE,aAAa,KAAK,GACpB,qCACF;GACA;EACF;EAEA,MAAM,EAAE,KAAK,MAAM,QAAQ,OAAO,WAChC,UAAU,SAAS,EAAE,YAAY,MAAM,CAAC,CAC1C,CAAC,CAAC,OAAO;EAET,IAAI,KAAK;GACP,OAAO,MACL;IAAE;IAAK,aAAa;GAAK,GACzB,yCACF;GACA;EACF;EAEA,MAAM,gBAAgB,2BAA2B,MAAM,IAAI;EAC3D,KAAK,MAAM,QAAQ,eACjB,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG;GACnB,KAAK,IAAI,IAAI;GACb,eAAe,KAAK,IAAI;EAC1B;EAGF,MAAM,SAAS,mBAAmB,SAAS,MAAM,MAAM;;EAEvD,IAAI,WAAW,MACb,QAAQ,KAAK;GACX,aAAa;GACb,MAAM,OAAO;EACf,CAAC;CAEL;CAEA,OAAO,MACL;EAAE;EAAc,OAAO,eAAe,QAAQ;CAAE,GAChD,+BACF;CAEA,IAAI,CAAC,QAAQ,QACX,OAAO;CAGT,OAAO;AACT"}

package/dist/modules/manager/glasskube/extract.js

@@ -37,6 +37,7 @@ function resolvePackageDependencies(packages, repositories) {
 function findRepository(name, repositories) {
 	for (const repository of repositories) {
 		if (name === repository.metadata.name) return repository;
+		// v8 ignore else -- needs a manifest whose repositories match no name
 		if (isFalsy(name) && isDefaultRepository(repository)) return repository;
 	}
 	return null;
@@ -53,6 +54,7 @@ async function extractAllPackageFiles(_config, packageFiles) {
 	const glasskubeResourceFiles = [];
 	for (const packageFile of packageFiles) {
 		const content = await readLocalFile(packageFile, "utf8");
+		// v8 ignore else -- needs a listed package file that cannot be read
 		if (content !== null) {
 			const resources = parseResources(content, packageFile);
 			allRepositories.push(...resources.repositories);

package/dist/modules/manager/glasskube/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","names":[],"sources":["../../../../lib/modules/manager/glasskube/extract.ts"],"sourcesContent":["import { isFalsy } from '@sindresorhus/is';\nimport { readLocalFile } from '../../../util/fs/index.ts';\nimport { parseYaml } from '../../../util/yaml.ts';\nimport { GlasskubePackagesDatasource } from '../../datasource/glasskube-packages/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFile,\n  PackageFileContent,\n} from '../types.ts';\nimport {\n  GlasskubeResource,\n  type Package,\n  type PackageRepository,\n} from './schema.ts';\nimport type { GlasskubeResources } from './types.ts';\n\nfunction parseResources(\n  content: string,\n  packageFile: string,\n): GlasskubeResources {\n  const resources: GlasskubeResource[] = parseYaml(content, {\n    customSchema: GlasskubeResource,\n    failureBehaviour: 'filter',\n  });\n\n  const packages: Package[] = [];\n  const repositories: PackageRepository[] = [];\n\n  for (const resource of resources) {\n    if (resource.kind === 'ClusterPackage' || resource.kind === 'Package') {\n      packages.push(resource);\n    } else if (resource.kind === 'PackageRepository') {\n      repositories.push(resource);\n    }\n  }\n\n  return { packageFile, repositories, packages };\n}\n\nfunction resolvePackageDependencies(\n  packages: Package[],\n  repositories: PackageRepository[],\n): PackageDependency[] {\n  const deps: PackageDependency[] = [];\n  for (const pkg of packages) {\n    const dep: PackageDependency = {\n      depName: pkg.spec.packageInfo.name,\n      currentValue: pkg.spec.packageInfo.version,\n      datasource: GlasskubePackagesDatasource.id,\n    };\n\n    const repository = findRepository(\n      pkg.spec.packageInfo.repositoryName ?? null,\n      repositories,\n    );\n\n    if (repository === null) {\n      dep.skipReason = 'unknown-registry';\n    } else {\n      dep.registryUrls = [repository.spec.url];\n    }\n\n    deps.push(dep);\n  }\n  return deps;\n}\n\nfunction findRepository(\n  name: string | null,\n  repositories: PackageRepository[],\n): PackageRepository | null {\n  for (const repository of repositories) {\n    if (name === repository.metadata.name) {\n      return repository;\n    }\n    if (isFalsy(name) && isDefaultRepository(repository)) {\n      return repository;\n    }\n  }\n  return null;\n}\n\nfunction isDefaultRepository(repository: PackageRepository): boolean {\n  return (\n    repository.metadata.annotations?.[\n      'packages.glasskube.dev/default-repository'\n    ] === 'true'\n  );\n}\n\nexport function extractPackageFile(\n  content: string,\n  packageFile: string,\n  _config?: ExtractConfig,\n): PackageFileContent | null {\n  const { packages, repositories } = parseResources(content, packageFile);\n  const deps = resolvePackageDependencies(packages, repositories);\n  return { deps };\n}\n\nexport async function extractAllPackageFiles(\n  _config: ExtractConfig,\n  packageFiles: string[],\n): Promise<PackageFile[] | null> {\n  const allRepositories: PackageRepository[] = [];\n  const glasskubeResourceFiles: GlasskubeResources[] = [];\n  for (const packageFile of packageFiles) {\n    const content = await readLocalFile(packageFile, 'utf8');\n    if (content !== null) {\n      const resources = parseResources(content, packageFile);\n      allRepositories.push(...resources.repositories);\n      glasskubeResourceFiles.push(resources);\n    }\n  }\n\n  const result: PackageFile[] = [];\n  for (const file of glasskubeResourceFiles) {\n    const deps = resolvePackageDependencies(file.packages, allRepositories);\n    if (deps.length > 0) {\n      result.push({ packageFile: file.packageFile, deps });\n    }\n  }\n  return result.length ? result : null;\n}\n"],"mappings":";;;;;;AAiBA,SAAS,eACP,SACA,aACoB;CACpB,MAAM,YAAiC,UAAU,SAAS;EACxD,cAAc;EACd,kBAAkB;CACpB,CAAC;CAED,MAAM,WAAsB,CAAC;CAC7B,MAAM,eAAoC,CAAC;CAE3C,KAAK,MAAM,YAAY,WACrB,IAAI,SAAS,SAAS,oBAAoB,SAAS,SAAS,WAC1D,SAAS,KAAK,QAAQ;MACjB,IAAI,SAAS,SAAS,qBAC3B,aAAa,KAAK,QAAQ;CAI9B,OAAO;EAAE;EAAa;EAAc;CAAS;AAC/C;AAEA,SAAS,2BACP,UACA,cACqB;CACrB,MAAM,OAA4B,CAAC;CACnC,KAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,MAAyB;GAC7B,SAAS,IAAI,KAAK,YAAY;GAC9B,cAAc,IAAI,KAAK,YAAY;GACnC,YAAY,4BAA4B;EAC1C;EAEA,MAAM,aAAa,eACjB,IAAI,KAAK,YAAY,kBAAkB,MACvC,YACF;EAEA,IAAI,eAAe,MACjB,IAAI,aAAa;OAEjB,IAAI,eAAe,CAAC,WAAW,KAAK,GAAG;EAGzC,KAAK,KAAK,GAAG;CACf;CACA,OAAO;AACT;AAEA,SAAS,eACP,MACA,cAC0B;CAC1B,KAAK,MAAM,cAAc,cAAc;EACrC,IAAI,SAAS,WAAW,SAAS,MAC/B,OAAO;EAET,IAAI,QAAQ,IAAI,KAAK,oBAAoB,UAAU,GACjD,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,oBAAoB,YAAwC;CACnE,OACE,WAAW,SAAS,cAClB,iDACI;AAEV;AAEA,SAAgB,mBACd,SACA,aACA,SAC2B;CAC3B,MAAM,EAAE,UAAU,iBAAiB,eAAe,SAAS,WAAW;CAEtE,OAAO,EAAE,MADI,2BAA2B,UAAU,YACtC,EAAE;AAChB;AAEA,eAAsB,uBACpB,SACA,cAC+B;CAC/B,MAAM,kBAAuC,CAAC;CAC9C,MAAM,yBAA+C,CAAC;CACtD,KAAK,MAAM,eAAe,cAAc;EACtC,MAAM,UAAU,MAAM,cAAc,aAAa,MAAM;EACvD,IAAI,YAAY,MAAM;GACpB,MAAM,YAAY,eAAe,SAAS,WAAW;GACrD,gBAAgB,KAAK,GAAG,UAAU,YAAY;GAC9C,uBAAuB,KAAK,SAAS;EACvC;CACF;CAEA,MAAM,SAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,wBAAwB;EACzC,MAAM,OAAO,2BAA2B,KAAK,UAAU,eAAe;EACtE,IAAI,KAAK,SAAS,GAChB,OAAO,KAAK;GAAE,aAAa,KAAK;GAAa;EAAK,CAAC;CAEvD;CACA,OAAO,OAAO,SAAS,SAAS;AAClC"}
