dependabot-python 0.285.0 → 0.286.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 01ee39fc41a1327118b2d9c671ec43d9e815357bf55d90b8eef20c841749ba83
-  data.tar.gz: a752fc6bd758ac8d6637c3551199a59388c1ff185765728ce48220a3d3ca7dcc
+  metadata.gz: f0d961c2987fb16abd338a95638bd303b77320c4a99f41c7a39a5206e2a1e65d
+  data.tar.gz: d30ff4cd1e220c94ff705610612136b6625bee55d97ace1c0b7a2a0a7dd4320b
 SHA512:
-  metadata.gz: 9efcad646528d23a6748191644b4b77fcaa14c6ef543be5981406fd0ac4efd28d6306423bd1e6bd44add27f54b6a9c3cd4ebc11b0dcd2ffd6ed9951b19f31990
-  data.tar.gz: bb70f5ea2b15e2b71db1c83629aa3384a2fa58f11a1ea3f47650409304337841b9a99583d5cf0664d0face9b4af353faab56d63be2a2fb310ac014b77271154c
+  metadata.gz: 124e2e4f9959c406f1eabb31c42fa921ace79bdd8d299454081773d05a786e3837137ae94876593b7759b5a52d745ad96206adfeba663cb7024e9dded4a82f6a
+  data.tar.gz: 6517f85bfd0210426d366929c890ee7c966aa3f3f54c3f32319e6081a85bc76fa5067622ab38029550617242a5323e6771c66d624d69ef0164bca3d87ad21d89

data/helpers/lib/parser.py

@@ -24,7 +24,7 @@ COMMENT_RE = re.compile(r'(^|\s+)#.*$')
 
 
 def parse_pep621_dependencies(pyproject_path):
-    project_toml = toml.load(pyproject_path)['project']
+    project_toml = toml.load(pyproject_path)
 
     def parse_toml_section_pep621_dependencies(pyproject_path, dependencies):
         requirement_packages = []
@@ -54,26 +54,36 @@ def parse_pep621_dependencies(pyproject_path):
 
     dependencies = []
 
-    if 'dependencies' in project_toml:
-        dependencies_toml = project_toml['dependencies']
+    if 'project' in project_toml:
+        project_section = project_toml['project']
 
-        runtime_dependencies = parse_toml_section_pep621_dependencies(
-            pyproject_path,
-            dependencies_toml
-        )
-
-        dependencies.extend(runtime_dependencies)
-
-    if 'optional-dependencies' in project_toml:
-        optional_dependencies_toml = project_toml['optional-dependencies']
-
-        for group in optional_dependencies_toml:
-            group_dependencies = parse_toml_section_pep621_dependencies(
+        if 'dependencies' in project_section:
+            dependencies_toml = project_section['dependencies']
+            runtime_dependencies = parse_toml_section_pep621_dependencies(
                 pyproject_path,
-                optional_dependencies_toml[group]
+                dependencies_toml
             )
+            dependencies.extend(runtime_dependencies)
+
+        if 'optional-dependencies' in project_section:
+            optional_dependencies_toml = project_section[
+                'optional-dependencies'
+            ]
+            for group in optional_dependencies_toml:
+                group_dependencies = parse_toml_section_pep621_dependencies(
+                    pyproject_path,
+                    optional_dependencies_toml[group]
+                )
+                dependencies.extend(group_dependencies)
 
-            dependencies.extend(group_dependencies)
+    if 'build-system' in project_toml:
+        build_system_section = project_toml['build-system']
+        if 'requires' in build_system_section:
+            build_system_dependencies = parse_toml_section_pep621_dependencies(
+                pyproject_path,
+                build_system_section['requires']
+            )
+            dependencies.extend(build_system_dependencies)
 
     return json.dumps({"result": dependencies})
 

data/lib/dependabot/python/file_parser/pyproject_files_parser.rb

@@ -167,7 +167,8 @@ module Dependabot
 
         def using_pep621?
           !parsed_pyproject.dig("project", "dependencies").nil? ||
-            !parsed_pyproject.dig("project", "optional-dependencies").nil?
+            !parsed_pyproject.dig("project", "optional-dependencies").nil? ||
+            !parsed_pyproject.dig("build-system", "requires").nil?
         end
 
         def poetry_root

data/lib/dependabot/python/update_checker.rb

@@ -325,7 +325,7 @@ module Dependabot
       end
 
       def library_details
-        @library_details ||= poetry_details || standard_details
+        @library_details ||= poetry_details || standard_details || build_system_details
       end
 
       def poetry_details
@@ -336,6 +336,10 @@ module Dependabot
         @standard_details ||= toml_content["project"]
       end
 
+      def build_system_details
+        @build_system_details ||= toml_content["build-system"]
+      end
+
       def toml_content
         @toml_content ||= TomlRB.parse(pyproject.content)
       end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.285.0
+  version: 0.286.0
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-11-07 00:00:00.000000000 Z
+date: 2024-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.285.0
+        version: 0.286.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.285.0
+        version: 0.286.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -288,7 +288,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.285.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.286.0
 post_install_message: 
 rdoc_options: []
 require_paths: