dependabot-python 0.154.3 → 0.156.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (4) hide show
  1. checksums.yaml +4 -4
  2. data/helpers/requirements.txt +1 -1
  3. data/lib/dependabot/python/update_checker/latest_version_finder.rb +4 -6
  4. metadata +4 -4
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 1da93d4eb6146f865cad7fb4b6349205eafd8ef3a52afdc9e3b8f4fb2111d7f1
4
- data.tar.gz: 4353bb4e2cf49fdc556c40e0278081ecf8ab2632edd6f670498dcfe5ec206615
3
+ metadata.gz: 8111d6d931e26121852366b8ec4285edb168b880c126cf5989a148e694944f13
4
+ data.tar.gz: 812be57d5546c3535ebd1dca5c82184c6f91ba0e3dd0dbfd17cbc61ea71d64f3
5
5
  SHA512:
6
- metadata.gz: 11345226a254f2ae64c9a66f9eec7e253e92234ab137f382c97d2aadbad0ff3b3b8def85afd66dd2e93797443678b2c63ab634cfd9276437061c18ce3f69b70d
7
- data.tar.gz: ba28dda6131f3d9a87cfe7055974028d9b5a620794a59a69cce5cc65eae5b438956a33de91dd1aa933d5204b08901589403ebd5b5a3d3db0798a8721bb417ef7
6
+ metadata.gz: 474c0f48a4aca4cd437f30d6cf59e775c5a7269a6af185851833bf6d3d5df248e60c2dfce8c918f5f29215ea067b4fcb39100d775f042b64624e6b36412e5bc5
7
+ data.tar.gz: 1147881012eb980101afcbc1ec7a8aa37ebdfc3add6556b2f0bcaab7c0128312b956abd6aad28770105bcb343853a25e8f7a022aca1f88aa6c52f8c8ed0a6a50
data/helpers/requirements.txt CHANGED
@@ -1,5 +1,5 @@
1
1
  pip==21.1.2
2
- pip-tools==6.1.0
2
+ pip-tools==6.2.0
3
3
  flake8==3.9.2
4
4
  hashin==0.15.0
5
5
  pipenv==2021.5.29
data/lib/dependabot/python/update_checker/latest_version_finder.rb CHANGED
@@ -6,6 +6,7 @@ require "nokogiri"
6
6
 
7
7
  require "dependabot/dependency"
8
8
  require "dependabot/python/update_checker"
9
+ require "dependabot/update_checkers/version_filters"
9
10
  require "dependabot/shared_helpers"
10
11
  require "dependabot/python/authed_url_builder"
11
12
  require "dependabot/python/name_normaliser"
@@ -71,9 +72,11 @@ module Dependabot
71
72
  versions = filter_yanked_versions(versions)
72
73
  versions = filter_unsupported_versions(versions, python_version)
73
74
  versions = filter_prerelease_versions(versions)
74
- versions = filter_vulnerable_versions(versions)
75
+ versions = Dependabot::UpdateCheckers::VersionFilters.filter_vulnerable_versions(versions,
76
+ security_advisories)
75
77
  versions = filter_ignored_versions(versions)
76
78
  versions = filter_lower_versions(versions)
79
+
77
80
  versions.min
78
81
  end
79
82
 
@@ -108,11 +111,6 @@ module Dependabot
108
111
  filtered
109
112
  end
110
113
 
111
- def filter_vulnerable_versions(versions_array)
112
- versions_array.
113
- reject { |v| security_advisories.any? { |a| a.vulnerable?(v) } }
114
- end
115
-
116
114
  def filter_lower_versions(versions_array)
117
115
  return versions_array unless dependency.version && version_class.correct?(dependency.version)
118
116
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-python
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.154.3
4
+ version: 0.156.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-06-21 00:00:00.000000000 Z
11
+ date: 2021-06-23 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.154.3
19
+ version: 0.156.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.154.3
26
+ version: 0.156.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: byebug
29
29
  requirement: !ruby/object:Gem::Requirement