Puppet module manager offers deleted modules

[marcusdots]

Tell us more.

We recently ran into a bug where renovate proposed a deleted module/library.

This concerns Puppet module manager.
#33994

Puppet forge is a well known library hosting service.
Puppet module manager builds a URL to puppet forge using the code

https://github.com/renovatebot/renovate/blob/main/lib/modules/datasource/puppet-forge/index.ts#L27

and interpolates this URL
https://forge.puppet.com/v3/modules/puppet-nftables

In the example of puppet-nftables, there is a deleted version 6.2.0 and a current version 4.2.0.
Renovate should parse releases[0].deleted_at

Here is an excerpt from the data structure:

#https://forge.puppet.com/v3/modules/puppet-nftables
releases:
  0:
    version: "6.2.0"
    created_at: "2025-02-28 02:00:00 -0800"
    deleted_at: "2025-02-28 02:00:00 -0800"
  1:
    version: "4.2.0"
    created_at: "2025-02-28 02:00:00 -0800"
    deleted_at: null