dependabot-python 0.169.6 → 0.170.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7be0818620b032a291ee939d1d83321e2f086dbf836aaf343f621842538e85d0
-  data.tar.gz: e668d6506ef21fda725e03bf9039f129fe958ed5030a6eadaa369e711f82bf96
+  metadata.gz: 51e14d8a363b2aa97b5ace28f81b8d6d85cdcbcd7ef8ab6bbd3c144e4a5cd550
+  data.tar.gz: a7f32263dbcd9611c8cc008270e8926a7963355ab57101c3cef285ca232255ac
 SHA512:
-  metadata.gz: dbfcce0ca3dc73b2fb9032fac32c9320a731e597d198799e6c0f28f59b0586880461e232411e4ac30fb522d7180c7f32229631d68d989f4f404542e63e4f856c
-  data.tar.gz: 865b2dc1e0bf8a6cae02979b7fe08e8047c71f451b50b45d6e50e6ac1557324d9d04bc7ae36f96248062e8759e4f887bfb5ac9145090bb860cfc474f3d2d5b68
+  metadata.gz: eb5afe040941df87dbeadddcd537d8fc35950a24c2f2753f82bcc8f8d9a5075f142a812b51b1b0daa0964a1128ff15cc4c762163d06e9765c7758b877da5d9ad
+  data.tar.gz: 2f0217dbe3d828dc276d8aebdb3f30e3861cea5835d149b08e4d3b23cc8c2f5549ec4317978512a737b6e8fd0f20d239ab02f2fd8b7636ce96a55f84b893f3ef

data/helpers/requirements.txt

@@ -5,7 +5,7 @@ hashin==0.15.0
 pipenv==2021.11.23
 pipfile==0.0.2
 poetry==1.1.12
-wheel==0.37.0
+wheel==0.37.1
 
 # Some dependencies will only install if Cython is present
-Cython==0.29.25
+Cython==0.29.26

data/lib/dependabot/python/file_updater/pyproject_preparer.rb

@@ -22,8 +22,18 @@ module Dependabot
           pyproject_object = TomlRB.parse(pyproject_content)
           poetry_object = pyproject_object.fetch("tool").fetch("poetry")
 
-          sources = pyproject_sources + config_variable_sources(credentials)
-          poetry_object["source"] = sources if sources.any?
+          sources_hash = pyproject_sources.map { |source| [source["url"], source] }.to_h
+
+          config_variable_sources(credentials).each do |source|
+            if sources_hash.key?(source["original_url"])
+              sources_hash[source["original_url"]]["url"] = source["url"]
+            else
+              source.delete("original_url")
+              sources_hash[source["url"]] = source
+            end
+          end
+
+          poetry_object["source"] = sources_hash.values unless sources_hash.empty?
 
           TomlRB.dump(pyproject_object)
         end
@@ -105,6 +115,7 @@ module Dependabot
             select { |cred| cred["type"] == "python_index" }.
             map do |c|
               {
+                "original_url" => c["index-url"],
                 "url" => AuthedUrlBuilder.authed_url(credential: c),
                 "name" => SecureRandom.hex[0..3],
                 "default" => c["replaces-base"]

data/lib/dependabot/python/python_versions.rb

@@ -11,7 +11,7 @@ module Dependabot
       # the Dependabot container.
       SUPPORTED_VERSIONS = %w(
         3.10.0
-        3.9.7 3.9.6 3.9.5 3.9.4 3.9.2 3.9.1 3.9.0
+        3.9.9 3.9.8 3.9.7 3.9.6 3.9.5 3.9.4 3.9.2 3.9.1 3.9.0
         3.8.12 3.8.11 3.8.10 3.8.9 3.8.8 3.8.7 3.8.6 3.8.5 3.8.4 3.8.3 3.8.2 3.8.1 3.8.0
         3.7.12 3.7.11 3.7.10 3.7.9 3.7.8 3.7.7 3.7.6 3.7.5 3.7.4 3.7.3 3.7.2 3.7.1 3.7.0
         3.6.15 3.6.14 3.6.13 3.6.12 3.6.11 3.6.10 3.6.9 3.6.8 3.6.7 3.6.6 3.6.5 3.6.4 3.6.3

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.169.6
+  version: 0.170.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-12-13 00:00:00.000000000 Z
+date: 2022-01-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,28 +16,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.6
+        version: 0.170.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.169.6
+        version: 0.170.1
 - !ruby/object:Gem::Dependency
-  name: byebug
+  name: debug
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '11.0'
+        version: 1.0.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '11.0'
+        version: 1.0.0
 - !ruby/object:Gem::Dependency
   name: gpgme
   requirement: !ruby/object:Gem::Requirement