dependabot-python 0.330.0 → 0.331.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 03f8c1b569eaa14419aae2e1eec23563b56530fa9eec7ce802a260372f2f4ecd
-  data.tar.gz: 387784a99d4c715ddb8bbd08c0e292f59bb07024d1ff23b476d69d78cd773a62
+  metadata.gz: 0e1bbdc33ec2e9715baa885f354b0ae7a5160a594bc424056e396a60713f1a4c
+  data.tar.gz: e9fadba2ea95a977b2f40dac856e04ba8ae7eaeb31942b78ffb6b66bba42c8a9
 SHA512:
-  metadata.gz: 3701be2756afe808c0e3c6dc492704f774c6300fd1eea05cc71b9514a76a3fe4119578cdd66b0b7cc025dc50c9cb8013428a78bd9b57200655b48cfe1c3f775e
-  data.tar.gz: 3d32a30318fe1a21266d468cf827139658d86b1516f24c86277344ff7b98a90ba6fd15b05c01d8d947d6feef0713d020aae12ad5be9b7c81fb1cb25b71001161
+  metadata.gz: d0fa46abb23c7ca9f74ad35f0f9f0654573abfb3707b66f07f4d60a5e7747a286c4392bbcb6a7b7246d71f6f28f9fa8fed18967e198fcb46250871d2c0472250
+  data.tar.gz: cd72b9690629928818f0355e0e0492861f94788d1d7005167cf484b3401ecf667e08f62325bd79c114cf595d19ea07c4b17ee11b9034eaeaf9a7036b1eb6ccc8

data/lib/dependabot/python/file_parser/pipfile_files_parser.rb

@@ -73,7 +73,8 @@ module Dependabot
                     groups: [group]
                   }],
                   package_manager: "pip",
-                  metadata: { original_name: dep_name }
+                  metadata: { original_name: dep_name },
+                  origin_files: [T.must(pipfile).name]
                 )
             end
           end
@@ -106,7 +107,8 @@ module Dependabot
                   version: version&.gsub(/^===?/, ""),
                   requirements: [],
                   package_manager: "pip",
-                  subdependency_metadata: [{ production: key != "develop" }]
+                  subdependency_metadata: [{ production: key != "develop" }],
+                  origin_files: [T.must(pipfile_lock).name]
                 )
             end
           end

data/lib/dependabot/python/file_parser/pyproject_files_parser.rb

@@ -98,7 +98,8 @@ module Dependabot
                   source: nil,
                   groups: [dep["requirement_type"]].compact
                 }],
-                package_manager: "pip"
+                package_manager: "pip",
+                origin_files: [Pathname.new(dep["file"]).cleanpath.to_path]
               )
           end
 
@@ -123,7 +124,8 @@ module Dependabot
               name: normalise(name),
               version: version_from_lockfile(name),
               requirements: requirements,
-              package_manager: "pip"
+              package_manager: "pip",
+              origin_files: [T.must(pyproject).name]
             )
           end
           dependencies
@@ -208,7 +210,8 @@ module Dependabot
                 package_manager: "pip",
                 subdependency_metadata: [{
                   production: production_dependency_names.include?(name)
-                }]
+                }],
+                origin_files: [lockfile.name]
               )
           end
 

data/lib/dependabot/python/file_parser/setup_file_parser.rb

@@ -50,7 +50,8 @@ module Dependabot
                   source: nil,
                   groups: [dep["requirement_type"]]
                 }],
-                package_manager: "pip"
+                package_manager: "pip",
+                origin_files: [Pathname.new(dep["file"]).cleanpath.to_path]
               )
           end
           dependencies

data/lib/dependabot/python/file_parser.rb

@@ -281,7 +281,8 @@ module Dependabot
               name: normalised_name(name, dep["extras"]),
               version: version&.include?("*") ? nil : version,
               requirements: requirements,
-              package_manager: "pip"
+              package_manager: "pip",
+              origin_files: [Pathname.new(file).cleanpath.to_path]
             )
         end
         dependencies

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.330.0
+  version: 0.331.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.330.0
+        version: 0.331.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.330.0
+        version: 0.331.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -290,7 +290,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.330.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.331.0
 rdoc_options: []
 require_paths:
 - lib