dependabot-python 0.180.5 → 0.182.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f390d4d853717fb0dc633d4ff9bbfa156ae065e4dc5e349cf8abf24ead8ecc6f
-  data.tar.gz: 9dfafb2691a10efcd0d03738fca2ad825c8ebe907800445b70cf0a2ff223ccef
+  metadata.gz: 1e6e576cb66e22b2e3a271572a2d33493e1e8bc79a3ed33e25e93ae80c2b10f5
+  data.tar.gz: cf2ee5d7f5d9a7a3f25ad0a0156f322db1ddc6915020a17eae4b7d3115ead8d0
 SHA512:
-  metadata.gz: ab463fa96cc1c616282e085b9ad922e75b938416df1346137a59f342a2606668b2b0b9456c938cc34a0ae40ce7e1d3ab881a769e4734abfe12ad950eed4c7710
-  data.tar.gz: d7868f8a28be4060ed86351963e4d97e6b5d0044232cd4811a9208e7d41e73941062fbf1deeb205cdf39c5467203e513cef54311712194f192b11257453d4f1f
+  metadata.gz: 490c04d39057911c7c00e0592cd090d06598ccd838ba4204e757f3f7350e98a88ff721cecc4466b9cff5bb7231801cd334073916fcb86ab8b8fb6cb4c3947c19
+  data.tar.gz: 8ec6c2c0361919bc954aa9b0f4e986b5fb5193560e3d53d213d5d9febd3a275a45bac902efec84503ebc38c642553e8acbed6a7f1030e8241e787a4fcda255c4

data/helpers/requirements.txt

@@ -1,8 +1,8 @@
-pip==22.0.4
-pip-tools==6.5.1
+pip>=21.3.1  # Allow earlier versions to retain python 3.6 support
+pip-tools>=6.4.0  # Allow earlier versions to retain python 3.6 support
 flake8==4.0.1
 hashin==0.17.0
-pipenv==2022.3.28
+pipenv==2022.4.8
 pipfile==0.0.2
 poetry==1.1.13
 wheel==0.37.1

data/lib/dependabot/python/file_parser.rb

@@ -72,12 +72,6 @@ module Dependabot
       def requirement_dependencies
         dependencies = DependencySet.new
         parsed_requirement_files.each do |dep|
-          # This isn't ideal, but currently the FileUpdater won't update
-          # deps that appear in a requirements.txt and Pipenv / Poetry
-          # and *aren't* a straight lockfile for Pipenv / Poetry
-          next if included_in_pipenv_deps?(normalised_name(dep["name"]))
-          next if included_in_poetry_deps?(normalised_name(dep["name"]))
-
           # If a requirement has a `<`, `<=` or '==' marker then updating it is
           # probably blocked. Ignore it.
           next if blocking_marker?(dep)

data/lib/dependabot/python/requirement.rb

@@ -6,7 +6,7 @@ require "dependabot/python/version"
 module Dependabot
   module Python
     class Requirement < Gem::Requirement
-      OR_SEPARATOR = /(?<=[a-zA-Z0-9*])\s*\|+/.freeze
+      OR_SEPARATOR = /(?<=[a-zA-Z0-9)*])\s*\|+/.freeze
 
       # Add equality and arbitrary-equality matchers
       OPS = OPS.merge(
@@ -20,11 +20,17 @@ module Dependabot
 
       PATTERN_RAW = "\\s*(#{quoted})?\\s*(#{version_pattern})\\s*"
       PATTERN = /\A#{PATTERN_RAW}\z/.freeze
+      PARENS_PATTERN = /\A\(([^)]+)\)\z/.freeze
 
       def self.parse(obj)
         return ["=", Python::Version.new(obj.to_s)] if obj.is_a?(Gem::Version)
 
-        unless (matches = PATTERN.match(obj.to_s))
+        line = obj.to_s
+        if (matches = PARENS_PATTERN.match(line))
+          line = matches[1]
+        end
+
+        unless (matches = PATTERN.match(line))
           msg = "Illformed requirement [#{obj.inspect}]"
           raise BadRequirementError, msg
         end
@@ -41,6 +47,10 @@ module Dependabot
       def self.requirements_array(requirement_string)
         return [new(nil)] if requirement_string.nil?
 
+        if (matches = PARENS_PATTERN.match(requirement_string))
+          requirement_string = matches[1]
+        end
+
         requirement_string.strip.split(OR_SEPARATOR).map do |req_string|
           new(req_string.strip)
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.180.5
+  version: 0.182.1
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-04-07 00:00:00.000000000 Z
+date: 2022-04-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.180.5
+        version: 0.182.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.180.5
+        version: 0.182.1
+- !ruby/object:Gem::Dependency
+  name: debase
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.4.1
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.4.1
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +114,28 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.26.0
+        version: 1.27.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.27.0
+- !ruby/object:Gem::Dependency
+  name: ruby-debug-ide
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.7.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.26.0
+        version: 0.7.3
 - !ruby/object:Gem::Dependency
   name: simplecov
   requirement: !ruby/object:Gem::Requirement