fix #8704 check and validate not exist source

Author: lucemia

src/poetry/console/commands/check.py

@@ -1,6 +1,9 @@
 from __future__ import annotations
 
+from collections import defaultdict
+from functools import reduce
 from typing import TYPE_CHECKING
+from typing import Any
 
 from cleo.helpers import option
 
@@ -88,6 +91,37 @@ def _validate_readme(self, readme: str | list[str], poetry_file: Path) -> list[s
                 errors.append(f"Declared README file does not exist: {name}")
         return errors
 
+    def _validate_dependencies_source(self, config: dict[str, Any]) -> list[str]:
+        """Check dependencies's source are valid"""
+        dependency_sources: dict[str, set[str]] = defaultdict(set)
+        sources = {k["name"] for k in config.get("source", [])}
+        errors = []
+
+        dependency_declarations: list[dict[str, str | dict[str, str]]] = []
+        # scan dependencies and group dependencies settings in pyproject.toml
+        if "dependencies" in config:
+            dependency_declarations.append(config["dependencies"])
+
+        for group in config.get("group", {}).values():
+            if "dependencies" in group:
+                dependency_declarations.append(group["dependencies"])
+
+        for dependency_declaration in dependency_declarations:
+            for dependency, declaration in dependency_declaration.items():
+                if isinstance(declaration, dict) and "source" in declaration:
+                    dependency_sources[dependency].add(declaration["source"])
+
+        all_referenced_sources: set[str] = reduce(
+            lambda i, j: i | j, dependency_sources.values(), set()
+        )
+        if all_referenced_sources not in sources:
+            errors.extend([
+                f'Invalid source "{source}" referenced in dependencies.'
+                for source in all_referenced_sources - sources
+            ])
+
+        return errors
+
     def handle(self) -> int:
         from poetry.factory import Factory
         from poetry.pyproject.toml import PyProjectTOML
@@ -108,6 +142,8 @@ def handle(self) -> int:
             errors = self._validate_readme(config["readme"], poetry_file)
             check_result["errors"].extend(errors)
 
+        check_result["errors"] += self._validate_dependencies_source(config)
+
         # Verify that lock file is consistent
         if self.option("lock") and not self.poetry.locker.is_locked():
             check_result["errors"] += ["poetry.lock was not found."]

tests/console/commands/test_check.py

@@ -83,6 +83,7 @@ def test_check_invalid(
 Error: Project name (invalid) is same as one of its dependencies
 Error: Unrecognized classifiers: ['Intended Audience :: Clowns'].
 Error: Declared README file does not exist: never/exists.md
+Error: Invalid source "not-exists" referenced in dependencies.
 Error: poetry.lock was not found.
 Warning: A wildcard Python dependency is ambiguous.\
  Consider specifying a more explicit one.
@@ -98,7 +99,6 @@ def test_check_invalid(
         expected_template.format(schema_error=schema_error)
         for schema_error in (jsonschema_error, fastjsonschema_error)
     }
-
     assert tester.io.fetch_error() in expected
 
 

tests/fixtures/invalid_pyproject/pyproject.toml

@@ -17,3 +17,18 @@ classifiers = [
 python = "*"
 pendulum = {"version" = "^2.0.5", allows-prereleases = true}
 invalid = "1.0"
+invalid_source = { "version" = "*", source = "not-exists" }
+not_consistence_sources = { source = "not-consistence-1" }
+
+[tool.poetry.group.test]
+optional = true
+
+[tool.poetry.group.test.dependencies]
+not_consistence_sources = { source = "not-consistence-2" }
+
+
+[[tool.poetry.source]]
+name = "not-consistence-1"
+
+[[tool.poetry.source]]
+name = "not-consistence-2"