dependabot-python 0.95.65 → 0.95.66

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 784ac9e523a45d1f909db7ac031933eaeeafc718d99dbf280c2d8e1ced5b3e34
-  data.tar.gz: '09c7947e5ab501e861fa81db37ff3b3191c0bb40a8b32d035064df5f41248e61'
+  metadata.gz: 6119240813bd4323f07465c1066985580014378aabb71e04665db141c5a0810d
+  data.tar.gz: 760a499244e80d155f2f3dab0433eb7c44a21ae51e0e68cf46149601d309787f
 SHA512:
-  metadata.gz: '09eda62535a6c93c1a57ef052988abbf57c3b97cce101eebe2103af4fc04be0f15dfec6e923cd466767c1fc1c91dacaae0912ae5c9b475985cb7ab7830b9ec9d'
-  data.tar.gz: d4db7c7778a4673c5d50ab438fbd505d47bf2f3d1e66321aa34babea5975782e3ec747da9188a1d99a225b78dbe81cfbdd9dad0afd5440354f4415c5282ae7c5
+  metadata.gz: dcc4f408c5f460b2d17cc2510e88e04147cf56aea2b672f6310ff5b379d6edd606301072b559dd71dcdad25f7a992da88c836aa6998fe16863ef73f576aa58f9
+  data.tar.gz: 7d4ef5a2c8a3eb8c4e047b26bdb4ba90332397b908e1f5fe0e0f51bb3297239181d10ef603d6f347ba3962167e54e06808722b870c8e8d614463c50d67da3da5

data/lib/dependabot/python/file_updater/pip_compile_file_updater.rb

@@ -503,7 +503,16 @@ module Dependabot
         end
 
         def user_specified_python_version
-          python_version_file&.content&.strip
+          file_version = python_version_file&.content&.strip
+
+          return unless file_version
+          return unless pyenv_versions.include?("#{file_version}\n")
+
+          file_version
+        end
+
+        def pyenv_versions
+          @pyenv_versions ||= run_command("pyenv install --list")
         end
 
         def pre_installed_python?(version)

data/lib/dependabot/python/file_updater/pipfile_file_updater.rb

@@ -387,7 +387,20 @@ module Dependabot
             return pipfile_python_requirement
           end
 
-          python_version_file&.content&.strip
+          python_version_file_version
+        end
+
+        def python_version_file_version
+          file_version = python_version_file&.content&.strip
+
+          return unless file_version
+          return unless pyenv_versions.include?("#{file_version}\n")
+
+          file_version
+        end
+
+        def pyenv_versions
+          @pyenv_versions ||= run_command("pyenv install --list")
         end
 
         def pipfile_python_requirement

data/lib/dependabot/python/file_updater/poetry_file_updater.rb

@@ -210,7 +210,7 @@ module Dependabot
             poetry_object&.dig("dependencies", "python") ||
             poetry_object&.dig("dev-dependencies", "python")
 
-          return python_version_file&.content unless requirement
+          return python_version_file_version unless requirement
 
           requirements = Python::Requirement.requirements_array(requirement)
 
@@ -221,6 +221,19 @@ module Dependabot
           end
         end
 
+        def python_version_file_version
+          file_version = python_version_file&.content&.strip
+
+          return unless file_version
+          return unless pyenv_versions.include?("#{file_version}\n")
+
+          file_version
+        end
+
+        def pyenv_versions
+          @pyenv_versions ||= run_poetry_command("pyenv install --list")
+        end
+
         def pre_installed_python?(version)
           PythonVersions::PRE_INSTALLED_PYTHON_VERSIONS.include?(version)
         end

data/lib/dependabot/python/update_checker/pip_compile_version_resolver.rb

@@ -410,7 +410,16 @@ module Dependabot
         end
 
         def user_specified_python_version
-          python_version_file&.content&.strip
+          file_version = python_version_file&.content&.strip
+
+          return unless file_version
+          return unless pyenv_versions.include?("#{file_version}\n")
+
+          file_version
+        end
+
+        def pyenv_versions
+          @pyenv_versions ||= run_command("pyenv install --list")
         end
 
         def pre_installed_python?(version)

data/lib/dependabot/python/update_checker/pipfile_version_resolver.rb

@@ -383,7 +383,20 @@ module Dependabot
             return pipfile_python_requirement
           end
 
-          python_version_file&.content&.strip
+          python_version_file_version
+        end
+
+        def python_version_file_version
+          file_version = python_version_file&.content&.strip
+
+          return unless file_version
+          return unless pyenv_versions.include?("#{file_version}\n")
+
+          file_version
+        end
+
+        def pyenv_versions
+          @pyenv_versions ||= run_command("pyenv install --list")
         end
 
         def pipfile_python_requirement

data/lib/dependabot/python/update_checker/poetry_version_resolver.rb

@@ -13,6 +13,7 @@ require "dependabot/python/requirement"
 require "dependabot/python/native_helpers"
 require "dependabot/python/python_versions"
 
+# rubocop:disable Metrics/ClassLength
 module Dependabot
   module Python
     class UpdateChecker
@@ -147,7 +148,7 @@ module Dependabot
             poetry_object&.dig("dependencies", "python") ||
             poetry_object&.dig("dev-dependencies", "python")
 
-          return python_version_file&.content unless requirement
+          return python_version_file_version unless requirement
 
           requirements =
             Python::Requirement.requirements_array(requirement)
@@ -164,6 +165,19 @@ module Dependabot
           raise DependencyFileNotResolvable, msg
         end
 
+        def python_version_file_version
+          file_version = python_version_file&.content&.strip
+
+          return unless file_version
+          return unless pyenv_versions.include?("#{file_version}\n")
+
+          file_version
+        end
+
+        def pyenv_versions
+          @pyenv_versions ||= run_poetry_command("pyenv install --list")
+        end
+
         def pre_installed_python?(version)
           PythonVersions::PRE_INSTALLED_PYTHON_VERSIONS.include?(version)
         end
@@ -345,3 +359,4 @@ module Dependabot
     end
   end
 end
+# rubocop:enable Metrics/ClassLength

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.95.65
+  version: 0.95.66
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.65
+        version: 0.95.66
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.95.65
+        version: 0.95.66
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement