dependabot-python 0.123.1 → 0.124.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f25ffbe2503eba0b166b9fac21403d6bf6171831740bf98dfd75e095047b1e58
-  data.tar.gz: 56cd73f4bdad9385810de13bf6c0243601a1e8cc9fe9d222914254beea0bff6d
+  metadata.gz: 5e0cbbddbd5c2a0b0b44e3b2ef3324313160eab033c8e489668118f73832a102
+  data.tar.gz: e0b1d9a7dd001d92937020f467482153ed72bbe9577d4670eadd646b12bf46b0
 SHA512:
-  metadata.gz: e19faffde7a83cc1ea13241335be73b620c912e59d27eb4dffa0828d259c4f127f385b6e3802a67334f672f834b62e383a00f51876ccecc8d649627e7ac20715
-  data.tar.gz: 223f13c9aeb31321074ba3938f6972b115ff92b4d8f508cfbcfaad6d44ef5f695568431fd88a9239b870a1ffaa1df1e54e42c72e6f2666e83b09bf5d9836c221
+  metadata.gz: bf3f8a327db545daaaad46d839037c6c338a7a0ae434d00eb0918404bbc38471681fa1cf1127a3274842b9e347e0b0e41b526d8361e93f98e3033a63fc768068
+  data.tar.gz: 270a082b1045d7f0f056b7adcaf5d6e79c29aa457a382b65c47f5133c1abca8478411d0e3082dc75727277cbd810c188129fc4b04e690ea015563669cdf1dce4

data/helpers/requirements.txt

@@ -3,7 +3,7 @@ pip-tools==5.3.1
 hashin==0.15.0
 pipenv==2018.11.26
 pipfile==0.0.2
-poetry==1.1.2
+poetry==1.1.4
 
 # Some dependencies will only install if Cython is present
 Cython==0.29.21

data/lib/dependabot/python/update_checker.rb

@@ -74,6 +74,10 @@ module Dependabot
           end
       end
 
+      def lowest_security_fix_version
+        latest_version_finder.lowest_security_fix_version
+      end
+
       def lowest_resolvable_security_fix_version
         raise "Dependency not vulnerable!" unless vulnerable?
 
@@ -119,7 +123,7 @@ module Dependabot
       end
 
       def fetch_lowest_resolvable_security_fix_version
-        fix_version = latest_version_finder.lowest_security_fix_version
+        fix_version = lowest_security_fix_version
         return latest_resolvable_version if fix_version.nil?
 
         if resolver_type == :requirements

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.123.1
+  version: 0.124.4
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-10-19 00:00:00.000000000 Z
+date: 2020-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.123.1
+        version: 0.124.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.123.1
+        version: 0.124.4
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -229,7 +229,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: 2.5.0
 requirements: []
-rubygems_version: 3.1.2
+rubygems_version: 3.1.4
 signing_key: 
 specification_version: 4
 summary: Python support for dependabot