dependabot-python 0.108.1 → 0.108.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 41e8294ac601f6d0ac6591e89576793206e3e320acbb6280595e5a8900ffda45
-  data.tar.gz: 43e17cd7b3b0c1b02404ec7f89dc81357a9661b8fd84a176b67d5acb33e614a7
+  metadata.gz: 51d60d54ec3f354b29d3414f49081bf1fb490c12f7fa7170f925ac8dc22cce1b
+  data.tar.gz: 19919d89b53e0907780611e169d1f385bdf52933b2cfd647b43040b15a640d82
 SHA512:
-  metadata.gz: ec1855f82ef6dcb2f0af6b3da57ec04c87204383591dbf9ba510dc9479919042923fd6c265d353b6df1a48580cea0f99e052ef721f08bd53f0d6f0ead45855b0
-  data.tar.gz: 3fd230cc1164538f6e506eb9dcea7bb70956cd37e31fd0e408ba86c2a8f5d10c004c8f47e8d28dc4b5e8a0d797097741d2c0b309251028e8b8fcf919b7967034
+  metadata.gz: c0f02b5668db63ee597e8800781c463de18269ef2695bace65f56375cd34f78a34abf074d34d590e5eccd9883b2fd3d1b4e4dbff9d7c975f5dee8a11e729b3f4
+  data.tar.gz: 3ba1aa4853ec2e58e6b7d3ab4c91096be00bf6db58a9884bfed4552e9ad7aa50360a4b0ad258ca2c3c2fb913c1a8c08a3d77acf443dbe2695a2344fdd45483ea

data/lib/dependabot/python/file_fetcher.rb

@@ -12,7 +12,7 @@ module Dependabot
   module Python
     class FileFetcher < Dependabot::FileFetchers::Base
       CHILD_REQUIREMENT_REGEX = /^-r\s?(?<path>.*\.(?:txt|in))/.freeze
-      CONSTRAINT_REGEX = /^-c\s?(?<path>\..*)/.freeze
+      CONSTRAINT_REGEX = /^-c\s?(?<path>.*\.(?:txt|in))/.freeze
 
       def self.required_files_in?(filenames)
         return true if filenames.any? { |name| name.end_with?(".txt", ".in") }
@@ -242,7 +242,13 @@ module Dependabot
                                 child_requirement_txt_files
 
         constraints_paths = all_requirement_files.map do |req_file|
-          req_file.content.scan(CONSTRAINT_REGEX).flatten
+          current_dir = File.dirname(req_file.name)
+          paths = req_file.content.scan(CONSTRAINT_REGEX).flatten
+
+          paths.map do |path|
+            path = File.join(current_dir, path) unless current_dir == "."
+            path = Pathname.new(path).cleanpath.to_path
+          end
         end.flatten.uniq
 
         constraints_paths.map { |path| fetch_file_from_host(path) }
@@ -319,7 +325,7 @@ module Dependabot
 
         file.content.lines.all? do |line|
           next true if line.strip.empty?
-          next true if line.start_with?("#", "-r ", "-c ", "-e ")
+          next true if line.start_with?("#", "-r ", "-c ", "-e ", "--")
 
           line.match?(RequirementParser::VALID_REQ_TXT_REQUIREMENT)
         end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.108.1
+  version: 0.108.2
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.108.1
+        version: 0.108.2
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.108.1
+        version: 0.108.2
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement