Class: Dependabot::Gradle::Package::VersionReleaseDateFallbackFetcher

Inherits:
Object
  • Object
show all
Extended by:
T::Sig
Defined in:
lib/dependabot/gradle/package/version_release_date_fallback_fetcher.rb

Instance Method Summary collapse

Constructor Details

#initialize(dependency_name:, repositories:, forbidden_urls:, pom_url_builder:) ⇒ VersionReleaseDateFallbackFetcher

Returns a new instance of VersionReleaseDateFallbackFetcher.



22
23
24
25
26
27
28
29
30
 
# File 'lib/dependabot/gradle/package/version_release_date_fallback_fetcher.rb', line 22

def initialize(dependency_name:, repositories:, forbidden_urls:, pom_url_builder:)
  @dependency_name = dependency_name
  @repositories = repositories
  @forbidden_urls = forbidden_urls
  @pom_url_builder = pom_url_builder
  @cache = T.let({}, T::Hash[String, T.nilable(Time)])
  @preferred_repository_url = T.let(nil, T.nilable(String))
  @fallback_logged = T.let(false, T::Boolean)
end

Instance Method Details

#fetch(version) ⇒ Object 



33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
 
# File 'lib/dependabot/gradle/package/version_release_date_fallback_fetcher.rb', line 33

def fetch(version)
  return @cache[version] if @cache.key?(version)

  ordered_repositories.each do |repo|
    repository_url = repo.fetch("url")
    next unless repository_url.is_a?(String)

    pom_url = @pom_url_builder.call(repository_url, version)

    begin
      headers = repo["auth_headers"]
      headers = {} unless headers.is_a?(Hash)
      response = Dependabot::RegistryClient.head(url: pom_url, headers: headers)
      last_modified = response.headers["Last-Modified"] || response.headers["last-modified"]
      next unless last_modified

      released_at = Time.httpdate(last_modified)
      @preferred_repository_url = repository_url
      log_fallback_hit(version: version, repository_url: repository_url, released_at: released_at)
      @cache[version] = released_at
      return released_at
    rescue StandardError => e
      Dependabot.logger.debug(
        "Failed POM Last-Modified fallback for #{@dependency_name} version #{version} from " \
        "#{repository_url}: #{e.message}"
      )
    end
  end

  Dependabot.logger.debug(
    "No POM Last-Modified fallback release date found for #{@dependency_name} version #{version}"
  )
  @cache[version] = nil
end