dependabot-python 0.206.0 → 0.209.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c5d3bf48a1c41bb310901df4dee2c252973a25e554930aa4f9dbaac5df2b8842
-  data.tar.gz: ff35f2192994ac8c5ae27a022c4c325abddfd328dafcd4552696a64c53842eda
+  metadata.gz: 9d12f6acdc73f229dcc3154fe50f5c2f2bdd74de5239948eceed2bd6f6f6c936
+  data.tar.gz: 3085c1241c3cffdbc133fbafe9f79bba159198972b6824c54d94b0e977154680
 SHA512:
-  metadata.gz: a0a86aaca69a7aa9134b49da683ae9f7296783448adbfeef35b099fbd450417d61559274a1556e627f90f850762eda9c90eeef7335d939dde579d317f102e9de
-  data.tar.gz: e09807c89043bdcb28ec2b6aef501cd987fc14b293a520fda7c3cb85370273675027a66d14adc4180c91c77e58b7ef89405c4bd6f70d3a1f38c7ee422ca891f6
+  metadata.gz: 70c2ff5b635dd88b44d6291d788efc93a702c1c73846cf69acc0a43ded441f57880cddd3c2a61d2e5a7bcf749a557b236c9b67d4f2690f8942c0117a2c8d01af
+  data.tar.gz: 42d0b64bb8cb513b23a01a5f380add5e53fed90cb9534ec096b0906f04f1cba4754336fd91158fbb8218808d167a7894c60409bd35331edc4f23bc676662486e

data/helpers/requirements.txt

@@ -1,5 +1,5 @@
-pip>=21.3.1,<22.2.3  # Allow earlier versions to retain python 3.6 support
-pip-tools>=6.4.0,<6.8.1  # Allow earlier versions to retain python 3.6 support
+pip>=21.3.1,<22.2.3  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
+pip-tools>=6.4.0,<6.8.1  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
 flake8==5.0.4
 hashin==0.17.0
 pipenv==2022.4.8

data/lib/dependabot/python/update_checker/index_finder.rb

@@ -164,6 +164,7 @@ module Dependabot
 
           regexp = url.
                    sub(%r{(?<=://).+@}, "").
+                   sub(%r{https?://}, "").
                    split(ENVIRONMENT_VARIABLE_REGEX).
                    map { |part| Regexp.quote(part) }.
                    join(".+")

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -96,7 +96,6 @@ module Dependabot
             rescue SharedHelpers::HelperSubprocessFailed => e
               retry_count ||= 0
               retry_count += 1
-
               if compilation_error?(e) && retry_count <= 1
                 @build_isolation = false
                 retry
@@ -216,10 +215,15 @@ module Dependabot
           )
         end
 
+        def new_resolver_supported?
+          python_version >= Python::Version.new("3.7")
+        end
+
         def pip_compile_options(filename)
           options = @build_isolation ? ["--build-isolation"] : ["--no-build-isolation"]
           options += pip_compile_index_options
-          options += ["--resolver backtracking", "--allow-unsafe"]
+          options += ["--allow-unsafe"]
+          options += ["--resolver backtracking"] if new_resolver_supported?
 
           if (requirements_file = compiled_file_for_filename(filename))
             options << "--output-file=#{requirements_file.name}"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.206.0
+  version: 0.209.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-08-10 00:00:00.000000000 Z
+date: 2022-08-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.206.0
+        version: 0.209.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.206.0
+        version: 0.209.0
 - !ruby/object:Gem::Dependency
   name: debase
   requirement: !ruby/object:Gem::Requirement