dependabot-python 0.119.6 → 0.120.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d06cc0493e384b4156b2882654820dce32fe9b86e8052941cb908ab9e413299e
-  data.tar.gz: fc6ae7eb998282fea39189db9260f5025dda112a885714d1580c56a411d857da
+  metadata.gz: 7f84ba5d0bdb90e654c519a81a07c00a9536ca7f4d1ce7045af92eefbc4eb0b7
+  data.tar.gz: 96846f159a4cab8763474dda96323fd14264f7c9388ca8f4058dd0b45380f7d5
 SHA512:
-  metadata.gz: ff7c653ba55c0ef7e9d3cabc41bdaf0cdbb9306f2953afcbdc09b11913b0c16e2d213bf09a4794a2c83266dbd0115acb1ffa737c5ba449691c45c2ed3b8c0f5b
-  data.tar.gz: 7d3d0ab6c559a9c9eb2c1680b48a57d9a6443af54b83aa3b3b686530e28548bbacd5413e349a138fcb8eec14dcaa1e0b849f4b607d7e616c6a4349315bf0f197
+  metadata.gz: 27185aef021099a80e202a2d7f7745c965e7dbda7c26f7df5b87426c6e7b05cb58c441a6ea64c3c492eaee54f5316928ee185f6e4e4d043700ff3640bccc9894
+  data.tar.gz: 8650057f2188022fd8dba60f1e780044cf50002c5497e3314eb48fcf8b7a6c8a9e98333ad3c2830495b34201c2f58b9e6313f7eb89645bb554e10698f4e8de9b

data/helpers/build

@@ -17,4 +17,4 @@ cp -r \
 
 cd "$install_dir"
 PYENV_VERSION=2.7.18 pyenv exec pip install -r "requirements.txt"
-PYENV_VERSION=3.8.5  pyenv exec pip install -r "requirements.txt"
+PYENV_VERSION=3.8.6  pyenv exec pip install -r "requirements.txt"

data/lib/dependabot/python/file_parser/pipfile_files_parser.rb

@@ -52,6 +52,10 @@ module Dependabot
               next if git_or_path_requirement?(req)
               next if pipfile_lock && !dependency_version(dep_name, req, group)
 
+              # Empty requirements are not allowed in Dependabot::Dependency and
+              # equivalent to "*" (latest available version)
+              req = "*" if req == ""
+
               dependencies <<
                 Dependency.new(
                   name: normalised_name(dep_name),

data/lib/dependabot/python/python_versions.rb

@@ -4,13 +4,13 @@ module Dependabot
   module Python
     module PythonVersions
       PRE_INSTALLED_PYTHON_VERSIONS = %w(
-        3.8.5 2.7.18
+        3.8.6 2.7.18
       ).freeze
 
       # Due to an OpenSSL issue we can only install the following versions in
       # the Dependabot container.
       SUPPORTED_VERSIONS = %w(
-        3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
+        3.8.6 3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
         3.7.8 3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
         3.6.9 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
         3.5.7 3.5.6 3.5.5 3.5.4 3.5.3

data/lib/dependabot/python/update_checker.rb

@@ -277,7 +277,7 @@ module Dependabot
         return false unless details
 
         index_response = Excon.get(
-          "https://pypi.org/pypi/#{normalised_name(details['name'])}/json",
+          "https://pypi.org/pypi/#{normalised_name(details['name'])}/json/",
           idempotent: true,
           **SharedHelpers.excon_defaults
         )

data/lib/dependabot/python/update_checker/index_finder.rb

@@ -8,7 +8,7 @@ module Dependabot
   module Python
     class UpdateChecker
       class IndexFinder
-        PYPI_BASE_URL = "https://pypi.python.org/simple/"
+        PYPI_BASE_URL = "https://pypi.org/simple/"
         ENVIRONMENT_VARIABLE_REGEX = /\$\{.+\}/.freeze
 
         def initialize(dependency_files:, credentials:)

data/lib/dependabot/python/update_checker/latest_version_finder.rb

@@ -216,8 +216,7 @@ module Dependabot
           Excon.get(
             index_url + normalised_name + "/",
             idempotent: true,
-            headers: { "Accept" => "text/html" },
-            **SharedHelpers.excon_defaults
+            **SharedHelpers.excon_defaults(headers: { "Accept" => "text/html" })
           )
         end
 
@@ -225,8 +224,7 @@ module Dependabot
           Excon.get(
             index_url,
             idempotent: true,
-            headers: { "Accept" => "text/html" },
-            **SharedHelpers.excon_defaults
+            **SharedHelpers.excon_defaults(headers: { "Accept" => "text/html" })
           )
         end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.119.6
+  version: 0.120.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-09-21 00:00:00.000000000 Z
+date: 2020-10-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.6
+        version: 0.120.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.119.6
+        version: 0.120.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.90.0
+        version: 0.91.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.90.0
+        version: 0.91.0
 - !ruby/object:Gem::Dependency
   name: vcr
   requirement: !ruby/object:Gem::Requirement