dependabot-python 0.118.10 → 0.118.15

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 14c71fc46abb6cec42bd01050da39422df024ca241f49f24bc6b2f894831f96d
-  data.tar.gz: e9429e4ae27676d657c339a2e312fa9127a512e81dd2a2ab714c5a9384b5f197
+  metadata.gz: 98f692016f281c122e6018be16acab09fa3817a445b3865f3723cd3c85a10555
+  data.tar.gz: 5846928e7e4c0e6c19b20de3f03455e067c5f6bae34a640bb5a576989a7766fc
 SHA512:
-  metadata.gz: 64a0ab9e68edc09360ab3ce3d0b98b70791b2fe61df9d843a11a962620f1b4c1179c31e4021d3b585e212727aed5c31c0d073f4cd169a7053726a1a8d25c3871
-  data.tar.gz: b8846dfa2db83b34ee3995e090a254b2187232690622e0209d0ec0b19be1dad7b975b582ebb8acec37afa1a16c3e79abdf401b7769de3d8a2f0ea397f5a236d4
+  metadata.gz: f6bdf3e7c64edcdaeca914482a4f5a5af2e11c91555936090d6170daf3310fb720ceec75aaf02f66a63e5087a430362bf7b97cb5426506aafa352e853eeb449b
+  data.tar.gz: 5ebd6325a6fa0420ddf9d8683a17ffe3a1aee3c16e0fd24add26aa1c4f4c076ca9e768a25daea0cb25c53ee467d5c85184fa1b4a8cacb38336abe3ffa280d252

data/helpers/requirements.txt

@@ -1,5 +1,5 @@
 pip==20.1.1
-pip-tools==5.3.0
+pip-tools==5.3.1
 hashin==0.15.0
 pipenv==2018.11.26
 pipfile==0.0.2

data/lib/dependabot/python/authed_url_builder.rb

@@ -3,6 +3,7 @@
 module Dependabot
   module Python
     class AuthedUrlBuilder
+      # rubocop:disable Metrics/PerceivedComplexity
       def self.authed_url(credential:)
         token = credential.fetch("token", nil)
         url = credential.fetch("index-url")
@@ -16,10 +17,14 @@ module Dependabot
           else token
           end
 
-        basic_auth_details = basic_auth_details.gsub("@", "%40")
+        if basic_auth_details.include?(":")
+          username, _, password = basic_auth_details.partition(":")
+          basic_auth_details = "#{CGI.escape(username)}:#{CGI.escape(password)}"
+        end
 
         url.sub("://", "://#{basic_auth_details}@")
       end
+      # rubocop:enable Metrics/PerceivedComplexity
     end
   end
 end

data/lib/dependabot/python/python_versions.rb

@@ -11,7 +11,7 @@ module Dependabot
       # the Dependabot container.
       SUPPORTED_VERSIONS = %w(
         3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
-        3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
+        3.7.8 3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
         3.6.9 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
         3.5.7 3.5.6 3.5.5 3.5.4 3.5.3
         2.7.18 2.7.17 2.7.16 2.7.15 2.7.14 2.7.13

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.118.10
+  version: 0.118.15
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-08-03 00:00:00.000000000 Z
+date: 2020-08-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.10
+        version: 0.118.15
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.10
+        version: 0.118.15
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement