feat(gitlab): save in lock the http error cause

Author: e-marchand

packageManager/src/dependency/Dependency.ts

@@ -123,6 +123,38 @@ export abstract class Dependency {
         lock.warnings.push({ message });
     }
 
+    /**
+     * Extract a concise nested error cause for persistence in lock entries.
+     */
+    protected getErrorCause(error: unknown): string | undefined {
+        if (!(error instanceof Error)) {
+            return undefined;
+        }
+
+        const nestedCause = error.cause instanceof Error
+            ? error.cause.message
+            : typeof error.cause === 'string'
+                ? error.cause
+                : undefined;
+
+        if (nestedCause && nestedCause !== error.message) {
+            return `${error.message}: ${nestedCause}`;
+        }
+
+        return error.message || undefined;
+    }
+
+    /**
+     * Persist the underlying error as a second lock entry when it adds detail.
+     */
+    protected addOriginalError(lock: LockEntry, summaryMessage: string, error: unknown): void {
+        const originalMessage = this.getErrorCause(error);
+        if (!originalMessage || originalMessage === summaryMessage) {
+            return;
+        }
+        this.addError(lock, originalMessage);
+    }
+
     /**
      * Resolve version/tag to download
      */

packageManager/src/dependency/GithubDependency.ts

@@ -176,6 +176,7 @@ export class GitHubDependency extends Dependency {
     } else {
       this.addError(lock, message);
     }
+    this.addOriginalError(lock, message, error);
   }
 
 

packageManager/src/dependency/GitlabDependency.ts

@@ -195,6 +195,7 @@ export class GitLabDependency extends Dependency {
     } else {
       this.addError(lock, message);
     }
+    this.addOriginalError(lock, message, error);
   }
 
   /**

packageManager/test/gitlab-dependency.test.ts

@@ -309,6 +309,23 @@ describe('GitLabDependency', () => {
       expect(lock.errors?.[0].message).toBe('Unable to find a release for group/project on GitLab satisfying version ^99.0.0');
     });
 
+    it('should preserve the original fetch error cause when release resolution throws', async () => {
+      const spec: DependencySpec = { gitlab: 'group/project', version: 'highest' };
+      const dep = new GitLabDependency(spec, true);
+
+      const tlsError = new Error('unable to verify the first certificate');
+      const fetchError = new TypeError('fetch failed', { cause: tlsError });
+      mockFetcher.getReleases = vi.fn().mockRejectedValue(fetchError);
+
+      const result = await dep.fetch(
+        new Version('20.0.0'), mockEnv, lock, mockFetcher, mockCacheManager,
+      );
+
+      expect(result).toBe(false);
+      expect(lock.errors?.[0].message).toBe('Unable to find a release for group/project on GitLab satisfying version highest');
+      expect(lock.errors?.[1].message).toBe('fetch failed: unable to verify the first certificate');
+    });
+
     it('should skip fetch when dependency is already cached', async () => {
       const spec: DependencySpec = { gitlab: 'group/project', version: '^1.0.0' };
       const dep = new GitLabDependency(spec, true);

packageManager/vitest.live.config.ts

@@ -0,0 +1,9 @@
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  test: {
+    globals: true,
+    environment: 'node',
+    include: ['test/live/package-manager.live.ts'],
+  },
+});