Replace axios with @actions/http-client

Axios has issues with proxies & using the @actions client should behave
better in actions enviroments.

The built in retry behavior was not as robust so I've implemented
retries manually.

__tests__/api_client.test.ts

@@ -4,12 +4,13 @@ import {
   CredentialFetchingError,
   JobDetailsFetchingError
 } from '../src/api-client'
+import {HttpClientError} from '@actions/http-client'
 
 describe('ApiClient', () => {
-  const mockAxios: any = {
-    get: jest.fn()
+  const mockHttpClient: any = {
+    getJson: jest.fn()
   }
-  const api = new ApiClient(mockAxios, {
+  const api = new ApiClient(mockHttpClient, {
     jobId: 1,
     jobToken: 'xxx',
     credentialsToken: 'yyy',
@@ -37,7 +38,10 @@ describe('ApiClient', () => {
         }
       }
     }
-    mockAxios.get.mockResolvedValue({status: 200, data: apiResponse})
+    mockHttpClient.getJson.mockResolvedValue({
+      statusCode: 200,
+      result: apiResponse
+    })
 
     const jobDetails = await api.getJobDetails()
     expect(jobDetails['allowed-updates'].length).toBe(1)
@@ -54,32 +58,25 @@ describe('ApiClient', () => {
         }
       ]
     }
-    mockAxios.get.mockRejectedValue({
-      isAxiosError: true,
-      response: {status: 400, data: apiResponse}
-    })
+    mockHttpClient.getJson.mockRejectedValue(
+      new HttpClientError(JSON.stringify(apiResponse), 400)
+    )
 
     await expect(api.getJobDetails()).rejects.toThrowError(
       new JobDetailsFetchingError(
-        'fetching job details: received code 400: {"errors":[{"status":400,"title":"Bad Request","detail":"Update job has already been processed"}]}'
+        'fetching job details: unexpected status code: 400: {"errors":[{"status":400,"title":"Bad Request","detail":"Update job has already been processed"}]}'
       )
     )
   })
 
   test('job details with certificate error', async () => {
-    const errorObject = {
-      isAxiosError: true,
-      message: 'unable to get local issuer certificate',
-      name: 'Error',
-      stack: 'Error: unable to get local issuer certificate...',
-      status: null
-    }
-
-    mockAxios.get.mockRejectedValue(errorObject)
+    mockHttpClient.getJson.mockRejectedValue(
+      new Error('unable to get local issuer certificate')
+    )
 
     await expect(api.getJobDetails()).rejects.toThrowError(
       new JobDetailsFetchingError(
-        'fetching job details: unable to get local issuer certificate'
+        'fetching job details: Error: unable to get local issuer certificate'
       )
     )
   })
@@ -121,7 +118,10 @@ describe('ApiClient', () => {
         }
       }
     }
-    mockAxios.get.mockResolvedValue({status: 200, data: apiResponse})
+    mockHttpClient.getJson.mockResolvedValue({
+      statusCode: 200,
+      result: apiResponse
+    })
     jest.spyOn(core, 'setSecret').mockImplementation(jest.fn())
 
     const jobCredentials = await api.getCredentials()
@@ -145,13 +145,12 @@ describe('ApiClient', () => {
       ]
     }
 
-    mockAxios.get.mockRejectedValue({
-      isAxiosError: true,
-      response: {status: 422, data: apiResponse}
-    })
+    mockHttpClient.getJson.mockRejectedValue(
+      new HttpClientError(JSON.stringify(apiResponse), 422)
+    )
     await expect(api.getCredentials()).rejects.toThrowError(
       new CredentialFetchingError(
-        'fetching credentials: received code 422: {"errors":[{"status":422,"title":"Secret Not Found","detail":"MISSING_SECRET_NAME"}]}'
+        'fetching credentials: unexpected status code: 422: {"errors":[{"status":422,"title":"Secret Not Found","detail":"MISSING_SECRET_NAME"}]}'
       )
     )
   })

__tests__/updater-integration.test.ts

@@ -1,5 +1,4 @@
-import axios from 'axios'
-import axiosRetry from 'axios-retry'
+import * as httpClient from '@actions/http-client'
 import fs from 'fs'
 import path from 'path'
 import {ApiClient} from '../src/api-client'
@@ -43,13 +42,9 @@ integration('Updater', () => {
     workingDirectory
   )
 
-  const client = axios.create({baseURL: dependabotApiUrl})
-  axiosRetry(client, {
-    retryDelay: axiosRetry.exponentialDelay, // eslint-disable-line @typescript-eslint/unbound-method
-    retryCondition: e => {
-      return axiosRetry.isNetworkError(e) || axiosRetry.isRetryableError(e)
-    }
-  })
+  const client = new httpClient.HttpClient(
+    'github/dependabot-action integration'
+  )
   const apiClient = new ApiClient(client, params)
 
   beforeAll(async () => {
@@ -86,10 +81,10 @@ integration('Updater', () => {
 
     // NOTE: This will not work when running against the actual dependabot-api
     // Checks if the pr was persisted in the fake json-server
-    const res: any = await client.get('/pull_requests/1')
+    const res = await client.getJson<any>(`${dependabotApiUrl}/pull_requests/1`)
 
-    expect(res.status).toEqual(200)
-    expect(res.data['pr-title']).toEqual(
+    expect(res.statusCode).toEqual(200)
+    expect(res.result['pr-title']).toEqual(
       'Bump fetch-factory from 0.0.1 to 0.2.1'
     )
   })