+{"version":3,"file":"extract.js","names":[],"sources":["../../../../lib/modules/manager/glasskube/extract.ts"],"sourcesContent":["import { isFalsy } from '@sindresorhus/is';\nimport { readLocalFile } from '../../../util/fs/index.ts';\nimport { parseYaml } from '../../../util/yaml.ts';\nimport { GlasskubePackagesDatasource } from '../../datasource/glasskube-packages/index.ts';\nimport type {\n  ExtractConfig,\n  PackageDependency,\n  PackageFile,\n  PackageFileContent,\n} from '../types.ts';\nimport {\n  GlasskubeResource,\n  type Package,\n  type PackageRepository,\n} from './schema.ts';\nimport type { GlasskubeResources } from './types.ts';\n\nfunction parseResources(\n  content: string,\n  packageFile: string,\n): GlasskubeResources {\n  const resources: GlasskubeResource[] = parseYaml(content, {\n    customSchema: GlasskubeResource,\n    failureBehaviour: 'filter',\n  });\n\n  const packages: Package[] = [];\n  const repositories: PackageRepository[] = [];\n\n  for (const resource of resources) {\n    if (resource.kind === 'ClusterPackage' || resource.kind === 'Package') {\n      packages.push(resource);\n      // NOTE: the schema only parses these two kinds, so the implicit else\n      // never runs. A coverage-ignore hint cannot suppress it on an `else if`.\n    } else if (resource.kind === 'PackageRepository') {\n      repositories.push(resource);\n    }\n  }\n\n  return { packageFile, repositories, packages };\n}\n\nfunction resolvePackageDependencies(\n  packages: Package[],\n  repositories: PackageRepository[],\n): PackageDependency[] {\n  const deps: PackageDependency[] = [];\n  for (const pkg of packages) {\n    const dep: PackageDependency = {\n      depName: pkg.spec.packageInfo.name,\n      currentValue: pkg.spec.packageInfo.version,\n      datasource: GlasskubePackagesDatasource.id,\n    };\n\n    const repository = findRepository(\n      pkg.spec.packageInfo.repositoryName ?? null,\n      repositories,\n    );\n\n    if (repository === null) {\n      dep.skipReason = 'unknown-registry';\n    } else {\n      dep.registryUrls = [repository.spec.url];\n    }\n\n    deps.push(dep);\n  }\n  return deps;\n}\n\nfunction findRepository(\n  name: string | null,\n  repositories: PackageRepository[],\n): PackageRepository | null {\n  for (const repository of repositories) {\n    if (name === repository.metadata.name) {\n      return repository;\n    }\n    // v8 ignore else -- needs a manifest whose repositories match no name\n    if (isFalsy(name) && isDefaultRepository(repository)) {\n      return repository;\n    }\n  }\n  return null;\n}\n\nfunction isDefaultRepository(repository: PackageRepository): boolean {\n  return (\n    repository.metadata.annotations?.[\n      'packages.glasskube.dev/default-repository'\n    ] === 'true'\n  );\n}\n\nexport function extractPackageFile(\n  content: string,\n  packageFile: string,\n  _config?: ExtractConfig,\n): PackageFileContent | null {\n  const { packages, repositories } = parseResources(content, packageFile);\n  const deps = resolvePackageDependencies(packages, repositories);\n  return { deps };\n}\n\nexport async function extractAllPackageFiles(\n  _config: ExtractConfig,\n  packageFiles: string[],\n): Promise<PackageFile[] | null> {\n  const allRepositories: PackageRepository[] = [];\n  const glasskubeResourceFiles: GlasskubeResources[] = [];\n  for (const packageFile of packageFiles) {\n    const content = await readLocalFile(packageFile, 'utf8');\n    // v8 ignore else -- needs a listed package file that cannot be read\n    if (content !== null) {\n      const resources = parseResources(content, packageFile);\n      allRepositories.push(...resources.repositories);\n      glasskubeResourceFiles.push(resources);\n    }\n  }\n\n  const result: PackageFile[] = [];\n  for (const file of glasskubeResourceFiles) {\n    const deps = resolvePackageDependencies(file.packages, allRepositories);\n    if (deps.length > 0) {\n      result.push({ packageFile: file.packageFile, deps });\n    }\n  }\n  return result.length ? result : null;\n}\n"],"mappings":";;;;;;AAiBA,SAAS,eACP,SACA,aACoB;CACpB,MAAM,YAAiC,UAAU,SAAS;EACxD,cAAc;EACd,kBAAkB;CACpB,CAAC;CAED,MAAM,WAAsB,CAAC;CAC7B,MAAM,eAAoC,CAAC;CAE3C,KAAK,MAAM,YAAY,WACrB,IAAI,SAAS,SAAS,oBAAoB,SAAS,SAAS,WAC1D,SAAS,KAAK,QAAQ;MAGjB,IAAI,SAAS,SAAS,qBAC3B,aAAa,KAAK,QAAQ;CAI9B,OAAO;EAAE;EAAa;EAAc;CAAS;AAC/C;AAEA,SAAS,2BACP,UACA,cACqB;CACrB,MAAM,OAA4B,CAAC;CACnC,KAAK,MAAM,OAAO,UAAU;EAC1B,MAAM,MAAyB;GAC7B,SAAS,IAAI,KAAK,YAAY;GAC9B,cAAc,IAAI,KAAK,YAAY;GACnC,YAAY,4BAA4B;EAC1C;EAEA,MAAM,aAAa,eACjB,IAAI,KAAK,YAAY,kBAAkB,MACvC,YACF;EAEA,IAAI,eAAe,MACjB,IAAI,aAAa;OAEjB,IAAI,eAAe,CAAC,WAAW,KAAK,GAAG;EAGzC,KAAK,KAAK,GAAG;CACf;CACA,OAAO;AACT;AAEA,SAAS,eACP,MACA,cAC0B;CAC1B,KAAK,MAAM,cAAc,cAAc;EACrC,IAAI,SAAS,WAAW,SAAS,MAC/B,OAAO;;EAGT,IAAI,QAAQ,IAAI,KAAK,oBAAoB,UAAU,GACjD,OAAO;CAEX;CACA,OAAO;AACT;AAEA,SAAS,oBAAoB,YAAwC;CACnE,OACE,WAAW,SAAS,cAClB,iDACI;AAEV;AAEA,SAAgB,mBACd,SACA,aACA,SAC2B;CAC3B,MAAM,EAAE,UAAU,iBAAiB,eAAe,SAAS,WAAW;CAEtE,OAAO,EAAE,MADI,2BAA2B,UAAU,YACtC,EAAE;AAChB;AAEA,eAAsB,uBACpB,SACA,cAC+B;CAC/B,MAAM,kBAAuC,CAAC;CAC9C,MAAM,yBAA+C,CAAC;CACtD,KAAK,MAAM,eAAe,cAAc;EACtC,MAAM,UAAU,MAAM,cAAc,aAAa,MAAM;;EAEvD,IAAI,YAAY,MAAM;GACpB,MAAM,YAAY,eAAe,SAAS,WAAW;GACrD,gBAAgB,KAAK,GAAG,UAAU,YAAY;GAC9C,uBAAuB,KAAK,SAAS;EACvC;CACF;CAEA,MAAM,SAAwB,CAAC;CAC/B,KAAK,MAAM,QAAQ,wBAAwB;EACzC,MAAM,OAAO,2BAA2B,KAAK,UAAU,eAAe;EACtE,IAAI,KAAK,SAAS,GAChB,OAAO,KAAK;GAAE,aAAa,KAAK;GAAa;EAAK,CAAC;CAEvD;CACA,OAAO,OAAO,SAAS,SAAS;AAClC"}

package/dist/modules/manager/gomod/artifacts-extra.js

@@ -21,6 +21,7 @@ function getExtraDeps(goModBefore, goModAfter, excludeDeps) {
 	for (const [depName, currentValue] of Object.entries(rmDeps)) {
 		if (excludeDeps.includes(depName)) continue;
 		const newValue = addDeps[depName];
+		// v8 ignore else -- needs a removed dep that is not added back
 		if (newValue) result.push({
 			depName,
 			currentValue,