dependabot-python 0.156.0 → 0.156.5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8111d6d931e26121852366b8ec4285edb168b880c126cf5989a148e694944f13
-  data.tar.gz: 812be57d5546c3535ebd1dca5c82184c6f91ba0e3dd0dbfd17cbc61ea71d64f3
+  metadata.gz: 497eaf046a6cf155b746f6db4f42f5c994409f1e7fefab37cfa35ab3f734abd1
+  data.tar.gz: 50a32d32b6a2797c54cf120d44c9fa0d1d2b5914a440351a75abd5413195ffc1
 SHA512:
-  metadata.gz: 474c0f48a4aca4cd437f30d6cf59e775c5a7269a6af185851833bf6d3d5df248e60c2dfce8c918f5f29215ea067b4fcb39100d775f042b64624e6b36412e5bc5
-  data.tar.gz: 1147881012eb980101afcbc1ec7a8aa37ebdfc3add6556b2f0bcaab7c0128312b956abd6aad28770105bcb343853a25e8f7a022aca1f88aa6c52f8c8ed0a6a50
+  metadata.gz: a341078afe9d97b84e9c637007be438a3c97f924413b0510217cae130ab35b5f8c08bdf7018a3d145cb64b3be92d19a49f319dea2a053bee38347638eae05906
+  data.tar.gz: 03ed405fd2cd1f697dce49d4d01298c6bad10be42789168908bcbf3637baad3c3d8cc036a0a7914a7ed519d7953792d269e7876abaa1eea048754361367c83ea

data/helpers/requirements.txt

@@ -1,10 +1,10 @@
-pip==21.1.2
+pip==21.1.3
 pip-tools==6.2.0
 flake8==3.9.2
 hashin==0.15.0
 pipenv==2021.5.29
 pipfile==0.0.2
-poetry==1.1.6
+poetry==1.1.7
 wheel==0.36.2
 
 # Some dependencies will only install if Cython is present

data/lib/dependabot/python/file_fetcher.rb

@@ -5,6 +5,7 @@ require "toml-rb"
 require "dependabot/file_fetchers"
 require "dependabot/file_fetchers/base"
 require "dependabot/python/requirement_parser"
+require "dependabot/python/file_parser/poetry_files_parser"
 require "dependabot/errors"
 
 module Dependabot
@@ -385,7 +386,7 @@ module Dependabot
         return [] unless pyproject
 
         paths = []
-        %w(dependencies dev-dependencies).each do |dep_type|
+        Dependabot::Python::FileParser::PoetryFilesParser::POETRY_DEPENDENCY_TYPES.each do |dep_type|
           next unless parsed_pyproject.dig("tool", "poetry", dep_type)
 
           parsed_pyproject.dig("tool", "poetry", dep_type).each do |_, req|

data/lib/dependabot/python/file_parser/poetry_files_parser.rb

@@ -15,6 +15,9 @@ module Dependabot
       class PoetryFilesParser
         POETRY_DEPENDENCY_TYPES = %w(dependencies dev-dependencies).freeze
 
+        # https://python-poetry.org/docs/dependency-specification/
+        UNSUPPORTED_DEPENDENCY_TYPES = %w(git path url).freeze
+
         def initialize(dependency_files:)
           @dependency_files = dependency_files
         end
@@ -40,7 +43,7 @@ module Dependabot
 
             deps_hash.each do |name, req|
               next if normalise(name) == "python"
-              next if req.is_a?(Hash) && req.key?("git")
+              next if req.is_a?(Hash) && UNSUPPORTED_DEPENDENCY_TYPES.any? { |t| req.key?(t) }
 
               check_requirements(req)
 
@@ -69,7 +72,7 @@ module Dependabot
           dependencies = Dependabot::FileParsers::Base::DependencySet.new
 
           parsed_lockfile.fetch("package", []).each do |details|
-            next if details.dig("source", "type") == "git"
+            next if %w(directory git url).include?(details.dig("source", "type"))
 
             dependencies <<
               Dependency.new(

data/lib/dependabot/python/file_updater/poetry_file_updater.rb

@@ -132,7 +132,7 @@ module Dependabot
         end
 
         def lock_declaration_to_new_version!(poetry_object, dep)
-          %w(dependencies dev-dependencies).each do |type|
+          Dependabot::Python::FileParser::PoetryFilesParser::POETRY_DEPENDENCY_TYPES.each do |type|
             names = poetry_object[type]&.keys || []
             pkg_name = names.find { |nm| normalise(nm) == dep.name }
             next unless pkg_name
@@ -257,7 +257,8 @@ module Dependabot
         def pyproject_hash_for(pyproject_content)
           SharedHelpers.in_a_temporary_directory do |dir|
             SharedHelpers.with_git_configured(credentials: credentials) do
-              File.write(File.join(dir, "pyproject.toml"), pyproject_content)
+              write_temporary_dependency_files(pyproject_content)
+
               SharedHelpers.run_helper_subprocess(
                 command: "pyenv exec python #{python_helper_path}",
                 function: "get_pyproject_hash",

data/lib/dependabot/python/file_updater/pyproject_preparer.rb

@@ -44,7 +44,7 @@ module Dependabot
           poetry_object = pyproject_object["tool"]["poetry"]
           excluded_names = dependencies.map(&:name) + ["python"]
 
-          %w(dependencies dev-dependencies).each do |key|
+          Dependabot::Python::FileParser::PoetryFilesParser::POETRY_DEPENDENCY_TYPES.each do |key|
             next unless poetry_object[key]
 
             poetry_object.fetch(key).each do |dep_name, _|

data/lib/dependabot/python/update_checker/poetry_version_resolver.rb

@@ -263,7 +263,7 @@ module Dependabot
           pyproject_object = TomlRB.parse(pyproject_content)
           poetry_object = pyproject_object.dig("tool", "poetry")
 
-          %w(dependencies dev-dependencies).each do |type|
+          Dependabot::Python::FileParser::PoetryFilesParser::POETRY_DEPENDENCY_TYPES.each do |type|
             names = poetry_object[type]&.keys || []
             pkg_name = names.find { |nm| normalise(nm) == dependency.name }
             next unless pkg_name

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.156.0
+  version: 0.156.5
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-06-23 00:00:00.000000000 Z
+date: 2021-07-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.156.0
+        version: 0.156.5
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.156.0
+        version: 0.156.5
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.16.0
+        version: 1.18.0
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement