dependabot-python 0.118.7 → 0.118.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f389bc06b0e930d319d2625c8c9753bea89d54cd6f188e2b8f92a45eae5d9164
-  data.tar.gz: 7b9164faa17544c164c8c1a61a36aa1ef2f10b06d20d352a5bd2fb53e903b275
+  metadata.gz: 5d40b703af7755372ebc0e7313e0bb3e71760b73bfca3aeff321dc1d19914744
+  data.tar.gz: 991c0555715aa0f40f16e7dccce79b38733603962eafd39bbcfebf1f08da096a
 SHA512:
-  metadata.gz: dca688da7c4ce4f5b5bf0cd743bc3fc012fbdbc49e9d8e049e7fbd5d066d4e42c142b9fe4eb7b8a011ee669de95f2ef5b1d19258d8b1c6517aa8d43498cee543
-  data.tar.gz: 9da3df550234656e6e1159942f7f5230d4ff229881ea2f7158179f2b9112152e1828e2d027ec169c86399d2c7f4a8f1404d7d9c5ed110909af9b020916fd7bec
+  metadata.gz: f250e18d12e7056278813b7222b888c4ce080c293aa79c7e1cb72b5d5b5244953e69cf750836bfbf8585b7da08fd70571ae63cf4d0239bfba7df9f01927fe041
+  data.tar.gz: a6f2cdad3b38118dfd5125ee3864c2f8e0b2cfc966b098928376a5f7cdda74c331b3fe8a650ed106614c50f89b109aaccf047921e60a9126ca3c110948e0cb9b

data/helpers/build

@@ -17,4 +17,4 @@ cp -r \
 
 cd "$install_dir"
 PYENV_VERSION=2.7.18 pyenv exec pip install -r "requirements.txt"
-PYENV_VERSION=3.8.3  pyenv exec pip install -r "requirements.txt"
+PYENV_VERSION=3.8.5  pyenv exec pip install -r "requirements.txt"

data/helpers/requirements.txt

@@ -1,9 +1,9 @@
 pip==20.1.1
-pip-tools==5.2.1
+pip-tools==5.3.1
 hashin==0.15.0
 pipenv==2018.11.26
 pipfile==0.0.2
 poetry==1.0.9
 
 # Some dependencies will only install if Cython is present
-Cython==0.29.20
+Cython==0.29.21

data/lib/dependabot/python/authed_url_builder.rb

@@ -3,6 +3,7 @@
 module Dependabot
   module Python
     class AuthedUrlBuilder
+      # rubocop:disable Metrics/PerceivedComplexity
       def self.authed_url(credential:)
         token = credential.fetch("token", nil)
         url = credential.fetch("index-url")
@@ -16,8 +17,14 @@ module Dependabot
           else token
           end
 
+        if basic_auth_details.include?(":")
+          username, _, password = basic_auth_details.partition(":")
+          basic_auth_details = "#{CGI.escape(username)}:#{CGI.escape(password)}"
+        end
+
         url.sub("://", "://#{basic_auth_details}@")
       end
+      # rubocop:enable Metrics/PerceivedComplexity
     end
   end
 end

data/lib/dependabot/python/file_updater/pyproject_preparer.rb

@@ -36,6 +36,7 @@ module Dependabot
         end
 
         # rubocop:disable Metrics/PerceivedComplexity
+        # rubocop:disable Metrics/CyclomaticComplexity
         def freeze_top_level_dependencies_except(dependencies)
           return pyproject_content unless lockfile
 
@@ -53,6 +54,8 @@ module Dependabot
 
               next unless (locked_version = locked_details&.fetch("version"))
 
+              next if locked_details&.dig("source", "type") == "directory"
+
               if locked_details&.dig("source", "type") == "git"
                 poetry_object[key][dep_name] = {
                   "git" => locked_details&.dig("source", "url"),
@@ -69,6 +72,7 @@ module Dependabot
           TomlRB.dump(pyproject_object)
         end
         # rubocop:enable Metrics/PerceivedComplexity
+        # rubocop:enable Metrics/CyclomaticComplexity
 
         private
 

data/lib/dependabot/python/python_versions.rb

@@ -4,14 +4,14 @@ module Dependabot
   module Python
     module PythonVersions
       PRE_INSTALLED_PYTHON_VERSIONS = %w(
-        3.8.3 2.7.18
+        3.8.5 2.7.18
       ).freeze
 
       # Due to an OpenSSL issue we can only install the following versions in
       # the Dependabot container.
       SUPPORTED_VERSIONS = %w(
-        3.8.3 3.8.2 3.8.1 3.8.0
-        3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
+        3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
+        3.7.8 3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
         3.6.9 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
         3.5.7 3.5.6 3.5.5 3.5.4 3.5.3
         2.7.18 2.7.17 2.7.16 2.7.15 2.7.14 2.7.13

data/lib/dependabot/python/version.rb

@@ -114,7 +114,6 @@ module Dependabot
       # TODO: Delete this once we're using a version of Rubygems that includes
       # https://github.com/rubygems/rubygems/pull/2651
       #
-      # rubocop:disable Metrics/CyclomaticComplexity
       # rubocop:disable Metrics/PerceivedComplexity
       # rubocop:disable Style/CaseEquality
       # rubocop:disable Layout/LineLength
@@ -146,7 +145,6 @@ module Dependabot
 
         return 0
       end
-      # rubocop:enable Metrics/CyclomaticComplexity
       # rubocop:enable Metrics/PerceivedComplexity
       # rubocop:enable Style/CaseEquality
       # rubocop:enable Layout/LineLength

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.118.7
+  version: 0.118.13
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-07-02 00:00:00.000000000 Z
+date: 2020-08-19 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.7
+        version: 0.118.13
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.118.7
+        version: 0.118.13
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -94,34 +94,20 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '1.2'
-- !ruby/object:Gem::Dependency
-  name: rspec_junit_formatter
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.4'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.4'
 - !ruby/object:Gem::Dependency
   name: rubocop
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.85.0
+        version: 0.88.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.85.0
+        version: 0.88.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement
@@ -215,7 +201,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.1.2
 signing_key: 
 specification_version: 4
 summary: Python support for dependabot