dependabot-python 0.294.0 → 0.296.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 00afa0b8f378f4c7afd4ef6c9d8e9445829b0cdace6b9ccd4a86673b60a65ba7
-  data.tar.gz: 326e757f7c41bf6d6078423efcab1e0fe078654c5cfe5ffd1baa105eabe0d862
+  metadata.gz: 0765b7fccbea712cbc16a682eb3304f385cd846c18371c6698dc6c1615cc8061
+  data.tar.gz: e8d794545efa9c3e936377e8e5554dc16a1d63616bb08c35a75982164d2a53e7
 SHA512:
-  metadata.gz: 012e54234fb1fae65c85fa67b440c408d063489b0b1fa0a91aae33a2618f8c8f201ae822fc85d03fa9079bd0141cb2b5a797c14ffa9b81d248607b803232059b
-  data.tar.gz: 69b326583030cf0e5749425d25c98051a9c9b18470d4f45dec5cd269ba70545d647b9c5c40872b5b772757fcbec53ad56c18ed0a705024f21fdad13cb98816e0
+  metadata.gz: bcbeda1d1d9ebb3da32369ab42e65466fc863be8e3de0f24aef1aa0dd2b803b71ae04f81d23c2929296519dc1dca77d0676c1aaad721ae51b80aa7b2b91e3b6e
+  data.tar.gz: 696e26506d30212f32c0f2c74446d151f06321b78627debf9095856ce4c509f3123345c34530f5111a28c8beec46ea5ef8c16143f771909fdafff2b819b6cd55

data/lib/dependabot/python/file_updater/pipfile_preparer.rb

@@ -1,4 +1,4 @@
-# typed: true
+# typed: strict
 # frozen_string_literal: true
 
 require "toml-rb"
@@ -12,10 +12,14 @@ module Dependabot
   module Python
     class FileUpdater
       class PipfilePreparer
+        extend T::Sig
+
+        sig { params(pipfile_content: String).void }
         def initialize(pipfile_content:)
           @pipfile_content = pipfile_content
         end
 
+        sig { params(credentials: T::Array[T::Hash[String, T.untyped]]).returns(String) }
         def replace_sources(credentials)
           pipfile_object = TomlRB.parse(pipfile_content)
 
@@ -26,6 +30,7 @@ module Dependabot
           TomlRB.dump(pipfile_object)
         end
 
+        sig { params(requirement: String).returns(String) }
         def update_python_requirement(requirement)
           pipfile_object = TomlRB.parse(pipfile_content)
 
@@ -39,6 +44,7 @@ module Dependabot
           TomlRB.dump(pipfile_object)
         end
 
+        sig { params(parsed_file: String).returns(String) }
         def update_ssl_requirement(parsed_file)
           pipfile_object = TomlRB.parse(pipfile_content)
           parsed_object = TomlRB.parse(parsed_file)
@@ -56,13 +62,19 @@ module Dependabot
 
         private
 
+        sig { returns(String) }
         attr_reader :pipfile_content
-        attr_reader :lockfile
 
+        sig { returns(T::Array[T::Hash[String, T.untyped]]) }
         def pipfile_sources
-          @pipfile_sources ||= TomlRB.parse(pipfile_content).fetch("source", [])
+          @pipfile_sources ||= T.let(TomlRB.parse(pipfile_content).fetch("source", []),
+                                     T.nilable(T::Array[T::Hash[String, T.untyped]]))
         end
 
+        sig do
+          params(source: T::Hash[String, T.untyped],
+                 credentials: T::Array[T::Hash[String, T.untyped]]).returns(T.nilable(T::Hash[String, T.untyped]))
+        end
         def sub_auth_url(source, credentials)
           if source["url"].include?("${")
             base_url = source["url"].sub(/\${.*}@/, "")
@@ -79,8 +91,10 @@ module Dependabot
           source
         end
 
+        sig { params(credentials: T::Array[T::Hash[String, T.untyped]]).returns(T::Array[T::Hash[String, T.untyped]]) }
         def config_variable_sources(credentials)
-          @config_variable_sources ||=
+          @config_variable_sources = T.let([], T.nilable(T::Array[T::Hash[String, T.untyped]]))
+          @config_variable_sources =
             credentials.select { |cred| cred["type"] == "python_index" }.map.with_index do |c, i|
               {
                 "name" => "dependabot-inserted-index-#{i}",

data/lib/dependabot/python/file_updater/poetry_file_updater.rb

@@ -73,7 +73,7 @@ module Dependabot
             updated_content = replace_dep(dependency, updated_content, new_r, old_r)
           end
 
-          raise "Content did not change!" if content == updated_content
+          raise DependencyFileContentNotChanged, "Content did not change!" if content == updated_content
 
           updated_content
         end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.294.0
+  version: 0.296.0
 platform: ruby
 authors:
 - Dependabot
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-23 00:00:00.000000000 Z
+date: 2025-02-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.294.0
+        version: 0.296.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.294.0
+        version: 0.296.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -290,7 +290,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.294.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.296.0
 post_install_message:
 rdoc_options: []
 require_paths: