dependabot-python 0.205.1 → 0.208.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5d5b44fe8022ff2a137332fa3851fc01dc6be763608cf02ab8a137157c5939c7
-  data.tar.gz: 4aec04efaa138ddf31b966d27312c8cea91bceb8b766d99faaff9a2a8c4d1ca5
+  metadata.gz: 9fa5fb6de9583d24c732b055f54f045e5db419a8f13ce2413b28cca4727b0cb6
+  data.tar.gz: 716468fec40ac13c8c8fa6910c565e79d577c36477bcaf283529d458e9952188
 SHA512:
-  metadata.gz: dd3d585a54a79117df1833aa06b48ea94e92f219a6ecd7100e0edd5921c15e299a5b44c26a21ddca79b442e07abdc7a89d2b96eaaa3e918d8cf038bb580f0abd
-  data.tar.gz: 7f5b13b2c2303466be7bc28c34134dee1fc38ec89db51d14fc9eb149247aebeca4770cab5b92e9ee365218701c8233597dab4d40eaa6944a45dade45360c760c
+  metadata.gz: 9e567dc365089e992e90db7992918b0d33f91f261bc3fff148ab0218991e1199d511cee7fab8e6b6b59897a5e320639087822dc4df089cb3d4db588ccea3d9f5
+  data.tar.gz: f0849bb2f4920229295f46a11767af5e25e0030203d2c58b45434f133382207f2d828eb7004e7be7121b9c908a1dea52fb46fb402cc87c883b8e4ecd4cbda6c2

data/helpers/build

@@ -18,7 +18,7 @@ cp -r \
   "$install_dir"
 
 cd "$install_dir"
-PYENV_VERSION=3.10.5 pyenv exec pip install -r "requirements.txt"
+PYENV_VERSION=3.10.5 pyenv exec pip --disable-pip-version-check install -r "requirements.txt"
 
 # Workaround of https://github.com/python-poetry/poetry/issues/3010
 # By default poetry config file is stored under ~/.config/pypoetry

data/helpers/requirements.txt

@@ -1,6 +1,6 @@
-pip>=21.3.1,<22.2.2  # Allow earlier versions to retain python 3.6 support
-pip-tools>=6.4.0,<6.8.1  # Allow earlier versions to retain python 3.6 support
-flake8==5.0.3
+pip>=21.3.1,<22.2.3  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
+pip-tools>=6.4.0,<6.8.1  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
+flake8==5.0.4
 hashin==0.17.0
 pipenv==2022.4.8
 pipfile==0.0.2

data/lib/dependabot/python/update_checker/index_finder.rb

@@ -164,6 +164,7 @@ module Dependabot
 
           regexp = url.
                    sub(%r{(?<=://).+@}, "").
+                   sub(%r{https?://}, "").
                    split(ENVIRONMENT_VARIABLE_REGEX).
                    map { |part| Regexp.quote(part) }.
                    join(".+")

data/lib/dependabot/python/update_checker.rb

@@ -107,10 +107,7 @@ module Dependabot
       private
 
       def latest_version_resolvable_with_full_unlock?
-        # Full unlock checks aren't implemented for pip because they're not
-        # relevant (pip doesn't have a resolver). This method always returns
-        # false to ensure `updated_dependencies_after_full_unlock` is never
-        # called.
+        # Full unlock checks aren't implemented for Python (yet)
         false
       end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.205.1
+  version: 0.208.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-08 00:00:00.000000000 Z
+date: 2022-08-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.1
+        version: 0.208.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.205.1
+        version: 0.208.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.31.2
+        version: 1.33.0
 - !ruby/object:Gem::Dependency
   name: ruby-debug-ide
   requirement: !ruby/object:Gem::Requirement