dependabot-python 0.239.0 → 0.241.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: bf1b0e7ca12b4aba6ded391d6d075669510d4c0159d0d59fc00f2eb92af5690c
4
- data.tar.gz: 61ecd20ccae579ed44f8faa0e0f06f7a0a9b291d3147d7bb2b5a0d8995c41a18
3
+ metadata.gz: a36fd042f786236eeb586b754ec60f11ef3a009fdc39ee6d7d6286f4a8b7888a
4
+ data.tar.gz: 9b7cc5872b4748c5837451cd3993ddf4253b31280c349b8b5eaf15159f1dc8f5
5
5
  SHA512:
6
- metadata.gz: fe6af7078145dfdaba758734bd0c5a687827a6f899c0498e1968b00144c4350f9717fa829b30b078656c16d9c534dea952c5e02cc7b3e59192ee4ec080dd8df3
7
- data.tar.gz: '0268b8a34839f4609c1537ed34cbc965b7d60118fa4f810412c0339d63d997fa11e88ccf9f20e7d7542cb44669f2dd50f526c648f5dfeda31ae67296aa0dd540'
6
+ metadata.gz: cb23a2abf87d739179558ca8f8956644e2d1477ee338abf88bd997149cd8be9a7a177646812ace9e95852ba4d73c902f15248a2eb29b94a57a0b36ec8aab9d8d
7
+ data.tar.gz: '094571c807a38d1a12bb69401488836f75491a17f5232527a69f7df6cbc957536e15fb5e02f866dcb2ad7ddc6f1a7ed94f28548d6dd91bdf44fdbd463c5fa7fe'
@@ -1,10 +1,10 @@
1
- pip==23.3.1
1
+ pip==23.3.2
2
2
  pip-tools==7.3.0
3
- flake8==6.1.0
3
+ flake8==7.0.0
4
4
  hashin==0.17.0
5
5
  pipenv@git+https://github.com/pypa/pipenv@main
6
6
  pipfile==0.0.2
7
7
  poetry==1.7.1
8
8
 
9
9
  # Some dependencies will only install if Cython is present
10
- Cython==3.0.5
10
+ Cython==3.0.8
@@ -84,7 +84,6 @@ module Dependabot
84
84
  fetched_files << pip_conf if pip_conf
85
85
  fetched_files << python_version_file if python_version_file
86
86
 
87
- check_required_files_present
88
87
  uniq_files(fetched_files)
89
88
  end
90
89
 
@@ -112,18 +111,6 @@ module Dependabot
112
111
  ]
113
112
  end
114
113
 
115
- def check_required_files_present
116
- return if requirements_txt_files.any? ||
117
- requirements_in_files.any? ||
118
- setup_file ||
119
- setup_cfg_file ||
120
- pipfile ||
121
- pyproject
122
-
123
- path = cleanpath(File.join(directory, "requirements.txt"))
124
- raise Dependabot::DependencyFileNotFound, path
125
- end
126
-
127
114
  def setup_file
128
115
  return @setup_file if defined?(@setup_file)
129
116
 
@@ -9,7 +9,8 @@ module Dependabot
9
9
  class LanguageVersionManager
10
10
  # This list must match the versions specified at the top of `python/Dockerfile`
11
11
  PRE_INSTALLED_PYTHON_VERSIONS = %w(
12
- 3.11.5
12
+ 3.12.1
13
+ 3.11.7
13
14
  3.10.13
14
15
  3.9.18
15
16
  3.8.18
@@ -29,7 +30,7 @@ module Dependabot
29
30
  end
30
31
 
31
32
  def python_major_minor
32
- @python_major_minor ||= Python::Version.new(python_version).segments[0..1].join(".")
33
+ @python_major_minor ||= T.must(Python::Version.new(python_version).segments[0..1]).join(".")
33
34
  end
34
35
 
35
36
  def python_version
@@ -43,7 +43,7 @@ module Dependabot
43
43
 
44
44
  return DefaultRequirement if matches[1] == ">=" && matches[2] == "0"
45
45
 
46
- [matches[1] || "=", Python::Version.new(matches[2])]
46
+ [matches[1] || "=", Python::Version.new(T.must(matches[2]))]
47
47
  end
48
48
 
49
49
  # Returns an array of requirements. At least one requirement from the
@@ -21,9 +21,14 @@ module Dependabot
21
21
  class PipenvVersionResolver
22
22
  GIT_DEPENDENCY_UNREACHABLE_REGEX = /git clone --filter=blob:none --quiet (?<url>[^\s]+).*/
23
23
  GIT_REFERENCE_NOT_FOUND_REGEX = /git checkout -q (?<tag>[^\s]+).*/
24
- PIPENV_INSTALLATION_ERROR = "python setup.py egg_info exited with 1"
24
+ PIPENV_INSTALLATION_ERROR_NEW = "Getting requirements to build wheel exited with 1"
25
+
26
+ # Can be removed when Python 3.11 support is dropped
27
+ PIPENV_INSTALLATION_ERROR_OLD = Regexp.quote("python setup.py egg_info exited with 1")
28
+
29
+ PIPENV_INSTALLATION_ERROR = /#{PIPENV_INSTALLATION_ERROR_NEW}|#{PIPENV_INSTALLATION_ERROR_OLD}/
25
30
  PIPENV_INSTALLATION_ERROR_REGEX =
26
- /[\s\S]*Collecting\s(?<name>.+)\s\(from\s-r.+\)[\s\S]*#{Regexp.quote(PIPENV_INSTALLATION_ERROR)}/
31
+ /[\s\S]*Collecting\s(?<name>.+)\s\(from\s-r.+\)[\s\S]*(#{PIPENV_INSTALLATION_ERROR})/
27
32
 
28
33
  PIPENV_RANGE_WARNING = /Warning:\sPython\s[<>].* was not found/
29
34
 
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-python
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.239.0
4
+ version: 0.241.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-12-28 00:00:00.000000000 Z
11
+ date: 2024-01-18 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 0.239.0
19
+ version: 0.241.0
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 0.239.0
26
+ version: 0.241.0
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: debug
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -206,6 +206,20 @@ dependencies:
206
206
  - - "~>"
207
207
  - !ruby/object:Gem::Version
208
208
  version: '3.18'
209
+ - !ruby/object:Gem::Dependency
210
+ name: webrick
211
+ requirement: !ruby/object:Gem::Requirement
212
+ requirements:
213
+ - - ">="
214
+ - !ruby/object:Gem::Version
215
+ version: '1.7'
216
+ type: :development
217
+ prerelease: false
218
+ version_requirements: !ruby/object:Gem::Requirement
219
+ requirements:
220
+ - - ">="
221
+ - !ruby/object:Gem::Version
222
+ version: '1.7'
209
223
  description: Dependabot-Python provides support for bumping Python packages via Dependabot.
210
224
  If you want support for multiple package managers, you probably want the meta-gem
211
225
  dependabot-omnibus.
@@ -260,7 +274,7 @@ licenses:
260
274
  - Nonstandard
261
275
  metadata:
262
276
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
263
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.239.0
277
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.241.0
264
278
  post_install_message:
265
279
  rdoc_options: []
266
280
  require_paths: