dependabot-python 0.390.0 → 0.391.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dae20e628b553254a3e6e3309a2dfcb08ae3bf3647cb819268a2e22177e178f5
-  data.tar.gz: 71599724f9356febf9445b8e534b22c3a8fee051ef27e15f15c14bfe31dcaf43
+  metadata.gz: 52f2cde620dcbabcf87eb9cbd827b7008699eb6132926fd3d7ace0d4d331586e
+  data.tar.gz: dde99d06a325a2cd4cb0f9f70027369797cabc171fa7753beccd9dd9c9d647d8
 SHA512:
-  metadata.gz: eff4f144ef97647719580c94eaeed7a27a083300ceac4aab05d952b3e795d806a1776ecc696f14180add8a217fed0200f7b0392f0abe3cd8c9305a3c2fd90dab
-  data.tar.gz: 33c451ea7f321010b17337aabcb161ab0b488ae2c40899ead0b0a4cac2092cc34e9b8fa79737d58e3f9bdd0ef1445cd21331a624e572b5c40eca1b14ba987aa8
+  metadata.gz: 0c0e331e9893ce5b246313c77cf7820992b32360c264f7544f605893a83d7b84cb9cc37fdaf8917e2b42bda2b56704d96968415e95b35b4cd465cdcdd68d317d
+  data.tar.gz: e6f99d3ed5613acd2692c38fc44af578c57284d3297759dae6f5db464a16c4d57cbbc63b098368bdfea9060f2300ae2230647ace91c62c56385c16b33244071f

data/lib/dependabot/python/authed_url_builder.rb

@@ -17,7 +17,8 @@ module Dependabot
         return url unless token
 
         basic_auth_details =
-          if token.ascii_only? && token.include?(":") then token
+          if token.ascii_only? && token.include?(":")
+            token
           elsif Base64.decode64(token).ascii_only? &&
                 Base64.decode64(token).include?(":")
             Base64.decode64(token)

data/lib/dependabot/python/dependency_grapher/requirements_layers.rb

@@ -29,24 +29,24 @@ module Dependabot
         # Matches "requirements" preceded by a hyphen, period, underscore, start-of-string, or slash,
         # followed by non-whitespace chars and ".txt".
         # Examples: requirements.txt, requirements.prod.txt, requirements/production.txt
-        REQUIREMENTS_TXT_REGEX = T.let(%r{(?:[-._]|^|/)requirements[^\s]*\.txt$}i, Regexp)
+        REQUIREMENTS_TXT_REGEX = %r{(?:[-._]|^|/)requirements[^\s]*\.txt$}i
 
         # More lenient: matches "require" at the start of the filename or after a hyphen/period/underscore/
         # slash delimiter, with an optional hyphen/underscore/slash suffix. The leading delimiter prevents
         # matching "require" as a substring of another word (e.g. "prequire.txt", "acquire.txt").
         # Examples: require.txt, require-test.txt, py3-require.txt, pyenv_require_e2e.txt
-        REQUIRE_TXT_REGEX = T.let(%r{(?:[-._]|^|/)require(?:[-_/][^\s.]*)?\.txt$}i, Regexp)
+        REQUIRE_TXT_REGEX = %r{(?:[-._]|^|/)require(?:[-_/][^\s.]*)?\.txt$}i
 
         # Matches "dependencies" / "dependency" preceded by a hyphen, period, underscore,
         # start-of-string, or slash, followed by non-whitespace chars and ".txt".
         # Examples: dependencies.txt, my-dependencies.txt, dependencies/python/ansible-lint.txt
-        DEPENDENCIES_TXT_REGEX = T.let(%r{(?:[-._]|^|/)dependenc(?:y|ies)[^\s]*\.txt$}i, Regexp)
+        DEPENDENCIES_TXT_REGEX = %r{(?:[-._]|^|/)dependenc(?:y|ies)[^\s]*\.txt$}i
 
         # More lenient: matches "depend" / "depends" at the start of the filename or after a hyphen/period/
         # underscore/slash delimiter, with an optional hyphen/underscore/slash suffix. The leading delimiter
         # prevents matching "depend" as a substring of another word (e.g. "codependent.txt").
         # Examples: depend.txt, depends.txt, depend-test.txt, py3-depends.txt
-        DEPEND_TXT_REGEX = T.let(%r{(?:[-._]|^|/)depend(?:s)?(?:[-_/][^\s.]*)?\.txt$}i, Regexp)
+        DEPEND_TXT_REGEX = %r{(?:[-._]|^|/)depend(?:s)?(?:[-_/][^\s.]*)?\.txt$}i
 
         # Whether a .txt filename looks like a real pip manifest rather than an unrelated .txt file.
         sig { params(path: String).returns(T::Boolean) }

data/lib/dependabot/python/file_fetcher.rb

@@ -15,7 +15,7 @@ module Dependabot
     class FileFetcher < Dependabot::Python::SharedFileFetcher
       extend T::Sig
 
-      ECOSYSTEM_SPECIFIC_FILES = T.let(%w(Pipfile setup.py setup.cfg).freeze, T::Array[String])
+      ECOSYSTEM_SPECIFIC_FILES = %w(Pipfile setup.py setup.cfg).freeze
 
       sig { override.returns(T::Array[String]) }
       def self.ecosystem_specific_required_files

data/lib/dependabot/python/file_parser/python_requirement_parser.rb

@@ -114,7 +114,7 @@ module Dependabot
           end.reject(&:empty?)
 
           file_version = content_lines.first
-          return if file_version&.empty?
+          return if file_version && file_version.empty?
           return unless T.must(pyenv_versions).include?("#{file_version}\n")
 
           file_version
@@ -126,7 +126,7 @@ module Dependabot
 
           file_version = T.must(T.must(runtime_file).content)
                           .match(/(?<=python-).*/)&.to_s&.strip
-          return if file_version&.empty?
+          return if file_version && file_version.empty?
           return unless T.must(pyenv_versions).include?("#{file_version}\n")
 
           file_version

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -25,23 +25,18 @@ module Dependabot
         require_relative "requirement_file_updater"
         require_relative "setup_file_sanitizer"
 
-        UNSAFE_PACKAGES = T.let(%w(setuptools distribute pip).freeze, T::Array[String])
-        INCOMPATIBLE_VERSIONS_REGEX = T.let(
-          Regexp.new(
-            "(?:not supported between instances of 'InstallationCandidate'" \
-            "|There are incompatible versions in the resolved dependencies).*\\z",
-            Regexp::MULTILINE
-          ),
-          Regexp
-        )
-        WARNINGS = T.let(/\s*# WARNING:.*\Z/m, Regexp)
-        UNSAFE_NOTE = T.let(/\s*# The following packages are considered to be unsafe.*\Z/m, Regexp)
-        RESOLVER_REGEX = T.let(/(?<=--resolver=)(\w+)/, Regexp)
-        UNSAFE_PACKAGE_OPTION_REGEX = T.let(/--unsafe-package(?:=|\s+)(?<name>[^\s\\]+)/, Regexp)
-        NATIVE_COMPILATION_ERROR = T.let(
-          "pip._internal.exceptions.InstallationSubprocessError: Getting requirements to build wheel exited with 1",
-          String
+        UNSAFE_PACKAGES = %w(setuptools distribute pip).freeze
+        INCOMPATIBLE_VERSIONS_REGEX = Regexp.new(
+          "(?:not supported between instances of 'InstallationCandidate'" \
+          "|There are incompatible versions in the resolved dependencies).*\\z",
+          Regexp::MULTILINE
         )
+        WARNINGS = /\s*# WARNING:.*\Z/m
+        UNSAFE_NOTE = /\s*# The following packages are considered to be unsafe.*\Z/m
+        RESOLVER_REGEX = /(?<=--resolver=)(\w+)/
+        UNSAFE_PACKAGE_OPTION_REGEX = /--unsafe-package(?:=|\s+)(?<name>[^\s\\]+)/
+        NATIVE_COMPILATION_ERROR =
+          "pip._internal.exceptions.InstallationSubprocessError: Getting requirements to build wheel exited with 1"
 
         sig { returns(T::Array[Dependabot::Dependency]) }
         attr_reader :dependencies
@@ -60,10 +55,10 @@ module Dependabot
             index_urls: T.nilable(T::Array[T.nilable(String)])
           ).void
         end
-        def initialize(dependencies:, dependency_files:, credentials:, index_urls: nil) # rubocop:disable Metrics/AbcSize
-          @dependencies = T.let(dependencies, T::Array[Dependabot::Dependency])
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @index_urls = T.let(index_urls, T.nilable(T::Array[T.nilable(String)]))
+        def initialize(dependencies:, dependency_files:, credentials:, index_urls: nil)
+          @dependencies = dependencies
+          @dependency_files = dependency_files
+          @index_urls = index_urls
           @build_isolation = T.let(true, T::Boolean)
           @sanitized_setup_file_content = T.let({}, T::Hash[String, String])
           @requirement_map = T.let(nil, T.nilable(T::Hash[String, T::Array[String]]))
@@ -73,7 +68,7 @@ module Dependabot
           @setup_cfg_files = T.let(nil, T.nilable(T::Array[Dependabot::DependencyFile]))
           @pip_compile_files = T.let(nil, T.nilable(T::Array[Dependabot::DependencyFile]))
           @compiled_files = T.let(nil, T.nilable(T::Array[Dependabot::DependencyFile]))
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
+          @credentials = credentials
         end
 
         sig { returns(T.nilable(T::Array[Dependabot::DependencyFile])) }

data/lib/dependabot/python/file_updater/pipfile_file_updater.rb

@@ -22,7 +22,7 @@ module Dependabot
         require_relative "pipfile_manifest_updater"
         require_relative "setup_file_sanitizer"
 
-        DEPENDENCY_TYPES = T.let(%w(packages dev-packages).freeze, T::Array[String])
+        DEPENDENCY_TYPES = %w(packages dev-packages).freeze
 
         sig { returns(T::Array[Dependabot::Dependency]) }
         attr_reader :dependencies

data/lib/dependabot/python/file_updater/poetry_file_updater.rb

@@ -45,7 +45,7 @@ module Dependabot
           @dependencies = dependencies
           @dependency_files = dependency_files
           @credentials = credentials
-          @cooldown = T.let(cooldown, T.nilable(Dependabot::Package::ReleaseCooldownOptions))
+          @cooldown = cooldown
           @updated_dependency_files = T.let(nil, T.nilable(T::Array[Dependabot::DependencyFile]))
           @prepared_pyproject = T.let(nil, T.nilable(String))
           @pyproject = T.let(nil, T.nilable(Dependabot::DependencyFile))

data/lib/dependabot/python/file_updater/pyproject_preparer.rb

@@ -18,10 +18,7 @@ module Dependabot
 
         # Fixed regex for extracting the name+extras prefix from a PEP 508 entry.
         # Does not interpolate library input, avoiding polynomial backtracking.
-        PEP508_PREFIX = T.let(
-          /\A(?<prefix>(?<name>[a-zA-Z0-9](?:[a-zA-Z0-9._-]*[a-zA-Z0-9])?)(?:\[[^\]]*\])?)/i,
-          Regexp
-        )
+        PEP508_PREFIX = /\A(?<prefix>(?<name>[a-zA-Z0-9](?:[a-zA-Z0-9._-]*[a-zA-Z0-9])?)(?:\[[^\]]*\])?)/i
 
         # Pins a single PEP 508 dependency entry string to a specific version,
         # preserving extras and environment markers.
@@ -142,7 +139,7 @@ module Dependabot
             .gsub('#{', "{")
         end
 
-        UNSUPPORTED_SOURCE_TYPES = T.let(%w(directory file url).freeze, T::Array[String])
+        UNSUPPORTED_SOURCE_TYPES = %w(directory file url).freeze
 
         sig { params(dependencies: T::Array[Dependabot::Dependency]).returns(String) }
         def freeze_top_level_dependencies_except(dependencies)

data/lib/dependabot/python/file_updater/requirement_file_updater.rb

@@ -33,10 +33,10 @@ module Dependabot
           ).void
         end
         def initialize(dependencies:, dependency_files:, credentials:, index_urls: nil)
-          @dependencies = T.let(dependencies, T::Array[Dependabot::Dependency])
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
-          @index_urls = T.let(index_urls, T.nilable(T::Array[T.nilable(String)]))
+          @dependencies = dependencies
+          @dependency_files = dependency_files
+          @credentials = credentials
+          @index_urls = index_urls
           @updated_dependency_files = T.let(nil, T.nilable(T::Array[Dependabot::DependencyFile]))
         end
 

data/lib/dependabot/python/file_updater/requirement_replacer.rb

@@ -37,12 +37,12 @@ module Dependabot
           new_hash_version: nil,
           index_urls: nil
         )
-          @content = T.let(content, String)
+          @content = content
           @dependency_name = T.let(normalise(dependency_name), String)
-          @old_requirement = T.let(old_requirement, T.nilable(String))
-          @new_requirement = T.let(new_requirement, T.nilable(String))
-          @new_hash_version = T.let(new_hash_version, T.nilable(String))
-          @index_urls = T.let(index_urls, T.nilable(T::Array[T.nilable(String)]))
+          @old_requirement = old_requirement
+          @new_requirement = new_requirement
+          @new_hash_version = new_hash_version
+          @index_urls = index_urls
         end
 
