dependabot-python 0.242.1 → 0.244.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8551cce2e7b034f2bba4bd85bfafac3eb74c4df231d42d38a39a66fe35b2089a
-  data.tar.gz: cba70ca678784f5d1350e0942a05e493356622e6129c40a9124c0d8c79ffef27
+  metadata.gz: 572ad61344effec5a3f97e56259e5eab9853f3570dca599fc497d8ed61ab6436
+  data.tar.gz: 5a854800d2ee8cf0b7566ebfa85918897e2cc645ac657a7b10f5e248dd2f759c
 SHA512:
-  metadata.gz: 11c07014feb92bc8ed1a81c730063340e537c0753773534f69e60e8184e63bcc4b44ae3ce87cfa2b597453b7345011166f9b59286a70a73d98fcc8f13645529b
-  data.tar.gz: fb55db47f58e73849ea4497646cf801a5a693cd860ad3ff99eddfd701bb7da63e3af30cb2de4096a7962964522c6c2439007e1ca253a373c862829d3534b373c
+  metadata.gz: 36f5c4038e345852234630038fc5269dc813676c930b02a2bfa77dcfac46b64b75b557b2e70ace086287ac4b03c00581e17c9de4d0122333cfeeff6f1d54a5f6
+  data.tar.gz: 1f282359beb86c09d86129b6f71488d46a3c005a075adb760bc173fc07772cf9c5a85aa88ff5d92bbb5971795810ad9c73c774d0af99712f0869f0cde52108bf

data/helpers/requirements.txt

@@ -2,7 +2,7 @@ pip==23.3.2
 pip-tools==7.3.0
 flake8==7.0.0
 hashin==0.17.0
-pipenv@git+https://github.com/pypa/pipenv@main
+pipenv==2023.11.17
 pipfile==0.0.2
 poetry==1.7.1
 

data/lib/dependabot/python/authed_url_builder.rb

@@ -6,7 +6,7 @@ module Dependabot
     class AuthedUrlBuilder
       def self.authed_url(credential:)
         token = credential.fetch("token", nil)
-        url = credential.fetch("index-url")
+        url = credential.fetch("index-url", nil)
         return url unless token
 
         basic_auth_details =

data/lib/dependabot/python/file_parser.rb

@@ -91,7 +91,7 @@ module Dependabot
               }]
             end
 
-          # PyYAML < 6.0 will cause `pip-compile` to fail due to incompatiblity with Cython 3. Workaround it.
+          # PyYAML < 6.0 will cause `pip-compile` to fail due to incompatibility with Cython 3. Workaround it.
           SharedHelpers.run_shell_command("pyenv exec pip install cython<3.0") if old_pyyaml?(name, version)
 
           dependencies <<

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -463,7 +463,7 @@ module Dependabot
             .map do |cred|
               authed_url = AuthedUrlBuilder.authed_url(credential: cred)
 
-              if cred["replaces-base"]
+              if cred.replaces_base?
                 "--index-url=#{authed_url}"
               else
                 "--extra-index-url=#{authed_url}"

data/lib/dependabot/python/file_updater/pipfile_preparer.rb

@@ -52,7 +52,7 @@ module Dependabot
             base_url = source["url"].sub(/\${.*}@/, "")
 
             source_cred = credentials
-                          .select { |cred| cred["type"] == "python_index" }
+                          .select { |cred| cred["type"] == "python_index" && cred["index-url"] }
                           .find { |c| c["index-url"].sub(/\${.*}@/, "") == base_url }
 
             return nil if source_cred.nil?

data/lib/dependabot/python/update_checker/index_finder.rb

@@ -146,13 +146,13 @@ module Dependabot
           index_url_creds = credentials
                             .select { |cred| cred["type"] == "python_index" }
 
-          if (main_cred = index_url_creds.find { |cred| cred["replaces-base"] })
+          if (main_cred = index_url_creds.find(&:replaces_base?))
             urls[:main] = AuthedUrlBuilder.authed_url(credential: main_cred)
           end
 
           urls[:extra] =
             index_url_creds
-            .reject { |cred| cred["replaces-base"] }
+            .reject(&:replaces_base?)
             .map { |cred| AuthedUrlBuilder.authed_url(credential: cred) }
 
           urls

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -257,7 +257,7 @@ module Dependabot
             .map do |cred|
               authed_url = AuthedUrlBuilder.authed_url(credential: cred)
 
-              if cred["replaces-base"]
+              if cred.replaces_base?
                 "--index-url=#{authed_url}"
               else
                 "--extra-index-url=#{authed_url}"

data/lib/dependabot/python/version.rb

@@ -1,4 +1,4 @@
-# typed: false
+# typed: true
 # frozen_string_literal: true
 
 require "dependabot/version"
@@ -59,7 +59,7 @@ module Dependabot
         return epoch_comparison unless epoch_comparison.zero?
 
         version_comparison = super(other)
-        return version_comparison unless version_comparison.zero?
+        return version_comparison unless version_comparison&.zero?
 
         post_version_comparison = post_version_comparison(other)
         return post_version_comparison unless post_version_comparison.zero?
@@ -96,7 +96,7 @@ module Dependabot
 
         local_comparison = Gem::Version.new(lhs) <=> Gem::Version.new(rhs)
 
-        return local_comparison unless local_comparison.zero?
+        return local_comparison unless local_comparison&.zero?
 
         lhsegments.count <=> rhsegments.count
       end

data/lib/dependabot/python.rb

@@ -33,6 +33,3 @@ Dependabot::Dependency.register_name_normaliser(
   "pip",
   ->(name) { Dependabot::Python::NameNormaliser.normalise(name) }
 )
-
-require "dependabot/utils"
-Dependabot::Utils.register_always_clone("pip")

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.242.1
+  version: 0.244.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-01-23 00:00:00.000000000 Z
+date: 2024-02-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.242.1
+        version: 0.244.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.242.1
+        version: 0.244.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -274,7 +274,7 @@ licenses:
 - Nonstandard
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.242.1
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.244.0
 post_install_message: 
 rdoc_options: []
 require_paths: