dependabot-python 0.145.1 → 0.146.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 43680a853d322f60b9f01e6973bddb7c922c90148976bc8b97af2fef248312d0
-  data.tar.gz: 8b9210fcfc4bb2f21f9155b046ec6bf0a23ee7c4044bb365fce827acaf484d71
+  metadata.gz: b90290207375839ac3d47c8c2f41f2af0842b3ec2ce6c4af9498777e59696d39
+  data.tar.gz: e1f7316069d7fd6d9abef2e52ddf5fc3c2f30d9c594859cf5cf2b0330c2cff7f
 SHA512:
-  metadata.gz: de7a6969433ec15d01d74f0d5cc53ee248989d217dbbea7e38ffe58536e6f0fc2983d59cd0a0cab9e383896aea7e5c43f902e49196b04d682cec254bfc6344ae
-  data.tar.gz: 1cc31fd2b395897fbce5f16f4189afaa5d0df88077c8469d606f0ee4850b9c1009e8c74dfe1350d4189743c321d8bb202a73db1390de38846cc3ec89de8a31a0
+  metadata.gz: 56a4a550392f962ae7051827633415fa58e5c9ce8a7585dbbc94b2bbfe6caa462395b80e9fe360deeeae7ba8375a25ef92cff5ce38bbeee202c73b43ac2539a1
+  data.tar.gz: 4833cdc56f5c7b6f3977702b30b56879edeb822feef9557400526f6be6c00d31554bbcf28e9219eb023219e2460e7979fa2e0262ced6f28a34c4470096ef9c08

data/helpers/lib/parser.py

@@ -15,6 +15,7 @@ from pip._internal.req.constructors import (
 # https://github.com/pypa/pip/blob/0bb3ac87f5bb149bd75cceac000844128b574385/src/pip/_internal/req/req_file.py#L35
 COMMENT_RE = re.compile(r'(^|\s+)#.*$')
 
+
 def parse_requirements(directory):
     # Parse the requirements.txt
     requirement_packages = []

data/lib/dependabot/python/update_checker/latest_version_finder.rb

@@ -101,7 +101,9 @@ module Dependabot
         def filter_ignored_versions(versions_array)
           filtered = versions_array.
                      reject { |v| ignore_requirements.any? { |r| r.satisfied_by?(v) } }
-          raise Dependabot::AllVersionsIgnored if @raise_on_ignored && filtered.empty? && versions_array.any?
+          if @raise_on_ignored && filter_lower_versions(filtered).empty? && filter_lower_versions(versions_array).any?
+            raise Dependabot::AllVersionsIgnored
+          end
 
           filtered
         end

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -169,7 +169,7 @@ module Dependabot
 
               filenames_to_compile.each do |filename|
                 run_pip_compile_command(
-                  "pyenv exec pip-compile --allow-unsafe #{filename}"
+                  "pyenv exec pip-compile #{pip_compile_options(filename)} --allow-unsafe #{filename}"
                 )
               end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.145.1
+  version: 0.146.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-06 00:00:00.000000000 Z
+date: 2021-05-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.145.1
+        version: 0.146.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.145.1
+        version: 0.146.1
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.13.0
+        version: 1.14.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement