dependabot-python 0.97.11 → 0.98.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8048d5061e6d5f5e1544ba403e4419f9682af1f77c23bb4e3b42a22954774114
-  data.tar.gz: dfbb570fec50dd749852a351cc836ec424c3bc0c7fb22cae5779f7c0064cbca1
+  metadata.gz: 86bf4ecb82a960b0f84cd1cf7ff74cf73081be517b672045cd732743ba4957b0
+  data.tar.gz: 9675ebc29daaae2cdbc2e9cd02ad4750ee4ff6062e39c12f1f16593d708ccf8a
 SHA512:
-  metadata.gz: 320155e0724eb173872e2652bac2c296c7a1b725786362d2a67803ffa72f91dbdf3011c7d5a58e4b012847a9c41c49acd26348971acea26cf3b8be8174438f87
-  data.tar.gz: 34be31e6dcbbdd2fbd3554708abf0cdbf3a69893615643b0f5a419b11ffe85eb93005bd13673fe2e6ea2f58fcf3f02a57aee6c125438ce2d3d64587b1d603f6e
+  metadata.gz: 853a0437246018fd3290d5a3897c70b7c39270d395acf6539772d7eb33c4e53dd54c9c6d9bbd33a7836592fa00be001772034dfbb1bb6324d8217a1175556c38
+  data.tar.gz: 3d561dd75778163bf360285255a7433ad6ee0193388bfa97fe10a76368dedf02deb85cf323e4248f43cd1f313549fccafe28a631e4f1b460438ebebc2adee33b

data/lib/dependabot/python/file_fetcher.rb

@@ -4,7 +4,7 @@ require "toml-rb"
 
 require "dependabot/file_fetchers"
 require "dependabot/file_fetchers/base"
-require "dependabot/python/file_parser"
+require "dependabot/python/requirement_parser"
 require "dependabot/errors"
 
 # rubocop:disable Metrics/ClassLength
@@ -308,12 +308,12 @@ module Dependabot
                   gsub(CONSTRAINT_REGEX, "").
                   gsub(CHILD_REQUIREMENT_REGEX, "")
 
-        tmp_file = DependencyFile.new(name: file.name, content: content)
-        Dependabot::Python::FileParser.
-          new(dependency_files: [tmp_file], source: source).
-          parse.any?
-      rescue Dependabot::DependencyFileNotEvaluatable
-        false
+        matches = []
+
+        regex = RequirementParser::VALID_REQ_TXT_REQUIREMENT
+        content.scan(regex) { matches << Regexp.last_match }
+
+        matches.any?
       end
 
       def path_setup_file_paths

data/lib/dependabot/python/requirement_parser.rb

@@ -29,6 +29,14 @@ module Dependabot
           \s*#*\s*(?<comment>.+)?$
         /x.freeze
 
+      VALID_REQ_TXT_REQUIREMENT =
+        /^\s*\\?\s*(?<name>#{NAME})
+          \s*\\?\s*(\[\s*(?<extras>#{EXTRA}(\s*,\s*#{EXTRA})*)\s*\])?
+          \s*\\?\s*(?<requirements>#{REQUIREMENTS})?
+          \s*\\?\s*(?<hashes>#{HASHES})?
+          \s*(\#+\s*(?<comment>.*))?$
+        /x.freeze
+
       NAME_WITH_EXTRAS =
         /\s*\\?\s*(?<name>#{NAME})
           (\s*\\?\s*\[\s*(?<extras>#{EXTRA}(\s*,\s*#{EXTRA})*)\s*\])?

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-python
 version: !ruby/object:Gem::Version
-  version: 0.97.11
+  version: 0.98.0
 platform: ruby
 authors:
 - Dependabot
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.97.11
+        version: 0.98.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.97.11
+        version: 0.98.0
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement