dependabot-python 0.337.0 → 0.341.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d3c3b45756ecd27b4953cfddd9da94d2e385b18ee060e7cba79f26ce47008292
-  data.tar.gz: 051c87c8f51383b3442d10e94f7f9fc78497e2dcdc0ded46aaf340c703422a7d
+  metadata.gz: b1d5c24fb6c1b335ae479fbae07096649ee30ee7eec9e363504de5c221d2e5e6
+  data.tar.gz: bf3670b60f32885a9483df12df0e2a6b67a02addc5aba6b3a866a5f311a06fc7
 SHA512:
-  metadata.gz: 53b130856f5fc0750fbce8eb858902e62084fa16287176adbf7cc6b02a5f7e37bf47ffd60a5fe13ce34aa9236e45a720c75b0491e91c0718225964fc5f3c6a91
-  data.tar.gz: c00994a9a1d9e0601705e75a90075933cbae0658fd2c9a6339c09db5bf5de67f2b6ddb5b6b0b64d6aeaffe9c506908e665a019995bb05b5e758a1db8053d31ec
+  metadata.gz: ad633257aba1efb87699a352208e5d8183f07a96638fb4bd0f83ac1f61c68824ac16bb8bcce7fcc0c5b70fe33ed62940eee9472319728413e44141da5fb9d8db
+  data.tar.gz: 38bd7e4f464a4fc2728c8eb1fcc20f56cf9b31ec8f27b633ee6bbb34b9048b3cd6e7ae98ab1d86e911961cb4cdcd600fd4587ca84507a4cfe36f5358da31b304

data/helpers/requirements.txt

@@ -4,7 +4,7 @@ flake8==7.3.0
 hashin==1.0.5
 pipenv==2024.4.1
 plette==2.1.0
-poetry==2.2.0
+poetry==2.2.1
 # TODO: Replace 3p package `tomli` with 3.11's new stdlib `tomllib` once we drop support for Python 3.10.
 tomli==2.2.1
 

data/lib/dependabot/python/file_updater.rb

@@ -17,21 +17,6 @@ module Dependabot
       require_relative "file_updater/poetry_file_updater"
       require_relative "file_updater/requirement_file_updater"
 
-      sig { override.returns(T::Array[Regexp]) }
-      def self.updated_files_regex
-        [
-          /^.*Pipfile$/,             # Match Pipfile at any level
-          /^.*Pipfile\.lock$/,       # Match Pipfile.lock at any level
-          /^.*\.txt$/,               # Match any .txt files (e.g., requirements.txt) at any level
-          /^.*\.in$/,                # Match any .in files at any level
-          /^.*setup\.py$/,           # Match setup.py at any level
-          /^.*setup\.cfg$/,          # Match setup.cfg at any level
-          /^.*pyproject\.toml$/,     # Match pyproject.toml at any level
-          /^.*pyproject\.lock$/,     # Match pyproject.lock at any level
-          /^.*poetry\.lock$/ # Match poetry.lock at any level
-        ]
-      end
-
       sig { override.returns(T::Array[DependencyFile]) }
       def updated_dependency_files
         updated_files =

data/lib/dependabot/python/pipenv_runner.rb

@@ -28,10 +28,15 @@ module Dependabot
       sig { params(constraint: T.nilable(String)).returns(String) }
       def run_upgrade(constraint)
         constraint = "" if constraint == "*"
-        command = "pyenv exec pipenv upgrade --verbose #{dependency_name}#{constraint}"
+
+        # Build the full package specification with extras
+        extras_spec = extras_specification
+        package_spec = "#{dependency_name}#{extras_spec}#{constraint}"
+
+        command = "pyenv exec pipenv upgrade --verbose #{package_spec}"
         command << " --dev" if lockfile_section == "develop"
 
-        run(command, fingerprint: "pyenv exec pipenv upgrade --verbose <dependency_name><constraint>")
+        run(command, fingerprint: "pyenv exec pipenv upgrade --verbose <dependency_name><extras><constraint>")
       end
 
       sig { params(constraint: T.nilable(String)).returns(T.nilable(String)) }
@@ -64,6 +69,30 @@ module Dependabot
       sig { returns(LanguageVersionManager) }
       attr_reader :language_version_manager
 
+      sig { returns(String) }
+      def extras_specification
+        extras = dependency_extras
+        return "" if extras.nil? || extras.empty?
+
+        "[#{extras.join(',')}]"
+      end
+
+      sig { returns(T.nilable(T::Array[String])) }
+      def dependency_extras
+        return nil unless lockfile
+
+        lockfile_content = T.must(lockfile).content
+        return nil unless lockfile_content
+
+        parsed_lockfile = JSON.parse(lockfile_content)
+        section = lockfile_section
+        dependency_data = parsed_lockfile.dig(section, dependency_name)
+
+        return nil unless dependency_data
+
+        dependency_data["extras"]
+      end
+
       sig { params(updated_lockfile: T::Hash[String, T.untyped]).returns(T.nilable(String)) }
       def fetch_version_from_parsed_lockfile(updated_lockfile)
         deps = updated_lockfile[lockfile_section] || {}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.337.0
+  version: 0.341.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.337.0
+        version: 0.341.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.337.0
+        version: 0.341.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -290,7 +290,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.337.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.341.0
 rdoc_options: []
 require_paths:
 - lib