dependabot-python 0.120.0 → 0.120.5

Sign up to get free protection for your applications and to get access to all the features.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/build +1 -1
  3. data/helpers/requirements.txt +1 -1
  4. data/lib/dependabot/python/file_fetcher.rb +2 -2
  5. data/lib/dependabot/python/file_parser/pipfile_files_parser.rb +4 -0
  6. data/lib/dependabot/python/python_versions.rb +3 -3
  7. data/lib/dependabot/python/update_checker.rb +1 -1
  8. data/lib/dependabot/python/update_checker/index_finder.rb +1 -1
  9. data/lib/dependabot/python/update_checker/latest_version_finder.rb +2 -4
  10. metadata +6 -6
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: ebb3e784984213390eeafb9938118040d8c141715d1bb2fc0ed9c97b1774ed49
4
- data.tar.gz: fa54da18855fb2e9d3360ee9c61c474a09f1cd8ccf1c9fa131ecc4b7a05a8241
3
+ metadata.gz: b2e60d4c9fd4fbbf83a08c5b78f592b478e46ec7f2ef78cbb74dedf9c8e22c73
4
+ data.tar.gz: 427f6b15c4a37c85c3651d0a26a3bc0b1225f55a924fa4118d6b73a72ae594b3
5
5
  SHA512:
6
- metadata.gz: b2fc8d0ccd8095ddd9c305bc74710f29aa474971021897b0dfb71310fe33911af6e7c25e88a2060ebf0e88ebdb0426ea32b85077406c9537bf9127c26f1c4ca9
7
- data.tar.gz: 58ba8bfc8d35d93f6ec957a1edd93821b4bc0836a20024c270a392de22d4b363dc24bb29557baa4817dfcceedd0ac7fd9f82c1cb070c2d9880d76b1257de8df5
6
+ metadata.gz: b045278d767a4e371106fb555fe298b2176797314c75123eb646cd4081d24ee3d8156c7ad863b8fe2325cc73551349b8dcb1213b87ea61773798a49495c879ea
7
+ data.tar.gz: daf9682a1d39f58c53809c4bbafdff017c3ab354c48f6998b6ed4e5291f82d2f30185295ca730437a9778022a3db394df211afa0bec0fad7c0fa5c5481a6c994
data/helpers/build CHANGED
@@ -17,4 +17,4 @@ cp -r \
17
17
 
18
18
  cd "$install_dir"
19
19
  PYENV_VERSION=2.7.18 pyenv exec pip install -r "requirements.txt"
20
- PYENV_VERSION=3.8.5 pyenv exec pip install -r "requirements.txt"
20
+ PYENV_VERSION=3.8.6 pyenv exec pip install -r "requirements.txt"
data/helpers/requirements.txt CHANGED
@@ -3,7 +3,7 @@ pip-tools==5.3.1
3
3
  hashin==0.15.0
4
4
  pipenv==2018.11.26
5
5
  pipfile==0.0.2
6
- poetry==1.0.10
6
+ poetry==1.1.1
7
7
 
8
8
  # Some dependencies will only install if Cython is present
9
9
  Cython==0.29.21
data/lib/dependabot/python/file_fetcher.rb CHANGED
@@ -166,7 +166,7 @@ module Dependabot
166
166
  repo_contents.
167
167
  select { |f| f.type == "file" }.
168
168
  select { |f| f.name.end_with?(".txt", ".in") }.
169
- reject { |f| f.size > 100_000 }.
169
+ reject { |f| f.size > 200_000 }.
170
170
  map { |f| fetch_file_from_host(f.name) }.
171
171
  select { |f| requirements_file?(f) }.
172
172
  each { |f| @req_txt_and_in_files << f }
@@ -186,7 +186,7 @@ module Dependabot
186
186
  repo_contents(dir: relative_reqs_dir).
187
187
  select { |f| f.type == "file" }.
188
188
  select { |f| f.name.end_with?(".txt", ".in") }.
189
- reject { |f| f.size > 100_000 }.
189
+ reject { |f| f.size > 200_000 }.
190
190
  map { |f| fetch_file_from_host("#{relative_reqs_dir}/#{f.name}") }.
191
191
  select { |f| requirements_file?(f) }
192
192
  end
data/lib/dependabot/python/file_parser/pipfile_files_parser.rb CHANGED
@@ -52,6 +52,10 @@ module Dependabot
52
52
  next if git_or_path_requirement?(req)
53
53
  next if pipfile_lock && !dependency_version(dep_name, req, group)
54
54
 
55
+ # Empty requirements are not allowed in Dependabot::Dependency and
56
+ # equivalent to "*" (latest available version)
57
+ req = "*" if req == ""
58
+
55
59
  dependencies <<
56
60
  Dependency.new(
57
61
  name: normalised_name(dep_name),
data/lib/dependabot/python/python_versions.rb CHANGED
@@ -4,14 +4,14 @@ module Dependabot
4
4
  module Python
5
5
  module PythonVersions
6
6
  PRE_INSTALLED_PYTHON_VERSIONS = %w(
7
- 3.8.5 2.7.18
7
+ 3.8.6 2.7.18
8
8
  ).freeze
9
9
 
10
10
  # Due to an OpenSSL issue we can only install the following versions in
11
11
  # the Dependabot container.
12
12
  SUPPORTED_VERSIONS = %w(
13
- 3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
14
- 3.7.8 3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
13
+ 3.8.6 3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
14
+ 3.7.9 3.7.8 3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
15
15
  3.6.9 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3 3.6.2 3.6.1 3.6.0
16
16
  3.5.7 3.5.6 3.5.5 3.5.4 3.5.3
17
17
  2.7.18 2.7.17 2.7.16 2.7.15 2.7.14 2.7.13
data/lib/dependabot/python/update_checker.rb CHANGED
@@ -277,7 +277,7 @@ module Dependabot
277
277
  return false unless details
278
278
 
279
279
  index_response = Excon.get(
280
- "https://pypi.org/pypi/#{normalised_name(details['name'])}/json",
280
+ "https://pypi.org/pypi/#{normalised_name(details['name'])}/json/",
281
281
  idempotent: true,
282
282
  **SharedHelpers.excon_defaults
283
283
  )
data/lib/dependabot/python/update_checker/index_finder.rb CHANGED
@@ -8,7 +8,7 @@ module Dependabot
8
8
  module Python
9
9
  class UpdateChecker
10
10
  class IndexFinder
11
- PYPI_BASE_URL = "https://pypi.python.org/simple/"
11
+ PYPI_BASE_URL = "https://pypi.org/simple/"
12
12
  ENVIRONMENT_VARIABLE_REGEX = /\$\{.+\}/.freeze
13
13
 
14
14
  def initialize(dependency_files:, credentials:)
data/lib/dependabot/python/update_checker/latest_version_finder.rb CHANGED
@@ -216,8 +216,7 @@ module Dependabot
216
216
  Excon.get(
217
217
  index_url + normalised_name + "/",
218
218
  idempotent: true,
219
- headers: { "Accept" => "text/html" },
220
- **SharedHelpers.excon_defaults
219
+ **SharedHelpers.excon_defaults(headers: { "Accept" => "text/html" })
221
220
  )
222
221
  end
223
222
 
@@ -225,8 +224,7 @@ module Dependabot
225
224
  Excon.get(
226
225
  index_url,
227
226
  idempotent: true,
228
- headers: { "Accept" => "text/html" },
229
- **SharedHelpers.excon_defaults
227
+ **SharedHelpers.excon_defaults(headers: { "Accept" => "text/html" })
230
228
  )
231
229
  end
232
230
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-python
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.120.0
4
+ version: 0.120.5
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-09-24 00:00:00.000000000 Z
11
+ date: 2020-10-06 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.120.0
19
+ version: 0.120.5
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.120.0
26
+ version: 0.120.5
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
100
100
  requirements:
101
101
  - - "~>"
102
102
  - !ruby/object:Gem::Version
103
- version: 0.91.0
103
+ version: 0.92.0
104
104
  type: :development
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
108
  - - "~>"
109
109
  - !ruby/object:Gem::Version
110
- version: 0.91.0
110
+ version: 0.92.0
111
111
  - !ruby/object:Gem::Dependency
112
112
  name: vcr
113
113
  requirement: !ruby/object:Gem::Requirement