dependabot-python 0.362.0 → 0.364.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 41969fffceb16127501815b18338b47fed108ad0a31d01b47584d6798ec446ba
-  data.tar.gz: 279aa5702150e0fabae033d6050023a91c0aae715cef14dae31aa4686410645e
+  metadata.gz: ad6e1e80553f3ffd620ea7d83d9e9d6dbe3d910b069df6e970b3b0176090f024
+  data.tar.gz: 4869abdc7a7905d29c03d5e3620f7b5f8f5a5321131f035d9aa070563db6cff2
 SHA512:
-  metadata.gz: 6e1b58219c98cb0d8c29644418ec930221ba85c5503e6db0c0df38125515202cb56545180187dcb24af2b7474aa7b63fbb4d34f22c7c0090dbb124142dbebb1f
-  data.tar.gz: bf71087e14538101af044f780b3de22c37f679bce0e0bf13e292b5c690c2ed9b08275b76186ca1582c3fab3226e4f8fcc720a21d7599b92952557563caeb2dad
+  metadata.gz: 896f820ec9168bee0abb669b46c5ad4368d741b6a15bc3b81d22cbaeea63416043c1a81801c9df5965177c8b4681b7f9dc860b90b36b870a1e8be3700725a670
+  data.tar.gz: c4a75fcb7e5ad87522d6817a1d3cc716d11b0766f164ce7917e196a879f743761eab3eb269bebd57d4473d51f3117f9e35e4d12ced3d55e31794ed7365eab290

data/helpers/requirements.txt

@@ -1,5 +1,5 @@
 pip==24.2
-pip-tools==7.4.1
+pip-tools==7.5.3
 flake8==7.3.0
 hashin==1.0.5
 pipenv==2024.4.1

data/lib/dependabot/python/file_parser/pipfile_files_parser.rb

@@ -140,7 +140,7 @@ module Dependabot
         end
 
         sig do
-          params(obj: T.any(String, NilClass, T::Array[String], T::Hash[String, T.untyped])).returns(T.nilable(String))
+          params(obj: T.nilable(T.any(String, T::Array[String], T::Hash[String, T.untyped]))).returns(T.nilable(String))
         end
         def version_from_hash_or_string(obj)
           case obj
@@ -149,7 +149,7 @@ module Dependabot
           end
         end
 
-        sig { params(req: T.any(String, T::Hash[String, T.untyped])).returns(T.any(T::Boolean, NilClass, String)) }
+        sig { params(req: T.any(String, T::Hash[String, T.untyped])).returns(T.nilable(T.any(T::Boolean, String))) }
         def specifies_version?(req)
           return true if req.is_a?(String)
 

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -26,7 +26,11 @@ module Dependabot
 
         UNSAFE_PACKAGES = T.let(%w(setuptools distribute pip).freeze, T::Array[String])
         INCOMPATIBLE_VERSIONS_REGEX = T.let(
-          /not supported between instances of 'InstallationCandidate'.*\z/m,
+          Regexp.new(
+            "(?:not supported between instances of 'InstallationCandidate'" \
+            "|There are incompatible versions in the resolved dependencies).*\\z",
+            Regexp::MULTILINE
+          ),
           Regexp
         )
         WARNINGS = T.let(/\s*# WARNING:.*\Z/m, Regexp)

data/lib/dependabot/python/file_updater/requirement_replacer.rb

@@ -108,7 +108,7 @@ module Dependabot
             else
               original_dependency_declaration_string(old_req)
                 .sub(RequirementParser::NAME_WITH_EXTRAS) do |nm|
-                  (nm + (updated_requirement_string || ""))
+                  nm + (updated_requirement_string || "")
                 end
             end
 

data/lib/dependabot/python/update_checker/requirements_updater.rb

@@ -317,11 +317,11 @@ module Dependabot
           new_segments
             .first(count)
             .map.with_index { |s, i| i < precision ? s : "*" }
-            .join(".")
+                .join(".")
         end
 
         sig { params(requirement_strings: T::Array[String]).returns(String) }
-        def update_requirements_range(requirement_strings) # rubocop:disable Metrics/AbcSize
+        def update_requirements_range(requirement_strings)
           ruby_requirements =
             requirement_strings.map { |r| requirement_class.new(r) }
 
@@ -341,8 +341,7 @@ module Dependabot
           end.compact
 
           updated_requirement_strings
-            .sort_by { |r| requirement_class.new(r).requirements.first.last }
-            .map(&:to_s).join(",").delete(" ")
+            .sort_by { |r| requirement_class.new(r).requirements.first.last }.join(",").delete(" ")
         end
 
         # Updates the version in a constraint to be the given version

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.362.0
+  version: 0.364.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.364.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.362.0
+        version: 0.364.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -85,14 +85,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
   name: rspec-sorbet
   requirement: !ruby/object:Gem::Requirement
@@ -291,7 +291,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.362.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.364.0
 rdoc_options: []
 require_paths:
 - lib