dependabot-python 0.216.2 → 0.218.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c95f058e5bebf4f8bc8b6cf4e9cf6c916973da64b38694064bc6cb504e360fce
-  data.tar.gz: 7b6f7ebdaa3e05bf225290e042b7ca8d7b58cc1054e5510b3ac27f65778f4122
+  metadata.gz: c01560d0752d398acafec2a0646b28f5f93de7fcfac1ea12570409445fbeb562
+  data.tar.gz: a2b6e55a4bff31e80a0cf57e739d5a6dabdd82b42fcf2ce276e15be26093470b
 SHA512:
-  metadata.gz: a38cd16e13aa28d29bf05a14a18b3b12865172371dd03b220969733ef2839d815e52a08a877558e57a4fbf347cb40e4c4b13b180d4ca8df0e5daa0b5ce95ebfb
-  data.tar.gz: 78e271219bcad9b5c0f250c70362ecd3ba236e03fe34420311323b224bd8c3750feefdeb7916d6d9c2b4b207367e0d716d971e2611952064fd948bb45bc87781
+  metadata.gz: f1cf2d6733074ca4ba42f86e251f18a34ca2f0ea88dbfac4b04d1513b2d1e01e9122736c3850aa99a3f014bb5aab5c677a0bd1cb88bdaf9ed26829a09352624f
+  data.tar.gz: 8e920d74c3dfeb2404ef1dd42f3a2a933427f28b0bdcc5af3c5ff1f0027dbb44da959673859b863c24dc50e88f1b289d3b059e8d62fe4e4fbdde4fcdb6f4fcae

data/helpers/requirements.txt

@@ -1,4 +1,4 @@
-pip>=21.3.1,<23.1.0  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
+pip>=21.3.1,<23.2.0  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
 pip-tools>=6.4.0,<=6.12.3  # Range maintains py36 support TODO: Review python 3.6 support in April 2023 (eol ubuntu 18.04)
 hashin==0.17.0
 pipenv==2022.4.8

data/lib/dependabot/python/update_checker/requirements_updater.rb

@@ -30,6 +30,8 @@ module Dependabot
         end
 
         def updated_requirements
+          return requirements if update_strategy == :lockfile_only
+
           requirements.map do |req|
             case req[:file]
             when /setup\.(?:py|cfg)$/ then updated_setup_requirement(req)

data/lib/dependabot/python/update_checker.rb

@@ -78,6 +78,10 @@ module Dependabot
         ).updated_requirements
       end
 
+      def requirements_unlocked_or_can_be?
+        requirements_update_strategy != :lockfile_only
+      end
+
       def requirements_update_strategy
         # If passed in as an option (in the base class) honour that option
         return @requirements_update_strategy.to_sym if @requirements_update_strategy

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.216.2
+  version: 0.218.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-04-20 00:00:00.000000000 Z
+date: 2023-05-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.2
+        version: 0.218.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.216.2
+        version: 0.218.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -259,8 +259,8 @@ homepage: https://github.com/dependabot/dependabot-core
 licenses:
 - Nonstandard
 metadata:
-  issue_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.218.0
 post_install_message: 
 rdoc_options: []
 require_paths: