dependabot-python 0.396.0 → 0.397.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 888f4700108c651abbfd1604d6e2d87a13a836c1939d32617ee9be72a53c3967
4
- data.tar.gz: afe0da2c49e3d9f141c14a2e513322ffd4629691c05ebaed078642d00d1f0b17
3
+ metadata.gz: 34c523af279e445c79d075ebf5b490c037d934602da7f626250e10e421be7dd2
4
+ data.tar.gz: 55c074f5276a81f6fd3f6194fd8241106bcc1d1bea16bc0b2eba7a3890b97461
5
5
  SHA512:
6
- metadata.gz: fe09edfd56b3d1ccc79bf494528e322bbfcff4bc9d2335265e01af41c5b23a925c22ac0f8fd915c8a73ba355ac9226752f438c63deb0ef6a79d977573169990f
7
- data.tar.gz: 6cd05d5203c68ccc9a0e0230a1acf097425fe0ff451c8f43adecf887148bd7c06c20cdd8a350aa281cccd162ed1caa588078645a316c47d953f88fd75ce3e71b
6
+ metadata.gz: 24f9cd2e78f256a02a6d4808a899476c441b32142050d845e5f238e37b01a45fefe4f874d661da5e535e9fdebd1006cd0891ef5f9b67199203fcd849fc5fe54a
7
+ data.tar.gz: 39d66f3dc7fe82c0f0a89ccf7133cf400602cbd284cb2412fef799d80637ea2b83a6cc155bd94cd7837918463ef7dd0e556e809cc083009aaeb449e8aef1190a
@@ -107,11 +107,18 @@ module Dependabot
107
107
  ).returns(String)
108
108
  end
109
109
  def updated_requirement_or_setup_file_content(content, new_req, old_req)
110
+ # A version specifier is optional in Python packaging (PEP 508, pip
111
+ # requirements format, PEP 621 / [tool.uv.sources]). When the new
112
+ # requirement carries none there is nothing to rewrite, so leave the
113
+ # file untouched rather than forcing nil through the replacer.
114
+ new_requirement = new_req.requirement_string
115
+ return content unless new_requirement
116
+
110
117
  RequirementReplacer.new(
111
118
  content: content,
112
119
  dependency_name: dependency.name,
113
120
  old_requirement: old_req&.requirement_string,
114
- new_requirement: T.must(new_req.requirement_string),
121
+ new_requirement: new_requirement,
115
122
  new_hash_version: dependency.version,
116
123
  index_urls: @index_urls
117
124
  ).updated_content
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-python
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.396.0
4
+ version: 0.397.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.396.0
18
+ version: 0.397.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.396.0
25
+ version: 0.397.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: debug
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -327,7 +327,7 @@ licenses:
327
327
  - MIT
328
328
  metadata:
329
329
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
330
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.396.0
330
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.397.0
331
331
  rdoc_options: []
332
332
  require_paths:
333
333
  - lib