         sig { returns(String) }

data/lib/dependabot/python/file_updater/setup_file_sanitizer.rb

@@ -20,8 +20,8 @@ module Dependabot
           ).void
         end
         def initialize(setup_file:, setup_cfg:)
-          @setup_file = T.let(setup_file, T.nilable(Dependabot::DependencyFile))
-          @setup_cfg = T.let(setup_cfg, T.nilable(Dependabot::DependencyFile))
+          @setup_file = setup_file
+          @setup_cfg = setup_cfg
           @install_requires_array = T.let(nil, T.nilable(T::Array[String]))
           @setup_requires_array = T.let(nil, T.nilable(T::Array[String]))
           @extras_require_hash = T.let(nil, T.nilable(T::Hash[String, T::Array[String]]))

data/lib/dependabot/python/package/package_registry_finder.rb

@@ -25,9 +25,9 @@ module Dependabot
           ).void
         end
         def initialize(dependency_files:, credentials:, dependency:)
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials      = T.let(credentials, T::Array[Dependabot::Credential])
-          @dependency       = T.let(dependency, Dependabot::Dependency)
+          @dependency_files = dependency_files
+          @credentials      = credentials
+          @dependency       = dependency
         end
 
         sig { returns(T::Array[String]) }

data/lib/dependabot/python/poetry_plugin_installer.rb

@@ -27,7 +27,7 @@ module Dependabot
 
       sig { params(pyproject_content: T.nilable(String)).void }
       def initialize(pyproject_content:)
-        @pyproject_content = T.let(pyproject_content, T.nilable(String))
+        @pyproject_content = pyproject_content
         @plugins_installed = T.let(false, T::Boolean)
       end
 

data/lib/dependabot/python/requirement.rb

@@ -12,7 +12,7 @@ module Dependabot
     class Requirement < Dependabot::Requirement
       extend T::Sig
 
-      OR_SEPARATOR = T.let(/(?<=[a-zA-Z0-9)*])\s*\|+/, Regexp)
+      OR_SEPARATOR = /(?<=[a-zA-Z0-9)*])\s*\|+/
 
       # Add equality and arbitrary-equality matchers
       OPS = T.let(
@@ -28,8 +28,8 @@ module Dependabot
       version_pattern = Python::Version::VERSION_PATTERN
 
       PATTERN_RAW = T.let("\\s*(?<op>#{quoted})?\\s*(?<version>#{version_pattern})\\s*".freeze, String)
-      PATTERN = T.let(/\A#{PATTERN_RAW}\z/, Regexp)
-      PARENS_PATTERN = T.let(/\A\(([^)]+)\)\z/, Regexp)
+      PATTERN = /\A#{PATTERN_RAW}\z/
+      PARENS_PATTERN = /\A\(([^)]+)\)\z/
 
       sig { params(obj: T.any(Gem::Version, String)).returns([String, Gem::Version]) }
       def self.parse(obj)
@@ -107,11 +107,14 @@ module Dependabot
         req_string = req_string.gsub("~=", "~>")
         req_string = req_string.gsub(/(?<=\d)[<=>].*\Z/, "")
 
-        if req_string.match?(/~[^>]/) then convert_tilde_req(req_string)
-        elsif req_string.start_with?("^") then convert_caret_req(req_string)
+        if req_string.match?(/~[^>]/)
+          convert_tilde_req(req_string)
+        elsif req_string.start_with?("^")
+          convert_caret_req(req_string)
         elsif req_string.match?(/^=?={0,2}\s*\d+\.\d+(\.\d+)?(-[a-z0-9.-]+)?(\.\*)?$/i)
           convert_exact(req_string)
-        elsif req_string.include?(".*") then convert_wildcard(req_string)
+        elsif req_string.include?(".*")
+          convert_wildcard(req_string)
         else
           req_string
         end

data/lib/dependabot/python/shared_file_fetcher.rb

@@ -21,10 +21,10 @@ module Dependabot
 
       abstract!
 
-      CHILD_REQUIREMENT_REGEX = T.let(/^-r\s?(?<path>.*\.(?:txt|in))/, Regexp)
-      CONSTRAINT_REGEX = T.let(/^-c\s?(?<path>.*\.(?:txt|in))/, Regexp)
-      DEPENDENCY_TYPES = T.let(%w(packages dev-packages).freeze, T::Array[String])
-      MAX_FILE_SIZE = T.let(500_000, Integer)
+      CHILD_REQUIREMENT_REGEX = /^-r\s?(?<path>.*\.(?:txt|in))/
+      CONSTRAINT_REGEX = /^-c\s?(?<path>.*\.(?:txt|in))/
+      DEPENDENCY_TYPES = %w(packages dev-packages).freeze
+      MAX_FILE_SIZE = 500_000
 
       sig { abstract.returns(T::Array[String]) }
       def self.ecosystem_specific_required_files; end
@@ -34,7 +34,7 @@ module Dependabot
         return true if filenames.any? { |name| name.end_with?(".txt", ".in") }
         return true if filenames.include?("requirements")
         return true if filenames.include?("pyproject.toml")
-        return true if filenames.any? { |name| ecosystem_specific_required_files.include?(name) }
+        return true if filenames.intersect?(ecosystem_specific_required_files)
 
         false
       end

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -27,16 +27,14 @@ module Dependabot
       class PipCompileVersionResolver # rubocop:disable Metrics/ClassLength
         extend T::Sig
 
-        GIT_DEPENDENCY_UNREACHABLE_REGEX = T.let(/git clone --filter=blob:none --quiet (?<url>[^\s]+).* /, Regexp)
-        GIT_REFERENCE_NOT_FOUND_REGEX = T.let(/Did not find branch or tag '(?<tag>[^\n"]+)'/m, Regexp)
-        NATIVE_COMPILATION_ERROR = T.let(
-          "pip._internal.exceptions.InstallationSubprocessError: Getting requirements to build wheel exited with 1",
-          String
-        )
+        GIT_DEPENDENCY_UNREACHABLE_REGEX = /git clone --filter=blob:none --quiet (?<url>[^\s]+).* /
+        GIT_REFERENCE_NOT_FOUND_REGEX = /Did not find branch or tag '(?<tag>[^\n"]+)'/m
+        NATIVE_COMPILATION_ERROR =
+          "pip._internal.exceptions.InstallationSubprocessError: Getting requirements to build wheel exited with 1"
         # See https://packaging.python.org/en/latest/tutorials/packaging-projects/#configuring-metadata
-        PYTHON_PACKAGE_NAME_REGEX = T.let(/[A-Za-z0-9_\-]+/, Regexp)
-        RESOLUTION_IMPOSSIBLE_ERROR = T.let("ResolutionImpossible", String)
-        ERROR_REGEX = T.let(/(?<=ERROR\:\W).*$/, Regexp)
+        PYTHON_PACKAGE_NAME_REGEX = /[A-Za-z0-9_\-]+/
+        RESOLUTION_IMPOSSIBLE_ERROR = "ResolutionImpossible"
+        ERROR_REGEX = /(?<=ERROR\:\W).*$/
 
         sig { returns(Dependabot::Dependency) }
         attr_reader :dependency
@@ -62,10 +60,10 @@ module Dependabot
           ).void
         end
         def initialize(dependency:, dependency_files:, credentials:, repo_contents_path:)
-          @dependency = T.let(dependency, Dependabot::Dependency)
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
-          @repo_contents_path = T.let(repo_contents_path, T.nilable(String))
+          @dependency = dependency
+          @dependency_files = dependency_files
+          @credentials = credentials
+          @repo_contents_path = repo_contents_path
           @build_isolation = T.let(true, T::Boolean)
           @error_handler = T.let(PipCompileErrorHandler.new, PipCompileErrorHandler)
         end
@@ -585,13 +583,13 @@ module Dependabot
     class PipCompileErrorHandler
       extend T::Sig
 
-      SUBPROCESS_ERROR = T.let(/subprocess-exited-with-error/, Regexp)
+      SUBPROCESS_ERROR = /subprocess-exited-with-error/
 
-      INSTALLATION_ERROR = T.let(/InstallationError/, Regexp)
+      INSTALLATION_ERROR = /InstallationError/
 
-      INSTALLATION_SUBPROCESS_ERROR = T.let(/InstallationSubprocessError/, Regexp)
+      INSTALLATION_SUBPROCESS_ERROR = /InstallationSubprocessError/
 
-      HASH_MISMATCH = T.let(/HashMismatch/, Regexp)
+      HASH_MISMATCH = /HashMismatch/
 
       sig { params(error: String).void }
       def handle_pipcompile_error(error)

data/lib/dependabot/python/update_checker/pipenv_version_resolver.rb

@@ -56,10 +56,10 @@ module Dependabot
           ).void
         end
         def initialize(dependency:, dependency_files:, credentials:, repo_contents_path:)
-          @dependency = T.let(dependency, Dependabot::Dependency)
-          @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials = T.let(credentials, T::Array[Dependabot::Credential])
-          @repo_contents_path = T.let(repo_contents_path, T.nilable(String))
+          @dependency = dependency
+          @dependency_files = dependency_files
+          @credentials = credentials
+          @repo_contents_path = repo_contents_path
         end
 
         sig { params(requirement: T.nilable(String)).returns(T.nilable(Dependabot::Python::Version)) }

data/lib/dependabot/python/update_checker/poetry_version_resolver.rb

@@ -78,10 +78,10 @@ module Dependabot
           ).void
         end
         def initialize(dependency:, dependency_files:, credentials:, repo_contents_path:)
-          @dependency               = T.let(dependency, Dependabot::Dependency)
-          @dependency_files         = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
-          @credentials              = T.let(credentials, T::Array[Dependabot::Credential])
-          @repo_contents_path       = T.let(repo_contents_path, T.nilable(String))
+          @dependency               = dependency
+          @dependency_files         = dependency_files
+          @credentials              = credentials
+          @repo_contents_path       = repo_contents_path
           @error_handler = T.let(
             PoetryErrorHandler.new(dependencies: dependency, dependency_files: dependency_files),
             Dependabot::Python::PoetryErrorHandler
@@ -490,8 +490,8 @@ module Dependabot
         ).void
       end
       def initialize(dependencies:, dependency_files:)
-        @dependencies = T.let(dependencies, Dependabot::Dependency)
-        @dependency_files = T.let(dependency_files, T::Array[Dependabot::DependencyFile])
+        @dependencies = dependencies
+        @dependency_files = dependency_files
       end
 
       private

data/lib/dependabot/python/update_checker/requirements_updater.rb

@@ -16,9 +16,9 @@ module Dependabot
       class RequirementsUpdater
         extend T::Sig
 
-        PYPROJECT_OR_SEPARATOR = T.let(/(?<=[a-zA-Z0-9*])\s*\|+/, Regexp)
-        PYPROJECT_SEPARATOR = T.let(/#{PYPROJECT_OR_SEPARATOR}|,/, Regexp)
-        LOWER_BOUND_OPS = T.let(%w(> >=).freeze, T::Array[String])
+        PYPROJECT_OR_SEPARATOR = /(?<=[a-zA-Z0-9*])\s*\|+/
+        PYPROJECT_SEPARATOR = /#{PYPROJECT_OR_SEPARATOR}|,/
+        LOWER_BOUND_OPS = %w(> >=).freeze
 
         class UnfixableRequirement < StandardError; end
 
@@ -52,8 +52,8 @@ module Dependabot
             requirements.map { |req| Dependabot::DependencyRequirement.create(req) },
             T::Array[Dependabot::DependencyRequirement]
           )
-          @update_strategy = T.let(update_strategy, Dependabot::RequirementsUpdateStrategy)
-          @has_lockfile = T.let(has_lockfile, T::Boolean)
+          @update_strategy = update_strategy
+          @has_lockfile = has_lockfile
           @latest_resolvable_version = T.let(nil, T.nilable(Dependabot::Python::Version))
 
           return unless latest_resolvable_version

data/lib/dependabot/python/version.rb

@@ -30,7 +30,7 @@ module Dependabot
       sig { returns(T.nilable(T::Array[T.any(String, Integer)])) }
       attr_reader :local
 
-      INFINITY = T.let(1000, Integer)
+      INFINITY = 1000
       NEGATIVE_INFINITY = T.let(-INFINITY, Integer)
 
       # See https://peps.python.org/pep-0440/#appendix-b-parsing-version-strings-with-regular-expressions

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.390.0
+  version: 0.391.0
 platform: ruby
 authors:
 - Dependabot
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.390.0
+        version: 0.391.0
 - !ruby/object:Gem::Dependency
   name: debug
   requirement: !ruby/object:Gem::Requirement
@@ -323,7 +323,7 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
-  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.390.0
+  changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.391.0
 rdoc_options: []
 require_paths:
 - lib